last executing test programs:

10m19.566247655s ago: executing program 2 (id=3032):
socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x4)
recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2020)
sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600)

10m19.270248442s ago: executing program 2 (id=3033):
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x4, 0x8, 0x0, 0x1}, 0x50)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x15, &(0x7f00000004c0)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020786c2500000000002020207b46f8ff00000000bda106000000000027010000f8ffffffb702000008000000b703000000000000850000000500000018010000202070250000000000202020db1af8ff41000000bca100000000000007010000f8ffffffb702000008000000b7030000000000008500000005000000184500000500000000000000000000009500000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000100000000000000000000850000002a00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b77a0935ab4714d244c8b29e19dabd19080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000000000000000000000000000001fb9bfbca04a1ba1f5d1fab76944849c562aca5e9c3f395b06db89cc882d32fbebb07a76f03ea7492fb691e32844ce0413d391e9"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b509000000000000639af0ff00000000b509000000000000db9af0ff41000000bf8200000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
r5 = socket$kcm(0xa, 0x3, 0x3a)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r6)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNATTACHFILTER(r6, 0x401054d5, 0x0)
ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r6, 0x40107447, &(0x7f0000000180))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz0\x00', 0x1ff)
sendmsg$kcm(r5, &(0x7f0000000440)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f00000000c0), 0x2, 0x0, 0x0, 0x900}, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000280)={[{0x2b, 'memory'}, {0x2b, 'freezer'}, {0x2b, 'perf_event'}]}, 0x1d)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8932, &(0x7f0000000080))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)
socketpair(0x26, 0x800, 0x8, &(0x7f0000000040))
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r9, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r12=>0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0], <r13=>0x0, 0x57, &(0x7f00000007c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x1e, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0xf, 0x20000000000001fd, &(0x7f0000000380)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f00000006c0)='syzkaller\x00', 0xa, 0x0, 0x0, 0x41000, 0x4, '\x00', r12, @cgroup_device, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000a40)={0x2, 0x4004, 0x8, 0x6}, 0x10, r13, r11, 0x8, &(0x7f0000000e00), &(0x7f0000000e40)=[{0x5, 0x5, 0x4, 0x5}, {0x5, 0x4, 0xd}, {0x3, 0x2, 0x5, 0x7}, {0x4, 0x2, 0xf, 0x4}, {0x4, 0x4, 0x4, 0xb}, {0x3, 0x4, 0xb, 0xc}, {0x3, 0x1, 0xc, 0x7}, {0x0, 0x5, 0xa, 0x5}]}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="3f048bace406d0e742fb73ea4d88ac51569a9e92a62a94e16f6d2609275c2e4d60a4dd7abae644619bb14e28dd69c8fcd8d4cd9092fff0e67fc51b81aa49c0443766f720c663fdcc19143155bdfcaacebdc551e72f12ef379cb643bab2e29606b21c8f5544cb07bdf4d594a90fb59d42bc9306e9239efe71d13cde9e7194a120d0b5125e0200e4e773e7eac59957f1ca31081ace8c7a110711be6bd2d9635d421112bae1a53a3536f552"], 0x48)

10m16.754915841s ago: executing program 2 (id=3037):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"/2767], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8000000}, 0x48)

10m15.55963667s ago: executing program 2 (id=3043):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000340))
r1 = socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x3, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xe, 0x17, &(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRESDEC=0x0, @ANYRESDEC=r0], &(0x7f0000000000)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x82a6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x29, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x8903, &(0x7f00000005c0))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x25, &(0x7f00000002c0), 0x8)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
close(r3)
r4 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @remote}}}], 0x20}, 0x48000)
sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="1c0000005e007f029e3b470d649bc33b0285bb9f72ab25394cd956c0", 0x1c}], 0x1, 0x0, 0xa6}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r6, 0x0, 0x33fe0)
recvmsg$kcm(r5, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x100)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0)
sendmsg$tipc(r7, &(0x7f0000002fc0)={&(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x1, {0x43, 0x2, 0x3}}, 0x10, &(0x7f0000002e80), 0x0, &(0x7f0000002f40)="6ab4acb52f71a916b8b3f93af599cbad1c58d3be7adc39eee3bcc2c0730aaa9738b09f692f1038c4cac562f44528d1de65205f7753a12694369993b81172c91cd2c1570f7ab54e5e5a398ebac1d6d49b04502f61b3b916881b3e", 0x5a, 0x10}, 0x4000000)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r8=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r8, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"})

10m12.064944833s ago: executing program 2 (id=3049):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f00000006c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r4, &(0x7f0000000200)=0x700, 0x12)
sendmsg$inet(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000001880)="5c00000016006bab9a3fe3d46e17aa0a046b876c050048007ea60864160af36504bb4a43eee80fd1716dbbbc001a0038001d001931a0e69ce517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bba1", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000000)
r5 = socket$kcm(0x29, 0x2, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb8629aeec90e6d1857da822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae200f279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f34a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be10ba7dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2db484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b00ffffff7f000000000801f71d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cf0d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67856ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e2b8e7370baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b09000000d31df213c802d74797056fd3bca8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221fff0f0000705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f14fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008f3a20b49fe7636806867283e35cff8d00e7b251bab3cf6377a24f8e8d4bda7503674bc94bf7f4d2fa6f25944bf0a186436d9f6831995976328a1fdc78492c65c1434855dc35c3cf7cf9610c5387794443c99b304799114132362849c3fa85d6379729ff9094933db0cfbe8887c50b87e1469fdf454cef4cbc5f7bf384000000000000a4e8c1a25f47c440144a9776be6cb40aafdb9d3cc8f6a6050974e1c4000000000000008b753f4e1bef9556efcc087a99dbf231167013a4b2eaf6338a0b100c98a331dffc09"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffdcc}, 0x48)
r7 = socket$kcm(0x2, 0x0, 0x0)
sendmsg$inet(r7, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000180)={r7, r6})
ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000040)={r7, r6})

10m11.130701735s ago: executing program 2 (id=3050):
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x600, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x200, 0x14402, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0, 0x5}, 0x21, 0x0, 0x0, 0x8, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x400, 0xb564c5e19b9f07c9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x13, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x34044001)
write$cgroup_subtree(r2, &(0x7f0000000580)=ANY=[], 0xfe33)
socket$kcm(0x21, 0x2, 0x2)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYRESOCT=r1], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x142f1bfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x10000a3f}, 0x50)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="0600"})
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x5ae)
socketpair(0x15, 0x5, 0x0, &(0x7f0000000500))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94)
r4 = socket$kcm(0x23, 0x0, 0x0)
sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x10004000)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_freezer_state(r5, &(0x7f0000000140), 0x2, 0x0)
r6 = openat$cgroup_procs(r5, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r6, &(0x7f0000000300), 0x12)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000bfa100000000000007010000f8fffdffb702000008000000b7030000000000008500000008000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="b6eb6d6e382bf30a949ab954ae659ef4ca62ed"], 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

9m55.72471723s ago: executing program 32 (id=3050):
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x600, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x200, 0x14402, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0, 0x5}, 0x21, 0x0, 0x0, 0x8, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x400, 0xb564c5e19b9f07c9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x13, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x34044001)
write$cgroup_subtree(r2, &(0x7f0000000580)=ANY=[], 0xfe33)
socket$kcm(0x21, 0x2, 0x2)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYRESOCT=r1], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x142f1bfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x10000a3f}, 0x50)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="0600"})
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x5ae)
socketpair(0x15, 0x5, 0x0, &(0x7f0000000500))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94)
r4 = socket$kcm(0x23, 0x0, 0x0)
sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x10004000)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_freezer_state(r5, &(0x7f0000000140), 0x2, 0x0)
r6 = openat$cgroup_procs(r5, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r6, &(0x7f0000000300), 0x12)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000bfa100000000000007010000f8fffdffb702000008000000b7030000000000008500000008000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="b6eb6d6e382bf30a949ab954ae659ef4ca62ed"], 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

5m51.797708799s ago: executing program 4 (id=4356):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000046000000760000000000000027000000ffffffff9500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x23) (async)
r1 = socket$kcm(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d32, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x86bf2056334f3ae6, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32)
socketpair(0x1d, 0x803, 0x1, &(0x7f0000000040)={<r2=>0xffffffffffffffff}) (async, rerun: 32)
openat$tun(0xffffffffffffff9c, 0x0, 0x400000, 0x0) (async)
sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000000)="d80000002c0081024e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a400014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809f6e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)
r3 = socket$kcm(0xa, 0x6, 0x0)
setsockopt$sock_attach_bpf(r3, 0x10d, 0x2, &(0x7f0000000040), 0x17) (async)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000500)={r3}) (async)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f8480100000001000000000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x8044) (async, rerun: 32)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000001000000000000000000000085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) (rerun: 32)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 64)
write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) (rerun: 64)
recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000004880)=""/4129, 0x1021}, {&(0x7f0000000900)=""/4071, 0xfe7}], 0x2}, 0x12100)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d649379071c33390e418ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afcc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab2e4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e558d17879570c8ad95a1c57a05f4f979ea13201bafe4f0f6ea508000000a0c548552b5708005647323c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151fcda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177dc46c4604bca492ecec37e83efceefd7ca2533659edc8bef9cb85451c6a145074343caea5c4bf690441974b155f5adc681a03"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) (async, rerun: 32)
socketpair(0x18, 0x2, 0x80, &(0x7f0000000640)) (async, rerun: 32)
r6 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003f000b12d25a80648c2594f90124fc60020c024002000000053582c137153e370248078000f01705d1bd", 0x33fe0}], 0x1}, 0x0) (async)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xac, 0xac, 0x4, [@struct={0xb, 0x8, 0x0, 0x4, 0x0, 0x6, [{0xd, 0x1, 0x8}, {0xe, 0x3, 0xc2}, {0xb, 0x0, 0xfffffca4}, {0x1, 0x5, 0x2}, {0x1, 0x4, 0x80000000}, {0xc, 0x0, 0xe9e}, {0xb, 0x57099ce7, 0xc00}, {0xa, 0x1, 0x8}]}, @ptr={0xfffffffe, 0x0, 0x0, 0x2, 0x5}, @enum={0x0, 0x5, 0x0, 0x6, 0x4, [{0x10, 0x4}, {0x9, 0x8}, {0x10, 0x8}, {0xf, 0x400}, {0xb, 0x80000001}]}]}, {0x0, [0x61, 0x2e]}}, &(0x7f00000003c0)=""/156, 0xc8, 0x9c, 0x1, 0x80000000}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x15, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x101}, [@ldst={0x2, 0x0, 0x3, 0x6, 0xb, 0x80}, @alu={0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffff8}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7fff}}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xb}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @generic={0x4, 0x4, 0x7, 0x3, 0x6}, @jmp={0x5, 0x1, 0x3, 0x2, 0x0, 0x20, 0xfffffffffffffff0}]}, &(0x7f0000000200)='GPL\x00', 0x1, 0x69, &(0x7f0000000240)=""/105, 0x41100, 0x2, '\x00', 0x0, 0x25, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x1, 0xe, 0x4, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500), 0x0, 0x10, 0xd}, 0x94)

5m51.440307108s ago: executing program 4 (id=4358):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xef, 0x7, 0x2, 0x0, 0x0, 0x0, 0xc9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x9, 0x7}, 0x800, 0x1ffffffffb, 0x0, 0x5, 0x0, 0x8, 0xfffd, 0x0, 0x9, 0x0, 0x3f}, 0x0, 0x2, 0xffffffffffffffff, 0x3)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b03d25a806f8c6394f90524fc60040f03", 0x17}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x20, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="611289000000000061134c0000000000bf2000000000000007000000080000002d0301"], 0x0, 0xf8, 0x0, 0x0, 0x41000}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000058"], 0xfe33)
close(r1)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x100010, 0x0, 0x8, 0x0, 0x4000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0x1, <r4=>0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)=r3}, 0x20)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
close(r8)
setsockopt$sock_attach_bpf(r8, 0x1, 0x32, 0x0, 0x0)
recvmsg$unix(r7, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r9=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
write$cgroup_subtree(r9, &(0x7f0000000180)=ANY=[@ANYRES8=r8, @ANYBLOB="3ee901"], 0x9a)
r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x9, [@restrict={0x6}, @type_tag={0x2, 0x0, 0x0, 0x12, 0x3}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x3, 0x3}, {0x0, 0x5}]}, @type_tag={0x10, 0x0, 0x0, 0x12, 0x4}]}, {0x0, [0x30, 0x5f, 0x30, 0x30, 0x61, 0x5f, 0x30]}}, &(0x7f0000000700)=""/133, 0x61, 0x85, 0x1, 0x7, 0x10000}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0x20, &(0x7f0000000600)={&(0x7f0000000500)=""/119, 0x77, <r11=>0x0, &(0x7f0000000580)=""/122, 0x7a}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x5, 0x3, 0x0, &(0x7f00000007c0)='GPL\x00', 0x5, 0xbb, &(0x7f000000cf3d)=""/187, 0x0, 0x44, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r11}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r12=>0xffffffffffffffff})
r13 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="12000000030000000800000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r13}, &(0x7f0000000180), &(0x7f0000000280)=r12}, 0x20)
r14 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000940)={0x0, 0x9, 0x10}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1d, 0x2a, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x36}, [@func={0x85, 0x0, 0x1, 0x0, 0x7}, @tail_call, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @call={0x85, 0x0, 0x0, 0x6b}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @alu={0x7, 0x1, 0xa, 0x4, 0x7, 0xfffffffffffffff4, 0x1}]}, &(0x7f0000000580)='GPL\x00', 0x1, 0x9b, &(0x7f00000005c0)=""/155, 0x1f00, 0x26, '\x00', 0x0, @lsm=0x1b, r10, 0x8, &(0x7f0000000800)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x1, 0x2, 0x5}, 0x10, r11, 0xffffffffffffffff, 0x4, &(0x7f0000000980)=[r13, r1, r14], &(0x7f00000009c0)=[{0x4, 0x5, 0x9, 0x9}, {0x0, 0x3, 0xb, 0x6}, {0x4, 0x5, 0xd, 0x6}, {0x0, 0x2, 0xa, 0x6}], 0x10, 0x10000}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1e7c2373, 0x9}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x10001}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r15=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
write$cgroup_subtree(r15, &(0x7f0000000000)=ANY=[@ANYRES8=r1], 0x9a)

5m51.027712707s ago: executing program 4 (id=4362):
r0 = getpid()
perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x1c842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, r0, 0x0, 0xffffffffffffffff, 0x2)
syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair(0x1d, 0xa, 0x0, &(0x7f0000000040))
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000, 0x400}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x61000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xaf0, 0xc}, 0xa100, 0xc8, 0x3, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x8000000000000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, r1, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$unix(r3, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
perf_event_open(&(0x7f00000004c0)={0x5, 0xfffffffffffffdf8, 0xde, 0x21, 0x0, 0x0, 0x0, 0x0, 0x8400, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0xfffffffffffffff0}, 0x4816, 0x0, 0x0, 0x7, 0x0, 0x0, 0xf792, 0x0, 0xffffffff, 0x0, 0x2000000000000000}, 0x0, 0x9, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc02082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef)
write$cgroup_subtree(r4, &(0x7f00000004c0)=ANY=[], 0xfdef)

5m50.013449391s ago: executing program 4 (id=4373):
r0 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @remote}}}], 0x20}, 0x48000)
sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x56}}, 0x10, 0x0, 0x97ff, 0x0, 0x0, 0x4000}, 0x0)

5m49.709456908s ago: executing program 4 (id=4376):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0)
close(r0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x4, 0x2, 0x6, 0x0, {0xa, 0x4e23, 0x9, @dev={0xfe, 0x80, '\x00', 0x10}, 0x97}}}, 0x80, 0x0}, 0x2000f765)
ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="038d00000018"})
close(0xffffffffffffffff)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
close(r1)
socket$kcm(0x2, 0x200000000000006, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x10, 0x19, 0xfc, 0x0, 0x0, 0x1, 0x90, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0xaa32, 0x0, 0xfffffffb, 0x0, 0x8, 0x0, 0xff00, 0x0, 0x1, 0x0, 0xfffffffffffffffd})
ioctl$TUNGETVNETLE(r1, 0x8953, &(0x7f0000000040))
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={0xffffffffffffffff, &(0x7f0000000300), 0x0}, 0x20)

5m49.091827993s ago: executing program 4 (id=4380):
socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x98, 0x1, 0x0, 0x0, 0x0, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x81}, 0x402, 0x0, 0xfffffffe, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fcffffff00"/28], 0x50)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0xc829, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0xc2ba, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r3, &(0x7f00000001c0)={0x0, 0xffffffb4, 0x0, 0x0, &(0x7f0000000440)}, 0x40002142)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000180)=r0, 0x4)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz0\x00', 0x200002, 0x0)
r6 = openat$cgroup_freezer_state(r5, &(0x7f0000000140), 0x2, 0x0)
write$cgroup_freezer_state(r6, &(0x7f0000000040)='FROZEN\x00', 0x7)
r7 = openat$cgroup_procs(r5, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r7, &(0x7f0000000300), 0x12)

5m34.070932699s ago: executing program 33 (id=4380):
socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x98, 0x1, 0x0, 0x0, 0x0, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x81}, 0x402, 0x0, 0xfffffffe, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fcffffff00"/28], 0x50)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0xc829, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0xc2ba, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r3, &(0x7f00000001c0)={0x0, 0xffffffb4, 0x0, 0x0, &(0x7f0000000440)}, 0x40002142)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000180)=r0, 0x4)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz0\x00', 0x200002, 0x0)
r6 = openat$cgroup_freezer_state(r5, &(0x7f0000000140), 0x2, 0x0)
write$cgroup_freezer_state(r6, &(0x7f0000000040)='FROZEN\x00', 0x7)
r7 = openat$cgroup_procs(r5, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r7, &(0x7f0000000300), 0x12)

7.574311918s ago: executing program 5 (id=6448):
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0xe3, 0x0, 0x0, 0x6, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000000), 0x5}, 0x0, 0x0, 0x40000, 0x8, 0x2, 0xfffffffc, 0x0, 0x0, 0x2}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000a80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x94e4, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x6}, 0x19181, 0x1, 0x80000005, 0x2, 0x24, 0x904813a5, 0x4, 0x0, 0x3a, 0x0, 0x8}, 0x0, 0x7, 0xffffffffffffffff, 0xa)
r0 = socket$kcm(0x2, 0x3, 0x2)
recvmsg$kcm(r0, 0x0, 0x18000)
r1 = socket$kcm(0x10, 0x2, 0x4)
syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0)

7.381391612s ago: executing program 5 (id=6451):
r0 = getpid()
perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x1c842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, r0, 0x0, 0xffffffffffffffff, 0x2)
syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair(0x1d, 0xa, 0x0, &(0x7f0000000040))
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000, 0x400}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x61000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xaf0, 0xc}, 0xa100, 0xc8, 0x3, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x8000000000000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xfe, 0x1, 0x0, 0x80, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x100, 0x7}, 0x481a, 0x0, 0x0, 0x2, 0x0, 0x0, 0xf792, 0x0, 0xffffffff, 0x0, 0x8eea}, 0x0, 0x0, r1, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$unix(r3, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r4, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63f580fc02082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef)
perf_event_open(&(0x7f00000004c0)={0x5, 0xfffffffffffffdf8, 0xde, 0x21, 0x0, 0x0, 0x0, 0x0, 0x8400, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0xfffffffffffffff0}, 0x4816, 0x0, 0x0, 0x7, 0x0, 0x0, 0xf792, 0x0, 0xffffffff, 0x0, 0x2000000000000000}, 0x0, 0x9, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc02082c00db5b6861589bcfe8875a060300000023000000"], 0xfdef)
write$cgroup_subtree(r4, &(0x7f00000004c0)=ANY=[], 0xfdef)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xbc, 0x0, 0x0, 0x38b7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x3, 0x4, 0x8, 0x88}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0xfffffffe, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
close(0x3)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x9, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf5, &(0x7f00000001c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x99, 0x8, 0x8, &(0x7f0000000280)}}, 0x10)
r8 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f91724fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000000c0)='&..\x00')

7.367737433s ago: executing program 1 (id=6452):
r0 = getpid()
perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x1c842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, r0, 0x0, 0xffffffffffffffff, 0x2)
syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair(0x1d, 0xa, 0x0, &(0x7f0000000040))
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000, 0x400}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x61000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xaf0, 0xc}, 0xa100, 0xc8, 0x3, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x8000000000000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xfe, 0x1, 0x0, 0x80, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x100, 0x7}, 0x481a, 0x0, 0x0, 0x2, 0x0, 0x0, 0xf792, 0x0, 0xffffffff, 0x0, 0x8eea}, 0x0, 0x0, r1, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$unix(r3, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r4, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63f580fc02082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef)
perf_event_open(&(0x7f00000004c0)={0x5, 0xfffffffffffffdf8, 0xde, 0x21, 0x0, 0x0, 0x0, 0x0, 0x8400, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0xfffffffffffffff0}, 0x4816, 0x0, 0x0, 0x7, 0x0, 0x0, 0xf792, 0x0, 0xffffffff, 0x0, 0x2000000000000000}, 0x0, 0x9, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc02082c00db5b686158"], 0xfdef)
write$cgroup_subtree(r4, &(0x7f00000004c0)=ANY=[], 0xfdef)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xbc, 0x0, 0x0, 0x38b7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x3, 0x4, 0x8, 0x88}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0xfffffffe, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
close(0x3)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x9, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf5, &(0x7f00000001c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x99, 0x8, 0x8, &(0x7f0000000280)}}, 0x10)
r8 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f91724fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000000c0)='&..\x00')

6.050355534s ago: executing program 6 (id=6455):
r0 = socket$kcm(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}, 0x10c002, 0xac59, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
socketpair(0x10, 0x3, 0x3a, &(0x7f0000000080))
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
openat$tun(0xffffffffffffff9c, 0x0, 0x408900, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x5)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3, r2}, 0xc)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0x40, 0x7a, &(0x7f0000000240)="4b3438d68099217365376fcc5445f46b291b70676efb112f78f98f1b1316761c1558442e0bd9f365061c9699bcb2dff85acddc29a378df8f060837c47cb61000", &(0x7f0000000280)=""/122, 0x6, 0x0, 0x4f, 0x21, &(0x7f0000000300)="2d0aea1628b8e3c9792f5cbd09ababea6097cd103c7a7dab2f8d91adaa87d70813066dac1c9e31e557d5a1fe98a94a1c447dc52e0b02fde607da12c3d04281bc43f6789331e9c50adf71edd61c08bb", &(0x7f0000000380)="ef9be949cf09026bb96eb2afa7fe3466b80433a9af978d8e439b03895652e97d2d", 0x1, 0x0, 0xfff}, 0x50)
close(0x3)
r4 = openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz0\x00', 0x200002, 0x0)
r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8)
perf_event_open$cgroup(&(0x7f00000000c0)={0x3, 0x80, 0x3, 0x8, 0x19, 0x4, 0x0, 0x8000000000000000, 0x8014, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4fec, 0x2, @perf_config_ext={0x5, 0x10001}, 0x1342, 0x3, 0x5, 0x8, 0x0, 0x8, 0x5, 0x0, 0x3, 0x0, 0x6}, r4, 0xd, r5, 0x6)

5.934931586s ago: executing program 0 (id=6456):
socket$kcm(0x21, 0x2, 0x2)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x40000)

5.864910629s ago: executing program 1 (id=6457):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
perf_event_open(&(0x7f0000000500)={0x2, 0xfffffffffffffcf8, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xfffffffffffffff5, 0x43a5bd76, 0xb, 0x9, 0x6, 0x9, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x20000003, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x400000002, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
socket$kcm(0x10, 0x2, 0x10)
socket$kcm(0xa, 0x5, 0x0)
socket$kcm(0xf, 0x3, 0x2)
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x2, 0x2, 0x0)
socket$kcm(0xa, 0x922000000003, 0x11)
socket$kcm(0x10, 0x400000002, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200))
r2 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(r2, 0x107, 0x14, &(0x7f0000000000), 0x4)
sendmsg$kcm(r2, &(0x7f0000000340)={&(0x7f0000000200)=@caif, 0x80, 0x0}, 0x88010)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
close(r1)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1e, 0xe, &(0x7f0000001880)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4}, 0x10}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300))
ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random})

5.678840773s ago: executing program 0 (id=6458):
socket$kcm(0x10, 0x2, 0x0)
r0 = socket$kcm(0x2, 0x7, 0x84)
sendmsg$inet(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0xc000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000000)="d80000001c0081044e81ffffffffb9040a1d08030e000000e8fea4a118001500060014260360", 0x26}], 0x1, 0x0, 0x0, 0x7400}, 0x10)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x2b, 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
socket$kcm(0x10, 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000f"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x3, 0xd, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002a0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000081000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$OBJ_PIN_PROG(0x6, &(0x7f00000002c0)=@o_path={&(0x7f0000000180)='./file0\x00', r1, 0x4000, r2}, 0x18)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x2609, 0x0, 0x0, 0x2}, 0x0, 0xf, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r3, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080))
bpf$MAP_CREATE(0x0, 0x0, 0x48)

5.581485135s ago: executing program 6 (id=6459):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10003, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x6}, 0x0, 0xf, 0x0, 0x0, 0x0, 0x3ff, 0x3, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x3}, 0x50)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x11, 0x4, 0x4, 0x8}, 0x50)
ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x4)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8000008, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000012006b04000000d86e6c1d000a887ea6ea65670000000000000090f9c3dc90f8f41f8ecff32c6e020075e300250045586c8da718ad4b4460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000850000000700000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r7, r6}, 0xc)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r5, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000340)=[0x0], ""/16, <r8=>0x0, 0x0, 0x0, 0x0, 0x7, 0x2, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0], 0x0, 0xa, &(0x7f0000000540)=[{}], 0x8, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x9f, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0xd, 0x5, 0x4, 0xe, 0x4004, r6, 0xcbc, '\x00', r8, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x50)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
close(r10)
recvmsg$unix(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r11=>0xffffffffffffffff]}}], 0x18}, 0x0)
r12 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
write$cgroup_subtree(r11, &(0x7f0000000200)=ANY=[@ANYRES8=r10, @ANYRES8=r12], 0x12)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ac0)={r2, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x42, &(0x7f00000008c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000900), &(0x7f0000000940), 0x8, 0x77, 0x8, 0x8, &(0x7f0000000980)}}, 0x10)

5.269344303s ago: executing program 6 (id=6461):
r0 = socket$kcm(0x2, 0x5, 0x84)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x8}, 0x6bc4, 0x20000, 0xc2b8, 0x5, 0x4000000, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0x2, 0x1, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
close(r6)
setsockopt$sock_attach_bpf(r5, 0x84, 0x64, &(0x7f0000000000), 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, <r7=>0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)=r4}, 0x20)
r8 = socket$kcm(0x15, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x84)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x4040)
recvmsg$kcm(r8, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x160)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, 0x0, 0x0, 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
r9 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="0207000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000740)={r4, 0x58, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r10=>0x0}}, 0x10)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x0, <r11=>0x0}, 0x8)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c80)=@bpf_ext={0x1c, 0x12, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000006b470000000000000600000018110000", @ANYRES32, @ANYBLOB="72c6122cd265d6b512fd00000000000000be07585cbce47da477ffff3193fc8d000000b703530d000000008500000083000000bd090000000300005509010000000018500000040000008eb10000000000008510000002000000bf91000000005ebb10890000000000008500e0ff83cb93000000000000000000"], &(0x7f0000000b00)='syzkaller\x00', 0x1, 0x20, &(0x7f0000000b40)=""/32, 0x41000, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000b80)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000bc0)={0x0, 0xb, 0x5, 0x7}, 0x10, 0x7f6b, r1, 0x2, &(0x7f0000000c00)=[r4, r4, 0xffffffffffffffff, r7, r4, r4, r4], &(0x7f0000000980)=[{0x3, 0xfffffff4, 0x6}, {0x3, 0x5, 0xf, 0x8}], 0x10, 0x5}, 0x94)
r12 = openat$cgroup_ro(r4, &(0x7f0000000800)='blkio.bfq.io_merged\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0xf, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="871200000800000018110000", @ANYRESHEX=r9, @ANYBLOB="0000000000000000b70200000000000085000000"], &(0x7f0000000440)='GPL\x00', 0x971b, 0xdd, &(0x7f00000004c0)=""/221, 0x41000, 0xa, '\x00', r10, @cgroup_device=0x6, r4, 0x8, &(0x7f0000000780)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000007c0)={0x3, 0xe, 0x4, 0x3}, 0x10, r11, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, 0xffffffffffffffff, r12, r4], &(0x7f0000000880), 0x10, 0x8}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="1daa007f00000000611010000000000095000000000000006e6b7a2a1d56c13ad53849a3ee4359f903f7964f3b25b5034aa7566638e479d67d16e3236c0351f434e4fd44af590200e702915921239d8b6b097045169039c3495da2e4bd98d90664845ebe3b194f50f881934cd6c5"], &(0x7f0000000480)='syzkaller\x00'}, 0x80)

5.150681085s ago: executing program 0 (id=6463):
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003}, 0x38)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001500)={0x18, 0x16, &(0x7f0000001200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x3}, {}, {}, [@exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8000}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x5}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000012c0)='GPL\x00', 0x0, 0xb1, &(0x7f0000001300)=""/177, 0x41100, 0x62, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000001400)={0x4, 0x1, 0x800, 0x7}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000001440)=[0xffffffffffffffff, 0x1], &(0x7f0000001480)=[{0x2, 0x4, 0x5, 0x3}, {0x3, 0x2, 0x6, 0xb}, {0x1, 0x4, 0x6, 0x6}, {0x0, 0x2, 0x0, 0xb}, {0x3, 0x2, 0x9, 0x1}], 0x10, 0x727}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001600)={{}, &(0x7f00000011c0), &(0x7f00000015c0)=r0}, 0x20)
r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8000, 0x200}, 0x10002a, 0xac5d, 0x100, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
write$cgroup_subtree(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="2b63707561010000007f7366bd61636374200bdf82e0edd78b2b5430131bfe91789648a7f898a8030dcb5198ede47d7baf83d2e441c9305ef79a1b4d7a7cd4ca33a34b0e2e586daf2a620e5859e2f0c4c6d91b1b6f887d53bee8e9125c2fed5c7e815c124bd13f5fe09ef4d1573426e152d343f4735e0932d6c3abe6f11509d64c4ad14dfd1ba1f401fb84ab30cbad5698c6ff3a2c76e1d87856803c606a6e7e6db7094477ebd58dfc6a78cfb2a7c9a077627087cfdc90c5b9f289ea296ed6e6fd530c883549be708140921c90a4e6bd7106c45f0bf7f2baceece0db00096df149b761f671af22"], 0x12)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r4 = socket$kcm(0x11, 0x200000000000002, 0x300)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=<r7=>r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000f00)={r5, 0x58, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r8=>0x0}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f40)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYRES16=r6, @ANYRES32, @ANYBLOB="f0f605748aed0000000000000c00000045"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', r8}, 0x94)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@ifindex=r8, 0x2e, 0x1, 0xa4a, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540), &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8916, &(0x7f0000002200)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12t\x02\x006\xe3\x1f\xa1B\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x01\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(\x04\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x02\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99\x92=\xc5\xb9L\xbc\x91\xba\n\xdaL[\xd7\x01-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x04.\x9aL\x03b\xf7\x10Z\x92\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5<J\x1f\xba\xfc\x90(\x985\x93\xa8\xd4\xf0\xbdTy\x18\xc8\xa0\xbb\x99\x8c\xe0Q\xffC//\xa6\xcf\x053x\xe7\xd5-\x04\x97\x7f\xee>\xbdX\xf73\xa1\xa2\'\x00\x00\x00\xfb\xce\x959x\xfeW\r\xf0{\xcaT\xecp)=\x9d\xdfG8\xa1\xe3=\xa6\x00\x98\xc1\xb3\x91-\xab\'W\x8al?d<JN\xcb\xd4H\xb0_jO\xf3\x90\xe8/l\xdfg)\x8d#\xfdo\xa9L\xdeA*\xec\xa1\x14,\xe8\x8d^\xb9r=\xc0\x18\xd4\x11dU[Ry\xed\xd6\x97\x8a\xe8\xca\x99\x10\x8e\xc8P\xa3\xae/\xdaof\x06\x7f\xf7\x80$f\b\x92\xae\xeb\xdd\"\x89\xb8\xf0\xc3\b\x00\x00\x00\x00\a\xf6\xfc\x1d\xd4\x893\xeb)\xc1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00O!\xd2q\xda}\xe2\xa2\xfe\xfd)\\\xdf\x9aN\\\xae\x00\x00\x00\x00r\x9c\xb0H/\xa0Sy\xdb\xc4\x88\xf0\xb4\xc1lh#\xb55\xf4\xf1{\xfa\xcb\x80\xbe\xdd\xdd\'\xdf\x05\xe6H+$\xbfW\x06<\\\xd9\x1e]\x8c\x94\x0e\a6\x11\xcf\x85\xef!\xb0\xact\xad\xa9?]Q\xeaw\xb9c\xa0e\xc5)1\f\xcbw\xaa\x83\xf5\x19\xe2PL\xcc\xff\xfe\xe4\xe3\xfdO\x9c\xd2\x81\x9c\xc6\x81\xef\x89\x8ejb\xe8\xe9\x0f\x95u#\x04m\xc1\xdd9\xafl\xf4CIe8P\xde\x8e\xff\x96\x16\xa2)\xf9\x8e\xa7\xf3\x8a?\xbe\x8d\x81R6\xbb\x92g&e\xa0R.\f\xd9\xb4?\xe8\xb0\x7f\x1ci\x8f\xbeE\xce^\xa9@\xe5d]\xcb\x15\xd3\x8f8\f\x84g\xc1\x1dPH\xee\x98')
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@generic={0x0}, 0x18)
r9 = socket$kcm(0x2b, 0x1, 0x0)
syz_clone(0x40000, &(0x7f0000000240)="36badbc26fe21cb93f789794c159e7730032482d7b5c4c6b77cda4ee0724395975df84232bb8a41885f733fd12d951f04f50e1199058ce350d660b2503a0e07f357795e18fb900cae0fb83dffe", 0x4d, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="957b36e2e80d44079268140b2d2e49784446b15babe3012f24245a")
getpid()
sendmsg$inet(r9, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
sendmsg(r9, &(0x7f0000001180)={&(0x7f0000000940)=@ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80, &(0x7f0000001100)=[{&(0x7f0000000a00)="508480c7f8b06a2fb2084efd7858ec49d980b5fcc93cc2f5d8a4d1d992dd8d51ca5cf56b99ce56d94a9c25fe1e83e8ee5b0a2394999e9c7171d062afd9b720b99390c899099068907268c73abc3bfc41e84451982f8cb50eb75570330d3670fcaa5c88c9266f1e925020674fa8885649a2721a06ee0e89f379a83e9c5abb86ea6f6dfa1e66e983a4657a2356278ce062920120e27cd3c3a7bc3d", 0x9a}, {&(0x7f0000000ac0)="56cafb2c2adcf8930b29ad15526ded526085a01abf50cb4f7b", 0x19}, {&(0x7f0000000b00)="6698baeb923aacdd6c2389b2a45121072b3443e4cafd3a35f0c57b146846965c982827e4249ec40c50585174874240c19e697c1a7431a36ad06cb2950b75124d22ecd18b4d74744cd0a26ebe8be918358ceefcdfc31a94d687756698c74e6f6f25c6a7e3e8e29ba8d4ced2983ff66e883d8c86137864beb4894304f992f14d22b1131bb3eed69832727d", 0x8a}, {&(0x7f0000000bc0)="b5838e7d5e68ca10141b836ea91ab4296f492e4df403ecc7cd8b0325c198a722c2fb57e88f9008694a9bc319b3a52b792841cf5f403f84aade6010f4b65eaf943d10e0f15b084789276e43b0694c075beb424109d9093c262a97007fc0b3af8203e99f73819f8cc99de3d0b654e5d011e0666ecc14c82082ede3d4fb647af83aba830a13b24f32fd22047354af1a69a1692a1085107d09017bb0fbafe65c02c4ebad0124a15c885f10bb6970422ed4b573839049510f", 0xb6}, {&(0x7f0000000c80)="d3d88eb6841f1c218313fd15f4ef6fd8ce9abb571da574006df0f5dc316c9fec93925bcd90007766b06a3bea92976e74522ba389620490b4351975dab4b23ae7d41e178826f20863c3ba1d98e22fbbf8bdb55fa45ede573478c6f12aadd97fab649f0435a2cb1e5921527c4a6d5bd811a60cb9228ad569179b", 0x79}, {&(0x7f0000000d00)="216e95ba14f7b9844d74815372def45e5fc36c98396a338950fd4c05afe043a034bf6843bafe0c4a72dd70ec5dab08439644386712dc5217f0406490bb3f10a68fd6fdc6473f597f7b54efa33087d51bbd5176cc8f56ef015388822d332b49b00c0ab9e792716d731504ec46cfa534db380ae9640db11b92632fc56ba8ea6bb7bab2525a3de64569d539fd6289d5fe37a46ff1a29393295906003495ace9acb800862a1bb63bbd440ac2f69608982439c1fc6ada228458d6e1f9460ec3489262cfb7", 0xc2}, {&(0x7f0000000e00)="a284f5fdea47d176d382f1f429e4de52a48bc91e32671bb0e6a7ef2430a42f448e57ce63eac8706a04b5ee0971f31382eb156ace691a8dc84718242e553e73b97adb8cbacacbd8a0d82cb0d59ad2536f9e3bbd7edf65cf7524f210114e9905caace86f2a06b3cf942d3fac6a45d383c728a726fe9c4cb91aaaa00b2f5e11c46b", 0x80}, {&(0x7f0000001000)="bf120260e8a3cea1aef920988960f2feabf57d307290c715a0672fd6dc840d4db1e8c6920e258652f79632282b43dbba7b71ef2f87d87e3e185e3481658d72cf41e533af0b1b6c0b438450362bf33b2b39e61964d155eac757275cd5768ff7a45240bab8a0c09bfbebfda92e8e0bebd8adac2c21a68da9a243c2771ad6d16ab4d8a6e4f40fe8e9efeb2ec7f29cf1e5b2c9b25dcb62bf25925df6a3b8b7e15a0fe83b54ea2eaefb9bdf930872ca00e57573d7eb36605fe1e75ba95e87a6ddb8a66a45d0caf80331abbc9cc9909e5c033e904b7e00f215b3e1621082a772862661af8642298993bdd440cc", 0xea}], 0x8}, 0x4010)
ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x8912, &(0x7f0000000080))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r3, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x1c, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000700), &(0x7f0000000780), 0x8, 0xab, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x11, 0x16, &(0x7f0000001a00)=ANY=[@ANYRES64=r7], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc42ca46fb91857ac, r10, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r2}, 0x94)

5.057583098s ago: executing program 1 (id=6464):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0)
openat$cgroup_netprio_ifpriomap(r0, 0x0, 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
close(0x3)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
recvmsg$kcm(r1, &(0x7f0000002540)={0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000000340)=""/57, 0x39}, {&(0x7f0000000ec0)=""/254, 0xfe}, {&(0x7f0000000fc0)=""/65, 0x41}, {&(0x7f00000021c0)=""/228, 0xe4}, {&(0x7f00000022c0)=""/249, 0xf9}], 0x5, &(0x7f0000002440)=""/199, 0xc7}, 0x20)
sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r2, &(0x7f0000000140)={0x0, 0xffffffffffffff3c, &(0x7f0000000780)=[{&(0x7f0000000480)=""/228, 0xe4}, {&(0x7f0000000c00)=""/266, 0x10a}, {&(0x7f00000011c0)=""/4047, 0xfcf}, {&(0x7f0000000dc0)=""/194, 0xc2}, {&(0x7f00000003c0)=""/186, 0xba}, {&(0x7f0000001080)=""/262, 0x106}, {&(0x7f0000000580)=""/173, 0xad}, {&(0x7f0000000840)=""/134, 0x86}, {&(0x7f0000000640)=""/239, 0xef}, {&(0x7f0000000900)=""/161, 0xa1}, {&(0x7f00000009c0)=""/203, 0xcb}], 0xb}, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000000)={r2})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r0, <r4=>0xffffffffffffffff}, 0x4)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r3, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r5=>0x0}}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=@base={0x10, 0xffff8000, 0x7, 0x8001, 0x0, r4, 0x4, '\x00', r5, 0xffffffffffffffff, 0x3, 0x2, 0x1}, 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xc, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffa}, {0x85, 0x0, 0x0, 0x2d}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r6}, 0xc)
r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETLINK(r7, 0x400454cc, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1f, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

4.925018681s ago: executing program 5 (id=6465):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = socket$kcm(0xa, 0x1, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x80, 0x0}, 0x20000000)
sendmsg$kcm(r1, &(0x7f0000002ec0)={&(0x7f0000001b00)=@l2tp6={0xa, 0x0, 0x4000003, @empty}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x86a9}, 0x20000000)

4.652419648s ago: executing program 5 (id=6467):
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x2}, 0x2408, 0x0, 0xfffffffc, 0x9, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0xb)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080))
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x1c1c41, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0x23}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000180)=r5)
write$cgroup_devices(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_config_ext={0xcf, 0xd}, 0x21, 0x0, 0x0, 0x4, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000040)={{r6, <r7=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)='%-010d \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r7}, 0x4)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x10, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xf, 0x4, 0x4, 0x47}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000001100)={r9, &(0x7f0000000100), &(0x7f0000000000)=""/95, 0x2}, 0x20)
socket$kcm(0x10, 0x2, 0x4)
r10 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed78161281ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00fa0b00014006040400010404009bbc7a46e3988285dcdf12f213e6f768fe7ee2b49e33538afa8af9ae52181cdf114250f27fff8ada18a96678aaf07ccb7f", 0x89}], 0x1}, 0x24000804)

4.388552044s ago: executing program 0 (id=6469):
r0 = socket$kcm(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}, 0x10c002, 0xac59, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
socketpair(0x10, 0x3, 0x3a, &(0x7f0000000080))
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
openat$tun(0xffffffffffffff9c, 0x0, 0x408900, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x5)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3, r2}, 0xc)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0x40, 0x7a, &(0x7f0000000240)="4b3438d68099217365376fcc5445f46b291b70676efb112f78f98f1b1316761c1558442e0bd9f365061c9699bcb2dff85acddc29a378df8f060837c47cb61000", &(0x7f0000000280)=""/122, 0x6, 0x0, 0x4f, 0x21, &(0x7f0000000300)="2d0aea1628b8e3c9792f5cbd09ababea6097cd103c7a7dab2f8d91adaa87d70813066dac1c9e31e557d5a1fe98a94a1c447dc52e0b02fde607da12c3d04281bc43f6789331e9c50adf71edd61c08bb", &(0x7f0000000380)="ef9be949cf09026bb96eb2afa7fe3466b80433a9af978d8e439b03895652e97d2d", 0x1, 0x0, 0xfff}, 0x50)
close(0x3)
r4 = openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz0\x00', 0x200002, 0x0)
r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8)
perf_event_open$cgroup(&(0x7f00000000c0)={0x3, 0x80, 0x3, 0x8, 0x19, 0x4, 0x0, 0x8000000000000000, 0x8014, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4fec, 0x2, @perf_config_ext={0x5, 0x10001}, 0x1342, 0x3, 0x5, 0x8, 0x0, 0x8, 0x5, 0x0, 0x3, 0x0, 0x6}, r4, 0xd, r5, 0x6)

4.310557356s ago: executing program 3 (id=6470):
r0 = socket$kcm(0x11, 0x3, 0x0)
r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0xfffffffffffffffd}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x11, 0x2, 0x0)
close(r2)
r3 = socket$kcm(0x11, 0x2, 0x0)
r4 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f00000000c0)=r3, 0x8)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0500000003000000fa0900008500000041000000", @ANYRES32, @ANYRESDEC=r0, @ANYRES8=r1, @ANYRES32, @ANYBLOB="00000000000000000000000d000e00000000000d0000400000100000"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r5}, 0x38)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$kcm(0x11, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="97d9deabea352018000000000000006761110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001700)="c01803002d000b12d25a80648c259497fe24fc59100c0340020001ed6a560e1f6109ee64028e0b5933422013909e00af7f145f964bf072aac772906d2521e8776bedbefa4bce10097bb2713a2bc44ed9b3ba9a2bf8c7925dbd91073bf29f46a2ab7b805fdb632437fd1165d233c31603e38333a1f492a150161832a11fbc62fbf053921c7ec6a059e43054122d8894bb12e325514db7a848e1769f0e779697ed5e3bfd354c48be718deca0", 0xab}], 0x1}, 0x880)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c06", 0x17}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3504000040000511d25a35400c0002000200002037153e370c040180060410", 0x1f}], 0x1}, 0x10049014)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f91a24fc600702", 0x16}], 0x1, 0x0, 0x0, 0x400300}, 0x20044050)
socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000340)=ANY=[@ANYRES8=r6], 0x0, 0x10001, 0x0, 0x0, 0x747ef7349278282e, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfffffffffffffe04)
r8 = socket$kcm(0x11, 0x200000000000002, 0x300)
socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0x46, &(0x7f00000015c0)=[{&(0x7f0000000380)="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"}, {&(0x7f0000001380)="a7bbfce98344a1b16b58052bd22d7f03e06c0529640b787670534eafe7e2c9c9004b1ab5153daf792008bbf339ac368c1df059071948"}, {&(0x7f00000013c0)="57f90afdd2493274cc2c3b37ce6789cecaf2e31ba6b4e4e752e6563eb6aaddb25dd6d948df6c780471591cf332d566196c64e8070aa9f6acc9795ecb61dfed8d800f20a618848e2a89022e9a13b87e0bc53c5415c8141bc0e9f7f0a9867bc501ece5ed42bd1b8e091a"}, {&(0x7f0000001440)="b6deaac7efec6a6cff02b9a82651d2af84311b11fec42213eed5985cf44be88d7272b2b5559cba5598607f055799699b19141c4bb6787a3557e3f0d18316cf7a9d47cce895d52ad91bc66767bb194b1b7d126f1e0812075a586df3c18305868479d12b48afed483bfe920890f2a4e169c1721a05c4ecf59acc2ab210d694fc754da1164e7064750f3b63b2c5dc035fe2150501353a03263417cd0c2eed263dfcc4c66ed51241df11dabd1636d993bf42d1c849ee66cf23971551"}, {&(0x7f0000001500)="fdf078dc21c92f17b8761b6653c713d25f7d6369054992c36e9cc7acf13b095b2ede6f29c31b0056d220e86c9aaa695bb68fd373678255da55e737bc6d8d337aa0d0d50e7c296596cd85888b38f22513d7ca2d58fceb697e524723e1118a8991e8ee8d49b46f7c3366b355e28252192149884eef0170439a7605fd9fd274a6a1672dbe4148cab899b6dcb0983903b3a43bcd"}], 0x1}, 0x20040842)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001640)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x2, 0x0, 0x5, 0x5, 0x0, 0x6, 0x63885, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, @perf_bp={0x0, 0xf}, 0x100008, 0x10005, 0xffffffaf, 0xb, 0xfff7fffffff7bbfa, 0x238d, 0x0, 0x0, 0xfffffffc, 0x0, 0x4000000}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89f1, &(0x7f0000000080))
setsockopt$sock_attach_bpf(r8, 0x107, 0x12, &(0x7f00000000c0)=r7, 0x8)
socket$kcm(0x11, 0x2, 0x300)

4.229869478s ago: executing program 6 (id=6471):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000711223000000000095000000001e7600"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc)
r3 = socket$kcm(0xa, 0x1, 0x0)
r4 = socket$kcm(0x2, 0x5, 0x84)
r5 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x18e091180c4df350, 0x400000002, 0xfffffffe, 0x4, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = perf_event_open$cgroup(&(0x7f0000000200)={0x3, 0x80, 0xa, 0x9, 0xe, 0x8, 0x0, 0x9, 0x100, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000080), 0x2}, 0x1308, 0x2, 0x7fff, 0x0, 0xff, 0x1, 0x4, 0x0, 0x8, 0x0, 0x7fff}, 0xffffffffffffffff, 0x5, r5, 0x4)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r8, 0xc008240a, &(0x7f0000000280)={0x1, 0x0, [0x0]})
close(r7)
recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r9=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r4, 0x84, 0x18, &(0x7f0000000000)=r9, 0x8)
sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x5, 0x3}, 0x1b, 0x0}, 0x2600c055)
close(r0)

3.968726074s ago: executing program 1 (id=6472):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000200)}], 0x2}, 0x4000000)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'team0\x00', 0x200})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080))

3.886815746s ago: executing program 6 (id=6473):
socket$kcm(0x10, 0x2, 0x0)
r0 = socket$kcm(0x2, 0x7, 0x84)
sendmsg$inet(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0xc000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000000)="d80000001c0081044e81ffffffffb9040a1d08030e000000e8fea4a118001500060014260360", 0x26}], 0x1, 0x0, 0x0, 0x7400}, 0x10)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x2b, 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
socket$kcm(0x10, 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000f"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x3, 0xd, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002a0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000081000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$OBJ_PIN_PROG(0x6, &(0x7f00000002c0)=@o_path={&(0x7f0000000180)='./file0\x00', r1, 0x4000, r2}, 0x18)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x2609, 0x0, 0x0, 0x2}, 0x0, 0xf, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r3, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080))
bpf$MAP_CREATE(0x0, 0x0, 0x48)

3.886380136s ago: executing program 3 (id=6474):
socket$kcm(0x2b, 0x1, 0x0)
r0 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f00000001c0), 0x6}, 0x10c002, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x1000000201000001, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
close(0x3)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5d31, 0x21100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r0, 0x8)
perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x9, 0x0, 0x0, 0xd2cf, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x18, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x80047437, 0x0)
r2 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xbe}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc)
setsockopt$sock_attach_bpf(r2, 0x1, 0xd, &(0x7f0000000080), 0x24)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x8b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x100000000}, 0x9, 0x0, 0x0, 0x6, 0x0, 0xfffffff9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x8c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0xe}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
syz_clone(0x8001000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x7, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="966ad819f916d93dc43541d0ff073c3074bd0da19be3e7fd7f389ea175f60a128e0e19", @ANYBLOB="0000000000000000b7030000000100008500000019000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000a00)={r3, &(0x7f0000000880)="2fb56b0e5189f2c1d2f750eeecd2ea6d282202e431131e8e74292b2cc7cd31f7fa4b7f60537dfc39aa9be3faf4b7475504b68aaaaa9f2edefe346a7be1f47580fd2c20b025b0aac727523bd13aea3e3ec2fde3a23561717902dd8f16356e9bbdcfc242f3169d8ce058df45b71aa56775c61ee7a8efd43d05015d257a4d5e84892480c88cff98b059a4b385b6c8a96bd5b046edc92a79ba78521f727a4888bc", &(0x7f0000000940)=""/138, 0x4}, 0x20)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.idle_time\x00', 0x275a, 0x0)
setsockopt$sock_attach_bpf(r4, 0x1, 0x2a, &(0x7f0000000100)=r6, 0x4)
sendmsg$unix(r5, 0x0, 0x4064014)
perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x5, 0xfe, 0x0, 0x0, 0x0, 0x2, 0x19000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe8, 0x401}, 0x0, 0x401, 0xffffffff, 0x0, 0x2}, 0x0, 0x4, 0xffffffffffffffff, 0x2)
r7 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
sendmsg$inet(r2, &(0x7f0000000840)={&(0x7f0000000740)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000800)=[{0x0}], 0x1}, 0x200400c5)
close(0xffffffffffffffff)
setsockopt$sock_attach_bpf(r7, 0x84, 0x14, &(0x7f0000000000), 0x8)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r8, 0x4030582a, &(0x7f0000000040)=0x3)

3.589874413s ago: executing program 0 (id=6475):
r0 = getpid()
perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x1c842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, r0, 0x0, 0xffffffffffffffff, 0x2)
syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair(0x1d, 0xa, 0x0, &(0x7f0000000040))
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000, 0x400}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x61000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xaf0, 0xc}, 0xa100, 0xc8, 0x3, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x8000000000000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xfe, 0x1, 0x0, 0x80, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x100, 0x7}, 0x481a, 0x0, 0x0, 0x2, 0x0, 0x0, 0xf792, 0x0, 0xffffffff, 0x0, 0x8eea}, 0x0, 0x0, r1, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$unix(r3, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r4, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63f580fc02082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef)
perf_event_open(&(0x7f00000004c0)={0x5, 0xfffffffffffffdf8, 0xde, 0x21, 0x0, 0x0, 0x0, 0x0, 0x8400, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0xfffffffffffffff0}, 0x4816, 0x0, 0x0, 0x7, 0x0, 0x0, 0xf792, 0x0, 0xffffffff, 0x0, 0x2000000000000000}, 0x0, 0x9, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc02082c00db5b6861589bcfe8875a060300000023000000"], 0xfdef)
write$cgroup_subtree(r4, &(0x7f00000004c0)=ANY=[], 0xfdef)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xbc, 0x0, 0x0, 0x38b7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x3, 0x4, 0x8, 0x88}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0xfffffffe, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
close(0x3)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x9, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf5, &(0x7f00000001c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x99, 0x8, 0x8, &(0x7f0000000280)}}, 0x10)
r8 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f91724fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000000c0)='&..\x00')

2.703516984s ago: executing program 3 (id=6476):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3f}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000000010000081100000900000001"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0xb, r1}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x1b, 0x0, 0x0)

2.574797348s ago: executing program 3 (id=6477):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = socket$kcm(0xa, 0x1, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x80, 0x0}, 0x20000000)
sendmsg$kcm(r1, &(0x7f0000002ec0)={&(0x7f0000001b00)=@l2tp6={0xa, 0x0, 0x4000003, @empty}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x86a9}, 0x20000000)

2.426681721s ago: executing program 3 (id=6478):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b40)={{r2}, &(0x7f00000004c0), &(0x7f0000000b00)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x10)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2b8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r3 = socket$kcm(0x10, 0x3, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={<r4=>0xffffffffffffffff})
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f00000001c0)={r4})
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x80, 0x0, 0x0, 0x0, 0x18, 0x68000000}, 0x0)
r5 = socket$kcm(0xa, 0x5, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002280)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94)
setsockopt$sock_attach_bpf(r5, 0x29, 0x22, &(0x7f0000000100)=r6, 0x120)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="2e00000011008188040f80ec59acbc0413a1810031000000000f000000028002002d1f0000000000000000000400", 0x2e}], 0x1}, 0x44004)

436.062189ms ago: executing program 1 (id=6479):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, <r1=>0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000005c0)=0xffffffffffffffff, 0x4)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x3, 0xca, 0x7, 0x800, r0, 0x34, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x1, 0xd}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x25, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f00000002c0)='GPL\x00', 0x6771380c, 0xf6, &(0x7f00000004c0)=""/246, 0x40f00, 0x4, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000600)={0x7, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000006c0)=[r4, r0, r0, r0, r0, r0], &(0x7f0000000700)=[{0x3, 0x5, 0x1, 0xb}, {0x5, 0x4, 0x0, 0x7}, {0x4, 0x2, 0x6, 0xc}, {0x2, 0x5, 0xb, 0xa}], 0x10, 0xf}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0xc, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="61df712bc884fed5722780b605a7", 0x0, 0x2f00, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

395.06817ms ago: executing program 6 (id=6480):
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003}, 0x38)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001500)={0x18, 0x16, &(0x7f0000001200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x3}, {}, {}, [@exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8000}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x5}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000012c0)='GPL\x00', 0x0, 0xb1, &(0x7f0000001300)=""/177, 0x41100, 0x62, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000001400)={0x4, 0x1, 0x800, 0x7}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000001440)=[0xffffffffffffffff, 0x1], &(0x7f0000001480)=[{0x2, 0x4, 0x5, 0x3}, {0x3, 0x2, 0x6, 0xb}, {0x1, 0x4, 0x6, 0x6}, {0x0, 0x2, 0x0, 0xb}, {0x3, 0x2, 0x9, 0x1}], 0x10, 0x727}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001600)={{}, &(0x7f00000011c0), &(0x7f00000015c0)=r0}, 0x20)
r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8000, 0x200}, 0x10002a, 0xac5d, 0x100, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
write$cgroup_subtree(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="2b63707561010000007f7366bd61636374200bdf82e0edd78b2b5430131bfe91789648a7f898a8030dcb5198ede47d7baf83d2e441c9305ef79a1b4d7a7cd4ca33a34b0e2e586daf2a620e5859e2f0c4c6d91b1b6f887d53bee8e9125c2fed5c7e815c124bd13f5fe09ef4d1573426e152d343f4735e0932d6c3abe6f11509d64c4ad14dfd1ba1f401fb84ab30cbad5698c6ff3a2c76e1d87856803c606a6e7e6db7094477ebd58dfc6a78cfb2a7c9a077627087cfdc90c5b9f289ea296ed6e6fd530c883549be708140921c90a4e6bd7106c45f0bf7f2baceece0db00096df149b761f671af22"], 0x12)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r4 = socket$kcm(0x11, 0x200000000000002, 0x300)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=<r7=>r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000f00)={r5, 0x58, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r8=>0x0}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f40)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYRES16=r6, @ANYRES32, @ANYBLOB="f0f605748aed0000000000000c00000045"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', r8}, 0x94)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@ifindex=r8, 0x2e, 0x1, 0xa4a, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540), &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8916, &(0x7f0000002200)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12t\x02\x006\xe3\x1f\xa1B\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x01\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(\x04\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x02\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99\x92=\xc5\xb9L\xbc\x91\xba\n\xdaL[\xd7\x01-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x04.\x9aL\x03b\xf7\x10Z\x92\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5<J\x1f\xba\xfc\x90(\x985\x93\xa8\xd4\xf0\xbdTy\x18\xc8\xa0\xbb\x99\x8c\xe0Q\xffC//\xa6\xcf\x053x\xe7\xd5-\x04\x97\x7f\xee>\xbdX\xf73\xa1\xa2\'\x00\x00\x00\xfb\xce\x959x\xfeW\r\xf0{\xcaT\xecp)=\x9d\xdfG8\xa1\xe3=\xa6\x00\x98\xc1\xb3\x91-\xab\'W\x8al?d<JN\xcb\xd4H\xb0_jO\xf3\x90\xe8/l\xdfg)\x8d#\xfdo\xa9L\xdeA*\xec\xa1\x14,\xe8\x8d^\xb9r=\xc0\x18\xd4\x11dU[Ry\xed\xd6\x97\x8a\xe8\xca\x99\x10\x8e\xc8P\xa3\xae/\xdaof\x06\x7f\xf7\x80$f\b\x92\xae\xeb\xdd\"\x89\xb8\xf0\xc3\b\x00\x00\x00\x00\a\xf6\xfc\x1d\xd4\x893\xeb)\xc1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00O!\xd2q\xda}\xe2\xa2\xfe\xfd)\\\xdf\x9aN\\\xae\x00\x00\x00\x00r\x9c\xb0H/\xa0Sy\xdb\xc4\x88\xf0\xb4\xc1lh#\xb55\xf4\xf1{\xfa\xcb\x80\xbe\xdd\xdd\'\xdf\x05\xe6H+$\xbfW\x06<\\\xd9\x1e]\x8c\x94\x0e\a6\x11\xcf\x85\xef!\xb0\xact\xad\xa9?]Q\xeaw\xb9c\xa0e\xc5)1\f\xcbw\xaa\x83\xf5\x19\xe2PL\xcc\xff\xfe\xe4\xe3\xfdO\x9c\xd2\x81\x9c\xc6\x81\xef\x89\x8ejb\xe8\xe9\x0f\x95u#\x04m\xc1\xdd9\xafl\xf4CIe8P\xde\x8e\xff\x96\x16\xa2)\xf9\x8e\xa7\xf3\x8a?\xbe\x8d\x81R6\xbb\x92g&e\xa0R.\f\xd9\xb4?\xe8\xb0\x7f\x1ci\x8f\xbeE\xce^\xa9@\xe5d]\xcb\x15\xd3\x8f8\f\x84g\xc1\x1dPH\xee\x98')
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@generic={0x0}, 0x18)
r9 = socket$kcm(0x2b, 0x1, 0x0)
syz_clone(0x40000, &(0x7f0000000240)="36badbc26fe21cb93f789794c159e7730032482d7b5c4c6b77cda4ee0724395975df84232bb8a41885f733fd12d951f04f50e1199058ce350d660b2503a0e07f357795e18fb900cae0fb83dffe", 0x4d, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="957b36e2e80d44079268140b2d2e49784446b15babe3012f24245a")
getpid()
sendmsg$inet(r9, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
sendmsg(r9, &(0x7f0000001180)={&(0x7f0000000940)=@ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80, &(0x7f0000001100)=[{&(0x7f0000000a00)="508480c7f8b06a2fb2084efd7858ec49d980b5fcc93cc2f5d8a4d1d992dd8d51ca5cf56b99ce56d94a9c25fe1e83e8ee5b0a2394999e9c7171d062afd9b720b99390c899099068907268c73abc3bfc41e84451982f8cb50eb75570330d3670fcaa5c88c9266f1e925020674fa8885649a2721a06ee0e89f379a83e9c5abb86ea6f6dfa1e66e983a4657a2356278ce062920120e27cd3c3a7bc3d", 0x9a}, {&(0x7f0000000ac0)="56cafb2c2adcf8930b29ad15526ded526085a01abf50cb4f7b", 0x19}, {&(0x7f0000000b00)="6698baeb923aacdd6c2389b2a45121072b3443e4cafd3a35f0c57b146846965c982827e4249ec40c50585174874240c19e697c1a7431a36ad06cb2950b75124d22ecd18b4d74744cd0a26ebe8be918358ceefcdfc31a94d687756698c74e6f6f25c6a7e3e8e29ba8d4ced2983ff66e883d8c86137864beb4894304f992f14d22b1131bb3eed69832727d", 0x8a}, {&(0x7f0000000bc0)="b5838e7d5e68ca10141b836ea91ab4296f492e4df403ecc7cd8b0325c198a722c2fb57e88f9008694a9bc319b3a52b792841cf5f403f84aade6010f4b65eaf943d10e0f15b084789276e43b0694c075beb424109d9093c262a97007fc0b3af8203e99f73819f8cc99de3d0b654e5d011e0666ecc14c82082ede3d4fb647af83aba830a13b24f32fd22047354af1a69a1692a1085107d09017bb0fbafe65c02c4ebad0124a15c885f10bb6970422ed4b573839049510f", 0xb6}, {&(0x7f0000000c80)="d3d88eb6841f1c218313fd15f4ef6fd8ce9abb571da574006df0f5dc316c9fec93925bcd90007766b06a3bea92976e74522ba389620490b4351975dab4b23ae7d41e178826f20863c3ba1d98e22fbbf8bdb55fa45ede573478c6f12aadd97fab649f0435a2cb1e5921527c4a6d5bd811a60cb9228ad569179b", 0x79}, {&(0x7f0000000d00)="216e95ba14f7b9844d74815372def45e5fc36c98396a338950fd4c05afe043a034bf6843bafe0c4a72dd70ec5dab08439644386712dc5217f0406490bb3f10a68fd6fdc6473f597f7b54efa33087d51bbd5176cc8f56ef015388822d332b49b00c0ab9e792716d731504ec46cfa534db380ae9640db11b92632fc56ba8ea6bb7bab2525a3de64569d539fd6289d5fe37a46ff1a29393295906003495ace9acb800862a1bb63bbd440ac2f69608982439c1fc6ada228458d6e1f9460ec3489262cfb7", 0xc2}, {&(0x7f0000000e00)="a284f5fdea47d176d382f1f429e4de52a48bc91e32671bb0e6a7ef2430a42f448e57ce63eac8706a04b5ee0971f31382eb156ace691a8dc84718242e553e73b97adb8cbacacbd8a0d82cb0d59ad2536f9e3bbd7edf65cf7524f210114e9905caace86f2a06b3cf942d3fac6a45d383c728a726fe9c4cb91aaaa00b2f5e11c46b", 0x80}, {&(0x7f0000001000)="bf120260e8a3cea1aef920988960f2feabf57d307290c715a0672fd6dc840d4db1e8c6920e258652f79632282b43dbba7b71ef2f87d87e3e185e3481658d72cf41e533af0b1b6c0b438450362bf33b2b39e61964d155eac757275cd5768ff7a45240bab8a0c09bfbebfda92e8e0bebd8adac2c21a68da9a243c2771ad6d16ab4d8a6e4f40fe8e9efeb2ec7f29cf1e5b2c9b25dcb62bf25925df6a3b8b7e15a0fe83b54ea2eaefb9bdf930872ca00e57573d7eb36605fe1e75ba95e87a6ddb8a66a45d0caf80331abbc9cc9909e5c033e904b7e00f215b3e1621082a772862661af8642298993bdd440cc", 0xea}], 0x8}, 0x4010)
ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x8912, &(0x7f0000000080))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r3, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x1c, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000700), &(0x7f0000000780), 0x8, 0xab, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x11, 0x16, &(0x7f0000001a00)=ANY=[@ANYRES64=r7], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc42ca46fb91857ac, r10, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r2}, 0x94)

270.549453ms ago: executing program 5 (id=6481):
r0 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x46, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0xf5ff, 0x300, @local, 0x3}, 0x80, &(0x7f0000000000)=[{&(0x7f00000002c0)='\t', 0x1}], 0x1}, 0x41)

269.961903ms ago: executing program 3 (id=6482):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0)
openat$cgroup_netprio_ifpriomap(r0, 0x0, 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
close(0x3)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
recvmsg$kcm(r1, &(0x7f0000002540)={0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000000340)=""/57, 0x39}, {&(0x7f0000000ec0)=""/254, 0xfe}, {&(0x7f0000000fc0)=""/65, 0x41}, {&(0x7f00000021c0)=""/228, 0xe4}, {&(0x7f00000022c0)=""/249, 0xf9}], 0x5, &(0x7f0000002440)=""/199, 0xc7}, 0x20)
sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r2, &(0x7f0000000140)={0x0, 0xffffffffffffff3c, &(0x7f0000000780)=[{&(0x7f0000000480)=""/228, 0xe4}, {&(0x7f0000000c00)=""/266, 0x10a}, {&(0x7f00000011c0)=""/4047, 0xfcf}, {&(0x7f0000000dc0)=""/194, 0xc2}, {&(0x7f00000003c0)=""/186, 0xba}, {&(0x7f0000001080)=""/262, 0x106}, {&(0x7f0000000580)=""/173, 0xad}, {&(0x7f0000000840)=""/134, 0x86}, {&(0x7f0000000640)=""/239, 0xef}, {&(0x7f0000000900)=""/161, 0xa1}, {&(0x7f00000009c0)=""/203, 0xcb}], 0xb}, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000000)={r2})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r0, <r4=>0xffffffffffffffff}, 0x4)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r3, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r5=>0x0}}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=@base={0x10, 0xffff8000, 0x7, 0x8001, 0x0, r4, 0x4, '\x00', r5, 0xffffffffffffffff, 0x3, 0x2, 0x1}, 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xc, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffa}, {0x85, 0x0, 0x0, 0x2d}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r6}, 0xc)
r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETLINK(r7, 0x400454cc, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1f, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

129.892116ms ago: executing program 1 (id=6483):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x100000000}, 0x9, 0x0, 0x0, 0x6, 0x0, 0xfffffff9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000008000000000000eaffffff03000000000400000003000000000000000600000000004a689673d802335a000000000005000000000000000000002e00"], 0x0, 0x50}, 0x28)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000180)=0x80)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4)
r2 = socket$kcm(0x10, 0x2, 0x10)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="1100000014006b02000000d86e6c1d0002", 0x11}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002200356bd25a806f8c6394f91124fc60040006000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
r5 = socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
recvmsg$kcm(r5, 0x0, 0x10003)
socket$kcm(0x11, 0x200000000000002, 0x300)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
socket$kcm(0x11, 0x20000000000000a, 0x300)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xe, 0x0, &(0x7f0000000040)="ffff53f2081e87f89b60160b08ff", 0x0, 0x63, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3f}, 0x50)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="180000003f000b05d25a601037153e3704021680fc0b0900", 0x18}], 0x1}, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r7)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

83.588057ms ago: executing program 0 (id=6484):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140))
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x26}, 0x10)
r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f00000001c0)={[{0x2b, 'net_prio'}]}, 0xa)
r4 = socket$kcm(0xa, 0x5, 0x0)
r5 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400, 0x3}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r6, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket$kcm(0x10, 0x3, 0x10)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x4}}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}}, &(0x7f0000000140)=""/237, 0x5a, 0xed, 0x1}, 0x28)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r8 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000850000000700000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r10, &(0x7f0000000b40)=ANY=[@ANYBLOB="13030000760091"], 0xfe33)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r9, r8}, 0xc)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r6, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000340)=[0x0], ""/16, <r11=>0x0, 0x0, 0x0, 0x0, 0x7, 0x2, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0], 0x0, 0xa, &(0x7f0000000540)=[{}], 0x8, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x9f, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0xd, 0x5, 0x4, 0xe, 0x4004, r8, 0xcbc, '\x00', r11, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x50)
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0xd, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x5, [@float={0x3, 0x0, 0x0, 0x10, 0x8}, @decl_tag={0x3, 0x0, 0x0, 0x11, 0x3}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x4, [{0x0, 0x2}]}]}, {0x0, [0x61, 0x61, 0x2e]}}, 0x0, 0x51}, 0x28)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$kcm(r4, &(0x7f0000003280)={&(0x7f0000000700)=@vsock, 0x80, &(0x7f0000003180)=[{&(0x7f0000000dc0)=""/4096, 0x1000}, {&(0x7f0000001dc0)=""/55, 0x37}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000002e00)=""/101, 0x65}, {&(0x7f0000002e80)=""/224, 0xe0}, {&(0x7f0000002f80)}, {&(0x7f0000002fc0)=""/125, 0x7d}, {&(0x7f0000003040)=""/32, 0x20}, {&(0x7f0000003080)=""/141, 0x8d}, {&(0x7f0000003140)=""/13, 0xd}], 0xa, &(0x7f0000003240)=""/15, 0xf}, 0x20000100)
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r12, @ANYRES32=r5], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

0s ago: executing program 5 (id=6485):
r0 = socket$kcm(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}, 0x10c002, 0xac59, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
socketpair(0x10, 0x3, 0x3a, &(0x7f0000000080))
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
openat$tun(0xffffffffffffff9c, 0x0, 0x408900, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x5)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3, r2}, 0xc)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0x40, 0x7a, &(0x7f0000000240)="4b3438d68099217365376fcc5445f46b291b70676efb112f78f98f1b1316761c1558442e0bd9f365061c9699bcb2dff85acddc29a378df8f060837c47cb61000", &(0x7f0000000280)=""/122, 0x6, 0x0, 0x4f, 0x21, &(0x7f0000000300)="2d0aea1628b8e3c9792f5cbd09ababea6097cd103c7a7dab2f8d91adaa87d70813066dac1c9e31e557d5a1fe98a94a1c447dc52e0b02fde607da12c3d04281bc43f6789331e9c50adf71edd61c08bb", &(0x7f0000000380)="ef9be949cf09026bb96eb2afa7fe3466b80433a9af978d8e439b03895652e97d2d", 0x1, 0x0, 0xfff}, 0x50)
close(0x3)
r4 = openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz0\x00', 0x200002, 0x0)
r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8)
perf_event_open$cgroup(&(0x7f00000000c0)={0x3, 0x80, 0x3, 0x8, 0x19, 0x4, 0x0, 0x8000000000000000, 0x8014, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4fec, 0x2, @perf_config_ext={0x5, 0x10001}, 0x1342, 0x3, 0x5, 0x8, 0x0, 0x8, 0x5, 0x0, 0x3, 0x0, 0x6}, r4, 0xd, r5, 0x6)

kernel console output (not intermixed with test programs):

 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1211.602395][T23344] RSP: 002b:00007fa761df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1211.610805][T23344] RAX: ffffffffffffffda RBX: 00007fa763e25fa0 RCX: 00007fa763b9de99
[ 1211.618866][T23344] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000006
[ 1211.626831][T23344] RBP: 00007fa761df6090 R08: 0000000000000000 R09: 0000000000000000
[ 1211.634800][T23344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1211.642863][T23344] R13: 00007fa763e26038 R14: 00007fa763e25fa0 R15: 00007ffcb796ec28
[ 1211.650870][T23344]  </TASK>
[ 1211.923933][T23355] netlink: 'syz.5.5781': attribute type 11 has an invalid length.
[ 1211.983706][T23355] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.5781'.
[ 1212.103479][ T4278] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1212.113693][ T4278] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1212.121934][ T4278] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1212.136837][ T4278] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1212.144763][ T4278] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 1212.152637][ T4278] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1212.279475][T23362] can: request_module (can-proto-0) failed.
[ 1212.346939][T23362] netlink: 'syz.6.5782': attribute type 3 has an invalid length.
[ 1212.355350][T23362] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.5782'.
[ 1212.493170][T23354] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1213.008412][T23384] netlink: 'syz.0.5788': attribute type 29 has an invalid length.
[ 1213.462998][T23384] netlink: 'syz.0.5788': attribute type 29 has an invalid length.
[ 1213.545649][T23385] netlink: 'syz.0.5788': attribute type 29 has an invalid length.
[ 1214.033478][T23393] mac80211_hwsim hwsim60 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1214.091362][T23357] chnl_net:caif_netlink_parms(): no params data found
[ 1214.195719][ T4278] Bluetooth: hci2: command 0x0409 tx timeout
[ 1214.237980][T23393] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5790'.
[ 1214.586338][T23357] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1214.607404][T23357] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1214.615883][T23357] device bridge_slave_0 entered promiscuous mode
[ 1214.624948][T23357] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1214.633462][T23357] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1214.642640][T23357] device bridge_slave_1 entered promiscuous mode
[ 1214.713837][T23357] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1214.740645][T23357] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1214.893019][T23357] team0: Port device team_slave_0 added
[ 1215.097347][T23357] team0: Port device team_slave_1 added
[ 1215.153965][T23357] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1215.186378][T23357] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1215.214674][T23357] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1215.243003][T23419] netlink: 'syz.6.5796': attribute type 2 has an invalid length.
[ 1215.253525][T23357] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1215.260803][T23419] netlink: 198692 bytes leftover after parsing attributes in process `syz.6.5796'.
[ 1215.271460][T23357] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1215.335930][T23357] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1215.360496][T23425] netlink: 'syz.3.5798': attribute type 21 has an invalid length.
[ 1215.469671][T23357] device hsr_slave_0 entered promiscuous mode
[ 1215.506217][T23357] device hsr_slave_1 entered promiscuous mode
[ 1215.675009][T23434] netlink: 55631 bytes leftover after parsing attributes in process `syz.5.5801'.
[ 1215.847700][T23435] netlink: 'syz.6.5799': attribute type 3 has an invalid length.
[ 1215.894098][T23435] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.5799'.
[ 1215.917174][T23429] can: request_module (can-proto-0) failed.
[ 1216.172675][T23357] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1216.215377][T23449] netlink: 'syz.3.5805': attribute type 13 has an invalid length.
[ 1216.245791][T23449] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5805'.
[ 1216.275492][ T4278] Bluetooth: hci2: command 0x041b tx timeout
[ 1216.318220][T23449] syz_tun: refused to change device tx_queue_len
[ 1216.334811][T23449] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[ 1216.495946][T23357] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1216.585612][T23456] netlink: 'syz.0.5806': attribute type 13 has an invalid length.
[ 1216.613501][T23459] device syzkaller0 entered promiscuous mode
[ 1216.757978][T23357] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1217.372977][T23471] FAULT_INJECTION: forcing a failure.
[ 1217.372977][T23471] name failslab, interval 1, probability 0, space 0, times 0
[ 1217.401387][T23471] CPU: 0 PID: 23471 Comm: syz.3.5812 Not tainted syzkaller #0
[ 1217.408935][T23471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 1217.419034][T23471] Call Trace:
[ 1217.422347][T23471]  <TASK>
[ 1217.425311][T23471]  dump_stack_lvl+0x188/0x24e
[ 1217.430054][T23471]  ? show_regs_print_info+0x12/0x12
[ 1217.435477][T23471]  ? load_image+0x410/0x410
[ 1217.440022][T23471]  ? __might_sleep+0xd0/0xd0
[ 1217.444645][T23471]  ? __lock_acquire+0x7c40/0x7c40
[ 1217.449697][T23471]  should_fail_ex+0x390/0x4c0
[ 1217.454414][T23471]  should_failslab+0x5/0x20
[ 1217.458938][T23471]  slab_pre_alloc_hook+0x59/0x300
[ 1217.463993][T23471]  ? apparmor_sk_alloc_security+0x74/0x100
[ 1217.469822][T23471]  __kmem_cache_alloc_node+0x4f/0x270
[ 1217.475211][T23471]  ? apparmor_sk_alloc_security+0x74/0x100
[ 1217.481086][T23471]  kmalloc_trace+0x26/0xe0
[ 1217.485520][T23471]  apparmor_sk_alloc_security+0x74/0x100
[ 1217.491169][T23471]  security_sk_alloc+0x6a/0xa0
[ 1217.495945][T23471]  sk_prot_alloc+0x101/0x210
[ 1217.500543][T23471]  ? sk_alloc+0x20/0x330
[ 1217.504785][T23471]  sk_alloc+0x36/0x330
[ 1217.508870][T23471]  ? bpf_ctx_init+0x154/0x190
[ 1217.513581][T23471]  bpf_prog_test_run_skb+0x36d/0x18e0
[ 1217.518978][T23471]  ? __fget_files+0x28/0x460
[ 1217.523584][T23471]  ? __fget_files+0x3fc/0x460
[ 1217.528278][T23471]  ? cpu_online+0xa0/0xa0
[ 1217.532644][T23471]  bpf_prog_test_run+0x31c/0x390
[ 1217.537579][T23471]  __sys_bpf+0x62b/0x780
[ 1217.541813][T23471]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1217.547219][T23471]  ? lock_chain_count+0x20/0x20
[ 1217.552095][T23471]  __x64_sys_bpf+0x78/0x90
[ 1217.556522][T23471]  do_syscall_64+0x4c/0xa0
[ 1217.560967][T23471]  ? clear_bhb_loop+0x60/0xb0
[ 1217.565648][T23471]  ? clear_bhb_loop+0x60/0xb0
[ 1217.570336][T23471]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1217.576241][T23471] RIP: 0033:0x7fa763b9de99
[ 1217.580676][T23471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1217.600305][T23471] RSP: 002b:00007fa761df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1217.608812][T23471] RAX: ffffffffffffffda RBX: 00007fa763e25fa0 RCX: 00007fa763b9de99
[ 1217.616810][T23471] RDX: 0000000000000024 RSI: 0000200000000640 RDI: 000000000000000a
[ 1217.624774][T23471] RBP: 00007fa761df6090 R08: 0000000000000000 R09: 0000000000000000
[ 1217.632737][T23471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1217.640726][T23471] R13: 00007fa763e26038 R14: 00007fa763e25fa0 R15: 00007ffcb796ec28
[ 1217.648723][T23471]  </TASK>
[ 1217.689329][T23357] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1217.740187][T23474] netlink: 55631 bytes leftover after parsing attributes in process `syz.6.5813'.
[ 1217.832707][T23357] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1217.862845][T23357] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1217.900000][T23357] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1218.085832][T23488] netlink: 'syz.3.5816': attribute type 19 has an invalid length.
[ 1218.100771][T23488] netlink: 14552 bytes leftover after parsing attributes in process `syz.3.5816'.
[ 1218.209754][T23357] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1218.286279][T21269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1218.302934][T21269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1218.354650][T23357] 8021q: adding VLAN 0 to HW filter on device team0
[ 1218.365597][ T4278] Bluetooth: hci2: command 0x040f tx timeout
[ 1218.419754][T23496] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.5819'.
[ 1218.557939][T21269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1218.590385][T21269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1218.617477][T21269] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1218.624811][T21269] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1218.654028][T21269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1218.682547][T21269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1218.728376][T21269] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1218.735751][T21269] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1218.808230][T21269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1218.813357][T23499] netlink: 'syz.0.5818': attribute type 3 has an invalid length.
[ 1218.846080][T23499] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.5818'.
[ 1218.863307][T21269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1218.879153][T23497] can: request_module (can-proto-0) failed.
[ 1218.900070][T21269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1218.941142][T21269] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1218.967856][T21269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1218.989038][T21269] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1219.006532][T21269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1219.014875][T21269] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1219.041706][T21282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1219.061383][T21282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1219.122357][T21282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1219.139616][T21282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1219.165029][T23357] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1219.334714][T23514] netlink: 'syz.3.5825': attribute type 39 has an invalid length.
[ 1219.444554][T23516] FAULT_INJECTION: forcing a failure.
[ 1219.444554][T23516] name failslab, interval 1, probability 0, space 0, times 0
[ 1219.468849][T23516] CPU: 0 PID: 23516 Comm: syz.6.5827 Not tainted syzkaller #0
[ 1219.476379][T23516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 1219.486560][T23516] Call Trace:
[ 1219.489860][T23516]  <TASK>
[ 1219.492788][T23516]  dump_stack_lvl+0x188/0x24e
[ 1219.497487][T23516]  ? trace_event_raw_event_lock+0x230/0x230
[ 1219.503488][T23516]  ? show_regs_print_info+0x12/0x12
[ 1219.508709][T23516]  ? load_image+0x410/0x410
[ 1219.513245][T23516]  should_fail_ex+0x390/0x4c0
[ 1219.517953][T23516]  should_failslab+0x5/0x20
[ 1219.522483][T23516]  slab_pre_alloc_hook+0x59/0x300
[ 1219.527555][T23516]  kmem_cache_alloc+0x56/0x2f0
[ 1219.532335][T23516]  ? __nf_conntrack_alloc+0x93/0x370
[ 1219.537744][T23516]  __nf_conntrack_alloc+0x93/0x370
[ 1219.542877][T23516]  init_conntrack+0x23b/0x1190
[ 1219.547667][T23516]  ? early_drop+0x870/0x870
[ 1219.552191][T23516]  ? nf_conntrack_find_get+0x640/0x640
[ 1219.557684][T23516]  ? __siphash_unaligned+0x289/0x3d0
[ 1219.563199][T23516]  nf_conntrack_in+0xd76/0x1830
[ 1219.568128][T23516]  ? nf_ct_pernet+0x270/0x270
[ 1219.572874][T23516]  ? ip6t_alloc_initial_table+0x640/0x640
[ 1219.578759][T23516]  ? ipv6_defrag+0x2d2/0x3a0
[ 1219.583395][T23516]  ? ipv6_conntrack_in+0x20/0x20
[ 1219.588368][T23516]  nf_hook_slow+0xb9/0x200
[ 1219.592827][T23516]  __ip6_local_out+0x780/0x8a0
[ 1219.597641][T23516]  ? __ip6_local_out+0x608/0x8a0
[ 1219.602614][T23516]  ? ip6_dst_hoplimit+0x340/0x340
[ 1219.607691][T23516]  ? __ip6_local_out+0x8a0/0x8a0
[ 1219.612668][T23516]  ? read_lock_is_recursive+0x10/0x10
[ 1219.618090][T23516]  ip6_local_out+0x26/0x120
[ 1219.622636][T23516]  ? ip6_send_skb+0x106/0x370
[ 1219.627438][T23516]  ip6_send_skb+0x1c9/0x370
[ 1219.632000][T23516]  udp_v6_send_skb+0xb99/0x1850
[ 1219.636923][T23516]  udp_v6_push_pending_frames+0x12f/0x220
[ 1219.642695][T23516]  udpv6_sendmsg+0xdde/0x22c0
[ 1219.647421][T23516]  ? ip_skb_dst_mtu+0x9b0/0x9b0
[ 1219.652313][T23516]  ? __might_sleep+0xd0/0xd0
[ 1219.656939][T23516]  ? udp_v6_early_demux+0xf00/0xf00
[ 1219.662191][T23516]  ? perf_trace_run_bpf_submit+0x1c0/0x1c0
[ 1219.668065][T23516]  ? aa_af_perm+0x340/0x340
[ 1219.672609][T23516]  ? sock_rps_record_flow+0x19/0x3f0
[ 1219.677931][T23516]  ? inet_send_prepare+0x57/0x250
[ 1219.682974][T23516]  ? inet6_sendmsg+0x5b/0xd0
[ 1219.687579][T23516]  ? inet6_compat_ioctl+0x3c0/0x3c0
[ 1219.692801][T23516]  ____sys_sendmsg+0x5ed/0x9a0
[ 1219.697667][T23516]  ? __might_fault+0xa6/0x120
[ 1219.702370][T23516]  ? __sys_sendmsg_sock+0x30/0x30
[ 1219.707430][T23516]  ? __import_iovec+0x306/0x510
[ 1219.712355][T23516]  ? import_iovec+0x6f/0xa0
[ 1219.716886][T23516]  ___sys_sendmsg+0x2a2/0x360
[ 1219.721608][T23516]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1219.726423][T23516]  ? __lock_acquire+0x7c40/0x7c40
[ 1219.731537][T23516]  __se_sys_sendmsg+0x1c3/0x2b0
[ 1219.736427][T23516]  ? ct_nmi_exit+0x145/0x1c0
[ 1219.741121][T23516]  ? __x64_sys_sendmsg+0x80/0x80
[ 1219.746110][T23516]  ? lockdep_hardirqs_on+0x94/0x140
[ 1219.751339][T23516]  do_syscall_64+0x4c/0xa0
[ 1219.755786][T23516]  ? clear_bhb_loop+0x60/0xb0
[ 1219.760483][T23516]  ? clear_bhb_loop+0x60/0xb0
[ 1219.765171][T23516]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1219.771090][T23516] RIP: 0033:0x7fb3b039de99
[ 1219.775524][T23516] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1219.795175][T23516] RSP: 002b:00007fb3b132e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1219.803623][T23516] RAX: ffffffffffffffda RBX: 00007fb3b0625fa0 RCX: 00007fb3b039de99
[ 1219.811621][T23516] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003
[ 1219.819616][T23516] RBP: 00007fb3b132e090 R08: 0000000000000000 R09: 0000000000000000
[ 1219.827605][T23516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1219.835616][T23516] R13: 00007fb3b0626038 R14: 00007fb3b0625fa0 R15: 00007ffd6790c038
[ 1219.843656][T23516]  </TASK>
[ 1220.033844][T21275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1220.052027][T21275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1220.103949][T23357] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1220.194686][T21275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1220.211245][T21275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1220.268155][T23525] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.5828'.
[ 1220.446446][ T4278] Bluetooth: hci2: command 0x0419 tx timeout
[ 1220.536513][ T6972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1220.546396][ T6972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1220.556365][ T6972] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1220.564321][ T6972] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1220.586901][T23357] device veth0_vlan entered promiscuous mode
[ 1220.601426][T23357] device veth1_vlan entered promiscuous mode
[ 1220.683185][T21269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1220.696223][T21269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1220.754358][T23357] device veth0_macvtap entered promiscuous mode
[ 1220.799960][T23357] device veth1_macvtap entered promiscuous mode
[ 1220.829227][T23535] mac80211_hwsim hwsim40 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1220.890323][T23357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1220.903304][T23357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1220.913706][T23357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1220.926204][T23357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1220.943995][T23357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1220.958334][T23357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1220.970596][T23357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1220.983122][T23357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1221.049312][T23357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1221.096432][T23357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1221.123897][T23357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1221.135505][T23357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1221.148360][T23357] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1221.170491][T23533] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5830'.
[ 1221.214630][T21269] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1221.228217][T21269] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1221.236957][T21269] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1221.246776][T21269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1221.300919][T23544] netlink: 'syz.0.5834': attribute type 19 has an invalid length.
[ 1221.314942][T23544] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5834'.
[ 1221.361181][T23357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1221.425195][T23357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1221.435055][T23357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1221.505332][T23357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1221.549709][T23357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1221.609350][T23357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1221.686770][T23357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1221.709955][T23357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1221.720334][T23357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1221.731268][T23357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1221.749326][T23357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1221.766223][T23357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1221.781687][T23357] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1221.794496][T21273] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1221.807827][T21273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1221.836299][T23357] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1221.855687][T23357] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1221.875841][T23357] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1221.905308][T23357] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1222.152064][T21269] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1222.173476][T21269] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1222.219202][T21269] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1222.348087][T21269] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1222.366739][T21269] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1222.572767][T23580] netlink: 'syz.5.5844': attribute type 3 has an invalid length.
[ 1222.585499][T23580] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.5844'.
[ 1222.677851][T23577] can: request_module (can-proto-0) failed.
[ 1227.046540][T21269] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1227.086589][T23552] delete_channel: no stack
[ 1227.087738][T23596] mac80211_hwsim hwsim45 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1227.129375][T23598] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5849'.
[ 1228.123045][T23619] FAULT_INJECTION: forcing a failure.
[ 1228.123045][T23619] name failslab, interval 1, probability 0, space 0, times 0
[ 1228.215684][T23619] CPU: 1 PID: 23619 Comm: syz.1.5858 Not tainted syzkaller #0
[ 1228.223220][T23619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 1228.233380][T23619] Call Trace:
[ 1228.236673][T23619]  <TASK>
[ 1228.239620][T23619]  dump_stack_lvl+0x188/0x24e
[ 1228.244346][T23619]  ? show_regs_print_info+0x12/0x12
[ 1228.249579][T23619]  ? load_image+0x410/0x410
[ 1228.254100][T23619]  ? __might_sleep+0xd0/0xd0
[ 1228.258700][T23619]  ? __lock_acquire+0x7c40/0x7c40
[ 1228.263740][T23619]  ? trace_event_raw_event_lock+0x230/0x230
[ 1228.269663][T23619]  should_fail_ex+0x390/0x4c0
[ 1228.274361][T23619]  should_failslab+0x5/0x20
[ 1228.278874][T23619]  slab_pre_alloc_hook+0x59/0x300
[ 1228.283912][T23619]  ? sk_prot_alloc+0xe7/0x210
[ 1228.288618][T23619]  __kmem_cache_alloc_node+0x4f/0x270
[ 1228.294020][T23619]  ? sk_prot_alloc+0xe7/0x210
[ 1228.298709][T23619]  __kmalloc+0xa3/0x240
[ 1228.302887][T23619]  sk_prot_alloc+0xe7/0x210
[ 1228.307402][T23619]  ? sk_alloc+0x20/0x330
[ 1228.311659][T23619]  sk_alloc+0x36/0x330
[ 1228.315740][T23619]  ? bpf_ctx_init+0x154/0x190
[ 1228.320518][T23619]  bpf_prog_test_run_skb+0x36d/0x18e0
[ 1228.325903][T23619]  ? lockdep_hardirqs_on+0x94/0x140
[ 1228.331118][T23619]  ? cpu_online+0xa0/0xa0
[ 1228.335464][T23619]  ? cpu_online+0xa0/0xa0
[ 1228.339805][T23619]  bpf_prog_test_run+0x31c/0x390
[ 1228.344764][T23619]  __sys_bpf+0x62b/0x780
[ 1228.349112][T23619]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1228.354517][T23619]  ? lock_chain_count+0x20/0x20
[ 1228.359392][T23619]  __x64_sys_bpf+0x78/0x90
[ 1228.363824][T23619]  do_syscall_64+0x4c/0xa0
[ 1228.368256][T23619]  ? clear_bhb_loop+0x60/0xb0
[ 1228.372948][T23619]  ? clear_bhb_loop+0x60/0xb0
[ 1228.377651][T23619]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1228.383642][T23619] RIP: 0033:0x7f861df9de99
[ 1228.388076][T23619] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1228.407690][T23619] RSP: 002b:00007f861edc0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1228.416128][T23619] RAX: ffffffffffffffda RBX: 00007f861e225fa0 RCX: 00007f861df9de99
[ 1228.424120][T23619] RDX: 0000000000000050 RSI: 00002000000005c0 RDI: 000000000000000a
[ 1228.432102][T23619] RBP: 00007f861edc0090 R08: 0000000000000000 R09: 0000000000000000
[ 1228.440083][T23619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1228.448062][T23619] R13: 00007f861e226038 R14: 00007f861e225fa0 R15: 00007ffd9a31dd88
[ 1228.456065][T23619]  </TASK>
[ 1228.620242][ T4278] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1228.629884][ T4278] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1228.637792][ T4278] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1228.646237][ T4278] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1228.653866][ T4278] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[ 1228.662624][ T4278] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1229.210387][T21266] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1229.318504][T21266] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1229.597462][T21266] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1229.696146][T21266] device netdevsim0 left promiscuous mode
[ 1229.859084][T23666] netlink: 'syz.1.5869': attribute type 3 has an invalid length.
[ 1229.877441][T23666] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.5869'.
[ 1229.943374][T23663] can: request_module (can-proto-0) failed.
[ 1230.022032][T21266] team0: Port device netdevsim0 removed
[ 1230.032512][T21266] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1230.057928][T23662] netlink: 14 bytes leftover after parsing attributes in process `syz.6.5871'.
[ 1230.248545][T23623] chnl_net:caif_netlink_parms(): no params data found
[ 1230.410818][T23683] netlink: 'syz.0.5876': attribute type 2 has an invalid length.
[ 1230.420864][T23683] netlink: 'syz.0.5876': attribute type 8 has an invalid length.
[ 1230.429596][T23683] netlink: 197344 bytes leftover after parsing attributes in process `syz.0.5876'.
[ 1230.439202][T23684] netlink: 'syz.0.5876': attribute type 2 has an invalid length.
[ 1230.452306][T23684] netlink: 'syz.0.5876': attribute type 8 has an invalid length.
[ 1230.470694][T23684] netlink: 197344 bytes leftover after parsing attributes in process `syz.0.5876'.
[ 1230.563636][T23623] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1230.605412][T23623] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1230.641954][T23623] device bridge_slave_0 entered promiscuous mode
[ 1230.691055][T23623] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1230.708940][T23623] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1230.721126][T23623] device bridge_slave_1 entered promiscuous mode
[ 1230.790575][T23623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1230.803674][T23623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1230.837795][ T4287] Bluetooth: hci5: command 0x0409 tx timeout
[ 1231.009597][T23623] team0: Port device team_slave_0 added
[ 1231.040682][T23623] team0: Port device team_slave_1 added
[ 1231.145467][T23623] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1231.172849][T23623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1231.270357][T23623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1231.313782][ T4278] Bluetooth: hci2: ISO packet for unknown connection handle 1
[ 1231.324827][T23623] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1231.333556][T23623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1231.360256][T23623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1231.372072][T23707] netlink: 14 bytes leftover after parsing attributes in process `syz.5.5884'.
[ 1231.506081][T23623] device hsr_slave_0 entered promiscuous mode
[ 1231.530528][T23623] device hsr_slave_1 entered promiscuous mode
[ 1231.584395][T23623] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1231.606811][T23623] Cannot create hsr debugfs directory
[ 1231.827477][T23725] netlink: 'syz.5.5889': attribute type 3 has an invalid length.
[ 1231.865280][T23719] can: request_module (can-proto-0) failed.
[ 1231.929310][T23725] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.5889'.
[ 1232.926063][ T4278] Bluetooth: hci5: command 0x041b tx timeout
[ 1233.018877][T23757] netlink: 14 bytes leftover after parsing attributes in process `syz.5.5899'.
[ 1233.348075][T23769] FAULT_INJECTION: forcing a failure.
[ 1233.348075][T23769] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1233.450934][T23769] CPU: 1 PID: 23769 Comm: syz.5.5904 Not tainted syzkaller #0
[ 1233.458494][T23769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 1233.468574][T23769] Call Trace:
[ 1233.471878][T23769]  <TASK>
[ 1233.474823][T23769]  dump_stack_lvl+0x188/0x24e
[ 1233.479531][T23769]  ? show_regs_print_info+0x12/0x12
[ 1233.484763][T23769]  ? load_image+0x410/0x410
[ 1233.489312][T23769]  ? __lock_acquire+0x7c40/0x7c40
[ 1233.494374][T23769]  should_fail_ex+0x390/0x4c0
[ 1233.499086][T23769]  _copy_from_iter+0x1c0/0x1130
[ 1233.504059][T23769]  ? copyout_mc+0x110/0x110
[ 1233.508588][T23769]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 1233.514586][T23769]  ? __lock_acquire+0x7c40/0x7c40
[ 1233.519624][T23769]  ? lock_chain_count+0x20/0x20
[ 1233.524483][T23769]  ? _raw_spin_lock_irq+0xb7/0xf0
[ 1233.529534][T23769]  ? _raw_spin_lock_irqsave+0x100/0x100
[ 1233.535084][T23769]  ? page_copy_sane+0x4e/0x390
[ 1233.539855][T23769]  copy_page_from_iter+0x77/0x100
[ 1233.544886][T23769]  pipe_write+0x859/0x1ae0
[ 1233.549325][T23769]  ? pipe_read+0x12d0/0x12d0
[ 1233.553916][T23769]  ? end_current_label_crit_section+0x14b/0x170
[ 1233.560171][T23769]  ? common_file_perm+0x171/0x1c0
[ 1233.565211][T23769]  vfs_write+0x482/0x9a0
[ 1233.569468][T23769]  ? file_end_write+0x250/0x250
[ 1233.574324][T23769]  ? __fget_files+0x3fc/0x460
[ 1233.579018][T23769]  ? __fdget_pos+0x1d4/0x360
[ 1233.583610][T23769]  ? ksys_write+0x70/0x260
[ 1233.588028][T23769]  ksys_write+0x14d/0x260
[ 1233.592362][T23769]  ? __ia32_sys_read+0x80/0x80
[ 1233.597138][T23769]  ? lockdep_hardirqs_on+0x94/0x140
[ 1233.602334][T23769]  do_syscall_64+0x4c/0xa0
[ 1233.606754][T23769]  ? clear_bhb_loop+0x60/0xb0
[ 1233.611431][T23769]  ? clear_bhb_loop+0x60/0xb0
[ 1233.616109][T23769]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1233.622002][T23769] RIP: 0033:0x7fd1fe59de99
[ 1233.626411][T23769] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1233.646040][T23769] RSP: 002b:00007fd1ff3f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1233.654456][T23769] RAX: ffffffffffffffda RBX: 00007fd1fe825fa0 RCX: 00007fd1fe59de99
[ 1233.662426][T23769] RDX: 000000000000fdef RSI: 0000200000000580 RDI: 0000000000000000
[ 1233.670393][T23769] RBP: 00007fd1ff3f5090 R08: 0000000000000000 R09: 0000000000000000
[ 1233.678444][T23769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1233.686413][T23769] R13: 00007fd1fe826038 R14: 00007fd1fe825fa0 R15: 00007fffd3074b68
[ 1233.694391][T23769]  </TASK>
[ 1233.986078][T23782] netlink: 'syz.6.5906': attribute type 3 has an invalid length.
[ 1234.031298][T23778] can: request_module (can-proto-0) failed.
[ 1234.073396][T23782] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.5906'.
[ 1234.995395][ T4278] Bluetooth: hci5: command 0x040f tx timeout
[ 1235.289611][T23623] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1235.438527][T23623] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1235.464461][T23623] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1235.627971][T23623] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1235.936427][T23818] netlink: 14 bytes leftover after parsing attributes in process `syz.5.5916'.
[ 1236.412184][T23623] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1236.754811][T21273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1236.776294][T21273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1236.827419][T23623] 8021q: adding VLAN 0 to HW filter on device team0
[ 1236.888165][T21262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1236.910663][T21262] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1236.954396][T21262] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1236.961610][T21262] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1237.046545][T21262] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1237.065649][T21262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1237.075646][ T4278] Bluetooth: hci5: command 0x0419 tx timeout
[ 1237.081784][T21262] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1237.110644][T21262] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1237.117853][T21262] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1237.171197][T21262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1237.210612][T21266] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1237.225274][T21266] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1237.251600][T21266] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1237.270452][T21266] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1237.317346][T21266] device veth0_to_bond left promiscuous mode
[ 1237.341260][T21266] bridge0: port 4(veth0_to_bond) entered disabled state
[ 1237.382943][T21266] bridge0: port 3(team0) entered disabled state
[ 1237.515772][T21266] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1237.588561][T21266] device bridge_slave_0 left promiscuous mode
[ 1237.616523][T21266] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1237.758999][T21266] device veth1_macvtap left promiscuous mode
[ 1237.765607][T21266] device veth0_macvtap left promiscuous mode
[ 1237.772731][T21266] device veth1_vlan left promiscuous mode
[ 1237.778914][T21266] device veth0_vlan left promiscuous mode
[ 1238.049042][T23866] netlink: 184 bytes leftover after parsing attributes in process `syz.5.5930'.
[ 1238.678754][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[ 1238.685108][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[ 1238.789938][T21266] device team_slave_1 left promiscuous mode
[ 1238.811324][T21266] team0 (unregistering): Port device team_slave_1 removed
[ 1238.916543][T21266] device team_slave_0 left promiscuous mode
[ 1238.926579][T21266] team0 (unregistering): Port device team_slave_0 removed
[ 1239.429539][T21273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1239.440932][T21273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1239.451828][T21273] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1239.464855][T21273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1239.474371][T21273] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1239.490320][T21273] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1239.511084][T23862] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5928'.
[ 1239.531071][T23862] device hsr_slave_0 left promiscuous mode
[ 1239.541377][T23862] device hsr_slave_1 left promiscuous mode
[ 1239.725629][ T6972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1239.734242][ T6972] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1239.796854][ T6972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1239.825653][ T6972] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1239.879061][T23623] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1240.209129][T23880] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1240.255214][T23880] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1240.262495][T23880] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1240.898820][T23905] netlink: 'syz.1.5941': attribute type 3 has an invalid length.
[ 1240.965370][T23902] can: request_module (can-proto-0) failed.
[ 1240.975489][T23905] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.5941'.
[ 1241.026659][T23910] netlink: 14 bytes leftover after parsing attributes in process `syz.5.5945'.
[ 1241.068594][T21273] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1241.089169][T21273] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1241.136003][T23623] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1241.232306][T21271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1241.304898][T21271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1241.369895][T21262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1241.392138][T21262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1241.425126][T21262] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1241.436076][T21262] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1241.488860][T23623] device veth0_vlan entered promiscuous mode
[ 1241.540750][T23623] device veth1_vlan entered promiscuous mode
[ 1241.651960][T21273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1241.667224][T21273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1241.681835][T23623] device veth0_macvtap entered promiscuous mode
[ 1241.706304][T23623] device veth1_macvtap entered promiscuous mode
[ 1241.729406][T23623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1241.740864][T23623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1241.750982][T23623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1241.761866][T23623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1241.772121][T23623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1241.793470][T23623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1241.833991][T23623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1241.855009][T23623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1241.876059][T23623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1241.891231][T23623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1241.901537][T23623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1241.912284][T23623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1241.951381][T23623] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1241.990624][T21262] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1242.006906][T21262] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1242.018305][T23935] netlink: 'syz.1.5961': attribute type 3 has an invalid length.
[ 1242.027870][T23935] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.5961'.
[ 1242.046340][T21262] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1242.064867][T21262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1242.085078][T23623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1242.106244][T23623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1242.123277][T23932] can: request_module (can-proto-0) failed.
[ 1242.126441][T23623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1242.142673][T23623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1242.154092][T23623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1242.175977][T23623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1242.211666][T23623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1242.261476][T23623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1242.311473][T23623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1242.323318][T23623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1242.333725][T23623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1242.344497][T23623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1242.358851][T23623] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1242.375687][T21273] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1242.405145][T21273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1242.438366][T23623] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1242.457514][T23623] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1242.479600][T23623] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1242.509620][T23623] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1242.848168][T23953] netlink: 14 bytes leftover after parsing attributes in process `syz.6.5958'.
[ 1242.870672][T21269] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1242.887976][T21269] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1242.921537][T21271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1243.060529][T21282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1243.093286][T21282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1243.128514][T23959] netlink: 'syz.1.5960': attribute type 16 has an invalid length.
[ 1243.195358][T23959] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5960'.
[ 1243.237078][T21269] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1244.037304][T23969] FAULT_INJECTION: forcing a failure.
[ 1244.037304][T23969] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1244.083495][T23969] CPU: 0 PID: 23969 Comm: syz.1.5966 Not tainted syzkaller #0
[ 1244.091131][T23969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 1244.101241][T23969] Call Trace:
[ 1244.104604][T23969]  <TASK>
[ 1244.107568][T23969]  dump_stack_lvl+0x188/0x24e
[ 1244.112301][T23969]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1244.118510][T23969]  ? show_regs_print_info+0x12/0x12
[ 1244.123756][T23969]  ? load_image+0x410/0x410
[ 1244.128356][T23969]  should_fail_ex+0x390/0x4c0
[ 1244.133094][T23969]  _copy_from_iter+0x1c0/0x1130
[ 1244.138023][T23969]  ? copyout_mc+0x110/0x110
[ 1244.142608][T23969]  ? __virt_addr_valid+0x188/0x540
[ 1244.147854][T23969]  ? __virt_addr_valid+0x188/0x540
[ 1244.153007][T23969]  ? __virt_addr_valid+0x467/0x540
[ 1244.158174][T23969]  ? __phys_addr_symbol+0x2b/0x70
[ 1244.163241][T23969]  ? __check_object_size+0x4f6/0xa70
[ 1244.168679][T23969]  kernfs_fop_write_iter+0x19a/0x520
[ 1244.174025][T23969]  vfs_write+0x482/0x9a0
[ 1244.178344][T23969]  ? file_end_write+0x250/0x250
[ 1244.183256][T23969]  ? __fget_files+0x3fc/0x460
[ 1244.188013][T23969]  ? __fdget_pos+0x2ae/0x360
[ 1244.192646][T23969]  ? ksys_write+0x70/0x260
[ 1244.197121][T23969]  ksys_write+0x14d/0x260
[ 1244.201509][T23969]  ? __ia32_sys_read+0x80/0x80
[ 1244.206333][T23969]  ? lockdep_hardirqs_on+0x94/0x140
[ 1244.211585][T23969]  do_syscall_64+0x4c/0xa0
[ 1244.216040][T23969]  ? clear_bhb_loop+0x60/0xb0
[ 1244.220753][T23969]  ? clear_bhb_loop+0x60/0xb0
[ 1244.225484][T23969]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1244.231421][T23969] RIP: 0033:0x7f861df9de99
[ 1244.235885][T23969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1244.255625][T23969] RSP: 002b:00007f861edc0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1244.264087][T23969] RAX: ffffffffffffffda RBX: 00007f861e225fa0 RCX: 00007f861df9de99
[ 1244.272096][T23969] RDX: 000000000000000b RSI: 0000200000000200 RDI: 0000000000000008
[ 1244.280108][T23969] RBP: 00007f861edc0090 R08: 0000000000000000 R09: 0000000000000000
[ 1244.288116][T23969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1244.296127][T23969] R13: 00007f861e226038 R14: 00007f861e225fa0 R15: 00007ffd9a31dd88
[ 1244.304197][T23969]  </TASK>
[ 1244.954557][T23980] netlink: 'syz.1.5970': attribute type 2 has an invalid length.
[ 1245.031445][T23980] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.5970'.
[ 1245.280615][T23991] netlink: 14 bytes leftover after parsing attributes in process `syz.5.5973'.
[ 1245.916292][ T4287] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1245.929400][ T4287] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1245.938064][ T4287] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1245.950458][ T4287] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1245.958777][ T4287] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1245.966994][ T4287] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1246.053359][T24013] netlink: 'syz.6.5980': attribute type 27 has an invalid length.
[ 1246.062356][T24013] netlink: 164 bytes leftover after parsing attributes in process `syz.6.5980'.
[ 1246.381465][T24008] chnl_net:caif_netlink_parms(): no params data found
[ 1246.490978][T24023] netlink: 'syz.5.5984': attribute type 10 has an invalid length.
[ 1246.557473][T24023] team0: Port device geneve1 added
[ 1246.609923][T24025] netlink: 14 bytes leftover after parsing attributes in process `syz.6.5985'.
[ 1246.699516][T24008] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1246.727523][T24008] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1246.765010][T24008] device bridge_slave_0 entered promiscuous mode
[ 1246.797464][T24008] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1246.843584][T24008] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1246.872387][T24008] device bridge_slave_1 entered promiscuous mode
[ 1246.893205][T24037] netlink: 'syz.5.5988': attribute type 10 has an invalid length.
[ 1246.976889][T24008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1247.058610][T24008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1247.107548][T24044] netlink: 'syz.6.5990': attribute type 2 has an invalid length.
[ 1247.164290][T24044] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.5990'.
[ 1247.228267][T24046] FAULT_INJECTION: forcing a failure.
[ 1247.228267][T24046] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1247.266718][T24008] team0: Port device team_slave_0 added
[ 1247.287342][T24046] CPU: 1 PID: 24046 Comm: syz.5.5991 Not tainted syzkaller #0
[ 1247.292774][T24008] team0: Port device team_slave_1 added
[ 1247.294833][T24046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 1247.294847][T24046] Call Trace:
[ 1247.294854][T24046]  <TASK>
[ 1247.294862][T24046]  dump_stack_lvl+0x188/0x24e
[ 1247.294893][T24046]  ? show_regs_print_info+0x12/0x12
[ 1247.294916][T24046]  ? load_image+0x410/0x410
[ 1247.294936][T24046]  ? __lock_acquire+0x7c40/0x7c40
[ 1247.294966][T24046]  should_fail_ex+0x390/0x4c0
[ 1247.294994][T24046]  _copy_from_user+0x2c/0x170
[ 1247.295016][T24046]  __sys_bpf+0x2ea/0x780
[ 1247.295041][T24046]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1247.295078][T24046]  ? lock_chain_count+0x20/0x20
[ 1247.295108][T24046]  __x64_sys_bpf+0x78/0x90
[ 1247.364545][T24046]  do_syscall_64+0x4c/0xa0
[ 1247.368971][T24046]  ? clear_bhb_loop+0x60/0xb0
[ 1247.373651][T24046]  ? clear_bhb_loop+0x60/0xb0
[ 1247.378330][T24046]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1247.384225][T24046] RIP: 0033:0x7fd1fe59de99
[ 1247.388639][T24046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1247.408329][T24046] RSP: 002b:00007fd1ff3f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1247.416742][T24046] RAX: ffffffffffffffda RBX: 00007fd1fe825fa0 RCX: 00007fd1fe59de99
[ 1247.424720][T24046] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a
[ 1247.432687][T24046] RBP: 00007fd1ff3f5090 R08: 0000000000000000 R09: 0000000000000000
[ 1247.440652][T24046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1247.448619][T24046] R13: 00007fd1fe826038 R14: 00007fd1fe825fa0 R15: 00007fffd3074b68
[ 1247.456602][T24046]  </TASK>
[ 1247.483193][T24008] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1247.518832][T24008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1247.606165][T24008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1247.707605][T21266] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1247.768167][T24008] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1247.789898][T24008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1247.875115][T24060] netlink: 134056 bytes leftover after parsing attributes in process `syz.6.5997'.
[ 1247.894975][T24008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1247.982323][T24058] netlink: 'syz.6.5997': attribute type 39 has an invalid length.
[ 1248.035647][ T4287] Bluetooth: hci0: command 0x0409 tx timeout
[ 1248.233384][T21266] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1248.335455][T24063] netlink: 14 bytes leftover after parsing attributes in process `syz.5.5998'.
[ 1248.416202][T21266] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1248.524094][T24008] device hsr_slave_0 entered promiscuous mode
[ 1248.531834][T24008] device hsr_slave_1 entered promiscuous mode
[ 1248.636916][T21266] device netdevsim0 left promiscuous mode
[ 1248.669113][T21266] team0: Port device netdevsim0 removed
[ 1248.710745][T21266] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1249.391900][T24087] netlink: 'syz.6.6007': attribute type 2 has an invalid length.
[ 1249.435337][T24087] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.6007'.
[ 1250.115855][ T4287] Bluetooth: hci0: command 0x041b tx timeout
[ 1250.134519][T24107] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6013'.
[ 1250.235317][T24107] device hsr_slave_0 left promiscuous mode
[ 1250.325473][T24107] device hsr_slave_1 left promiscuous mode
[ 1250.753351][T24119] netlink: 'syz.1.6017': attribute type 27 has an invalid length.
[ 1250.786120][T24119] netlink: 164 bytes leftover after parsing attributes in process `syz.1.6017'.
[ 1250.824880][T24123] netlink: 'syz.5.6019': attribute type 19 has an invalid length.
[ 1250.885679][T24123] netlink: 172 bytes leftover after parsing attributes in process `syz.5.6019'.
[ 1252.203154][ T4287] Bluetooth: hci0: command 0x040f tx timeout
[ 1252.938102][T24158] netlink: 'syz.6.6028': attribute type 3 has an invalid length.
[ 1252.998060][T24158] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.6028'.
[ 1253.027422][T24155] can: request_module (can-proto-0) failed.
[ 1253.164982][T24008] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1253.229093][T24008] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1253.305066][T24008] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1253.332622][T24008] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1253.486352][T24174] netlink: 'syz.5.6032': attribute type 27 has an invalid length.
[ 1253.573801][T24174] netlink: 164 bytes leftover after parsing attributes in process `syz.5.6032'.
[ 1253.801299][T24008] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1253.930555][T24008] 8021q: adding VLAN 0 to HW filter on device team0
[ 1253.941910][T24183] netlink: 'syz.3.6030': attribute type 3 has an invalid length.
[ 1253.971739][T21271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1253.986069][T21271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1254.055746][T24180] can: request_module (can-proto-0) failed.
[ 1254.118825][T21271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1254.156413][T21271] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1254.162066][T24183] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.6030'.
[ 1254.195610][T21271] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1254.202800][T21271] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1254.265694][T21271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1254.276172][ T4287] Bluetooth: hci0: command 0x0419 tx timeout
[ 1254.297960][T21271] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1254.314774][T21271] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1254.321986][T21271] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1254.338890][T21271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1254.364443][T21271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1254.562423][T21271] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1254.577705][T21271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1254.612006][T21271] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1254.710305][T21271] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1254.736184][T21271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1254.783678][T21271] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1254.816201][T21271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1254.840751][T21271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1254.873881][T21275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1254.921037][T21275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1255.141301][T24008] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1255.259231][T21266] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1255.282134][T21266] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1255.312045][T21266] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1255.361190][T21266] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1255.392917][T21266] batman_adv: batadv0: Interface deactivated: vlan1
[ 1255.421008][T21266] batman_adv: batadv0: Removing interface: vlan1
[ 1255.496271][T21266] device veth1_macvtap left promiscuous mode
[ 1255.508944][T21266] device veth0_macvtap left promiscuous mode
[ 1255.535039][T21266] device veth1_vlan left promiscuous mode
[ 1255.541293][T21266] device veth0_vlan left promiscuous mode
[ 1256.129390][T24231] can: request_module (can-proto-0) failed.
[ 1256.163082][T24233] netlink: 'syz.1.6043': attribute type 3 has an invalid length.
[ 1256.186074][T24233] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.6043'.
[ 1256.518008][T21266] device team_slave_1 left promiscuous mode
[ 1256.530290][T21266] team0 (unregistering): Port device team_slave_1 removed
[ 1256.576418][T21266] device team_slave_0 left promiscuous mode
[ 1256.586055][T21266] team0 (unregistering): Port device team_slave_0 removed
[ 1257.214739][T21262] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1257.222341][T21262] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1257.245664][T24008] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1257.263778][T21262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1257.273178][T21262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1257.332179][T21262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1257.341737][T21262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1257.350812][T21262] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1257.360185][T21262] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1257.404070][T24008] device veth0_vlan entered promiscuous mode
[ 1257.425758][T24008] device veth1_vlan entered promiscuous mode
[ 1257.453177][T24008] device veth0_macvtap entered promiscuous mode
[ 1257.473564][T21262] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1257.481891][T21262] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1257.490447][T21262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1257.499448][T21262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1257.509216][T21262] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1257.522696][T24008] device veth1_macvtap entered promiscuous mode
[ 1257.545874][T24008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1257.556639][T24008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1257.567059][T24008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1257.577652][T24008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1257.587788][T24008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1257.599299][T24008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1257.609511][T24008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1257.620207][T24008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1257.630070][T24008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1257.641663][T24008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1257.651543][T24008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1257.662053][T24008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1257.673114][T24008] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1257.682594][T21273] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1257.694243][T21273] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1257.708052][T21273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1257.744814][T24008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1257.762465][T24008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1257.773031][T24008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1257.791842][T24008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1257.806041][T24008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1257.842127][T24008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1257.859848][T24008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1257.872773][T24008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1257.892042][T24008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1257.905042][T24008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1257.921420][T24008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1257.934302][T24008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1257.952088][T24008] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1257.961512][T21273] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1257.979355][T21273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1258.008032][T24008] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1258.038779][T24008] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1258.055325][T24008] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1258.064055][T24008] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1258.243366][T21262] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1258.302094][T21262] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1258.319668][T21271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1258.393903][T21273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1258.410233][T21273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1258.498274][T21273] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1258.698900][T24260] FAULT_INJECTION: forcing a failure.
[ 1258.698900][T24260] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1258.767184][T24260] CPU: 1 PID: 24260 Comm: syz.0.5969 Not tainted syzkaller #0
[ 1258.774791][T24260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 1258.784845][T24260] Call Trace:
[ 1258.788121][T24260]  <TASK>
[ 1258.791047][T24260]  dump_stack_lvl+0x188/0x24e
[ 1258.795733][T24260]  ? show_regs_print_info+0x12/0x12
[ 1258.800933][T24260]  ? load_image+0x410/0x410
[ 1258.805440][T24260]  ? __lock_acquire+0x7c40/0x7c40
[ 1258.810472][T24260]  should_fail_ex+0x390/0x4c0
[ 1258.815164][T24260]  prepare_alloc_pages+0x1e1/0x5b0
[ 1258.820284][T24260]  __alloc_pages+0x130/0x4f0
[ 1258.824875][T24260]  ? zone_statistics+0x170/0x170
[ 1258.829814][T24260]  ? _raw_spin_lock_irqsave+0x100/0x100
[ 1258.835374][T24260]  ? copy_page_from_iter+0xe4/0x100
[ 1258.840573][T24260]  pipe_write+0x616/0x1ae0
[ 1258.845006][T24260]  ? pipe_read+0x12d0/0x12d0
[ 1258.849600][T24260]  ? end_current_label_crit_section+0x14b/0x170
[ 1258.855844][T24260]  ? common_file_perm+0x171/0x1c0
[ 1258.860874][T24260]  vfs_write+0x482/0x9a0
[ 1258.865143][T24260]  ? file_end_write+0x250/0x250
[ 1258.870023][T24260]  ? __fget_files+0x3fc/0x460
[ 1258.874721][T24260]  ? __fdget_pos+0x1d4/0x360
[ 1258.879318][T24260]  ? ksys_write+0x70/0x260
[ 1258.883742][T24260]  ksys_write+0x14d/0x260
[ 1258.888077][T24260]  ? __ia32_sys_read+0x80/0x80
[ 1258.892847][T24260]  ? lockdep_hardirqs_on+0x94/0x140
[ 1258.898045][T24260]  do_syscall_64+0x4c/0xa0
[ 1258.902459][T24260]  ? clear_bhb_loop+0x60/0xb0
[ 1258.907146][T24260]  ? clear_bhb_loop+0x60/0xb0
[ 1258.911821][T24260]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1258.917709][T24260] RIP: 0033:0x7f171fb9de99
[ 1258.922118][T24260] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1258.941718][T24260] RSP: 002b:00007f1720b53028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1258.950132][T24260] RAX: ffffffffffffffda RBX: 00007f171fe25fa0 RCX: 00007f171fb9de99
[ 1258.958188][T24260] RDX: 000000000000fdef RSI: 0000200000000580 RDI: 0000000000000000
[ 1258.966191][T24260] RBP: 00007f1720b53090 R08: 0000000000000000 R09: 0000000000000000
[ 1258.974156][T24260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1258.982119][T24260] R13: 00007f171fe26038 R14: 00007f171fe25fa0 R15: 00007ffd7dd7bef8
[ 1258.990098][T24260]  </TASK>
[ 1259.585477][T24277] can: request_module (can-proto-0) failed.
[ 1259.662570][T24286] netlink: 'syz.0.6060': attribute type 11 has an invalid length.
[ 1259.687428][T24286] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.6060'.
[ 1259.717442][T24277] netlink: 'syz.1.6054': attribute type 3 has an invalid length.
[ 1259.745523][T24277] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.6054'.
[ 1259.760092][T24284] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1260.056300][T24294] can: request_module (can-proto-0) failed.
[ 1260.079075][T24296] netlink: 'syz.5.6062': attribute type 3 has an invalid length.
[ 1260.126538][T24296] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.6062'.
[ 1260.278607][T24303] netlink: 'syz.0.6065': attribute type 39 has an invalid length.
[ 1260.419852][T24310] sock: sock_timestamping_bind_phc: sock not bind to device
[ 1261.137274][T24310] netlink: 156 bytes leftover after parsing attributes in process `syz.6.6068'.
[ 1261.229837][T24315] FAULT_INJECTION: forcing a failure.
[ 1261.229837][T24315] name failslab, interval 1, probability 0, space 0, times 0
[ 1261.256412][T24315] CPU: 1 PID: 24315 Comm: syz.3.6070 Not tainted syzkaller #0
[ 1261.263947][T24315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 1261.274024][T24315] Call Trace:
[ 1261.277319][T24315]  <TASK>
[ 1261.280260][T24315]  dump_stack_lvl+0x188/0x24e
[ 1261.284980][T24315]  ? show_regs_print_info+0x12/0x12
[ 1261.290203][T24315]  ? load_image+0x410/0x410
[ 1261.294736][T24315]  ? __might_sleep+0xd0/0xd0
[ 1261.299351][T24315]  ? __lock_acquire+0x7c40/0x7c40
[ 1261.304423][T24315]  should_fail_ex+0x390/0x4c0
[ 1261.309101][T24315]  should_failslab+0x5/0x20
[ 1261.313599][T24315]  slab_pre_alloc_hook+0x59/0x300
[ 1261.318632][T24315]  ? kvmalloc_node+0x6c/0x180
[ 1261.323343][T24315]  __kmem_cache_alloc_node+0x4f/0x270
[ 1261.328736][T24315]  ? kvmalloc_node+0x6c/0x180
[ 1261.333421][T24315]  __kmalloc_node+0xa2/0x240
[ 1261.338020][T24315]  kvmalloc_node+0x6c/0x180
[ 1261.342524][T24315]  page_pool_create+0x1e7/0x5c0
[ 1261.347376][T24315]  bpf_test_run_xdp_live+0x220/0x1a90
[ 1261.352744][T24315]  ? 0xffffffffa00041c0
[ 1261.356909][T24315]  ? text_poke_copy+0x7b/0x90
[ 1261.361594][T24315]  ? 0xffffffffa00041c0
[ 1261.365755][T24315]  ? bpf_dispatcher_change_prog+0xc90/0xf10
[ 1261.371657][T24315]  ? xdp_convert_md_to_buff+0x330/0x330
[ 1261.377310][T24315]  ? trace_raw_output_bpf_test_finish+0xd0/0xd0
[ 1261.383552][T24315]  ? bpf_test_init+0x119/0x140
[ 1261.388318][T24315]  ? xdp_convert_md_to_buff+0x5b/0x330
[ 1261.393783][T24315]  bpf_prog_test_run_xdp+0x757/0xf80
[ 1261.399156][T24315]  ? __lock_acquire+0x7c40/0x7c40
[ 1261.404186][T24315]  ? dev_put+0x80/0x80
[ 1261.408261][T24315]  ? dev_put+0x80/0x80
[ 1261.412325][T24315]  bpf_prog_test_run+0x31c/0x390
[ 1261.417267][T24315]  __sys_bpf+0x62b/0x780
[ 1261.421511][T24315]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1261.426903][T24315]  ? lock_chain_count+0x20/0x20
[ 1261.431758][T24315]  __x64_sys_bpf+0x78/0x90
[ 1261.436177][T24315]  do_syscall_64+0x4c/0xa0
[ 1261.440602][T24315]  ? clear_bhb_loop+0x60/0xb0
[ 1261.445276][T24315]  ? clear_bhb_loop+0x60/0xb0
[ 1261.449960][T24315]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1261.455853][T24315] RIP: 0033:0x7fb825d9de99
[ 1261.460266][T24315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1261.479868][T24315] RSP: 002b:00007fb826cea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1261.488277][T24315] RAX: ffffffffffffffda RBX: 00007fb826025fa0 RCX: 00007fb825d9de99
[ 1261.496245][T24315] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[ 1261.504213][T24315] RBP: 00007fb826cea090 R08: 0000000000000000 R09: 0000000000000000
[ 1261.512214][T24315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1261.520193][T24315] R13: 00007fb826026038 R14: 00007fb826025fa0 R15: 00007fff150bccb8
[ 1261.528172][T24315]  </TASK>
[ 1261.538822][T24315] page_pool_create() gave up with errno -12
[ 1261.620889][T24321] netlink: 176 bytes leftover after parsing attributes in process `syz.6.6073'.
[ 1261.639650][T24322] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6072'.
[ 1261.665970][T24322] device hsr_slave_0 left promiscuous mode
[ 1261.691800][T24322] device hsr_slave_1 left promiscuous mode
[ 1262.279910][T24338] can: request_module (can-proto-0) failed.
[ 1262.383727][T24338] netlink: 'syz.0.6078': attribute type 3 has an invalid length.
[ 1262.414075][T24338] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.6078'.
[ 1265.818421][T24344] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.6080'.
[ 1266.014053][T24349] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6081'.
[ 1266.096404][T24354] netlink: 'syz.1.6083': attribute type 39 has an invalid length.
[ 1266.301148][T24359] netlink: 176 bytes leftover after parsing attributes in process `syz.6.6085'.
[ 1266.558676][T24366] FAULT_INJECTION: forcing a failure.
[ 1266.558676][T24366] name failslab, interval 1, probability 0, space 0, times 0
[ 1266.591963][T24366] CPU: 1 PID: 24366 Comm: syz.1.6088 Not tainted syzkaller #0
[ 1266.599477][T24366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 1266.609554][T24366] Call Trace:
[ 1266.612853][T24366]  <TASK>
[ 1266.615802][T24366]  dump_stack_lvl+0x188/0x24e
[ 1266.620519][T24366]  ? show_regs_print_info+0x12/0x12
[ 1266.625753][T24366]  ? load_image+0x410/0x410
[ 1266.630289][T24366]  ? perf_trace_preemptirq_template+0xa8/0x320
[ 1266.636482][T24366]  should_fail_ex+0x390/0x4c0
[ 1266.641189][T24366]  should_failslab+0x5/0x20
[ 1266.645712][T24366]  slab_pre_alloc_hook+0x59/0x300
[ 1266.650767][T24366]  ? lock_chain_count+0x20/0x20
[ 1266.655649][T24366]  kmem_cache_alloc+0x56/0x2f0
[ 1266.660435][T24366]  ? skb_clone+0x1e7/0x370
[ 1266.664880][T24366]  skb_clone+0x1e7/0x370
[ 1266.669154][T24366]  bpf_clone_redirect+0x169/0x4a0
[ 1266.674212][T24366]  bpf_prog_07257a6b71309cad+0x56/0x5b
[ 1266.679696][T24366]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 1266.685707][T24366]  ? __lock_acquire+0x7c40/0x7c40
[ 1266.690758][T24366]  ? lock_chain_count+0x20/0x20
[ 1266.695646][T24366]  ? seqcount_lockdep_reader_access+0x127/0x1d0
[ 1266.701875][T24366]  ? lockdep_hardirqs_on+0x94/0x140
[ 1266.707062][T24366]  ? ktime_get+0x7b/0x270
[ 1266.711384][T24366]  ? seqcount_lockdep_reader_access+0x18d/0x1d0
[ 1266.717614][T24366]  ? ktime_get_real_ts64+0x440/0x440
[ 1266.722890][T24366]  ? read_lock_is_recursive+0x10/0x10
[ 1266.728254][T24366]  ? __cant_sleep+0x220/0x220
[ 1266.732918][T24366]  ? ktime_get+0x247/0x270
[ 1266.737329][T24366]  bpf_test_run+0x2b6/0x830
[ 1266.741852][T24366]  ? dst_hold+0xb0/0xb0
[ 1266.746014][T24366]  ? eth_get_headlen+0x200/0x200
[ 1266.750962][T24366]  ? __build_skb+0x24b/0x3b0
[ 1266.755584][T24366]  bpf_prog_test_run_skb+0xdaf/0x18e0
[ 1266.760971][T24366]  ? cpu_online+0xa0/0xa0
[ 1266.765296][T24366]  bpf_prog_test_run+0x31c/0x390
[ 1266.770236][T24366]  __sys_bpf+0x62b/0x780
[ 1266.774479][T24366]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1266.779876][T24366]  ? lock_chain_count+0x20/0x20
[ 1266.784723][T24366]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 1266.790706][T24366]  __x64_sys_bpf+0x78/0x90
[ 1266.795128][T24366]  do_syscall_64+0x4c/0xa0
[ 1266.799546][T24366]  ? clear_bhb_loop+0x60/0xb0
[ 1266.804338][T24366]  ? clear_bhb_loop+0x60/0xb0
[ 1266.809025][T24366]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1266.814922][T24366] RIP: 0033:0x7f861df9de99
[ 1266.819332][T24366] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1266.839107][T24366] RSP: 002b:00007f861edc0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1266.847553][T24366] RAX: ffffffffffffffda RBX: 00007f861e225fa0 RCX: 00007f861df9de99
[ 1266.855520][T24366] RDX: 0000000000000048 RSI: 0000200000000040 RDI: 000000000000000a
[ 1266.863485][T24366] RBP: 00007f861edc0090 R08: 0000000000000000 R09: 0000000000000000
[ 1266.871449][T24366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1266.879412][T24366] R13: 00007f861e226038 R14: 00007f861e225fa0 R15: 00007ffd9a31dd88
[ 1266.887389][T24366]  </TASK>
[ 1266.963222][T24371] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6089'.
[ 1267.134150][T24377] FAULT_INJECTION: forcing a failure.
[ 1267.134150][T24377] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1267.175269][T24377] CPU: 1 PID: 24377 Comm: syz.5.6092 Not tainted syzkaller #0
[ 1267.182887][T24377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 1267.193071][T24377] Call Trace:
[ 1267.196375][T24377]  <TASK>
[ 1267.199333][T24377]  dump_stack_lvl+0x188/0x24e
[ 1267.204143][T24377]  ? show_regs_print_info+0x12/0x12
[ 1267.209386][T24377]  ? load_image+0x410/0x410
[ 1267.213936][T24377]  ? __lock_acquire+0x7c40/0x7c40
[ 1267.219612][T24377]  ? snprintf+0xe5/0x140
[ 1267.223896][T24377]  should_fail_ex+0x390/0x4c0
[ 1267.228620][T24377]  _copy_to_user+0x2c/0x130
[ 1267.233163][T24377]  simple_read_from_buffer+0xe3/0x150
[ 1267.238584][T24377]  proc_fail_nth_read+0x1a6/0x220
[ 1267.243646][T24377]  ? proc_fault_inject_write+0x310/0x310
[ 1267.249322][T24377]  ? fsnotify_perm+0x248/0x550
[ 1267.254121][T24377]  ? proc_fault_inject_write+0x310/0x310
[ 1267.259812][T24377]  vfs_read+0x2db/0x960
[ 1267.264029][T24377]  ? kernel_read+0x1e0/0x1e0
[ 1267.268755][T24377]  ? __fget_files+0x28/0x460
[ 1267.273395][T24377]  ? __fget_files+0x3fc/0x460
[ 1267.278129][T24377]  ? __fdget_pos+0x2ae/0x360
[ 1267.282724][T24377]  ? ksys_read+0x70/0x260
[ 1267.287081][T24377]  ksys_read+0x14d/0x260
[ 1267.291448][T24377]  ? vfs_write+0x9a0/0x9a0
[ 1267.295980][T24377]  ? lockdep_hardirqs_on+0x94/0x140
[ 1267.301280][T24377]  do_syscall_64+0x4c/0xa0
[ 1267.305703][T24377]  ? clear_bhb_loop+0x60/0xb0
[ 1267.310385][T24377]  ? clear_bhb_loop+0x60/0xb0
[ 1267.315069][T24377]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1267.320968][T24377] RIP: 0033:0x7fd1fe55e6ce
[ 1267.325387][T24377] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1267.345005][T24377] RSP: 002b:00007fd1ff3f4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1267.353432][T24377] RAX: ffffffffffffffda RBX: 00007fd1ff3f56c0 RCX: 00007fd1fe55e6ce
[ 1267.361403][T24377] RDX: 000000000000000f RSI: 00007fd1ff3f50a0 RDI: 0000000000000005
[ 1267.369374][T24377] RBP: 00007fd1ff3f5090 R08: 0000000000000000 R09: 0000000000000000
[ 1267.377345][T24377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1267.385317][T24377] R13: 00007fd1fe826038 R14: 00007fd1fe825fa0 R15: 00007fffd3074b68
[ 1267.393314][T24377]  </TASK>
[ 1267.489649][T24381] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.6093'.
[ 1268.109573][T24392] FAULT_INJECTION: forcing a failure.
[ 1268.109573][T24392] name failslab, interval 1, probability 0, space 0, times 0
[ 1268.142988][T24392] CPU: 1 PID: 24392 Comm: syz.5.6096 Not tainted syzkaller #0
[ 1268.150513][T24392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 1268.160673][T24392] Call Trace:
[ 1268.163969][T24392]  <TASK>
[ 1268.166916][T24392]  dump_stack_lvl+0x188/0x24e
[ 1268.171633][T24392]  ? show_regs_print_info+0x12/0x12
[ 1268.176851][T24392]  ? load_image+0x410/0x410
[ 1268.181411][T24392]  ? __might_sleep+0xd0/0xd0
[ 1268.186013][T24392]  ? __lock_acquire+0x7c40/0x7c40
[ 1268.191081][T24392]  ? trace_event_raw_event_lock+0x230/0x230
[ 1268.196998][T24392]  should_fail_ex+0x390/0x4c0
[ 1268.201699][T24392]  should_failslab+0x5/0x20
[ 1268.206218][T24392]  slab_pre_alloc_hook+0x59/0x300
[ 1268.211259][T24392]  ? sk_prot_alloc+0xe7/0x210
[ 1268.215955][T24392]  __kmem_cache_alloc_node+0x4f/0x270
[ 1268.221357][T24392]  ? sk_prot_alloc+0xe7/0x210
[ 1268.226046][T24392]  __kmalloc+0xa3/0x240
[ 1268.230225][T24392]  sk_prot_alloc+0xe7/0x210
[ 1268.234742][T24392]  ? sk_alloc+0x20/0x330
[ 1268.239014][T24392]  sk_alloc+0x36/0x330
[ 1268.243115][T24392]  ? bpf_ctx_init+0x154/0x190
[ 1268.247908][T24392]  bpf_prog_test_run_skb+0x36d/0x18e0
[ 1268.253326][T24392]  ? __fget_files+0x28/0x460
[ 1268.257974][T24392]  ? __fget_files+0x3fc/0x460
[ 1268.262683][T24392]  ? cpu_online+0xa0/0xa0
[ 1268.267034][T24392]  bpf_prog_test_run+0x31c/0x390
[ 1268.272012][T24392]  __sys_bpf+0x62b/0x780
[ 1268.276291][T24392]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1268.281712][T24392]  ? lock_chain_count+0x20/0x20
[ 1268.286592][T24392]  __x64_sys_bpf+0x78/0x90
[ 1268.291035][T24392]  do_syscall_64+0x4c/0xa0
[ 1268.295478][T24392]  ? clear_bhb_loop+0x60/0xb0
[ 1268.300171][T24392]  ? clear_bhb_loop+0x60/0xb0
[ 1268.304867][T24392]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1268.310776][T24392] RIP: 0033:0x7fd1fe59de99
[ 1268.315210][T24392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1268.334835][T24392] RSP: 002b:00007fd1ff3f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1268.343299][T24392] RAX: ffffffffffffffda RBX: 00007fd1fe825fa0 RCX: 00007fd1fe59de99
[ 1268.351289][T24392] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a
[ 1268.359306][T24392] RBP: 00007fd1ff3f5090 R08: 0000000000000000 R09: 0000000000000000
[ 1268.367294][T24392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1268.375280][T24392] R13: 00007fd1fe826038 R14: 00007fd1fe825fa0 R15: 00007fffd3074b68
[ 1268.383298][T24392]  </TASK>
[ 1270.204938][T24383] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.6095'.
[ 1270.249561][T24390] netlink: 176 bytes leftover after parsing attributes in process `syz.6.6097'.
[ 1270.280276][T24398] netlink: 152 bytes leftover after parsing attributes in process `syz.5.6099'.
[ 1270.740987][T24410] netlink: 'syz.6.6100': attribute type 3 has an invalid length.
[ 1270.875484][T24410] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.6100'.
[ 1270.899199][T24408] can: request_module (can-proto-0) failed.
[ 1271.443436][T24429] netlink: 176 bytes leftover after parsing attributes in process `syz.5.6111'.
[ 1271.478409][T24427] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6110'.
[ 1271.523364][T24431] netlink: 1047 bytes leftover after parsing attributes in process `syz.6.6112'.
[ 1271.753834][T24437] netlink: 'syz.5.6113': attribute type 1 has an invalid length.
[ 1271.794668][T24437] netlink: 'syz.5.6113': attribute type 1 has an invalid length.
[ 1271.828386][T24442] bridge0: port 3(batadv0) entered blocking state
[ 1271.834916][T24442] bridge0: port 3(batadv0) entered disabled state
[ 1271.853205][T24437] netlink: 116376 bytes leftover after parsing attributes in process `syz.5.6113'.
[ 1271.866727][T24442] device batadv0 entered promiscuous mode
[ 1271.874490][T24442] bridge0: port 3(batadv0) entered blocking state
[ 1271.881111][T24442] bridge0: port 3(batadv0) entered forwarding state
[ 1271.910575][T24441] netlink: 140 bytes leftover after parsing attributes in process `syz.5.6113'.
[ 1272.113780][T21262] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[ 1272.123415][T21262] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[ 1273.187293][T24461] netlink: 176 bytes leftover after parsing attributes in process `syz.6.6123'.
[ 1273.503679][T24465] netlink: 'syz.3.6122': attribute type 3 has an invalid length.
[ 1273.515515][T24462] can: request_module (can-proto-0) failed.
[ 1273.543665][T24465] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.6122'.
[ 1273.614743][T24468] netlink: 14 bytes leftover after parsing attributes in process `syz.6.6125'.
[ 1273.769715][ T4278] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1273.795139][ T4278] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1273.804462][ T4278] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1273.814452][ T4278] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1273.823982][ T4278] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 1273.831867][ T4278] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1274.126372][T21266] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1274.318555][T21266] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1274.610728][T24488] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.6130'.
[ 1274.762355][T21266] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1274.987589][T21266] team0: Port device netdevsim0 removed
[ 1275.020930][T21266] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1275.071810][T24499] netlink: 'syz.3.6133': attribute type 2 has an invalid length.
[ 1275.080217][T24499] netlink: 'syz.3.6133': attribute type 8 has an invalid length.
[ 1275.100872][T24473] chnl_net:caif_netlink_parms(): no params data found
[ 1275.428763][T24473] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1275.467569][T24473] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1275.518267][T24473] device bridge_slave_0 entered promiscuous mode
[ 1275.533795][T24473] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1275.549907][T24473] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1275.578200][T24473] device bridge_slave_1 entered promiscuous mode
[ 1275.673484][T24473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1275.706490][T24473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1275.809570][T24473] team0: Port device team_slave_0 added
[ 1275.833826][T24473] team0: Port device team_slave_1 added
[ 1275.875995][ T4278] Bluetooth: hci1: command 0x0409 tx timeout
[ 1275.900619][T24473] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1275.908418][T24473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1276.000552][T24530] can: request_module (can-proto-0) failed.
[ 1276.021724][T24473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1276.051609][T24530] netlink: 'syz.0.6142': attribute type 3 has an invalid length.
[ 1276.092017][T24473] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1276.100208][T24473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1276.115500][T24530] __nla_validate_parse: 3 callbacks suppressed
[ 1276.115518][T24530] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.6142'.
[ 1276.129964][T24473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1276.326869][T24473] device hsr_slave_0 entered promiscuous mode
[ 1276.422584][T24473] device hsr_slave_1 entered promiscuous mode
[ 1276.644386][T24547] device veth1_macvtap left promiscuous mode
[ 1276.768880][T24547] device veth1_macvtap entered promiscuous mode
[ 1276.778085][T24547] device macsec0 entered promiscuous mode
[ 1277.305376][T24564] netlink: 'syz.3.6153': attribute type 29 has an invalid length.
[ 1277.955630][ T4278] Bluetooth: hci1: command 0x041b tx timeout
[ 1280.035747][ T4278] Bluetooth: hci1: command 0x040f tx timeout
[ 1280.161321][T24562] netlink: 'syz.3.6153': attribute type 7 has an invalid length.
[ 1280.175756][T24564] netlink: 'syz.3.6153': attribute type 29 has an invalid length.
[ 1280.611788][T24590] FAULT_INJECTION: forcing a failure.
[ 1280.611788][T24590] name failslab, interval 1, probability 0, space 0, times 0
[ 1280.656660][T24590] CPU: 1 PID: 24590 Comm: syz.1.6159 Not tainted syzkaller #0
[ 1280.664185][T24590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 1280.674257][T24590] Call Trace:
[ 1280.677571][T24590]  <TASK>
[ 1280.680503][T24590]  dump_stack_lvl+0x188/0x24e
[ 1280.685193][T24590]  ? show_regs_print_info+0x12/0x12
[ 1280.690415][T24590]  ? load_image+0x410/0x410
[ 1280.694916][T24590]  ? __might_sleep+0xd0/0xd0
[ 1280.699501][T24590]  ? __lock_acquire+0x7c40/0x7c40
[ 1280.704536][T24590]  ? __lock_acquire+0x1465/0x7c40
[ 1280.709563][T24590]  should_fail_ex+0x390/0x4c0
[ 1280.714247][T24590]  should_failslab+0x5/0x20
[ 1280.718774][T24590]  slab_pre_alloc_hook+0x59/0x300
[ 1280.723811][T24590]  ? rxrpc_alloc_peer+0x78/0x340
[ 1280.728854][T24590]  __kmem_cache_alloc_node+0x4f/0x270
[ 1280.734225][T24590]  ? rxrpc_alloc_peer+0x78/0x340
[ 1280.739159][T24590]  kmalloc_trace+0x26/0xe0
[ 1280.743576][T24590]  rxrpc_alloc_peer+0x78/0x340
[ 1280.748337][T24590]  rxrpc_lookup_peer+0x3f8/0x800
[ 1280.753279][T24590]  rxrpc_connect_call+0x122/0x1500
[ 1280.758403][T24590]  ? lockdep_hardirqs_on+0x94/0x140
[ 1280.763599][T24590]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1280.769790][T24590]  ? rxrpc_new_client_call+0x864/0xe10
[ 1280.775253][T24590]  ? rxrpc_put_bundle+0xb0/0xb0
[ 1280.780104][T24590]  ? __local_bh_enable_ip+0x13e/0x1c0
[ 1280.785474][T24590]  ? _local_bh_enable+0xa0/0xa0
[ 1280.790334][T24590]  rxrpc_new_client_call+0x87e/0xe10
[ 1280.795623][T24590]  ? rxrpc_do_sendmsg+0xbd7/0x10e0
[ 1280.800737][T24590]  rxrpc_do_sendmsg+0xbd7/0x10e0
[ 1280.805671][T24590]  ? lock_chain_count+0x20/0x20
[ 1280.810525][T24590]  ? rxrpc_look_up_server_security+0x530/0x530
[ 1280.816676][T24590]  ? __local_bh_enable_ip+0x136/0x1c0
[ 1280.822139][T24590]  ? rxrpc_sendmsg+0x45b/0x890
[ 1280.826917][T24590]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1280.832203][T24590]  ? rxrpc_getsockopt+0x150/0x150
[ 1280.837228][T24590]  ____sys_sendmsg+0x5ed/0x9a0
[ 1280.841993][T24590]  ? __lock_acquire+0x7c40/0x7c40
[ 1280.847021][T24590]  ? __sys_sendmsg_sock+0x30/0x30
[ 1280.852043][T24590]  ? __import_iovec+0x306/0x510
[ 1280.856899][T24590]  ? import_iovec+0x6f/0xa0
[ 1280.861407][T24590]  ___sys_sendmsg+0x2a2/0x360
[ 1280.866091][T24590]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1280.870872][T24590]  ? __lock_acquire+0x7c40/0x7c40
[ 1280.875914][T24590]  __se_sys_sendmsg+0x1c3/0x2b0
[ 1280.880772][T24590]  ? __x64_sys_sendmsg+0x80/0x80
[ 1280.885721][T24590]  ? syscall_enter_from_user_mode+0x2a/0x80
[ 1280.891615][T24590]  do_syscall_64+0x4c/0xa0
[ 1280.896032][T24590]  ? clear_bhb_loop+0x60/0xb0
[ 1280.900708][T24590]  ? clear_bhb_loop+0x60/0xb0
[ 1280.905386][T24590]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1280.911282][T24590] RIP: 0033:0x7f861df9de99
[ 1280.915693][T24590] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1280.935295][T24590] RSP: 002b:00007f861edc0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1280.943792][T24590] RAX: ffffffffffffffda RBX: 00007f861e225fa0 RCX: 00007f861df9de99
[ 1280.951962][T24590] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000009
[ 1280.960111][T24590] RBP: 00007f861edc0090 R08: 0000000000000000 R09: 0000000000000000
[ 1280.968076][T24590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1280.976048][T24590] R13: 00007f861e226038 R14: 00007f861e225fa0 R15: 00007ffd9a31dd88
[ 1280.984026][T24590]  </TASK>
[ 1281.571509][T24473] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1281.640593][T24610] netlink: 'syz.3.6161': attribute type 3 has an invalid length.
[ 1281.669586][T24473] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1281.717200][T24608] can: request_module (can-proto-0) failed.
[ 1281.727514][T24610] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.6161'.
[ 1281.798950][T24473] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1281.818820][T24616] netlink: 'syz.0.6164': attribute type 39 has an invalid length.
[ 1281.845717][T24620] netlink: 'syz.1.6165': attribute type 21 has an invalid length.
[ 1281.865716][T24473] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1282.115913][ T4278] Bluetooth: hci1: command 0x0419 tx timeout
[ 1282.362504][T24473] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1282.448169][T24473] 8021q: adding VLAN 0 to HW filter on device team0
[ 1282.463861][ T6972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1282.496715][ T6972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1282.705156][T24640] netlink: 'syz.1.6170': attribute type 3 has an invalid length.
[ 1282.796817][T24638] can: request_module (can-proto-0) failed.
[ 1282.802948][T21282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1282.826161][T21282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1282.840434][T24640] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.6170'.
[ 1282.865969][T21282] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1282.873118][T21282] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1282.904458][T21282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1282.937800][T24650] netlink: 'syz.3.6174': attribute type 1 has an invalid length.
[ 1282.940568][T21282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1282.956607][T21282] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1282.963764][T21282] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1282.974369][T21282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1282.975785][T24650] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.6174'.
[ 1282.983740][T21282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1283.034017][T21282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1283.136987][T24650] netlink: 'syz.3.6174': attribute type 1 has an invalid length.
[ 1283.145985][T21282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1283.182486][T21282] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1283.191280][T24650] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.6174'.
[ 1283.226024][T21282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1283.249940][T21282] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1283.280667][T21282] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1283.330179][T20008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1283.352246][T20008] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1283.396453][T24650] netlink: 'syz.3.6174': attribute type 1 has an invalid length.
[ 1283.400171][T24473] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1283.441398][T24650] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.6174'.
[ 1283.454159][T24473] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1283.480898][T24659] netlink: 'syz.6.6178': attribute type 39 has an invalid length.
[ 1283.495477][T21262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1283.510568][T21262] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1283.606931][T24650] netlink: 'syz.3.6174': attribute type 1 has an invalid length.
[ 1283.615973][T24650] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.6174'.
[ 1283.854084][T21266] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1283.901853][T21266] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1283.956501][T21266] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1283.964008][T21266] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1284.026111][T21266] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1284.035021][T21266] device bridge_slave_0 left promiscuous mode
[ 1284.053371][T21266] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1284.162723][T21266] device veth1_macvtap left promiscuous mode
[ 1284.183931][T21266] device veth0_macvtap left promiscuous mode
[ 1284.190341][T21266] device veth0_vlan left promiscuous mode
[ 1284.298507][T24678] netlink: 'syz.3.6182': attribute type 3 has an invalid length.
[ 1284.323506][T24674] can: request_module (can-proto-0) failed.
[ 1284.386580][T24678] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.6182'.
[ 1284.729095][T21266] team0 (unregistering): Port device geneve1 removed
[ 1286.467687][T21266] team0 (unregistering): Port device team_slave_1 removed
[ 1286.517310][T21266] team0 (unregistering): Port device team_slave_0 removed
[ 1287.040193][T24705] netlink: 'syz.6.6190': attribute type 39 has an invalid length.
[ 1287.524505][T20008] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1287.534153][T20008] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1287.593427][T24473] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1288.108085][T21282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1288.128287][T21282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1288.204870][T20008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1288.221019][T20008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1288.284167][T24473] device veth0_vlan entered promiscuous mode
[ 1288.298065][T20008] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1288.327052][T20008] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1288.364982][T24473] device veth1_vlan entered promiscuous mode
[ 1288.528423][T24746] netlink: 'syz.0.6204': attribute type 3 has an invalid length.
[ 1288.580792][T24742] can: request_module (can-proto-0) failed.
[ 1288.655514][T20008] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1288.663830][T20008] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1288.665885][T24746] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.6204'.
[ 1288.726275][T20008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1288.754347][T20008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1288.785891][T24473] device veth0_macvtap entered promiscuous mode
[ 1288.919461][T24473] device veth1_macvtap entered promiscuous mode
[ 1288.968737][T24760] netlink: 'syz.1.6201': attribute type 39 has an invalid length.
[ 1289.018345][T24473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1289.049682][T24473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1289.064808][T24473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1289.086404][T24473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1289.117293][T24473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1289.151601][T24473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1289.204202][T24473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1289.233107][T24473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1289.252999][T24473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1289.264092][T24473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1289.283604][T24473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1289.309139][T24473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1289.338557][T24473] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1290.992872][T21282] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1291.044731][T21282] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1291.063243][T21282] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1291.097022][T21282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1291.128551][T24473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1291.158173][T24473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1291.201299][T24473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1291.257704][T24473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1291.298456][T24473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1291.315111][T24473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1291.326587][T24473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1291.342417][T24473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1291.353190][T24473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1291.373321][T24473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1291.384861][T24473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1291.407162][T24473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1291.431985][T24473] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1291.460390][T21282] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1291.475001][T21282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1291.508504][T24473] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1291.522793][T24473] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1291.532637][T24473] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1291.559022][T24473] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1291.884321][ T6972] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1291.931242][T24790] can: request_module (can-proto-0) failed.
[ 1291.938264][ T6972] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1291.959883][T24792] netlink: 'syz.6.6208': attribute type 3 has an invalid length.
[ 1291.994808][ T6972] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1292.036420][T20008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1292.044630][T20008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1292.075546][T24792] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.6208'.
[ 1292.100849][T21275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1292.680721][T24815] netlink: 'syz.6.6214': attribute type 39 has an invalid length.
[ 1292.952532][T24823] netlink: 'syz.3.6216': attribute type 3 has an invalid length.
[ 1292.994333][T24821] can: request_module (can-proto-0) failed.
[ 1293.062439][T24823] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.6216'.
[ 1293.703768][T24851] netlink: 'syz.1.6232': attribute type 39 has an invalid length.
[ 1293.848152][T24857] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6233'.
[ 1293.883297][T24859] netlink: 156 bytes leftover after parsing attributes in process `syz.6.6234'.
[ 1295.484656][T24891] netlink: 'syz.5.6243': attribute type 3 has an invalid length.
[ 1295.546009][T24891] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.6243'.
[ 1295.620596][T24896] netlink: 'syz.6.6247': attribute type 12 has an invalid length.
[ 1295.640181][T24896] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6247'.
[ 1295.665435][T24898] netlink: 'syz.3.6246': attribute type 39 has an invalid length.
[ 1295.675699][T24887] can: request_module (can-proto-0) failed.
[ 1295.792158][T24899] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6247'.
[ 1296.103186][T24908] netlink: 'syz.1.6251': attribute type 10 has an invalid length.
[ 1296.131760][T24908] team0: Device vxcan1 is of different type
[ 1296.244091][T24913] FAULT_INJECTION: forcing a failure.
[ 1296.244091][T24913] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1296.270614][T24913] CPU: 1 PID: 24913 Comm: syz.5.6253 Not tainted syzkaller #0
[ 1296.278143][T24913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 1296.288227][T24913] Call Trace:
[ 1296.291519][T24913]  <TASK>
[ 1296.294459][T24913]  dump_stack_lvl+0x188/0x24e
[ 1296.299139][T24913]  ? show_regs_print_info+0x12/0x12
[ 1296.304333][T24913]  ? load_image+0x410/0x410
[ 1296.308833][T24913]  ? __lock_acquire+0x7c40/0x7c40
[ 1296.313857][T24913]  ? snprintf+0xe5/0x140
[ 1296.318094][T24913]  should_fail_ex+0x390/0x4c0
[ 1296.322792][T24913]  _copy_to_user+0x2c/0x130
[ 1296.327308][T24913]  simple_read_from_buffer+0xe3/0x150
[ 1296.332707][T24913]  proc_fail_nth_read+0x1a6/0x220
[ 1296.337751][T24913]  ? proc_fault_inject_write+0x310/0x310
[ 1296.343432][T24913]  ? fsnotify_perm+0x248/0x550
[ 1296.348213][T24913]  ? proc_fault_inject_write+0x310/0x310
[ 1296.353842][T24913]  vfs_read+0x2db/0x960
[ 1296.358005][T24913]  ? kernel_read+0x1e0/0x1e0
[ 1296.362597][T24913]  ? __fget_files+0x28/0x460
[ 1296.367187][T24913]  ? __fget_files+0x3fc/0x460
[ 1296.371871][T24913]  ? __fdget_pos+0x2ae/0x360
[ 1296.376464][T24913]  ? ksys_read+0x70/0x260
[ 1296.380800][T24913]  ksys_read+0x14d/0x260
[ 1296.385045][T24913]  ? vfs_write+0x9a0/0x9a0
[ 1296.389461][T24913]  ? lockdep_hardirqs_on+0x94/0x140
[ 1296.394655][T24913]  do_syscall_64+0x4c/0xa0
[ 1296.399068][T24913]  ? clear_bhb_loop+0x60/0xb0
[ 1296.403767][T24913]  ? clear_bhb_loop+0x60/0xb0
[ 1296.408442][T24913]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1296.414333][T24913] RIP: 0033:0x7f305a75e6ce
[ 1296.418749][T24913] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1296.438356][T24913] RSP: 002b:00007f30589f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1296.446766][T24913] RAX: ffffffffffffffda RBX: 00007f30589f66c0 RCX: 00007f305a75e6ce
[ 1296.454742][T24913] RDX: 000000000000000f RSI: 00007f30589f60a0 RDI: 0000000000000004
[ 1296.462706][T24913] RBP: 00007f30589f6090 R08: 0000000000000000 R09: 0000000000000000
[ 1296.470762][T24913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1296.478728][T24913] R13: 00007f305aa26038 R14: 00007f305aa25fa0 R15: 00007fff14226f58
[ 1296.486711][T24913]  </TASK>
[ 1296.855385][T24923] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6258'.
[ 1296.900838][T24927] netlink: 'syz.1.6260': attribute type 12 has an invalid length.
[ 1296.926448][T24927] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6260'.
[ 1296.992448][T24927] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6260'.
[ 1297.135647][T24933] tipc: Started in network mode
[ 1297.156113][T24933] tipc: Node identity 9215a268, cluster identity 4711
[ 1297.186353][T24933] tipc: Node number set to 2450891368
[ 1297.363130][T24942] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6266'.
[ 1297.583773][T24945] netlink: 'syz.3.6263': attribute type 3 has an invalid length.
[ 1297.674632][T24943] can: request_module (can-proto-0) failed.
[ 1297.745459][T24945] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.6263'.
[ 1298.962817][T24979] netlink: 'syz.6.6275': attribute type 12 has an invalid length.
[ 1299.002620][T24979] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6275'.
[ 1299.060562][T24980] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6275'.
[ 1299.913479][T25006] netlink: 'syz.0.6285': attribute type 3 has an invalid length.
[ 1299.949069][T25002] can: request_module (can-proto-0) failed.
[ 1299.992671][T25006] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.6285'.
[ 1300.118840][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[ 1300.125240][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[ 1300.510137][T25022] netlink: 'syz.3.6292': attribute type 12 has an invalid length.
[ 1300.579985][T25022] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6292'.
[ 1300.680401][T25023] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6292'.
[ 1301.706312][T25036] netlink: 14 bytes leftover after parsing attributes in process `syz.6.6297'.
[ 1301.986920][T25044] netlink: 'syz.6.6301': attribute type 39 has an invalid length.
[ 1302.092496][T25050] netlink: 'syz.0.6303': attribute type 4 has an invalid length.
[ 1302.130510][T25050] netlink: 168 bytes leftover after parsing attributes in process `syz.0.6303'.
[ 1302.465917][T25059] netlink: 'syz.6.6306': attribute type 12 has an invalid length.
[ 1302.500932][T25059] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6306'.
[ 1302.541244][T25060] netlink: 'syz.3.6305': attribute type 3 has an invalid length.
[ 1302.551522][T25060] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.6305'.
[ 1302.662726][T25056] can: request_module (can-proto-0) failed.
[ 1302.763784][T25061] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6306'.
[ 1302.823714][T25066] netlink: 'syz.5.6308': attribute type 1 has an invalid length.
[ 1302.851544][T25065] netlink: 'syz.5.6308': attribute type 46 has an invalid length.
[ 1303.217552][T25075] device bond_slave_1 entered promiscuous mode
[ 1303.855972][T25093] netlink: 'syz.0.6317': attribute type 39 has an invalid length.
[ 1304.261719][T25098] netlink: 'syz.0.6319': attribute type 1 has an invalid length.
[ 1304.285556][T25098] __nla_validate_parse: 4 callbacks suppressed
[ 1304.285573][T25098] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.6319'.
[ 1304.297358][T25102] netlink: 'syz.6.6320': attribute type 12 has an invalid length.
[ 1304.390379][T25102] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6320'.
[ 1304.406565][T25104] netlink: 'syz.0.6319': attribute type 3 has an invalid length.
[ 1304.456463][T25101] netlink: 'syz.1.6321': attribute type 10 has an invalid length.
[ 1304.505673][T25104] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.6319'.
[ 1304.909138][T25101] bond0: (slave dummy0): Enslaving as an active interface with an up link
[ 1304.921028][T25105] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6320'.
[ 1305.285786][T25117] netlink: 14 bytes leftover after parsing attributes in process `syz.6.6324'.
[ 1305.459042][T25115] can: request_module (can-proto-0) failed.
[ 1305.544388][T25115] netlink: 'syz.5.6323': attribute type 3 has an invalid length.
[ 1305.583662][T25115] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.6323'.
[ 1306.501163][T25149] netlink: 'syz.3.6334': attribute type 12 has an invalid length.
[ 1306.531015][T25150] netlink: 'syz.1.6336': attribute type 1 has an invalid length.
[ 1306.577717][T25150] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.6336'.
[ 1306.587644][T25149] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6334'.
[ 1306.608710][T25153] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6334'.
[ 1306.666557][T25154] netlink: 'syz.1.6336': attribute type 3 has an invalid length.
[ 1306.758158][T25154] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.6336'.
[ 1306.850202][T25156] FAULT_INJECTION: forcing a failure.
[ 1306.850202][T25156] name failslab, interval 1, probability 0, space 0, times 0
[ 1306.890133][T25156] CPU: 0 PID: 25156 Comm: syz.0.6337 Not tainted syzkaller #0
[ 1306.897691][T25156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 1306.907747][T25156] Call Trace:
[ 1306.911026][T25156]  <TASK>
[ 1306.913955][T25156]  dump_stack_lvl+0x188/0x24e
[ 1306.918641][T25156]  ? sctp_sendmsg+0x1686/0x2940
[ 1306.923500][T25156]  ? ___sys_sendmsg+0x2a2/0x360
[ 1306.928642][T25156]  ? show_regs_print_info+0x12/0x12
[ 1306.933866][T25156]  ? load_image+0x410/0x410
[ 1306.938404][T25156]  should_fail_ex+0x390/0x4c0
[ 1306.943099][T25156]  should_failslab+0x5/0x20
[ 1306.947612][T25156]  slab_pre_alloc_hook+0x59/0x300
[ 1306.952641][T25156]  ? sctp_add_bind_addr+0x89/0x350
[ 1306.957759][T25156]  __kmem_cache_alloc_node+0x4f/0x270
[ 1306.963140][T25156]  ? sctp_add_bind_addr+0x89/0x350
[ 1306.968346][T25156]  kmalloc_trace+0x26/0xe0
[ 1306.972771][T25156]  sctp_add_bind_addr+0x89/0x350
[ 1306.977722][T25156]  sctp_copy_local_addr_list+0x317/0x4d0
[ 1306.983365][T25156]  ? sctp_copy_local_addr_list+0xa0/0x4d0
[ 1306.989089][T25156]  ? sctp_do_8_2_transport_strike+0x900/0x900
[ 1306.995166][T25156]  ? sctp_v4_is_any+0x31/0x50
[ 1306.999940][T25156]  ? sctp_copy_one_addr+0x93/0x660
[ 1307.005058][T25156]  sctp_bind_addr_copy+0xaf/0x3c0
[ 1307.010087][T25156]  ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190
[ 1307.016421][T25156]  sctp_connect_new_asoc+0x2f5/0x6a0
[ 1307.021714][T25156]  ? __sctp_connect+0xd80/0xd80
[ 1307.026565][T25156]  ? __local_bh_enable_ip+0x136/0x1c0
[ 1307.031936][T25156]  ? _local_bh_enable+0xa0/0xa0
[ 1307.036783][T25156]  ? sctp_endpoint_lookup_assoc+0x77/0x260
[ 1307.042591][T25156]  ? sctp_endpoint_lookup_assoc+0x77/0x260
[ 1307.048400][T25156]  ? bpf_lsm_sctp_bind_connect+0x5/0x10
[ 1307.053963][T25156]  ? security_sctp_bind_connect+0x85/0xb0
[ 1307.059714][T25156]  sctp_sendmsg+0x1686/0x2940
[ 1307.064421][T25156]  ? sctp_getsockopt+0x8a0/0x8a0
[ 1307.069370][T25156]  ? __might_fault+0xa6/0x120
[ 1307.074051][T25156]  ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0
[ 1307.080469][T25156]  ? aa_sock_msg_perm+0x94/0x150
[ 1307.085416][T25156]  ? inet_sendmsg+0x7a/0x2a0
[ 1307.090001][T25156]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1307.095284][T25156]  ? inet_send_prepare+0x250/0x250
[ 1307.100395][T25156]  ____sys_sendmsg+0x5ed/0x9a0
[ 1307.105202][T25156]  ? __sys_sendmsg_sock+0x30/0x30
[ 1307.110239][T25156]  ? __import_iovec+0x306/0x510
[ 1307.115100][T25156]  ? import_iovec+0x6f/0xa0
[ 1307.119612][T25156]  ___sys_sendmsg+0x2a2/0x360
[ 1307.124300][T25156]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1307.129094][T25156]  ? trace_call_bpf+0xbf/0x6b0
[ 1307.133971][T25156]  __se_sys_sendmsg+0x1c3/0x2b0
[ 1307.138826][T25156]  ? ct_nmi_exit+0x145/0x1c0
[ 1307.143419][T25156]  ? __x64_sys_sendmsg+0x80/0x80
[ 1307.148374][T25156]  ? lockdep_hardirqs_on+0x94/0x140
[ 1307.153573][T25156]  do_syscall_64+0x4c/0xa0
[ 1307.157997][T25156]  ? clear_bhb_loop+0x60/0xb0
[ 1307.162679][T25156]  ? clear_bhb_loop+0x60/0xb0
[ 1307.167361][T25156]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1307.173256][T25156] RIP: 0033:0x7f171fb9de99
[ 1307.177695][T25156] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1307.197315][T25156] RSP: 002b:00007f1720b53028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1307.205737][T25156] RAX: ffffffffffffffda RBX: 00007f171fe25fa0 RCX: 00007f171fb9de99
[ 1307.213745][T25156] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000005
[ 1307.221735][T25156] RBP: 00007f1720b53090 R08: 0000000000000000 R09: 0000000000000000
[ 1307.229705][T25156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1307.237676][T25156] R13: 00007f171fe26038 R14: 00007f171fe25fa0 R15: 00007ffd7dd7bef8
[ 1307.245688][T25156]  </TASK>
[ 1308.363219][T25182] netlink: 'syz.6.6348': attribute type 12 has an invalid length.
[ 1308.557950][T25187] sctp: [Deprecated]: syz.1.6349 (pid 25187) Use of int in max_burst socket option deprecated.
[ 1308.557950][T25187] Use struct sctp_assoc_value instead
[ 1308.634143][T25186] netlink: 'syz.5.6350': attribute type 1 has an invalid length.
[ 1309.204626][T25202] device hsr_slave_0 left promiscuous mode
[ 1309.216045][T25202] device hsr_slave_1 left promiscuous mode
[ 1309.298859][T25205] __nla_validate_parse: 7 callbacks suppressed
[ 1309.298878][T25205] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.6356'.
[ 1309.438329][T25207] validate_nla: 2 callbacks suppressed
[ 1309.438347][T25207] netlink: 'syz.1.6357': attribute type 1 has an invalid length.
[ 1310.575440][T25218] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.6359'.
[ 1310.598025][T25224] netlink: 'syz.3.6361': attribute type 39 has an invalid length.
[ 1310.618896][T25225] netlink: 'syz.6.6362': attribute type 12 has an invalid length.
[ 1310.636734][T25225] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6362'.
[ 1310.675270][T25226] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6362'.
[ 1310.914406][T25230] netlink: 'syz.1.6364': attribute type 3 has an invalid length.
[ 1310.956527][T25230] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6364'.
[ 1311.130638][T25238] netlink: 'syz.3.6365': attribute type 10 has an invalid length.
[ 1311.488989][T25244] netlink: 14 bytes leftover after parsing attributes in process `syz.6.6368'.
[ 1312.102067][T25266] netlink: 'syz.3.6375': attribute type 39 has an invalid length.
[ 1312.196346][T25269] netlink: 'syz.1.6377': attribute type 12 has an invalid length.
[ 1312.237679][T25269] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6377'.
[ 1312.281551][T25270] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6377'.
[ 1312.399757][T25272] netlink: 177648 bytes leftover after parsing attributes in process `syz.0.6378'.
[ 1312.494568][T25272] netlink: 16010 bytes leftover after parsing attributes in process `syz.0.6378'.
[ 1312.990129][T25289] netlink: 'syz.5.6382': attribute type 3 has an invalid length.
[ 1313.045528][T25284] can: request_module (can-proto-0) failed.
[ 1313.081072][T25295] netlink: 'syz.3.6384': attribute type 3 has an invalid length.
[ 1313.112473][T25293] can: request_module (can-proto-0) failed.
[ 1313.454946][T25312] netlink: 'syz.6.6390': attribute type 39 has an invalid length.
[ 1314.068890][T25338] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1314.077654][T25338] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1314.256846][T25338] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1314.264600][T25338] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1314.274977][T25338] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1314.282686][T25338] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1314.418179][T25338] team0: Port device bridge0 added
[ 1314.910854][T25349] __nla_validate_parse: 6 callbacks suppressed
[ 1314.910872][T25349] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.6401'.
[ 1315.015785][T25350] validate_nla: 2 callbacks suppressed
[ 1315.015817][T25350] netlink: 'syz.1.6403': attribute type 39 has an invalid length.
[ 1315.380859][T25377] FAULT_INJECTION: forcing a failure.
[ 1315.380859][T25377] name failslab, interval 1, probability 0, space 0, times 0
[ 1315.466878][T25371] netlink: 'syz.6.6408': attribute type 3 has an invalid length.
[ 1315.506953][T25377] CPU: 1 PID: 25377 Comm: syz.3.6413 Not tainted syzkaller #0
[ 1315.514470][T25377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 1315.524547][T25377] Call Trace:
[ 1315.527878][T25377]  <TASK>
[ 1315.530820][T25377]  dump_stack_lvl+0x188/0x24e
[ 1315.535528][T25377]  ? show_regs_print_info+0x12/0x12
[ 1315.540763][T25377]  ? load_image+0x410/0x410
[ 1315.545282][T25377]  ? perf_trace_preemptirq_template+0xa8/0x320
[ 1315.551550][T25377]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 1315.557558][T25377]  should_fail_ex+0x390/0x4c0
[ 1315.562266][T25377]  should_failslab+0x5/0x20
[ 1315.566785][T25377]  slab_pre_alloc_hook+0x59/0x300
[ 1315.571860][T25377]  kmem_cache_alloc+0x56/0x2f0
[ 1315.576636][T25377]  ? __build_skb+0x27/0x3b0
[ 1315.581162][T25377]  __build_skb+0x27/0x3b0
[ 1315.585507][T25377]  ? build_skb+0x14/0x230
[ 1315.589858][T25377]  build_skb+0x1e/0x230
[ 1315.594037][T25377]  bpf_prog_test_run_skb+0x38d/0x18e0
[ 1315.599430][T25377]  ? lockdep_hardirqs_on+0x94/0x140
[ 1315.604649][T25377]  ? cpu_online+0xa0/0xa0
[ 1315.609004][T25377]  ? bpf_prog_test_run+0x310/0x390
[ 1315.614144][T25377]  ? cpu_online+0xa0/0xa0
[ 1315.618486][T25377]  bpf_prog_test_run+0x31c/0x390
[ 1315.623448][T25377]  __sys_bpf+0x62b/0x780
[ 1315.627719][T25377]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1315.633138][T25377]  ? lock_chain_count+0x20/0x20
[ 1315.638023][T25377]  __x64_sys_bpf+0x78/0x90
[ 1315.642488][T25377]  do_syscall_64+0x4c/0xa0
[ 1315.646923][T25377]  ? clear_bhb_loop+0x60/0xb0
[ 1315.651618][T25377]  ? clear_bhb_loop+0x60/0xb0
[ 1315.656311][T25377]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1315.662225][T25377] RIP: 0033:0x7fb825d9de99
[ 1315.666654][T25377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1315.686273][T25377] RSP: 002b:00007fb826cea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1315.694711][T25377] RAX: ffffffffffffffda RBX: 00007fb826025fa0 RCX: 00007fb825d9de99
[ 1315.702696][T25377] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a
[ 1315.710693][T25377] RBP: 00007fb826cea090 R08: 0000000000000000 R09: 0000000000000000
[ 1315.718681][T25377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1315.726669][T25377] R13: 00007fb826026038 R14: 00007fb826025fa0 R15: 00007fff150bccb8
[ 1315.734682][T25377]  </TASK>
[ 1315.791617][T25371] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.6408'.
[ 1315.860823][T25368] can: request_module (can-proto-0) failed.
[ 1316.084374][T25387] netlink: 177648 bytes leftover after parsing attributes in process `syz.3.6416'.
[ 1316.250195][T25390] netlink: 16010 bytes leftover after parsing attributes in process `syz.3.6416'.
[ 1316.787986][ T6972] tipc: Left network mode
[ 1317.133783][T25401] netlink: 'syz.0.6420': attribute type 10 has an invalid length.
[ 1317.153710][T25401] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1317.163310][T25401] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1317.225366][T25401] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1317.233402][T25401] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1317.243421][T25401] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1317.252345][T25401] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1317.356915][T25401] team0: Port device bridge0 added
[ 1317.384007][T25400] device syzkaller0 entered promiscuous mode
[ 1317.608415][T25408] netlink: 'syz.1.6422': attribute type 39 has an invalid length.
[ 1318.082356][T25413] netlink: 14568 bytes leftover after parsing attributes in process `syz.5.6424'.
[ 1318.190183][T25418] netlink: 15743 bytes leftover after parsing attributes in process `syz.1.6425'.
[ 1318.206536][T25421] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6427'.
[ 1318.225134][T25424] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6427'.
[ 1318.778610][T25445] netlink: 176 bytes leftover after parsing attributes in process `syz.0.6434'.
[ 1318.813860][T25446] netlink: 'syz.5.6435': attribute type 39 has an invalid length.
[ 1319.022286][T25453] netlink: 'syz.6.6437': attribute type 10 has an invalid length.
[ 1319.051032][T25453] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1319.059883][T25453] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1319.067399][T25451] netlink: 'syz.1.6431': attribute type 3 has an invalid length.
[ 1319.112013][T25451] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.6431'.
[ 1319.132010][T25449] can: request_module (can-proto-0) failed.
[ 1319.211541][T25453] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1319.219640][T25453] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1319.228799][T25453] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1319.236503][T25453] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1319.282465][T25453] team0: Port device bridge0 added
[ 1319.357346][T21271] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1319.365531][T25459] netlink: 'syz.5.6439': attribute type 15 has an invalid length.
[ 1319.373478][T25459] netlink: 'syz.5.6439': attribute type 7 has an invalid length.
[ 1319.434933][T25463] netlink: 'syz.5.6439': attribute type 39 has an invalid length.
[ 1319.686271][T25467] device syzkaller0 entered promiscuous mode
[ 1320.199145][T25480] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6442'.
[ 1320.225520][T25471] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6442'.
[ 1320.301841][ T6972] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1320.340022][ T6972] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1320.366075][ T6972] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1320.374991][T25486] FAULT_INJECTION: forcing a failure.
[ 1320.374991][T25486] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1320.403628][T25486] CPU: 0 PID: 25486 Comm: syz.0.6446 Not tainted syzkaller #0
[ 1320.405342][ T6972] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1320.411118][T25486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 1320.411132][T25486] Call Trace:
[ 1320.411140][T25486]  <TASK>
[ 1320.411148][T25486]  dump_stack_lvl+0x188/0x24e
[ 1320.411179][T25486]  ? show_regs_print_info+0x12/0x12
[ 1320.411201][T25486]  ? load_image+0x410/0x410
[ 1320.411223][T25486]  ? __lock_acquire+0x7c40/0x7c40
[ 1320.411254][T25486]  should_fail_ex+0x390/0x4c0
[ 1320.411283][T25486]  _copy_from_user+0x2c/0x170
[ 1320.463550][T25486]  bpf_prog_test_run_skb+0x263/0x18e0
[ 1320.469043][T25486]  ? __fget_files+0x28/0x460
[ 1320.473650][T25486]  ? __fget_files+0x3fc/0x460
[ 1320.478353][T25486]  ? cpu_online+0xa0/0xa0
[ 1320.482699][T25486]  bpf_prog_test_run+0x31c/0x390
[ 1320.487655][T25486]  __sys_bpf+0x62b/0x780
[ 1320.491934][T25486]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1320.497324][T25486]  ? lock_chain_count+0x20/0x20
[ 1320.502181][T25486]  __x64_sys_bpf+0x78/0x90
[ 1320.506598][T25486]  do_syscall_64+0x4c/0xa0
[ 1320.511017][T25486]  ? clear_bhb_loop+0x60/0xb0
[ 1320.515699][T25486]  ? clear_bhb_loop+0x60/0xb0
[ 1320.520382][T25486]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1320.526273][T25486] RIP: 0033:0x7f171fb9de99
[ 1320.530684][T25486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1320.550283][T25486] RSP: 002b:00007f1720b53028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1320.558693][T25486] RAX: ffffffffffffffda RBX: 00007f171fe25fa0 RCX: 00007f171fb9de99
[ 1320.566667][T25486] RDX: 0000000000000050 RSI: 0000200000000780 RDI: 000000000000000a
[ 1320.574633][T25486] RBP: 00007f1720b53090 R08: 0000000000000000 R09: 0000000000000000
[ 1320.582692][T25486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1320.590745][T25486] R13: 00007f171fe26038 R14: 00007f171fe25fa0 R15: 00007ffd7dd7bef8
[ 1320.598753][T25486]  </TASK>
[ 1320.661309][ T6972] device veth1_vlan left promiscuous mode
[ 1320.667996][ T6972] device veth0_vlan left promiscuous mode
[ 1321.096111][T25506] netlink: 'syz.5.6451': attribute type 3 has an invalid length.
[ 1321.143999][T25509] netlink: 'syz.1.6452': attribute type 3 has an invalid length.
[ 1321.169485][T25506] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.6451'.
[ 1321.188908][T25509] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.6452'.
[ 1321.201629][T25503] can: request_module (can-proto-0) failed.
[ 1321.233774][T25505] can: request_module (can-proto-0) failed.
[ 1321.541593][ T6972] team0 (unregistering): Port device team_slave_1 removed
[ 1321.585917][ T6972] team0 (unregistering): Port device team_slave_0 removed
[ 1322.128473][T25518] netlink: 'syz.0.6454': attribute type 10 has an invalid length.
[ 1322.174559][T25518] team0: Port device hsr_slave_0 added
[ 1322.338022][T25522] netlink: 'syz.0.6456': attribute type 39 has an invalid length.
[ 1322.393294][T25520] netlink: 'syz.6.6455': attribute type 11 has an invalid length.
[ 1322.402743][T25520] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.6455'.
[ 1322.449687][T25520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1322.562299][T25524] device syzkaller0 entered promiscuous mode
[ 1323.410765][T25548] netlink: 'syz.1.6464': attribute type 29 has an invalid length.
[ 1323.442025][T25548] netlink: 'syz.1.6464': attribute type 29 has an invalid length.
[ 1323.484005][T25552] netlink: 'syz.1.6464': attribute type 29 has an invalid length.
[ 1323.512741][T25549] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6466'.
[ 1323.798544][T25556] device syzkaller0 entered promiscuous mode
[ 1324.153528][T25566] netlink: 'syz.0.6469': attribute type 11 has an invalid length.
[ 1324.239829][T25566] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.6469'.
[ 1324.365016][T25566] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1325.081215][T25587] can: request_module (can-proto-0) failed.
[ 1325.147796][T25587] netlink: 'syz.0.6475': attribute type 3 has an invalid length.
[ 1325.156854][T25587] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.6475'.
[ 1327.768376][T25595] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6478'.
[ 1328.179475][T25611] netlink: 'syz.3.6482': attribute type 29 has an invalid length.
[ 1328.217081][T25614] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6483'.
[ 1328.249085][T25611] netlink: 'syz.3.6482': attribute type 29 has an invalid length.
[ 1328.260712][   T16] 
[ 1328.263070][   T16] ======================================================
[ 1328.270086][   T16] WARNING: possible circular locking dependency detected
[ 1328.277113][   T16] syzkaller #0 Not tainted
[ 1328.281605][   T16] ------------------------------------------------------
[ 1328.288615][   T16] rcu_preempt/16 is trying to acquire lock:
[ 1328.294494][   T16] ffff8880b8f28218 (krc.lock){..-.}-{2:2}, at: kvfree_call_rcu+0x18b/0x890
[ 1328.303111][   T16] 
[ 1328.303111][   T16] but task is already holding lock:
[ 1328.310463][   T16] ffff8880b8f28458 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270
[ 1328.319330][   T16] 
[ 1328.319330][   T16] which lock already depends on the new lock.
[ 1328.319330][   T16] 
[ 1328.329728][   T16] 
[ 1328.329728][   T16] the existing dependency chain (in reverse order) is:
[ 1328.338756][   T16] 
[ 1328.338756][   T16] -> #1 (&base->lock){-.-.}-{2:2}:
[ 1328.346219][   T16]        _raw_spin_lock_irqsave+0xb0/0x100
[ 1328.352105][   T16]        lock_timer_base+0x123/0x270
[ 1328.357378][   T16]        __mod_timer+0xf9/0xd20
[ 1328.362232][   T16]        queue_delayed_work_on+0x12d/0x1f0
[ 1328.368027][   T16]        kvfree_call_rcu+0x4fb/0x890
[ 1328.373310][   T16]        rtnl_register_internal+0x485/0x590
[ 1328.379546][   T16]        rtnl_register+0x2e/0x70
[ 1328.384479][   T16]        ip_rt_init+0x324/0x3b6
[ 1328.389387][   T16]        ip_init+0xa/0x14
[ 1328.393793][   T16]        inet_init+0x2bd/0x3cf
[ 1328.398547][   T16]        do_one_initcall+0x257/0x800
[ 1328.403927][   T16]        do_initcall_level+0x13d/0x1ed
[ 1328.409446][   T16]        do_initcalls+0x4b/0x8a
[ 1328.414293][   T16]        kernel_init_freeable+0x401/0x5ab
[ 1328.420006][   T16]        kernel_init+0x19/0x1b0
[ 1328.424850][   T16]        ret_from_fork+0x1f/0x30
[ 1328.429783][   T16] 
[ 1328.429783][   T16] -> #0 (krc.lock){..-.}-{2:2}:
[ 1328.436811][   T16]        __lock_acquire+0x2d18/0x7c40
[ 1328.442447][   T16]        lock_acquire+0x1bb/0x4a0
[ 1328.447468][   T16]        _raw_spin_lock+0x2a/0x40
[ 1328.452483][   T16]        kvfree_call_rcu+0x18b/0x890
[ 1328.457774][   T16]        trie_delete_elem+0x4e9/0x620
[ 1328.463140][   T16]        bpf_prog_2c29ac5cdc6b1842+0x3a/0x3e
[ 1328.469121][   T16]        trace_call_bpf+0x39c/0x6b0
[ 1328.474401][   T16]        perf_trace_run_bpf_submit+0x79/0x1c0
[ 1328.480474][   T16]        perf_trace_timer_class+0x264/0x2e0
[ 1328.486445][   T16]        detach_timer+0x2c0/0x350
[ 1328.491480][   T16]        __try_to_del_timer_sync+0x15c/0x1f0
[ 1328.497541][   T16]        __timer_delete_sync+0x21f/0x2e0
[ 1328.503247][   T16]        schedule_timeout+0x18e/0x2d0
[ 1328.508608][   T16]        rcu_gp_fqs_loop+0x303/0x1350
[ 1328.513972][   T16]        rcu_gp_kthread+0x99/0x3b0
[ 1328.519074][   T16]        kthread+0x29d/0x330
[ 1328.523651][   T16]        ret_from_fork+0x1f/0x30
[ 1328.528580][   T16] 
[ 1328.528580][   T16] other info that might help us debug this:
[ 1328.528580][   T16] 
[ 1328.538793][   T16]  Possible unsafe locking scenario:
[ 1328.538793][   T16] 
[ 1328.546262][   T16]        CPU0                    CPU1
[ 1328.551613][   T16]        ----                    ----
[ 1328.556979][   T16]   lock(&base->lock);
[ 1328.561038][   T16]                                lock(krc.lock);
[ 1328.567356][   T16]                                lock(&base->lock);
[ 1328.573940][   T16]   lock(krc.lock);
[ 1328.577739][   T16] 
[ 1328.577739][   T16]  *** DEADLOCK ***
[ 1328.577739][   T16] 
[ 1328.585869][   T16] 2 locks held by rcu_preempt/16:
[ 1328.590912][   T16]  #0: ffff8880b8f28458 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270
[ 1328.600215][   T16]  #1: ffffffff8cb2db60 (rcu_read_lock){....}-{1:2}, at: trace_call_bpf+0xbf/0x6b0
[ 1328.609529][   T16] 
[ 1328.609529][   T16] stack backtrace:
[ 1328.615402][   T16] CPU: 1 PID: 16 Comm: rcu_preempt Not tainted syzkaller #0
[ 1328.622673][   T16] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 1328.632717][   T16] Call Trace:
[ 1328.635988][   T16]  <TASK>
[ 1328.638920][   T16]  dump_stack_lvl+0x188/0x24e
[ 1328.643594][   T16]  ? load_image+0x410/0x410
[ 1328.648089][   T16]  ? show_regs_print_info+0x12/0x12
[ 1328.653459][   T16]  ? print_circular_bug+0x12b/0x1a0
[ 1328.658656][   T16]  check_noncircular+0x296/0x330
[ 1328.663593][   T16]  ? add_chain_block+0x9b0/0x9b0
[ 1328.668524][   T16]  ? lockdep_lock+0xf1/0x1f0
[ 1328.673112][   T16]  ? _find_first_zero_bit+0xd2/0x100
[ 1328.678393][   T16]  __lock_acquire+0x2d18/0x7c40
[ 1328.683236][   T16]  ? do_raw_spin_unlock+0x11d/0x230
[ 1328.688426][   T16]  ? _raw_spin_unlock+0x40/0x40
[ 1328.693270][   T16]  ? __stack_depot_save+0x439/0x480
[ 1328.698459][   T16]  ? verify_lock_unused+0x140/0x140
[ 1328.703649][   T16]  ? kasan_save_stack+0x4c/0x60
[ 1328.708491][   T16]  ? kasan_save_stack+0x3a/0x60
[ 1328.713362][   T16]  ? __kasan_record_aux_stack+0xb2/0xc0
[ 1328.718900][   T16]  ? kvfree_call_rcu+0x103/0x890
[ 1328.723832][   T16]  ? trie_delete_elem+0x4e9/0x620
[ 1328.728854][   T16]  ? bpf_prog_2c29ac5cdc6b1842+0x3a/0x3e
[ 1328.734479][   T16]  ? trace_call_bpf+0x39c/0x6b0
[ 1328.739325][   T16]  ? perf_trace_run_bpf_submit+0x79/0x1c0
[ 1328.745044][   T16]  ? perf_trace_timer_class+0x264/0x2e0
[ 1328.750606][   T16]  ? detach_timer+0x2c0/0x350
[ 1328.755275][   T16]  ? __try_to_del_timer_sync+0x15c/0x1f0
[ 1328.760895][   T16]  ? __timer_delete_sync+0x21f/0x2e0
[ 1328.766184][   T16]  ? schedule_timeout+0x18e/0x2d0
[ 1328.771203][   T16]  ? rcu_gp_fqs_loop+0x303/0x1350
[ 1328.776217][   T16]  ? rcu_gp_kthread+0x99/0x3b0
[ 1328.781058][   T16]  ? kthread+0x29d/0x330
[ 1328.785294][   T16]  ? ret_from_fork+0x1f/0x30
[ 1328.789897][   T16]  lock_acquire+0x1bb/0x4a0
[ 1328.794393][   T16]  ? kvfree_call_rcu+0x18b/0x890
[ 1328.799336][   T16]  ? read_lock_is_recursive+0x10/0x10
[ 1328.804968][   T16]  ? __phys_addr+0xb6/0x170
[ 1328.809465][   T16]  _raw_spin_lock+0x2a/0x40
[ 1328.813960][   T16]  ? kvfree_call_rcu+0x18b/0x890
[ 1328.818891][   T16]  kvfree_call_rcu+0x18b/0x890
[ 1328.823660][   T16]  ? rcu_leak_callback+0x10/0x10
[ 1328.828627][   T16]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 1328.834511][   T16]  ? _raw_spin_unlock+0x40/0x40
[ 1328.839372][   T16]  ? longest_prefix_match+0x350/0x660
[ 1328.844754][   T16]  trie_delete_elem+0x4e9/0x620
[ 1328.849603][   T16]  bpf_prog_2c29ac5cdc6b1842+0x3a/0x3e
[ 1328.855050][   T16]  trace_call_bpf+0x39c/0x6b0
[ 1328.859723][   T16]  ? trace_call_bpf+0xbf/0x6b0
[ 1328.864500][   T16]  ? __bpf_trace_bpf_trace_printk+0x20/0x20
[ 1328.870388][   T16]  ? detach_timer+0x30/0x350
[ 1328.874970][   T16]  perf_trace_run_bpf_submit+0x79/0x1c0
[ 1328.880514][   T16]  perf_trace_timer_class+0x264/0x2e0
[ 1328.885896][   T16]  ? do_raw_spin_unlock+0x11d/0x230
[ 1328.891173][   T16]  ? trace_event_raw_event_timer_class+0x1d0/0x1d0
[ 1328.897674][   T16]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 1328.903575][   T16]  ? _raw_spin_unlock+0x40/0x40
[ 1328.908419][   T16]  ? debug_object_deactivate+0x63/0x380
[ 1328.913956][   T16]  detach_timer+0x2c0/0x350
[ 1328.918448][   T16]  __try_to_del_timer_sync+0x15c/0x1f0
[ 1328.923914][   T16]  ? __timer_delete_sync+0x10a/0x2e0
[ 1328.929192][   T16]  __timer_delete_sync+0x21f/0x2e0
[ 1328.934293][   T16]  ? __sched_text_start+0x8/0x8
[ 1328.939162][   T16]  ? timer_delete_sync+0x20/0x20
[ 1328.944097][   T16]  schedule_timeout+0x18e/0x2d0
[ 1328.948943][   T16]  ? console_conditional_schedule+0x40/0x40
[ 1328.954827][   T16]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[ 1328.960714][   T16]  ? update_process_times+0x1b0/0x1b0
[ 1328.966085][   T16]  ? prepare_to_swait_event+0x340/0x360
[ 1328.971692][   T16]  rcu_gp_fqs_loop+0x303/0x1350
[ 1328.976544][   T16]  ? dyntick_save_progress_counter+0x2b0/0x2b0
[ 1328.982692][   T16]  ? __lock_acquire+0x7c40/0x7c40
[ 1328.987715][   T16]  ? rcu_gp_init+0x14f0/0x14f0
[ 1328.992469][   T16]  ? rcu_gp_cleanup+0xade/0xc30
[ 1328.997310][   T16]  ? _raw_spin_unlock_irq+0x1f/0x40
[ 1329.002507][   T16]  ? lockdep_hardirqs_on+0x94/0x140
[ 1329.007695][   T16]  rcu_gp_kthread+0x99/0x3b0
[ 1329.012287][   T16]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[ 1329.017393][   T16]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 1329.023277][   T16]  ? __kthread_parkme+0x71/0x1c0
[ 1329.028212][   T16]  ? __kthread_parkme+0x15b/0x1c0
[ 1329.033241][   T16]  kthread+0x29d/0x330
[ 1329.037297][   T16]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[ 1329.042406][   T16]  ? kthread_blkcg+0xd0/0xd0
[ 1329.046984][   T16]  ret_from_fork+0x1f/0x30
[ 1329.051398][   T16]  </TASK>
[ 1329.089756][T25613] netlink: 763 bytes leftover after parsing attributes in process `syz.0.6484'.
[ 1329.109208][T25615] netlink: 'syz.3.6482': attribute type 29 has an invalid length.
[ 1329.144253][T25621] netlink: 'syz.5.6485': attribute type 11 has an invalid length.
[ 1329.152789][T25621] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.6485'.
[ 1329.192855][T25618] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1338.045254][ T4287] Bluetooth: hci2: command 0x0406 tx timeout