last executing test programs:

5m34.927113473s ago: executing program 1 (id=5184):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="d8000000180081054e81f782db0cb904021d080406037c09e8fe55a10a0015400400142603600e122f00050006000400a8000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb5b277470703152b414f872766247a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x800)
r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000000c0)=0xffffffffffffffff, 0x4)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r1}, 0x8)
openat$cgroup(r2, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="d8000000200081044e81f782db44b90402000000e8fe450f55a1180015001800142603600e120900100000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8cbf7a7ff4841ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4d180a54f14f00004d9db22fe7c9f8775730d16a4683f1aea4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace91ed0bffd6e4edef3d93452a92954b43370e00"/216, 0xd8}], 0x1}, 0x0)

5m34.377734247s ago: executing program 1 (id=5188):
r0 = socket$kcm(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0xf, &(0x7f00000002c0), 0x161)
sendmsg$kcm(r0, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x20000800)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000040000000400000001"], 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r1, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20)

5m34.201706915s ago: executing program 1 (id=5191):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0)
r0 = socket$kcm(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0xf, &(0x7f00000002c0), 0x161)
sendmsg$kcm(r0, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x20000800)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000040000000400000001"], 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r2, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r1, &(0x7f0000000140), &(0x7f0000000200)=""/221, 0x2000000}, 0x20)

5m34.085316359s ago: executing program 1 (id=5192):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x3, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xad}, [], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x1000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'\x00', 0x1})
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0xf)
r0 = socket$kcm(0x11, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1})
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x7e02, 0x0, 0x0, 0x0, 0x0, 0x8d3c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000040)=""/155, 0x1000000, 0x9b, 0x1}, 0x20)
close(0x3)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000023"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r3}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r4}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast})
sendmsg$kcm(r0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"/2767], &(0x7f00000001c0)='GPL\x00'}, 0x48)

5m33.732000744s ago: executing program 0 (id=5194):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)

5m33.560579492s ago: executing program 0 (id=5197):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63fc80fc020c2f00db5b686158bbcfe8875a06030000002300"/48], 0xfdef)
r0 = socket$kcm(0x2, 0x3, 0x84)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x20000, 0x0)
ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000180)=[{0x20, 0x4, 0x0, 0xfffff004}, {0x6}]})
sendmsg$inet(r0, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000300)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @local, @loopback}}}], 0x20}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x89f8, &(0x7f0000000900)={'sit0\x00', @random="1e40002000"})
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={0x1}, 0x4)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000380)='./file0\x00', 0x0, 0x10}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x8001, 0x6, 0xf, 0x3, 0x1, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x0, 0x8}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x48)
r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = openat$cgroup_subtree(r7, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r8, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5)

5m33.079660283s ago: executing program 0 (id=5200):
r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x2}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$kcm(0xa, 0x1, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/296], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x7300, 0x4000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x4}, 0x28)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x14, 0x4, 0x4, 0x2}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r4}, &(0x7f0000000500), &(0x7f0000000600)=r2}, 0x20)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x26e1, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0xc0045878, 0x0)
write$cgroup_freezer_state(r5, &(0x7f0000000040)='FROZEN\x00', 0x7)

5m32.92899952s ago: executing program 2 (id=5201):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63fc80fc020c2f00db5b686158bbcfe8875a06030000002300"/48], 0xfdef)
r0 = socket$kcm(0x2, 0x3, 0x84)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x20000, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2})
ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000180)=[{0x20, 0x4, 0x0, 0xfffff004}, {0x6}]})
sendmsg$inet(r0, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000300)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @local, @loopback}}}], 0x20}, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={0x1}, 0x4)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000380)='./file0\x00', 0x0, 0x10}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x8001, 0x6, 0xf, 0x3, 0x1, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x0, 0x8}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x48)
r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_subtree(r6, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r7, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5) (fail_nth: 3)

5m32.189307912s ago: executing program 3 (id=5202):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f020033000b35d25a806c8c6f94f90f24fc60100007000c000300053582c137153e37000c0980fc0b10070300", 0x33fe0}], 0x1}, 0x0)

5m32.188886202s ago: executing program 0 (id=5203):
r0 = socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0xfffffffffffffff7, 0x4}, 0x3442, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d08000b000000e8fe55a1180015000600142603600e1209000d00e8030000a80016000a0003", 0x37}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x80)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33)

5m32.148388023s ago: executing program 2 (id=5204):
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001200)='./cgroup/syz0\x00', 0x200002, 0x0)
openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000000), 0x2, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
r2 = openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@fallback=r2, 0xe, 0x5da08f7897ff444f, 0x7ff, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000280)}, 0x40)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x80, 0x0, 0x0, 0x4, 0x40530, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$kcm(0x2, 0x200000000000003, 0x106)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x2b, 0x1, 0x0)
close(r4)
r5 = socket$kcm(0x2, 0x1, 0x84)
sendmsg$inet(r5, &(0x7f00000007c0)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000900)=[{&(0x7f0000000080)="92", 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x158}, 0x40)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000080), 0x2cb)
close(r4)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="d8000000200081044e81f782db44b90402000004000055a1180015000f00142603600e1209000a0000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970100040000", 0xd8}], 0x1}, 0x4000040)

5m31.833693747s ago: executing program 3 (id=5205):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)

5m31.814885818s ago: executing program 0 (id=5206):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000100)=r2, 0x4)
sendmsg$unix(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000a80), 0x0, 0x0, 0x0, 0x40000}, 0x8080)
recvmsg$unix(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0)

5m31.621768986s ago: executing program 3 (id=5207):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000220000000400000002"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x22}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f4305", 0x0, 0x6f12, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000200), &(0x7f0000000140)=r0}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r1, &(0x7f0000000340), 0x0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40000000000000061118c000000000046000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0xf, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48)

5m31.493053662s ago: executing program 2 (id=5208):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0)
r0 = socket$kcm(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0xf, &(0x7f00000002c0), 0x161)
sendmsg$kcm(r0, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x20000800)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000040000000400000001"], 0x50)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8911, &(0x7f0000000080))
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r3, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r1, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3}, 0x4)

5m31.427187475s ago: executing program 3 (id=5209):
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r0 = socket$kcm(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0xf, &(0x7f00000002c0), 0x161)
sendmsg$kcm(r0, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x20000800)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000040000000400000001"], 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r1, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20)

5m31.269218381s ago: executing program 3 (id=5210):
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001200)='./cgroup/syz0\x00', 0x200002, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0)
openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000000), 0x2, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
r3 = openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@fallback=r3, 0xe, 0x5da08f7897ff444f, 0x7ff, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000280)}, 0x40)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r5 = socket$kcm(0x2, 0x200000000000001, 0x106)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(r5, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x20004810)
setsockopt$sock_attach_bpf(r5, 0x6, 0x4, &(0x7f0000000040), 0x4)
ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x80, 0x0, 0x0, 0x4, 0x40530, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$kcm(0x2, 0x200000000000003, 0x106)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = socket$kcm(0x2b, 0x1, 0x0)
close(r6)
socket$kcm(0x2, 0x1, 0x84)
r7 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r7, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="c00000000000000001010000ffffff7f84fe9984e7c6e219119da9466497319971c90c69acd63904d09571dda41431d1eb22d3aa21f44074b1992a171b5456c556110136ef37fe2c6105400e32398111b143478dab85c2c3f0f1fc3c1e5296ce94c1fc8485bd355f84ac9609d3a464d6b6edcd66107175cb56512d4bb0fa5530ef85a14612ceb012c40b7c579fd171f710b5f38b86aef5522b10f6b88872d122829e584b12eaed3456dbcac4802b70abee72ee5017ee0398f558000000000000a00000000000000001000000ff0100009425e6e5f5e8e1a1bed620bd231cf4362968a15f57318bcbde73a64672095b31b1106272591cbb1bf01af3be67e8a2026bc9e66de58f019ee5d07c0b471bd695b203d85814361c116fd898ca91a474b7d38888d8a60400881e9d23b4892b663529445110660507cd95a8cc03d0f4be280dc6846da59f7ae4a3d23f4363b494f6bf254ed83424e59e88b3000000000000d8000000000000001201000004000000c2ff66d63ead66a831f65d7b90a7c8b5424ff2357423e6aa337c4cfddf7e8688fbfd02c9b9ccc0b76a2b5351f61dd57c4c85d6aa2a112ce95382be11c2fbb96bd820948f69237a73fcea0c61a1a0928724a00fdeb482d58fcb83ceeb2dd40b6ba59714772e5532102d391f36808fb8cd6d9491abd199c7a221035cd84933d9614d23ac736c529f2a30218cbfb41e581fd3f4ab9f5d5f1fe3db9fd2f4d45171330c16e169d2612e733d21b35d3c645c89adf2be033eeef9967f8b83669fc6bdeb81ca000000000000f8000000000000001101000003000000ded6d50941f3e048623041597165eb799df8769cd30815f56ad3d5bfb8750372740acc3004834b710576dc618fe211ec1bc96b734168952e77d256556215f214cfc26c340677417080c2ab002d19bd3f94a14471fca6e724cfe6ecf314df538601b014f866a012339aa4ee93618c1f94c5a8b7ff9468da2c6f81232d1f43babc3e2401fa7a0a5a16a11a66c201a770cf2492918ec342f3a5ac4843d1145141044bb180a275783c784ee443ff773eaa9401d6e1e5191d8ee6dcc01e68e934d20dea0d3f56b9edf41d6a7d0893b6b6d08211df2e4ed75b677dc1dffd772fee8ac0292a2c0000000000101000000000000084000000800000"], 0x1340}, 0x8040)
sendmsg$inet(r6, &(0x7f00000007c0)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000900)=[{&(0x7f0000000080)="92", 0x1}], 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES32=r7], 0x158}, 0x40)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000080), 0x2cb)
close(r6)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="d8000000200081044e81f782db44b90402000004000055a1180015000f00142603600e1209000a0000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970100040000", 0xd8}], 0x1}, 0x4000040)

5m31.257573772s ago: executing program 2 (id=5211):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b87, 0x2, @perf_bp={0x0, 0x8}, 0x8000, 0x5, 0x43a1bd76, 0x1, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r1 = socket$kcm(0x29, 0x5, 0x0)
sendmsg$kcm(r1, &(0x7f0000000640)={&(0x7f0000000200)=@generic={0x1d, "463f2013fb89980a4d0e27f0b038ebb6a088ef6fb0f0ac702b3f1ce71ad203680ef972c6a6b130a0ed0c4712db99209daa753fa95dde24ed29357fa2a2ee4adfb669191396cac9110b0890db05c047b715f6b7cf8e3be25f029a08611409dd982373c988c7708b28b9b14fb3aba860153a9ed9f9fda883d196727b853f2e"}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000040)="170e9f7b6630edc716811d99d287a7bb99e1e078d0998aee37a46a184a6321d4b0821569e1", 0x25}, {&(0x7f0000000340)="7e62191f7007afbf69931cd37171356a0d3d92844e7041c220c808bd7e4db8971c0ff5a362207cb0c803e86312b45f65", 0x30}, {&(0x7f0000000380)="c1d5", 0x2}, {&(0x7f00000003c0)="a95704a8a414067717656be4a4f6a0ca858e33c4bd8dc1b6467673fcd62ac83851810c3c528570c59d5dc3f488f96057a0d80d2b7fd77ec20d6a85501e15c4fd10fe3a6dacc758fe11880d1b7c569d38a51012a209918840a974a949e14bf48fa04de675e6e426259d9f8aac5048", 0x6e}, {&(0x7f0000000580)="7478e2f1c95c290f52ff0266606380ab80c5acb6ea07770149de9194b15d76b26f22b0d457bd5304e50da5010483b7fe64a6adf3c99e052d5a1242186e1f8aeab20c182af4213f96a1ed7aa4d9c022a943904c4bd2e346d7fbf3d66492ab8525030fe0eb8c0ec85a10962c652a5f222d14353f172fe2e599b28e417dab898b340bdd5e6b8e1fb453ef0f9c6f6418f9e4d69d634f5754fb14bb609bb5773971", 0x9f}, {&(0x7f0000000440)="4c2ab08b300006c4", 0x8}, {&(0x7f00000006c0)="f172181d826e8855d754e3b50b7095169d201a14430feef1db9ed1c25229e6d9d5747752130005d64498cb68065402a67125cea296fe4cb2b279d7930814c1384a7a7ddb57ca50ebd2d44dd6dc8b4663c597a5f3cca300ff2addd7979981f28f69c201280c822ffff04dd9483eb5a3ef50d2309b2d36d7f607ef91d44d47a08d24231c63a0c29ee19ecf2f9d05aa4f7643", 0x91}], 0x7, &(0x7f0000000a00)=[{0x108, 0x10e, 0x0, "f982873321b57c1e243284fc4456e8a48f9b9090b1e425ef4ee6db455ae1d98bf9d75b334d968e389a9cdbc2740370ab660303591fd69807d68aaa6724c719ddc274d0a19ad386438f585635367189e224161fb1dbc44e6dfcd9458c9f7fd3abfed64ce9f4f529e90d08e009931a2534e459515b0635f0f3e0bdbfe492763a5ae0d7d9bee923d1c15ca688f8aec665b54962899d7860b625b5643be7c9ce29dbe830141b7cd34b3b125329c9df4378ad0b6103d009b19f155811a2184ac0d3b3b50e9c1719b12f1f2971c5c83b9a8b227a53e70a9b0f548c5aadc1fdb85f995ccb68ec60d06b09d9fd30f418779fefca9d3d"}, {0xe8, 0x117, 0xffffffff, "e7e7f64405e37afb526f78fc4de6e032c9f53aa88827a799976de7815b944e43584e05f21b3b117691dbda565ddc8f39736d3d564d0ea37046638f57f0e0a781a971afe9bb02bdc5838bd0748fd7c2370a324ce2ffbb53a6ecb037b098ecd724eb2ebbe439c9f46c119a40e01f1c879256373daa5c71ed03d614761cd03a1a29468a5e437b7e703b750822c2a3599720b7b80569620dc9c6823d507b5bdce8be63d419625c6e7415c3067c0a6050a3296adf5321a2f5da842075eb9e832ad0a320223ffcd41ced8c1f286b2f6685ce563168c9522eb72b5c"}, {0x88, 0x10a, 0x6, "fb4fc75f5cae1059639e468d66beb39b033c8dbb03666a568bafaaccac80b4b102e8b843a48bf8579426fa6f1e20642d4abbdbabd6479f526ea3da257d79b4bb84a36b8950b41cc66dd8cf35dc8cf9fc3d55c44cd73eac69d2e145efb1dc8013fa617a6a724332e5452d271f7ead2cf9e8f2"}, {0x40, 0x115, 0xffffffff, "03b4d4152070d0c510e3bcacdc42bfc87bc94c75eaae1a5c60801b257afe601e4f0f99ddaa087b3c70"}, {0x78, 0x118, 0x7, "9c9b5508434b92cd29c720b1fd792cd60afce050091196a6b1924e71a088eb38133833c382c0dfc29600d077d469b6a00b96eb036e2d7ecba81745f5d8047c9058db52de8000e62a14f8fc08b0113fa21117dafd1e1dc599febe5df0420dd485ed40"}, {0xb0, 0x110, 0x2, "cc1758098f4fa17da9b5798a0f252ebf1306b9c2f444a15069363f4530f1d3193be7d3f55c0666c9c3336b15bf099c2e0e6cad0699a44176742fd6879475e9c4642ab695b7e018a99ac6fabd8fa0a61e51c02aad9879ec870c67766bf76595223deed690cb31b5d1570200956abd5c64ac3dfbbdba073eac923e51fb209b0ece6ee58786613ff637b6def8b4b371ce5ba65ca8811a4fdfcbc8a03286"}, {0xf0, 0x10c, 0x7, "9413c022a4ebff2be44a5b2b915ea2cd0141c12e9288b63a9f5c6c250108a5445dc2a0ffde1e9326ae12131312f89ac217e54a4f06c3408b803648f70fc817c7e6a3c28983ac19b3c0b67ba1afdadd5c3b6e992176e67cc1c45b7031f36155831950d01eef2938c76feebd6e0d328eafc58c1b2ce0492e2f486dbce722a74e146c0c80cfbc0d9c625a9d6c6a9eff521d2577ced3caf6a3837b987ed6cb0ab5a9fea414babd3c464811ec01f2e6bafb2136a4594492a63e4351a9070904cf3991d081ad07d7948c5c92e0de1999acd76b83247531277e0f1f79"}, {0x98, 0x10b, 0x0, "61732e8819974c2333325ec40da9c819fccea9903485c8bd20c71ac44d3424f9f0bfb034f2e0e676ad1943a1ba33482d755a9952282f991e714c022f68dde4fe6e0bd5487fb569a8e210b02201a4dedec57add7eb276beacf1bd1a74d632c8372994454f15390e98e59264d05a137970ec51a45d172ded8d869d902be76dd1154ab3c5581d"}], 0x568}, 0x10) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) (async)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000900)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa", @ANYRESDEC], 0xfdef)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x141b41, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x280) (async)
ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f0000000800)=0x1) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x152610}], 0x1, 0x0, 0x64}, 0x1f00) (async)
sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
perf_event_open(&(0x7f0000000f80)={0x2, 0x80, 0x7, 0x68, 0x7, 0xfb, 0x0, 0x9, 0x100000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x73, 0x2, @perf_config_ext={0x7, 0x1}, 0x100, 0x10, 0x0, 0x5, 0x6, 0x9, 0x80, 0x0, 0x6, 0x0, 0x3}, 0x0, 0x1, r0, 0x3) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000880)='f2fs_reserve_new_blocks\x00', r6}, 0x18) (async)
perf_event_open(&(0x7f0000000500)={0x2, 0xb4, 0x45, 0x1, 0x0, 0x0, 0x0, 0x58a5, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x6, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000840)={0x1}, 0x8)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce220000"], 0xfdef)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x5, 0x47, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

5m30.762319994s ago: executing program 2 (id=5212):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500"], 0x0}, 0x94)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f022eb"], 0xcfa4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.events\x00', 0x26e1, 0x0)
r2 = socket$kcm(0x2, 0x2, 0x0)
close(r2)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$kcm(0xa, 0x2, 0x73)
setsockopt$sock_attach_bpf(r2, 0x1, 0x2e, &(0x7f0000000640)=r1, 0x4)
recvmsg$kcm(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0)
socketpair(0x29, 0x6, 0x800, &(0x7f0000000080))

5m30.761875643s ago: executing program 0 (id=5213):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f020033000b35d25a806c8c6f94f90f24fc60100007000c000300053582c137153e37000c0980fc0b10070300", 0x33fe0}], 0x1}, 0x0)

5m30.761045664s ago: executing program 3 (id=5214):
r0 = socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0xfffffffffffffff7, 0x4}, 0x3442, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d08000b000000e8fe55a1180015000600142603600e1209000d00e8030000a80016000a0003", 0x37}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x80)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33)

5m30.652335058s ago: executing program 1 (id=5215):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)

5m30.438849548s ago: executing program 1 (id=5216):
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001200)='./cgroup/syz0\x00', 0x200002, 0x0)
openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000000), 0x2, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
r2 = openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@fallback=r2, 0xe, 0x5da08f7897ff444f, 0x7ff, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000280)}, 0x40)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x80, 0x0, 0x0, 0x4, 0x40530, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$kcm(0x2, 0x200000000000003, 0x106)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x2b, 0x1, 0x0)
close(r4)
r5 = socket$kcm(0x2, 0x1, 0x84)
sendmsg$inet(r5, &(0x7f00000007c0)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000900)=[{&(0x7f0000000080)="92", 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x158}, 0x40)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000080), 0x2cb)
close(r4)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="d8000000200081044e81f782db44b90402000004000055a1180015000f00142603600e1209000a0000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970100040000", 0xd8}], 0x1}, 0x4000040) (fail_nth: 3)

5m29.45809219s ago: executing program 2 (id=5217):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50)
bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = socket$kcm(0x2c, 0x3, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[], 0x48)
r3 = syz_clone(0x20102400, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90)
r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500), 0x4)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r7}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe35, 0x0, 0x0, 0x0}, 0xffffffffffffff88)
r9 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1}, 0x1efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r3, 0xffffffffffffffff, r8, 0x2)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffc54}, 0x94)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r2, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f00000001c0)=r1}, 0x20)
close(r1)
r12 = socket$kcm(0x10, 0x2, 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r13=>0xffffffffffffffff})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fsi_master_gpio_crc_rsp_error\x00', r6, 0x0, 0x4}, 0x18)
r14 = gettid()
sendmsg$unix(r13, &(0x7f00000000c0)={&(0x7f0000000280)=@abs={0x1, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f00000001c0)=[@cred={{0x1c, 0x1, 0x2, {r14, 0xee01, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r13]}}], 0x38, 0x800}, 0x48840)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r9, 0x40042409, 0x0)
sendmsg$kcm(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e281ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014006040400010404009bbc7a46e3988285dcdf12f213e6f768fec601955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)
recvmsg$unix(r11, &(0x7f0000000740)={&(0x7f0000000340)=@abs, 0x6e, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/30, 0x1e}], 0x1, &(0x7f00000009c0)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd8}, 0x2)

5m12.855557388s ago: executing program 32 (id=5213):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f020033000b35d25a806c8c6f94f90f24fc60100007000c000300053582c137153e37000c0980fc0b10070300", 0x33fe0}], 0x1}, 0x0)

5m12.80911568s ago: executing program 33 (id=5216):
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001200)='./cgroup/syz0\x00', 0x200002, 0x0)
openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000000), 0x2, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
r2 = openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@fallback=r2, 0xe, 0x5da08f7897ff444f, 0x7ff, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000280)}, 0x40)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x80, 0x0, 0x0, 0x4, 0x40530, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$kcm(0x2, 0x200000000000003, 0x106)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x2b, 0x1, 0x0)
close(r4)
r5 = socket$kcm(0x2, 0x1, 0x84)
sendmsg$inet(r5, &(0x7f00000007c0)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000900)=[{&(0x7f0000000080)="92", 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x158}, 0x40)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000080), 0x2cb)
close(r4)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="d8000000200081044e81f782db44b90402000004000055a1180015000f00142603600e1209000a0000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970100040000", 0xd8}], 0x1}, 0x4000040) (fail_nth: 3)

5m12.713057844s ago: executing program 34 (id=5217):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50)
bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = socket$kcm(0x2c, 0x3, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[], 0x48)
r3 = syz_clone(0x20102400, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90)
r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500), 0x4)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r7}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe35, 0x0, 0x0, 0x0}, 0xffffffffffffff88)
r9 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1}, 0x1efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r3, 0xffffffffffffffff, r8, 0x2)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffc54}, 0x94)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r2, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f00000001c0)=r1}, 0x20)
close(r1)
r12 = socket$kcm(0x10, 0x2, 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r13=>0xffffffffffffffff})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fsi_master_gpio_crc_rsp_error\x00', r6, 0x0, 0x4}, 0x18)
r14 = gettid()
sendmsg$unix(r13, &(0x7f00000000c0)={&(0x7f0000000280)=@abs={0x1, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f00000001c0)=[@cred={{0x1c, 0x1, 0x2, {r14, 0xee01, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r13]}}], 0x38, 0x800}, 0x48840)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r9, 0x40042409, 0x0)
sendmsg$kcm(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e281ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014006040400010404009bbc7a46e3988285dcdf12f213e6f768fec601955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)
recvmsg$unix(r11, &(0x7f0000000740)={&(0x7f0000000340)=@abs, 0x6e, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/30, 0x1e}], 0x1, &(0x7f00000009c0)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd8}, 0x2)

5m12.593102909s ago: executing program 35 (id=5214):
r0 = socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0xfffffffffffffff7, 0x4}, 0x3442, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d08000b000000e8fe55a1180015000600142603600e1209000d00e8030000a80016000a0003", 0x37}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x80)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33)

2m21.592036362s ago: executing program 5 (id=6338):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x8000, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(0x3)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10)

2m21.426733369s ago: executing program 5 (id=6332):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000002c0)='rxrpc_peer\x00', r3}, 0x18)
r4 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=[{0x18, 0x110, 0x1, 'p'}], 0x18}, 0x0)

2m21.292915305s ago: executing program 5 (id=6335):
r0 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x6, 0x4, 0x4, 0x80, 0x0, 0xff, 0x1000, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_bp, 0x0, 0xce000000000000, 0x9, 0x8, 0x6, 0x2, 0x4, 0x0, 0xb9a, 0x0, 0x9}, 0x0, 0x3, 0xffffffffffffffff, 0xb)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000000c0), 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, <r2=>0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) (async)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={0x1, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0}}, 0x10) (async)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xad, 0xad, 0x7, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x0, 0x4}, {0x9, 0x4}]}, @struct={0xf, 0x8, 0x0, 0x4, 0x1, 0x1, [{0x7, 0x4, 0x1}, {0x0, 0x3, 0x6}, {0x9, 0x0, 0x10000}, {0x5, 0x7ff, 0x4}, {0xb, 0x1, 0x2ac}, {0x3, 0x0, 0x802e}, {0x8, 0x3, 0x2}, {0xe, 0x4, 0x9}]}, @typedef={0x3, 0x0, 0x0, 0x8, 0x1}, @datasec={0xd, 0x1, 0x0, 0xf, 0x1, [{0x2, 0x8, 0x40}], "ff"}]}, {0x0, [0x2e, 0x5f, 0x2e, 0x61, 0x30]}}, &(0x7f0000000540), 0xcf, 0x0, 0x0, 0xc7d}, 0x28) (async, rerun: 64)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000600)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x4) (async, rerun: 64)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000006c0)={{0x1, <r6=>0xffffffffffffffff}, &(0x7f0000000640), &(0x7f0000000680)='%-010d \x00'}, 0x20) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{0x1, <r7=>0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)}, 0x20)
r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000007c0)={0x0, 0x2, 0x10}, 0xc) (async)
r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000840)=@generic={&(0x7f0000000800)='./file0\x00', 0x0, 0x10}, 0x18)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x9, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x401}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @call={0x85, 0x0, 0x0, 0x9a}]}, &(0x7f0000000240)='GPL\x00', 0x7, 0xea, &(0x7f0000000280)=""/234, 0x40f00, 0x12, '\x00', r3, 0x0, r4, 0x8, &(0x7f00000005c0)={0x8, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000880)=[r5, r6, r7, r8, r0, r9], &(0x7f00000008c0)=[{0x3, 0x4, 0xd, 0x6}], 0x10, 0x1a49}, 0x94) (async)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000009c0)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r12, 0x1, 0x32, &(0x7f0000000a00)=r10, 0x4)
r13 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000a40)='syz1\x00', 0x200002, 0x0)
openat$cgroup_procs(r13, &(0x7f0000000a80)='cgroup.procs\x00', 0x2, 0x0) (async)
r14 = getpid()
syz_open_procfs$namespace(r14, &(0x7f0000000ac0)='ns/pid\x00')
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b00))
syz_open_procfs$namespace(r14, &(0x7f0000000b40)='ns/pid_for_children\x00')
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, <r15=>0xffffffffffffffff})
sendmsg(r15, &(0x7f0000000fc0)={&(0x7f0000000bc0)=@rc={0x1f, @none, 0x2}, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000c40)="2d1729d6cefb81d9ff27e8a13f394e23a4ef1494c0f5f0c05b33b512cdc9aea07cd13844da2b2cdddf1953b199a47eac5e47fb0e4c6408276f9d13abc7ad330facb25ab7e93355ffa6d10b7d07e12222aa3b4ff4eb8f17ca0e5fa13afb440031b073eaabdc904666d858b7236a85b115837fad4e8f2edbc76c367b19bfaddcef4ba2c1216674c502497947cebfd2836d7910e4ac38a8db2079c9bdb8c526536b51e1864b50fcec888f1c2a7d3d51e54f179b1fdaa061edeab741805623be9e6d88312fd36fe6126a3f353f7ed163586037b286c9d4e07c238d3a201fd46994f4c2910850c68484c99911cc3fcc2a59", 0xef}], 0x1, &(0x7f0000000d80)=[{0x58, 0x10b, 0x3f, "3c274c88a1fa91f57b0ea53a1b2a13f4cc53502dfef7a5de984cf21bf92c525453523c01a92b817dd342c762d3ed69f3cbaf81596b6cbe7bfd4f96685aad5dff96971de0"}, {0xc8, 0xf67ceb8d0d7e686e, 0x5, "0d868add1e89a2f31eef26507e183b4d3ecaab9217bb32a4403131b0aa3b27c4d722991f8360c99e67b468515dbd78ac5d6296493370175e6a2b1c9dae6120d93a39075990513f46a09f0c866d460523a1770948bd6f7aacd966e39099b357b35178f44d63d7e1b8c19a7ab1e3067a4a2593072c29c4e36ce78465585cfae8a3d0cbddffc9197da3dbb098f7ade1b94d39edaa0de28f70c64b7ce356be0e0bc6801faa3724acbb9dc047cf046fff075474e59e446e7dbd49"}, {0xa0, 0x119, 0x49666aa9, "546695f95555b7893b4faca917f17ee9b233f4ba6cb1fe21476c70785a18bee2525fa7dbeff8d77ea7ad3c1c4c5724e5e92c6274aa200f3172b486a2af73e76d565d3b1c631e70b10affc69f027a0b35b278c21a71ff50a501dc8c7718ce3607cfc6643521f10bdef13a91a0d1399c55990e7892e1463176102a4502e042a77b6c26abcf34430d4b75cca0e76d16"}, {0x50, 0x10c, 0x0, "52822a83992cf2f9bf6e97697dad9ef85491af967825fed6c28d9452e1e18a3bbe9eb4ab441cb0a97131fb15602cc4937602627ea8cd4a6bda9e0950769a"}, {0x30, 0x108, 0x58, "fef35703d088ccc38ba7721689063307edbc3358938c2a8491c6cbee"}], 0x240}, 0x4000010) (async)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001100)={@cgroup=r13, 0x4, 0x1, 0x1, &(0x7f0000001000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000001040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001080)=[0x0, 0x0], &(0x7f00000010c0)=[0x0, 0x0], <r16=>0x0}, 0x40)
r17 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001180)=0xffffffffffffffff, 0x4)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001140)={@fallback, r10, 0x37, 0x2000, 0x0, @value=r17, @void, @void, @void, r16}, 0x20) (async)
r18 = openat$tun(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r18, 0x400454d0, 0x0) (async)
close(r11)
r19 = socket$kcm(0x29, 0x5, 0x0)
sendmsg$kcm(r19, &(0x7f0000002740)={&(0x7f0000001200)=@can={0x1d, r3}, 0x80, &(0x7f0000002680)=[{&(0x7f0000001280)="b23f76851c4facb23bc1f0540ee84ea47dd7df9ad96e72b9a14d3a01a7cb1de40799f7baf7ea2af59d4afec286eb1132fb96ecabeaf630cfb89a3cc0cd18abe49e60ad9c033053b50030cd893c949ce96514d7a34b44874ffbfff979de2aacea3f7d6b28648a53b1de39d810a68af9894d5e9758d737dadfe2611beefbf0dc9166a522237977139e614f4e576137b880e5b7e5a3162bb7ceecd02fca2254a5d1c15221f9e55757741a2545180865a44cb8b7ec0234c1bb2506da004fcd858252511fd6eebc2343d5b5af2d2e1fe18e9cf3f9edb2ab925bc05a04b10d99a980de7bcb7fe24f3422032133c9744d98424727476f37", 0xf4}, {&(0x7f0000001380)="22ea0bb8ebb4b3a5f2adb1f853478448f8521eac8bfa5db5a29d2471719a7d7c7146b2c352d3b7b5980f5876e9ea4f09b3dfcbd5460d18e2a5d87bb6f6ae4feefa7e690d8a69f8019b382e9eda681d4ec35be21fcd86980607ee3cf897ef59702c028373d8d817f8f625243cad1f57041b3cc3b91989e0a2d61baef873fd9b1992ea20a019e9b3d9d4d93801bd8536", 0x8f}, {&(0x7f0000001440)="2e48955570117ff5103ffb55237457865b4eeb213f0e78f0f308d4d5ae9d7b78ba0642848eaa7009f6fd409a971549e0b95374f9d3d0b08468b234e43d257493b8b9a5d439063d481224a4e14c53206f866db473b859ee245bf2b64b0acd21f05e8703385e341f87b295663a73a8466badc4164a63492a6cc5460f01cf2979e8a7376c346ab02bba22db3a51ebc2e6fb3a3badd7efd5426aa500cf894d8c0a56b264ffbcacf0d422c1d4b5ffc032ebfa2995d45d61466aa677c839d83141a422ba87490b5ecfef07", 0xc8}, {&(0x7f0000001540)}, {&(0x7f0000001580)="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", 0x1000}, {&(0x7f0000002580)="7c57a205538dc75f0540fd2e4526f19f0683bb62c18729a1f25d2997915c5d52a133c5e15c40f4367d1bfa3784356b2373153b6c24bfdd", 0x37}, {&(0x7f00000025c0)="e6a6290e9c945ae9b047ee133063e8d016ecc24abfe72944f72ddeaa3a75a1f6395e9029b0043ce0b23b88fbdaf701ec4929358b6ce2ffc931e0fa0db3726adec9", 0x41}, {&(0x7f0000002640)="48495590e7034df75701d7de5559721e36", 0x11}], 0x8, &(0x7f0000002700)}, 0x4000000)

2m20.973294939s ago: executing program 5 (id=6340):
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1f00000004000000060000000700000080130000", @ANYRES32, @ANYBLOB="0000000000000000008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000001"], 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000280), 0x84, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x15}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80)

2m20.726058529s ago: executing program 5 (id=6342):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x8000, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(0x3)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10)

2m20.402797133s ago: executing program 5 (id=6343):
r0 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100), 0x4)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x0, r0}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000020000000f100000000000007a0000000000000095f305e49b243c69"], &(0x7f0000003ff6)='GPL\x00', 0x9, 0xba, &(0x7f000000cf3d)=""/186, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3a)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000180)='%+9llu \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r2}, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r3, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = socket$kcm(0x10, 0x2, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/1423], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x3ffffffe}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @generic={0xc6, 0x8, 0x0, 0x0, 0x2}, @initr0, @exit, @exit]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="d80000001800eb054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00060004010c00090008000c4004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece8b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0)
sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000180)=@in={0x2, 0x4e24, @remote}, 0xfead, &(0x7f0000000300)=[{&(0x7f0000000600)="25e0c706acb6439e6430c97b696a789f68bbd04dac7c9015c869d6beb2be1d3d4e808c51d0c7efa556dd81de095c1dd114b6ebcec75bbcb2c016992769d78c76a219c2d2e98161473a5304c0bfad48f728abb2b433db6e7ce7aef755cd", 0x5d}, {&(0x7f0000000380)="433aa3faee40b32a80695687948fa14e8079876436b62287aa56221847ca56a175a77dd95be2d60613ab19563363e3b3bf9da7cbd782930518c9eeada596e1cd6070613e3e819e985b6cf6ccc4d29b5f807d0ae727275bc939226945dbb45b28ed9c4d8b1b61bbed380ca79ca9524ac8286f9acbbd339a5874b242b4a1de0b", 0x7f}], 0x2, &(0x7f0000000480)=[@txtime={{0x18, 0x1, 0x3d, 0x1}}, @txtime={{0x0, 0x1, 0x3d, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}], 0x60}, 0x80)

2m4.725528413s ago: executing program 36 (id=6343):
r0 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100), 0x4)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x0, r0}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000020000000f100000000000007a0000000000000095f305e49b243c69"], &(0x7f0000003ff6)='GPL\x00', 0x9, 0xba, &(0x7f000000cf3d)=""/186, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3a)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000180)='%+9llu \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r2}, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r3, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = socket$kcm(0x10, 0x2, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="b702000000000080bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b706000008ffffff9c6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000004a000000b70000000000000095000000000000008e17f199a68b061b93d83298a8cdda1ce784909b849d5550ad855dab54d8877a6db61d69f2ffcaa10350e11cb97ce8df1bc9a0c4eeceb9971e43405d621ffbc9b0d8ca56b50f0c010ddb03cf1c62d57c08a90b189d190c341035de53a9a53608c10556e5734eb84049761051ce540c772e201b2de17dfdb5b60939d5d6aed4062049b87e03e2cd18a77dda613e0c64497fcc059c062234d5595f6fbaa187b81d1106000000000f0000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8000000000000000b91c61bd99dc89f12907af7dccd106cb937b450f859ce8292a79c3e40000b59b0fc46d6cec3c080a882add4e1179bd4a44f231a2d73148be428ba953df4aece69311687f4122073a236c3a32efa04137d46f0247d2638da3261c8162bb7c7824be6195a66d2e17e122040e11001131ce319045e5b3334e68475ac3f46aa2837f9004600daded9b19b35eebe52613c346e255421b23a278fd00004270b1cd5fc9aa2286ccca37db965d9dd366598f5ec993cb0cf127e2a46cfbdf63eea190d86a4d1b75ae98480100bd5828954a7d093a54f7e75b3753508ca3c41685d1e407315e59d626c23b3f89a926e9382966853774e7dd1f1a2177cdf2802237c177d543e8da47a01f05e113e53518270239b69c117e2637c31085f4d8a596b6edab26afaf6605b231199f38a6fc7eb83714387450ea18eafbace8eec18a4b2c442e7b88a7611c1283bec84e1715fb9f4fcaf52c08058fc4f21c0ad71adabdd850aed3eeec6eaab347bdf474e17b9aa345d1e6e3bb83f90230bdf53e7d0e5c3f914d905422b83f30936674ba8f0bffaf2305c0972df71fe5f4e015064716897bced7798509e64df360d95f9a4099f86438ac2bbcbdbd1d9db21a1d5c065567fd70aae68096827fa5c2d9bd20292344c7dcf6241447cfbb05b5d0fdb4e08afbac5397b64aa369922ed7ed8918f97294b6854210d2b93aaf92159dbaa2f186d4a420c68d6baf1c31de4f0bf478bfd51bb1e96ea849a80ae5a89be7e38474c7aade344d68324f9e12a6b9770e6bd12ae69efffaee58040753701af84c2924c1b5aea1650f42c9ae9820a33095f062fb88313d035ea405515a61a4be64f9fa0985c5be592090cc48291004609fdac2ab6100000000000000a84570c7c00d647daf8af334050b61e9b2d3f0adad1d1ff47be19b8da2799e9ecef8efabe73f92dbd0760f8bbd9c710bd1371e2b5d9a2ea2190f5e4f5cd641cdfe5d89f84a368ef7e6ff1eacdc0ec9e97b8f9c9e314661ea0aa8a104008d188b66b3a4aedeed9df4238a08fc2fb1007233cc2c87fcaa0cccd8ec03440eafe1c8660c73acc17bff740d199a7c0c52c63c0408b5158e0000000c275eedb02f141113cf2c55b2c08c2c68cc99d2bb5840fba332e1c82862ec9b90106248f81d32a47ac94ddee815dba8aeb5d3121cf247a81aef7805b020e9eec44cbe3055be69fe066824ba2292b9cdce41635fc00df96fb10a3a8cc60c4a76c65ebbb0640e0a29de94edf5cbefac1c5fa96e7080af804b22cabce10ea52f1018527f4aa39cdafa3eff63de2a7f50d042667820f6f86f276afb2b8134301e031351ee13013137e9d5cec0c84d7e3f82c6fd12eb98f9ea654bcb9ce59a2015183c6e65bb0537e611b830d74c30fb8207fca0990acdbb51e4e234026e00000000b3ebae3eb52c140953a350fcf0124b1a30b1afc29ea56f8413686d912eb8118d73ef9c6d3843ebcb555301c0205dd3bd9b1d742e334319c8979c322e92fbc2c400"/1423], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x3ffffffe}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @generic={0xc6, 0x8, 0x0, 0x0, 0x2}, @initr0, @exit, @exit]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="d80000001800eb054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00060004010c00090008000c4004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece8b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0)
sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000180)=@in={0x2, 0x4e24, @remote}, 0xfead, &(0x7f0000000300)=[{&(0x7f0000000600)="25e0c706acb6439e6430c97b696a789f68bbd04dac7c9015c869d6beb2be1d3d4e808c51d0c7efa556dd81de095c1dd114b6ebcec75bbcb2c016992769d78c76a219c2d2e98161473a5304c0bfad48f728abb2b433db6e7ce7aef755cd", 0x5d}, {&(0x7f0000000380)="433aa3faee40b32a80695687948fa14e8079876436b62287aa56221847ca56a175a77dd95be2d60613ab19563363e3b3bf9da7cbd782930518c9eeada596e1cd6070613e3e819e985b6cf6ccc4d29b5f807d0ae727275bc939226945dbb45b28ed9c4d8b1b61bbed380ca79ca9524ac8286f9acbbd339a5874b242b4a1de0b", 0x7f}], 0x2, &(0x7f0000000480)=[@txtime={{0x18, 0x1, 0x3d, 0x1}}, @txtime={{0x0, 0x1, 0x3d, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}], 0x60}, 0x80)

2.437659484s ago: executing program 8 (id=7278):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d649379071c33390e418ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0)
close(r0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="5c00000012006b8c373be35c6e17aa31046a876c1d0000007ea60864160af26508001dc0c3000200340031009ee517d34460bc24eab556a705251e618294ff0051f60a84c9f472736f67c5e73bb9e5c446fa30be62cbd4938037e786", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40)
r3 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000e40)="2e0000003e000511d25a80698c6394090124fc602f6e354016000180000000000000000000002cd65c65c3d7d756", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r0, 0x40107447, &(0x7f0000000180))

2.182830045s ago: executing program 8 (id=7284):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
close(r0)
r1 = socket$kcm(0xa, 0x2, 0x88)
perf_event_open(0x0, 0x0, 0x6, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x4110, 0x0, 0x1, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000016c0)=@base={0x1f, 0x0, 0x0, 0x2000}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100030000009500000000000000bf71000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x8, 0xf7, &(0x7f0000001e40)=""/4093, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x42}, 0x21)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000340)={&(0x7f00000000c0)=@in6={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, 0x80, 0x0}, 0x200ce0c0)
write$cgroup_devices(r0, 0x0, 0x97ff)

2.031166861s ago: executing program 8 (id=7287):
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0xc8, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x80, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x3}, 0x0, 0x3, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317"], 0xfdef)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071002700000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0xffffffffffffffae}, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfdef)

2.030298551s ago: executing program 4 (id=7288):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x1, 0x4}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x3, 0x10006}]}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0)
r1 = socket$kcm(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
r3 = socket$kcm(0x11, 0x200000000000002, 0x300)
r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000004c0)=@o_path={&(0x7f0000000480)='./file0\x00', 0x0, 0x8, r0}, 0x18)
socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000500)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000001800000000000000000000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x8cffffffffffffff}, 0x3b35}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6)
r8 = getpid()
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r9 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f91624fc60100c214002000003050582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r8, r7, 0x0, 0x0, 0x0}, 0x30)
r10 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000540), 0x2, 0x0)
sendmsg$unix(r2, &(0x7f0000000680)={&(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000240)="25f669282c3dd350a1362ea928b1b28c46daf4e84964df5d5afd71235dec321b2059fae355ab529614c6bb3d012c31598c05dafd1c377f745e5bf44d0690d680557c065329c313e7e4b4cddb454efe841581e171e25ec4700db80001f3a2515bc9396b870f78340f2b22f97deda616fe25a0486cb055a5842d5d6faf58e025e53e028956ae36e58bbb27d315f96a62093d3398c9b606638ffcf2a9c4c63c99a76b015f89f3c12f2556edf16e69560ec96b004a588c843ffaf476b90f9c6fe0c02ae78cc9e2b7449e96abf7", 0xcb}, {&(0x7f0000000340)="1da6f181d6926f74e80f452639ceba25c48452ee9b71e26979f32a3115aa340951c10cee61d347e1b7cc2268aaf8abea2fdc70f2d9664e2a0b7f188bb904c5056a30156d54e832c205bc559645c81984659afca32c96a1d53d0160e00f0f05a708054d51de213b89e32db7d4", 0x6c}, {&(0x7f00000003c0)="c687671d15a03f0069e6243be8d929d07b75339c423a272984b471e768346aa7e01c962b488f1e452fd6804e5fa85d698b95decb4b57aa0e0b676d594d910cd170696a2c773adcc9e2783835ed", 0x4d}], 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r3, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="28000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r5, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r8, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r10, @ANYRES32=r0, @ANYBLOB="000084e1dcd0dc2bf86623e10dcee7626f44a9647581346a3f4688fe9f02ee66cfaacc7bbc8e2bb30a62c5884f0d66110839bc5fa05706b5cf183850b45ca6298414c5efa22fd82718d0"], 0xc8, 0x8081}, 0x4040895)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90324fc60100005000a000200053582c137153e37000c0680050002000300", 0x33fe0}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000980)={0x5, 0x80, 0x2, 0x8, 0xfe, 0x20, 0x0, 0xfffffffffffffff9, 0xa08, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x401, 0x2, @perf_config_ext={0x6, 0x1}, 0x472, 0x8, 0x7, 0x8, 0x40, 0xcba1, 0x1, 0x0, 0x2, 0x0, 0xd}, r8, 0x10, r7, 0x1)
r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xfc77, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x2}, 0x50)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000940)={&(0x7f00000005c0)="434e87b3323a389a91a42c8c4904431422409460ce80916b66af90f9f00b0b", &(0x7f0000000800)=""/132, &(0x7f0000000600)="0e5519541e282fc1c17ca1b30727bd562c95abb2aeb729552295c788b3493f361cbb98dd2a", &(0x7f0000000640)="fd", 0xf8, r11, 0x4}, 0x38)

1.810928921s ago: executing program 8 (id=7289):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r0 = socket$kcm(0xa, 0x1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000009000000000000000200000000000000", @ANYRES32=0x1, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r3 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0xc)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00000}, 0x94)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x0, 0xca, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
close(r6)
recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x0)
r8 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x40000000000, 0x90000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xb}, 0x0, 0x8, 0x0, 0x7, 0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfff}, 0xffffffffffffffff, 0x5, r8, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85feff0fc9"], 0x0}, 0x90)
r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000200)=ANY=[@ANYRES8=r6, @ANYRES8=r9], 0x12)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)
sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x80, 0x0}, 0x20000000)
sendmsg$kcm(r0, &(0x7f0000002ec0)={&(0x7f0000000580)=@l2tp6={0xa, 0x0, 0x0, @remote, 0x101, 0x4000}, 0x80, 0x0}, 0x20000804)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xa, &(0x7f0000000600)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0xf02e}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @generic={0x40, 0x7, 0x7, 0x0, 0x1ff}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="9e36d448b388dd965f7a3312779a", 0x0, 0x0, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.810703301s ago: executing program 7 (id=7290):
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001200)='./cgroup/syz0\x00', 0x200002, 0x0)
openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000000), 0x2, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
r2 = openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@fallback=r2, 0xe, 0x5da08f7897ff444f, 0x7ff, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000280)}, 0x40)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x80, 0x0, 0x0, 0x4, 0x40530, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$kcm(0x2, 0x200000000000003, 0x106)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x2b, 0x1, 0x0)
close(r4)
r5 = socket$kcm(0x2, 0x1, 0x84)
sendmsg$inet(r5, &(0x7f00000007c0)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000900)=[{&(0x7f0000000080)="92", 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x158}, 0x40)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000080), 0x2cb)
close(r4)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="d8000000200081044e81f782db44b90402000004000055a1180015000f00142603600e1209000a0000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970100040000", 0x1c}], 0x1}, 0x4000040)

1.734714034s ago: executing program 4 (id=7291):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$kcm(0x2, 0x2, 0x73)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="8000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{r2}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x11, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ff1000b703000008000000b70400000300000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10)
sendmsg$inet(r1, &(0x7f0000000580)={&(0x7f00000000c0)={0x4, 0x0, @loopback}, 0x10, 0x0}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000780)="2e00000011008188040f46ecdb4cb9cca7480ef413000000e3bd6efb440009000e000a400d000000ba80000054eb", 0x2e}], 0x1}, 0x6400000c)

1.675677657s ago: executing program 6 (id=7292):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="d8000000200081044e81f782db44b90402000000e8fe450f55a1182015001800142603600e120900100000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8cbf7a7ff4841ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4d180a54f14f00004d9db22fe7c9f8775730d16a4683f1aea4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace91ed0bffd6e4edef3d93452a92954b43370e00"/216, 0xd8}], 0x1}, 0x0)

1.547212802s ago: executing program 7 (id=7293):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63fc80fc020c2f00db5b686158bbcfe8875a06030000002300"/48], 0xfdef)
r0 = socket$kcm(0x2, 0x3, 0x84)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x20000, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2})
ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000180)=[{0x20, 0x4, 0x0, 0xfffff004}, {0x6}]})
sendmsg$inet(r0, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000300)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @local, @loopback}}}], 0x20}, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={0x1}, 0x4)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000380)='./file0\x00', 0x0, 0x10}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x8001, 0x6, 0xf, 0x3, 0x1, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x0, 0x8}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001000000", @ANYRES32, @ANYBLOB="00000000000000000200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_subtree(r6, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r7, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5)

1.544412853s ago: executing program 8 (id=7301):
r0 = getpid()
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x3}, 0x0, 0x5, 0x43a1bd76, 0x7, 0x9, 0x800006, 0x2}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000000)="b9158edfaa57fef007fd65580000ff", 0x0, 0x1dc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.475210456s ago: executing program 6 (id=7294):
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xff, 0x0, 0x0, 0xf8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0xc8, 0x9, 0x0, 0xffffffffffffffff, 0x647}, 0x0, 0x11, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0xfe, 0x0, 0x0, 0x5, 0x0, 0x0, 0x800, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000100)}, 0x740b, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x100000, 0x0, 0x4}, 0xffffffffffffffff, 0x40000008000, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe8000000000"], 0xfdef)
write$cgroup_subtree(r2, &(0x7f0000000000), 0xffc0)

1.473043146s ago: executing program 4 (id=7303):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x2000000000000000, &(0x7f00000002c0)=ANY=[@ANYBLOB="0600000004000000060000000306000000000000dedafdda7ae9e4e010fabfd7218c1795abffe66476ad8e1c85e456681f05420d057e1a8faeb032", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000680)='sched_switch\x00', r2}, 0x18)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x24, 0x0, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000100), 0x200df000, r1, 0x0, 0x800000000}, 0x38)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$unix(r3, &(0x7f0000001580)={&(0x7f0000000100)=@abs={0x1, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f0000001540)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18, 0xc000}, 0x4b1c1a0c5af29ba2)
r4 = socket$kcm(0x2, 0xa, 0x2)
r5 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="9f000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7811e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d00020008000140010000009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff55e461247604821d35c86ee54bbab3eaf8956e2ca426", 0x9f}], 0x1}, 0x850)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x0, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = socket$kcm(0x1e, 0x5, 0x0)
recvmsg(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000200)=""/132, 0x84}], 0x1}, 0x40)
ioctl$SIOCSIFHWADDR(r4, 0x8916, &(0x7f00000000c0)={'veth0_to_team\x00', @random="020000000001"})

1.406895378s ago: executing program 7 (id=7295):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
close(r0)
r1 = socket$kcm(0xa, 0x2, 0x88)
perf_event_open(0x0, 0x0, 0x6, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x4110, 0x0, 0x1, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000016c0)=@base={0x1f, 0x0, 0x0, 0x2000}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100030000009500000000000000bf71000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x8, 0xf7, &(0x7f0000001e40)=""/4093, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x42}, 0x21)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000340)={&(0x7f00000000c0)=@in6={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, 0x80, 0x0}, 0x200ce0c0)
write$cgroup_devices(r0, 0x0, 0x97ff)

1.278109564s ago: executing program 6 (id=7296):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x10, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000000f000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.119289241s ago: executing program 8 (id=7297):
r0 = socket$kcm(0x23, 0x5, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0)
ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f00000001c0)=0x8)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
recvmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000280)=""/238, 0xee}], 0x1}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x113, 0x3, 0x0, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x4000000)

1.062737023s ago: executing program 7 (id=7298):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.events\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="1700000014006b81566463cc7a43a9de280a5f768e7e00", 0x17}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r2 = socket$kcm(0x2, 0x2, 0x0)
close(r2)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$kcm(0xa, 0x2, 0x73)
setsockopt$sock_attach_bpf(r2, 0x1, 0x2e, &(0x7f0000000640)=r0, 0x4)
recvmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0)

806.526165ms ago: executing program 6 (id=7299):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0)
close(r0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xd, 0x4, 0x2}, 0x50)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@o_path={&(0x7f0000000140)='./file0\x00', r0}, 0x18)
r1 = socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0xfffffffffffffff7, 0x4}, 0x3442, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d08000b000000e8fe55a1180015000600142603600e1209000d00e8030000a80016000a0003", 0x37}], 0x1}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x1, &(0x7f0000000200)=ANY=[@ANYRESDEC=r1], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x2f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7429}, 0x94)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="e0", 0x1}], 0x1}, 0xc000)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
openat$tun(0xffffffffffffff9c, 0x0, 0x123001, 0x0)
socket$kcm(0x10, 0x2, 0x4)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.sched_load_balance\x00', 0x2, 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x2, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100980000009500000000000000b7020000000000007b9af8ff00000000b509000040020000dba8f8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018290000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$cgroup_int(r3, &(0x7f00000000c0)=0x100000000, 0x12)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0xfdef)
r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
r8 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r7}, 0x8)
close(r8)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r8, 0x0, 0x0}, 0x10)
openat$cgroup_netprio_ifpriomap(r8, &(0x7f0000000080), 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe5538250015000600149b0000001208000313eba96240a8002b", 0x33}], 0x1}, 0x80)

712.777929ms ago: executing program 4 (id=7300):
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001200)='./cgroup/syz0\x00', 0x200002, 0x0)
openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000000), 0x2, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
r2 = openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@fallback=r2, 0xe, 0x5da08f7897ff444f, 0x7ff, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000280)}, 0x40)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x80, 0x0, 0x0, 0x4, 0x40530, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$kcm(0x2, 0x200000000000003, 0x106)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x2b, 0x1, 0x0)
close(r4)
r5 = socket$kcm(0x2, 0x1, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x94)
sendmsg$inet(r5, &(0x7f00000007c0)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000900)=[{&(0x7f0000000080)="92", 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x158}, 0x40)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000080), 0x2cb)
close(r4)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="d8000000200081044e81f782db44b90402000004000055a1180015000f00142603600e1209000a0000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970100040000", 0xd8}], 0x1}, 0x4000040)

505.695597ms ago: executing program 7 (id=7302):
r0 = socket$kcm(0x10, 0x3, 0x10)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020032000b35d25a806f8c6394f90224fc602f0009000a740200053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, r3, 0xa)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x18}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1a}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xa, 0x9}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0x1, 0x0, 0x0}, 0x10)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
close(r6)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x88001)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002f000b12d25a80648c2594f90124fc60100c134002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

489.035438ms ago: executing program 4 (id=7304):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r0}, 0x18)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={&(0x7f0000000200), 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, r2, 0xa)
r3 = socket$kcm(0x10, 0x2, 0x4)
close(r3)
r4 = socket$kcm(0xa, 0x922000000003, 0x11)
sendmsg$kcm(r4, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000000), 0x4c00}], 0x1}, 0x0)
recvmsg$kcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000000340)=""/4106, 0x100a}], 0x1}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d86e17aa31076b876c1d0000037ea60864160af36504001a0038001d00120000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f4d4938037e786a6d0bdd7fcf50e4509c5bb5b64f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x30}, 0x7e8166965e22236a)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, 0x0}, 0x40010160)
socket$kcm(0xa, 0x5, 0x0)
perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0xb}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d80)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
r5 = socket$kcm(0x15, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000000400000004000000050000010040", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc)
setsockopt$sock_attach_bpf(r5, 0x114, 0x8, 0x0, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94)

219.60661ms ago: executing program 6 (id=7305):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f00000003c0)="7993ff01190000e5ffa53b000e8f", 0x0, 0x400, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50)

79.205496ms ago: executing program 4 (id=7306):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1f00000004000000060000000700000080130000", @ANYRES32, @ANYBLOB="0000000000000000008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000001"], 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000280), 0x84, r1}, 0x38)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x15}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r0, 0x58, &(0x7f0000000180)}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x2, &(0x7f0000000280)=@raw=[@map_fd={0x18, 0x3, 0x1, 0x0, r0}], &(0x7f00000002c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x1, 0x9f2, 0x6}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000380)=[{0x5, 0x1, 0x6, 0xa}, {0x0, 0x1, 0x4, 0x6}, {0x2, 0x1, 0xd, 0x6}, {0x0, 0x3, 0xe, 0xc}], 0x10, 0x4}, 0x94)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, &(0x7f0000000080)={'batadv0\x00'})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1})
openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2441, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0)
ioctl$TUNSETIFF(r3, 0x400454da, &(0x7f0000000140)={'batadv0\x00'})
r4 = socket$kcm(0xa, 0x2, 0x88)
recvmsg$kcm(r4, &(0x7f0000000540)={&(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000440)=[{0x0}], 0x1}, 0x50)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1303000069"], 0xfe33)
sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f00000000c0)=@in6={0xa, 0x4e23, 0x10, @remote, 0x5}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)="0de548b6a3ae0e607dd40867f0a4", 0x4}], 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000d0100000010000043c30000000000000000000000c288000e01000088640000"], 0x28}, 0x40)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000240)={'\x00', 0x52d35ce30131f272})
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfe33)

5.129659ms ago: executing program 6 (id=7307):
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0x84000, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x1, 0x2b4}, 0x0, 0x0, 0xfffffff5, 0x9, 0x8, 0x20009, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000100)=r3, 0x4)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x4080, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2081, 0x0)
ioctl$TUNSETIFF(r4, 0x400454da, &(0x7f0000000080)={'ip6_vti0\x00', 0x4000})
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1})
openat$tun(0xffffffffffffff9c, 0x0, 0x2441, 0x0)
ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000200)=r3)
r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x103442, 0x0)
ioctl$TUNSETIFF(r5, 0x400454da, 0x0)
r6 = socket$kcm(0xa, 0x2, 0x88)
perf_event_open(0x0, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0)
recvmsg$kcm(r6, 0x0, 0x50)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
close(r1)
r7 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
syz_clone(0x84011, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r3}, 0x8)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, &(0x7f0000000380)=ANY=[@ANYRESHEX=r7])
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50)
ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x40047451, &(0x7f00000002c0))
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0xd, &(0x7f0000000480)=ANY=[@ANYBLOB="b40000000000000061117c0000000000c450000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000300009ee18723d85de69e0085100000080000009500000000000000"], &(0x7f0000000440)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94)
syz_clone(0x410a4400, 0x0, 0xfffffffffffffd56, 0x0, 0x0, 0xffffffffffffffff)
syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0)
syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0)

0s ago: executing program 7 (id=7308):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
close(r0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x8090)
perf_event_open(0x0, 0x0, 0x6, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x4110, 0x0, 0x1, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000016c0)=@base={0x1f, 0x0, 0x0, 0x2000}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100030000009500000000000000bf71000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x8, 0xf7, &(0x7f0000001e40)=""/4093, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x42}, 0x21)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)=@in6={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, 0x80, 0x0}, 0x200ce0c0)
write$cgroup_devices(r0, 0x0, 0x97ff)

kernel console output (not intermixed with test programs):

hwframe+0x68/0xd2
[  776.331211][T20895] RIP: 0033:0x7fac8258e15c
[  776.335642][T20895] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  776.355355][T20895] RSP: 002b:00007fac8348e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  776.363792][T20895] RAX: ffffffffffffffda RBX: 00007fac827e5fa0 RCX: 00007fac8258e15c
[  776.371793][T20895] RDX: 000000000000000f RSI: 00007fac8348e0a0 RDI: 0000000000000006
[  776.379793][T20895] RBP: 00007fac8348e090 R08: 0000000000000000 R09: 0000000000000000
[  776.387785][T20895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  776.395779][T20895] R13: 00007fac827e6038 R14: 00007fac827e5fa0 R15: 00007ffea2a33378
[  776.403787][T20895]  </TASK>
[  776.601184][T20905] netlink: 'syz.6.6002': attribute type 9 has an invalid length.
[  776.609569][T20905] netlink: 154020 bytes leftover after parsing attributes in process `syz.6.6002'.
[  776.772030][T20913] netlink: 'syz.7.6005': attribute type 21 has an invalid length.
[  776.788456][T20913] netlink: 156 bytes leftover after parsing attributes in process `syz.7.6005'.
[  776.890271][T20913] netlink: 'syz.7.6005': attribute type 22 has an invalid length.
[  777.460537][T20949] FAULT_INJECTION: forcing a failure.
[  777.460537][T20949] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  777.514320][T20949] CPU: 1 PID: 20949 Comm: syz.7.6014 Not tainted syzkaller #0
[  777.521886][T20949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  777.531986][T20949] Call Trace:
[  777.535303][T20949]  <TASK>
[  777.538279][T20949]  dump_stack_lvl+0x16c/0x230
[  777.543023][T20949]  ? show_regs_print_info+0x20/0x20
[  777.548296][T20949]  ? load_image+0x3b0/0x3b0
[  777.552865][T20949]  ? __might_fault+0xaa/0x120
[  777.557595][T20949]  ? __lock_acquire+0x7c80/0x7c80
[  777.562670][T20949]  should_fail_ex+0x39d/0x4d0
[  777.567402][T20949]  _copy_to_user+0x2f/0xa0
[  777.571892][T20949]  bpf_test_finish+0x19a/0x620
[  777.576722][T20949]  ? convert_skb_to___skb+0x420/0x420
[  777.582496][T20949]  ? _copy_from_user+0xa5/0xe0
[  777.587313][T20949]  ? bpf_test_init+0x134/0x150
[  777.595623][T20949]  bpf_prog_test_run_xdp+0x7fa/0xfa0
[  777.601012][T20949]  ? dev_put+0x80/0x80
[  777.605170][T20949]  ? dev_put+0x80/0x80
[  777.609307][T20949]  bpf_prog_test_run+0x321/0x390
[  777.614306][T20949]  __sys_bpf+0x440/0x800
[  777.618621][T20949]  ? bpf_link_show_fdinfo+0x350/0x350
[  777.624078][T20949]  ? lock_chain_count+0x20/0x20
[  777.629256][T20949]  __x64_sys_bpf+0x7c/0x90
[  777.633820][T20949]  do_syscall_64+0x55/0xb0
[  777.637803][T20955] netlink: 189348 bytes leftover after parsing attributes in process `syz.4.6019'.
[  777.638303][T20949]  ? clear_bhb_loop+0x40/0x90
[  777.652335][T20949]  ? clear_bhb_loop+0x40/0x90
[  777.657069][T20949]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  777.663013][T20949] RIP: 0033:0x7f34be18f749
[  777.667476][T20949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  777.687136][T20949] RSP: 002b:00007f34bc3d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  777.695623][T20949] RAX: ffffffffffffffda RBX: 00007f34be3e6090 RCX: 00007f34be18f749
[  777.703669][T20949] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a
[  777.711702][T20949] RBP: 00007f34bc3d5090 R08: 0000000000000000 R09: 0000000000000000
[  777.719749][T20949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  777.727771][T20949] R13: 00007f34be3e6128 R14: 00007f34be3e6090 R15: 00007ffde66b9a98
[  777.735817][T20949]  </TASK>
[  778.086723][T20967] netlink: 209820 bytes leftover after parsing attributes in process `syz.5.6025'.
[  778.109292][T20967] netlink: 'syz.5.6025': attribute type 9 has an invalid length.
[  778.682366][T20989] netlink: 189348 bytes leftover after parsing attributes in process `syz.5.6031'.
[  778.694750][T20990] netlink: 'syz.4.6029': attribute type 1 has an invalid length.
[  778.721005][T20990] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.6029'.
[  779.664386][T21006] netlink: 'syz.5.6037': attribute type 25 has an invalid length.
[  779.681288][T21006] netlink: 'syz.5.6037': attribute type 28 has an invalid length.
[  780.172260][T21027] netlink: 189348 bytes leftover after parsing attributes in process `syz.6.6043'.
[  780.475148][T21033] netlink: 'syz.7.6044': attribute type 22 has an invalid length.
[  780.518047][T21033] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6044'.
[  781.024704][T21053] syzkaller1: tun_chr_ioctl cmd 1074025677
[  781.036089][T21053] syzkaller1: linktype set to 823
[  781.168091][T21062] netlink: 'syz.5.6056': attribute type 10 has an invalid length.
[  781.190664][T21070] netlink: 189348 bytes leftover after parsing attributes in process `syz.7.6059'.
[  781.196285][T21062] netlink: 55 bytes leftover after parsing attributes in process `syz.5.6056'.
[  782.378393][T21085] pimreg1: tun_chr_ioctl cmd 1074025677
[  782.400474][T21085] pimreg1: linktype set to 769
[  782.733098][T21094] netlink: 'syz.4.6067': attribute type 9 has an invalid length.
[  782.749311][T21094] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6067'.
[  782.964477][T21104] tap0: tun_chr_ioctl cmd 1074025680
[  783.344809][T21110] netlink: 'syz.7.6072': attribute type 10 has an invalid length.
[  783.354162][T21110] netlink: 55 bytes leftover after parsing attributes in process `syz.7.6072'.
[  784.153063][T21117] netlink: 'syz.5.6074': attribute type 5 has an invalid length.
[  784.163589][T21123] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6073'.
[  784.371909][T21134] netlink: 'syz.4.6079': attribute type 2 has an invalid length.
[  784.388333][T21134] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6079'.
[  784.547040][T21132] pimreg1: tun_chr_ioctl cmd 1074025677
[  784.566374][T21132] pimreg1: linktype set to 769
[  784.657578][T21137] netlink: set zone limit has 8 unknown bytes
[  785.079891][T21150] tap0: tun_chr_ioctl cmd 1074025680
[  785.312878][T21156] netlink: 'syz.6.6087': attribute type 5 has an invalid length.
[  785.908214][T21162] netlink: 'syz.6.6089': attribute type 10 has an invalid length.
[  785.958937][T21162] netlink: 55 bytes leftover after parsing attributes in process `syz.6.6089'.
[  787.428712][T21176] netlink: 'syz.4.6093': attribute type 21 has an invalid length.
[  787.440672][T21176] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6093'.
[  787.493863][T21189] pimreg1: tun_chr_ioctl cmd 1074025677
[  787.506157][T21189] pimreg1: linktype set to 769
[  787.830151][T21195] netlink: 'syz.7.6099': attribute type 5 has an invalid length.
[  787.846635][T21193] netlink: 'syz.6.6106': attribute type 10 has an invalid length.
[  787.931432][T21193] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  787.984281][T21198] IPv6: NLM_F_REPLACE set, but no existing node found!
[  787.991618][T21191] tap0: tun_chr_ioctl cmd 1074025680
[  788.834881][T21218] netlink: 'syz.5.6115': attribute type 21 has an invalid length.
[  789.110480][T21222] netlink: 'syz.4.6108': attribute type 10 has an invalid length.
[  789.118972][T21222] netlink: 55 bytes leftover after parsing attributes in process `syz.4.6108'.
[  790.013469][T21232] pimreg1: tun_chr_ioctl cmd 1074025677
[  790.036424][T21232] pimreg1: linktype set to 769
[  790.289642][T21238] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  790.867521][T21244] netlink: 'syz.4.6114': attribute type 10 has an invalid length.
[  790.921623][T21244] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  790.988431][T21245] IPv6: NLM_F_REPLACE set, but no existing node found!
[  791.158350][T21255] netlink: 65047 bytes leftover after parsing attributes in process `syz.7.6120'.
[  791.478076][T21259] netlink: 'syz.7.6121': attribute type 21 has an invalid length.
[  791.515998][T21259] FAULT_INJECTION: forcing a failure.
[  791.515998][T21259] name failslab, interval 1, probability 0, space 0, times 0
[  791.576489][T21259] CPU: 1 PID: 21259 Comm: syz.7.6121 Not tainted syzkaller #0
[  791.584147][T21259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  791.594448][T21259] Call Trace:
[  791.597777][T21259]  <TASK>
[  791.600754][T21259]  dump_stack_lvl+0x16c/0x230
[  791.605509][T21259]  ? show_regs_print_info+0x20/0x20
[  791.610769][T21259]  ? load_image+0x3b0/0x3b0
[  791.615338][T21259]  ? lwtunnel_valid_encap_type+0x27e/0x600
[  791.621236][T21259]  should_fail_ex+0x39d/0x4d0
[  791.625989][T21259]  should_failslab+0x9/0x20
[  791.630555][T21259]  slab_pre_alloc_hook+0x59/0x310
[  791.635657][T21259]  ? rt6_stats_seq_show+0x250/0x250
[  791.640919][T21259]  ? fib6_new_table+0x95/0x290
[  791.645758][T21259]  __kmem_cache_alloc_node+0x53/0x260
[  791.651212][T21259]  ? fib6_new_table+0x95/0x290
[  791.656135][T21259]  kmalloc_trace+0x2a/0xe0
[  791.660635][T21259]  fib6_new_table+0x95/0x290
[  791.665298][T21259]  ip6_route_info_create+0x42a/0x1200
[  791.670761][T21259]  ip6_route_add+0x28/0x130
[  791.675372][T21259]  inet6_rtm_newroute+0x223/0x1b40
[  791.680593][T21259]  ? ipv6_route_sysctl_table_size+0x50/0x50
[  791.686584][T21259]  ? __mutex_trylock_common+0x153/0x250
[  791.692207][T21259]  ? trace_raw_output_contention_end+0xd0/0xd0
[  791.698437][T21259]  ? rcu_is_watching+0x15/0xb0
[  791.703260][T21259]  ? trace_contention_end+0x39/0xe0
[  791.708605][T21259]  ? __mutex_lock+0x304/0xcc0
[  791.713383][T21259]  ? ipv6_route_sysctl_table_size+0x50/0x50
[  791.719334][T21259]  rtnetlink_rcv_msg+0x7c7/0xf10
[  791.724326][T21259]  ? rtnetlink_rcv_msg+0x1eb/0xf10
[  791.729505][T21259]  ? rtnetlink_bind+0x80/0x80
[  791.734253][T21259]  ? perf_tp_event+0x12d7/0x13a0
[  791.739276][T21259]  ? perf_trace_run_bpf_submit+0x1c0/0x1c0
[  791.745138][T21259]  ? lockdep_hardirqs_on_prepare+0x400/0x760
[  791.751274][T21259]  ? __dev_queue_xmit+0x245/0x35a0
[  791.756502][T21259]  ? __dev_queue_xmit+0x245/0x35a0
[  791.761653][T21259]  ? __dev_queue_xmit+0x1449/0x35a0
[  791.766905][T21259]  ? perf_trace_run_bpf_submit+0xf4/0x1c0
[  791.772666][T21259]  ? perf_trace_lock+0x2ed/0x380
[  791.777650][T21259]  ? __copy_skb_header+0xa7/0x550
[  791.782885][T21259]  netlink_rcv_skb+0x216/0x480
[  791.787678][T21259]  ? rtnetlink_bind+0x80/0x80
[  791.792386][T21259]  ? netlink_ack+0x1110/0x1110
[  791.797203][T21259]  ? __lock_acquire+0x7c80/0x7c80
[  791.802276][T21259]  ? netlink_deliver_tap+0x2e/0x1b0
[  791.807511][T21259]  netlink_unicast+0x751/0x8d0
[  791.812596][T21259]  netlink_sendmsg+0x8c1/0xbe0
[  791.817400][T21259]  ? netlink_getsockopt+0x580/0x580
[  791.822628][T21259]  ? aa_sock_msg_perm+0x94/0x150
[  791.827597][T21259]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  791.833065][T21259]  ? security_socket_sendmsg+0x80/0xa0
[  791.838639][T21259]  ? netlink_getsockopt+0x580/0x580
[  791.843863][T21259]  ____sys_sendmsg+0x5bf/0x950
[  791.848666][T21259]  ? __asan_memset+0x22/0x40
[  791.853290][T21259]  ? __sys_sendmsg_sock+0x30/0x30
[  791.858492][T21259]  ? __import_iovec+0x5f2/0x860
[  791.863635][T21259]  ? import_iovec+0x73/0xa0
[  791.868243][T21259]  ___sys_sendmsg+0x220/0x290
[  791.873002][T21259]  ? __sys_sendmsg+0x270/0x270
[  791.877921][T21259]  ? __lock_acquire+0x7c80/0x7c80
[  791.883017][T21259]  __se_sys_sendmsg+0x1a5/0x270
[  791.887900][T21259]  ? __x64_sys_sendmsg+0x80/0x80
[  791.892889][T21259]  ? lockdep_hardirqs_on+0x98/0x150
[  791.898397][T21259]  do_syscall_64+0x55/0xb0
[  791.902838][T21259]  ? clear_bhb_loop+0x40/0x90
[  791.907576][T21259]  ? clear_bhb_loop+0x40/0x90
[  791.912305][T21259]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  791.918227][T21259] RIP: 0033:0x7f34be18f749
[  791.922669][T21259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  791.942310][T21259] RSP: 002b:00007f34bc3f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  791.950848][T21259] RAX: ffffffffffffffda RBX: 00007f34be3e5fa0 RCX: 00007f34be18f749
[  791.958843][T21259] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000d
[  791.967304][T21259] RBP: 00007f34bc3f6090 R08: 0000000000000000 R09: 0000000000000000
[  791.975301][T21259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  791.983394][T21259] R13: 00007f34be3e6038 R14: 00007f34be3e5fa0 R15: 00007ffde66b9a98
[  791.991454][T21259]  </TASK>
[  793.266277][T21294] netlink: 'syz.5.6134': attribute type 10 has an invalid length.
[  793.288358][T21294] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  793.997413][T21324] netlink: 'syz.6.6147': attribute type 10 has an invalid length.
[  794.008157][T21324] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  795.051735][T21330] netlink: 'syz.7.6152': attribute type 2 has an invalid length.
[  795.066485][T21330] netlink: 14 bytes leftover after parsing attributes in process `syz.7.6152'.
[  795.077572][T21330] FAULT_INJECTION: forcing a failure.
[  795.077572][T21330] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  795.091560][T21330] CPU: 0 PID: 21330 Comm: syz.7.6152 Not tainted syzkaller #0
[  795.099143][T21330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  795.109262][T21330] Call Trace:
[  795.112613][T21330]  <TASK>
[  795.115584][T21330]  dump_stack_lvl+0x16c/0x230
[  795.120328][T21330]  ? show_regs_print_info+0x20/0x20
[  795.125593][T21330]  ? load_image+0x3b0/0x3b0
[  795.130162][T21330]  ? __might_fault+0xaa/0x120
[  795.134900][T21330]  ? __lock_acquire+0x7c80/0x7c80
[  795.139989][T21330]  should_fail_ex+0x39d/0x4d0
[  795.144728][T21330]  _copy_from_user+0x2f/0xe0
[  795.149383][T21330]  kstrtouint_from_user+0xc2/0x150
[  795.154539][T21330]  ? kstrtol_from_user+0x150/0x150
[  795.159695][T21330]  proc_fail_nth_write+0x89/0x240
[  795.164747][T21330]  ? proc_fail_nth_read+0x250/0x250
[  795.169986][T21330]  ? proc_fail_nth_read+0x250/0x250
[  795.175212][T21330]  vfs_write+0x288/0x940
[  795.179587][T21330]  ? file_end_write+0x250/0x250
[  795.184569][T21330]  ? __fget_files+0x28/0x4d0
[  795.189294][T21330]  ? __fget_files+0x44a/0x4d0
[  795.194021][T21330]  ? __fdget_pos+0x2a3/0x330
[  795.198650][T21330]  ? ksys_write+0x75/0x250
[  795.203116][T21330]  ksys_write+0x147/0x250
[  795.207475][T21330]  ? __ia32_sys_read+0x90/0x90
[  795.212265][T21330]  ? lockdep_hardirqs_on+0x98/0x150
[  795.217492][T21330]  do_syscall_64+0x55/0xb0
[  795.221926][T21330]  ? clear_bhb_loop+0x40/0x90
[  795.226735][T21330]  ? clear_bhb_loop+0x40/0x90
[  795.231441][T21330]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  795.237353][T21330] RIP: 0033:0x7f34be18e1ff
[  795.241843][T21330] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  795.261790][T21330] RSP: 002b:00007f34bc3f6030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  795.270319][T21330] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f34be18e1ff
[  795.278310][T21330] RDX: 0000000000000001 RSI: 00007f34bc3f60a0 RDI: 0000000000000004
[  795.286294][T21330] RBP: 00007f34bc3f6090 R08: 0000000000000000 R09: 0000000000000000
[  795.294294][T21330] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
[  795.302287][T21330] R13: 00007f34be3e6038 R14: 00007f34be3e5fa0 R15: 00007ffde66b9a98
[  795.310296][T21330]  </TASK>
[  795.379134][T21333] syzkaller0: entered promiscuous mode
[  795.392966][T21333] syzkaller0: entered allmulticast mode
[  795.454512][T18730] Bluetooth: hci5: unexpected subevent 0x0e length: 150 > 15
[  795.823374][T21356] netlink: 'syz.5.6160': attribute type 10 has an invalid length.
[  795.832079][T21356] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  796.542665][T21385] netlink: 'syz.7.6171': attribute type 10 has an invalid length.
[  796.557619][T21385] hsr0: left promiscuous mode
[  796.599355][T21385] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  796.715516][T21387] netlink: 'syz.6.6172': attribute type 10 has an invalid length.
[  797.113413][T21399] netlink: 'syz.7.6178': attribute type 1 has an invalid length.
[  797.123623][T21399] netlink: 'syz.7.6178': attribute type 10 has an invalid length.
[  797.174716][T21399] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  797.225213][T21404] netlink: 'syz.4.6181': attribute type 10 has an invalid length.
[  797.236922][T21404] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  797.392186][T21419] netlink: 'syz.6.6183': attribute type 2 has an invalid length.
[  797.401423][T21419] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6183'.
[  797.450432][T21419] FAULT_INJECTION: forcing a failure.
[  797.450432][T21419] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  797.475512][T21419] CPU: 1 PID: 21419 Comm: syz.6.6183 Not tainted syzkaller #0
[  797.483064][T21419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  797.493173][T21419] Call Trace:
[  797.496467][T21419]  <TASK>
[  797.499414][T21419]  dump_stack_lvl+0x16c/0x230
[  797.504126][T21419]  ? show_regs_print_info+0x20/0x20
[  797.509702][T21419]  ? load_image+0x3b0/0x3b0
[  797.514255][T21419]  ? __lock_acquire+0x7c80/0x7c80
[  797.519304][T21419]  ? snprintf+0xdb/0x120
[  797.523568][T21419]  should_fail_ex+0x39d/0x4d0
[  797.528285][T21419]  _copy_to_user+0x2f/0xa0
[  797.532724][T21419]  simple_read_from_buffer+0xe7/0x150
[  797.538143][T21419]  proc_fail_nth_read+0x1e3/0x250
[  797.543279][T21419]  ? proc_fault_inject_write+0x340/0x340
[  797.549132][T21419]  ? fsnotify_perm+0x271/0x5e0
[  797.553921][T21419]  ? proc_fault_inject_write+0x340/0x340
[  797.559577][T21419]  vfs_read+0x27e/0x920
[  797.563851][T21419]  ? kernel_read+0x1e0/0x1e0
[  797.568466][T21419]  ? __fget_files+0x28/0x4d0
[  797.573078][T21419]  ? __fget_files+0x44a/0x4d0
[  797.577796][T21419]  ? __fdget_pos+0x2a3/0x330
[  797.582407][T21419]  ? ksys_read+0x75/0x250
[  797.586774][T21419]  ksys_read+0x147/0x250
[  797.591049][T21419]  ? vfs_write+0x940/0x940
[  797.595508][T21419]  ? lockdep_hardirqs_on+0x98/0x150
[  797.600732][T21419]  do_syscall_64+0x55/0xb0
[  797.605168][T21419]  ? clear_bhb_loop+0x40/0x90
[  797.609862][T21419]  ? clear_bhb_loop+0x40/0x90
[  797.614563][T21419]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  797.620612][T21419] RIP: 0033:0x7f0c0af8e15c
[  797.625071][T21419] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  797.644811][T21419] RSP: 002b:00007f0c091f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  797.653255][T21419] RAX: ffffffffffffffda RBX: 00007f0c0b1e5fa0 RCX: 00007f0c0af8e15c
[  797.661253][T21419] RDX: 000000000000000f RSI: 00007f0c091f60a0 RDI: 0000000000000004
[  797.669244][T21419] RBP: 00007f0c091f6090 R08: 0000000000000000 R09: 0000000000000000
[  797.677233][T21419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  797.685227][T21419] R13: 00007f0c0b1e6038 R14: 00007f0c0b1e5fa0 R15: 00007fffde48f938
[  797.693236][T21419]  </TASK>
[  798.342924][T21445] validate_nla: 1 callbacks suppressed
[  798.342944][T21445] netlink: 'syz.6.6194': attribute type 10 has an invalid length.
[  798.375086][T21445] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  798.648728][T21456] netlink: 16098 bytes leftover after parsing attributes in process `syz.6.6198'.
[  799.185515][T21475] netlink: 'syz.5.6206': attribute type 2 has an invalid length.
[  799.194454][T21475] netlink: 51 bytes leftover after parsing attributes in process `syz.5.6206'.
[  799.330549][T21482] netlink: 'syz.4.6210': attribute type 10 has an invalid length.
[  799.343304][T21482] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  799.522967][T21485] tap0: tun_chr_ioctl cmd 1074025680
[  800.285633][T21500] netlink: 'syz.4.6216': attribute type 21 has an invalid length.
[  800.303976][T21500] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6216'.
[  801.029806][T21533] netlink: 'syz.4.6230': attribute type 3 has an invalid length.
[  801.037943][T21533] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6230'.
[  802.305476][T21562] netlink: 'syz.6.6241': attribute type 2 has an invalid length.
[  802.622112][T21570] netlink: 'syz.4.6245': attribute type 21 has an invalid length.
[  802.645478][T21570] netlink: 'syz.4.6245': attribute type 20 has an invalid length.
[  804.081740][T21598] netlink: 'syz.4.6254': attribute type 10 has an invalid length.
[  804.104214][T21598] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  804.380976][T21606] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.6258'.
[  805.548960][T21631] netlink: 'syz.6.6268': attribute type 10 has an invalid length.
[  805.573779][T21631] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  805.614194][    C1] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  806.468311][T21644] netlink: 209844 bytes leftover after parsing attributes in process `syz.6.6274'.
[  806.712399][T21650] netlink: 'syz.7.6272': attribute type 2 has an invalid length.
[  806.739466][T21650] netlink: 120 bytes leftover after parsing attributes in process `syz.7.6272'.
[  807.286051][T21656] netlink: 'syz.4.6277': attribute type 1 has an invalid length.
[  807.349214][T21659] netlink: 'syz.5.6279': attribute type 10 has an invalid length.
[  807.362268][T21659] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  807.573276][T21665] netlink: 129384 bytes leftover after parsing attributes in process `syz.6.6281'.
[  808.626882][T21702] netlink: 'syz.7.6285': attribute type 9 has an invalid length.
[  808.688404][T21703] netlink: 'syz.6.6286': attribute type 2 has an invalid length.
[  808.691894][T21702] netlink: 154020 bytes leftover after parsing attributes in process `syz.7.6285'.
[  808.697137][T21703] netlink: 120 bytes leftover after parsing attributes in process `syz.6.6286'.
[  809.226055][T21710] netlink: 16182 bytes leftover after parsing attributes in process `syz.5.6288'.
[  809.327680][T21707] delete_channel: no stack
[  809.440896][T21722] netlink: 209844 bytes leftover after parsing attributes in process `syz.7.6290'.
[  809.584962][T21731] netlink: 'syz.6.6293': attribute type 39 has an invalid length.
[  809.606312][T21729] netlink: 'syz.6.6293': attribute type 21 has an invalid length.
[  809.639278][T21729] netlink: 'syz.6.6293': attribute type 13 has an invalid length.
[  809.647990][T21729] netlink: 216 bytes leftover after parsing attributes in process `syz.6.6293'.
[  809.657972][T21727] netlink: 'syz.5.6291': attribute type 10 has an invalid length.
[  809.676173][T21727] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  810.191934][T21742] netlink: 'syz.5.6296': attribute type 2 has an invalid length.
[  810.202213][T21742] netlink: 120 bytes leftover after parsing attributes in process `syz.5.6296'.
[  810.279543][T21746] netlink: 'syz.6.6300': attribute type 1 has an invalid length.
[  810.342793][T21746] netlink: 112860 bytes leftover after parsing attributes in process `syz.6.6300'.
[  810.583239][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  810.596282][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  811.154858][T21767] netlink: 'syz.7.6307': attribute type 10 has an invalid length.
[  811.196405][T21767] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  811.819908][T21781] __nla_validate_parse: 2 callbacks suppressed
[  811.819951][T21781] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.6311'.
[  812.093250][T21788] netlink: 'syz.4.6310': attribute type 2 has an invalid length.
[  812.129682][T21788] netlink: 120 bytes leftover after parsing attributes in process `syz.4.6310'.
[  812.308464][T21795] FAULT_INJECTION: forcing a failure.
[  812.308464][T21795] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  812.341610][T21795] CPU: 1 PID: 21795 Comm: syz.4.6315 Not tainted syzkaller #0
[  812.349171][T21795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  812.359277][T21795] Call Trace:
[  812.362593][T21795]  <TASK>
[  812.365556][T21795]  dump_stack_lvl+0x16c/0x230
[  812.370479][T21795]  ? show_regs_print_info+0x20/0x20
[  812.375998][T21795]  ? load_image+0x3b0/0x3b0
[  812.380556][T21795]  ? __might_fault+0xaa/0x120
[  812.385294][T21795]  ? __lock_acquire+0x7c80/0x7c80
[  812.390373][T21795]  should_fail_ex+0x39d/0x4d0
[  812.395114][T21795]  _copy_to_user+0x2f/0xa0
[  812.399590][T21795]  bpf_test_finish+0x24b/0x620
[  812.404428][T21795]  ? convert_skb_to___skb+0x420/0x420
[  812.409855][T21795]  ? _copy_from_user+0xa5/0xe0
[  812.414677][T21795]  ? bpf_test_init+0x134/0x150
[  812.419490][T21795]  bpf_prog_test_run_xdp+0x7fa/0xfa0
[  812.424851][T21795]  ? dev_put+0x80/0x80
[  812.428985][T21795]  ? dev_put+0x80/0x80
[  812.433108][T21795]  bpf_prog_test_run+0x321/0x390
[  812.438100][T21795]  __sys_bpf+0x440/0x800
[  812.442388][T21795]  ? bpf_link_show_fdinfo+0x350/0x350
[  812.447823][T21795]  ? lock_chain_count+0x20/0x20
[  812.452723][T21795]  __x64_sys_bpf+0x7c/0x90
[  812.457219][T21795]  do_syscall_64+0x55/0xb0
[  812.461670][T21795]  ? clear_bhb_loop+0x40/0x90
[  812.466410][T21795]  ? clear_bhb_loop+0x40/0x90
[  812.471137][T21795]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  812.477082][T21795] RIP: 0033:0x7fac8258f749
[  812.481545][T21795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  812.501209][T21795] RSP: 002b:00007fac8348e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  812.509692][T21795] RAX: ffffffffffffffda RBX: 00007fac827e5fa0 RCX: 00007fac8258f749
[  812.517716][T21795] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a
[  812.525739][T21795] RBP: 00007fac8348e090 R08: 0000000000000000 R09: 0000000000000000
[  812.533785][T21795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  812.541892][T21795] R13: 00007fac827e6038 R14: 00007fac827e5fa0 R15: 00007ffea2a33378
[  812.550114][T21795]  </TASK>
[  812.671448][T21798] netlink: 'syz.6.6319': attribute type 10 has an invalid length.
[  812.703874][T21798] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  813.432735][T21820] netlink: 'syz.7.6327': attribute type 2 has an invalid length.
[  813.447528][T21820] netlink: 120 bytes leftover after parsing attributes in process `syz.7.6327'.
[  813.523706][T21821] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6328'.
[  813.671379][T21829] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  814.023382][T21840] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  815.082534][T21863] validate_nla: 3 callbacks suppressed
[  815.082556][T21863] netlink: 'syz.4.6346': attribute type 10 has an invalid length.
[  815.097418][T21863] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  830.473008][T21866] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  830.937026][T21878] IPv6: NLM_F_REPLACE set, but no existing node found!
[  831.122945][T18726] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  831.146213][T18726] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  831.154895][T18726] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  831.165100][T18726] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  831.174523][T18726] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  831.183736][T18726] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  831.235375][T21882] netlink: 'syz.7.6353': attribute type 10 has an invalid length.
[  831.268976][T21882] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  831.710915][T21893] netlink: 'syz.7.6357': attribute type 10 has an invalid length.
[  831.746252][T21893] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  831.815503][T21883] chnl_net:caif_netlink_parms(): no params data found
[  832.049671][T21899] netlink: 164 bytes leftover after parsing attributes in process `syz.6.6359'.
[  832.304764][T21883] bridge0: port 1(bridge_slave_0) entered blocking state
[  832.328291][T21883] bridge0: port 1(bridge_slave_0) entered disabled state
[  832.335661][T21883] bridge_slave_0: entered allmulticast mode
[  832.354044][T21883] bridge_slave_0: entered promiscuous mode
[  832.374044][T21883] bridge0: port 2(bridge_slave_1) entered blocking state
[  832.383159][T21883] bridge0: port 2(bridge_slave_1) entered disabled state
[  832.394359][T21883] bridge_slave_1: entered allmulticast mode
[  832.426356][T21883] bridge_slave_1: entered promiscuous mode
[  832.509956][T21883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  832.525460][T21883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  832.574317][T21913] IPv6: NLM_F_REPLACE set, but no existing node found!
[  832.591316][T21883] team0: Port device team_slave_0 added
[  832.601272][T21883] team0: Port device team_slave_1 added
[  832.641191][T21883] batman_adv: batadv0: Adding interface: batadv_slave_0
[  832.651457][T21883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  832.678958][T21883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  832.693872][T21883] batman_adv: batadv0: Adding interface: batadv_slave_1
[  832.701437][T21883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  832.727572][T21883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  832.773590][T21883] hsr_slave_0: entered promiscuous mode
[  832.780293][T21883] hsr_slave_1: entered promiscuous mode
[  832.787118][T21883] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  832.794733][T21883] Cannot create hsr debugfs directory
[  832.954591][T21883] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  832.964822][T21883] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  832.975234][T21883] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  832.986853][T21883] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  833.084774][T21883] 8021q: adding VLAN 0 to HW filter on device bond0
[  833.109553][T21883] 8021q: adding VLAN 0 to HW filter on device team0
[  833.121861][T21690] bridge0: port 1(bridge_slave_0) entered blocking state
[  833.129258][T21690] bridge0: port 1(bridge_slave_0) entered forwarding state
[  833.150110][T16807] bridge0: port 2(bridge_slave_1) entered blocking state
[  833.157346][T16807] bridge0: port 2(bridge_slave_1) entered forwarding state
[  833.226584][T18730] Bluetooth: hci0: command tx timeout
[  833.385063][T21883] 8021q: adding VLAN 0 to HW filter on device batadv0
[  833.641280][T21883] veth0_vlan: entered promiscuous mode
[  833.653751][T21883] veth1_vlan: entered promiscuous mode
[  833.687605][T21883] veth0_macvtap: entered promiscuous mode
[  833.698462][T21883] veth1_macvtap: entered promiscuous mode
[  833.719627][T21883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  833.731539][T21883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  833.741521][T21883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  833.752236][T21883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  833.762112][T21883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  833.772614][T21883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  833.785059][T21883] batman_adv: batadv0: Interface activated: batadv_slave_0
[  833.800879][T21883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  833.811874][T21883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  833.821922][T21883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  833.832711][T21883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  833.843105][T21883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  833.853626][T21883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  833.865267][T21883] batman_adv: batadv0: Interface activated: batadv_slave_1
[  833.880505][T21883] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  833.889889][T21883] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  833.898975][T21883] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  833.907892][T21883] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  833.997221][ T5961] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  834.005089][ T5961] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  834.040961][T21672] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  834.052051][T21672] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  834.518116][T21944] netlink: 'syz.8.6365': attribute type 10 has an invalid length.
[  834.591951][T21944] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  834.725653][T21949] netlink: 'syz.4.6368': attribute type 10 has an invalid length.
[  834.764172][T21949] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  835.281376][T21961] netlink: 'syz.4.6379': attribute type 22 has an invalid length.
[  835.297547][T18730] Bluetooth: hci0: command tx timeout
[  835.304475][T21961] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6379'.
[  835.892504][T21978] netlink: 'syz.6.6384': attribute type 10 has an invalid length.
[  835.916685][T21978] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  836.486382][T21992] netlink: 'syz.8.6392': attribute type 22 has an invalid length.
[  836.513263][T21992] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6392'.
[  836.550437][T21993] netlink: 'syz.4.6391': attribute type 10 has an invalid length.
[  836.627028][T21993] team0: Port device dummy0 added
[  837.198279][T22006] netlink: 'syz.8.6396': attribute type 10 has an invalid length.
[  837.217049][T22006] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  837.380874][T18730] Bluetooth: hci0: command tx timeout
[  837.936099][T22015] pimreg1: tun_chr_ioctl cmd 1074025677
[  837.966137][T22015] pimreg1: linktype set to 769
[  838.626339][T22029] netlink: 'syz.8.6404': attribute type 10 has an invalid length.
[  838.704691][T22029] bridge0: port 2(bridge_slave_1) entered disabled state
[  838.712622][T22029] bridge0: port 1(bridge_slave_0) entered disabled state
[  838.800303][T22029] bridge0: port 2(bridge_slave_1) entered blocking state
[  838.807626][T22029] bridge0: port 2(bridge_slave_1) entered forwarding state
[  838.815334][T22029] bridge0: port 1(bridge_slave_0) entered blocking state
[  838.822639][T22029] bridge0: port 1(bridge_slave_0) entered forwarding state
[  838.992848][T22029] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  839.453082][T22048] netlink: 'syz.6.6411': attribute type 10 has an invalid length.
[  839.468342][T18730] Bluetooth: hci0: command tx timeout
[  839.508982][T22048] team0: Port device hsr0 added
[  840.424876][T22067] netlink: 'syz.7.6416': attribute type 29 has an invalid length.
[  840.721531][T22067] netlink: 'syz.7.6416': attribute type 29 has an invalid length.
[  840.774984][T22068] netlink: 'syz.7.6416': attribute type 29 has an invalid length.
[  841.569558][T22089] netlink: 'syz.4.6423': attribute type 10 has an invalid length.
[  841.593719][T22089] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  844.138231][T22136] netlink: 'syz.7.6436': attribute type 10 has an invalid length.
[  844.159583][T22136] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  845.892048][T22168] FAULT_INJECTION: forcing a failure.
[  845.892048][T22168] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  845.907162][T22168] CPU: 0 PID: 22168 Comm: syz.6.6452 Not tainted syzkaller #0
[  845.914717][T22168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  845.924824][T22168] Call Trace:
[  845.928139][T22168]  <TASK>
[  845.931192][T22168]  dump_stack_lvl+0x16c/0x230
[  845.935936][T22168]  ? show_regs_print_info+0x20/0x20
[  845.941212][T22168]  ? load_image+0x3b0/0x3b0
[  845.945775][T22168]  ? __might_fault+0xaa/0x120
[  845.950523][T22168]  ? __lock_acquire+0x7c80/0x7c80
[  845.955617][T22168]  should_fail_ex+0x39d/0x4d0
[  845.960381][T22168]  _copy_to_user+0x2f/0xa0
[  845.964958][T22168]  bpf_test_finish+0x4d8/0x620
[  845.969803][T22168]  ? convert_skb_to___skb+0x420/0x420
[  845.975247][T22168]  ? _copy_from_user+0xa5/0xe0
[  845.980080][T22168]  ? bpf_test_init+0x134/0x150
[  845.984913][T22168]  bpf_prog_test_run_xdp+0x7fa/0xfa0
[  845.990279][T22168]  ? dev_put+0x80/0x80
[  845.994409][T22168]  ? dev_put+0x80/0x80
[  845.998526][T22168]  bpf_prog_test_run+0x321/0x390
[  846.003499][T22168]  __sys_bpf+0x440/0x800
[  846.007760][T22168]  ? bpf_link_show_fdinfo+0x350/0x350
[  846.013169][T22168]  ? lock_chain_count+0x20/0x20
[  846.018054][T22168]  __x64_sys_bpf+0x7c/0x90
[  846.022490][T22168]  do_syscall_64+0x55/0xb0
[  846.026942][T22168]  ? clear_bhb_loop+0x40/0x90
[  846.031644][T22168]  ? clear_bhb_loop+0x40/0x90
[  846.036337][T22168]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  846.042257][T22168] RIP: 0033:0x7f0c0af8f749
[  846.046689][T22168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  846.066338][T22168] RSP: 002b:00007f0c091f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  846.074779][T22168] RAX: ffffffffffffffda RBX: 00007f0c0b1e5fa0 RCX: 00007f0c0af8f749
[  846.082768][T22168] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a
[  846.090759][T22168] RBP: 00007f0c091f6090 R08: 0000000000000000 R09: 0000000000000000
[  846.098746][T22168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  846.106729][T22168] R13: 00007f0c0b1e6038 R14: 00007f0c0b1e5fa0 R15: 00007fffde48f938
[  846.114741][T22168]  </TASK>
[  846.126940][T22173] netlink: 'syz.8.6453': attribute type 10 has an invalid length.
[  846.135239][T22173] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  847.708723][T22209] netlink: 156 bytes leftover after parsing attributes in process `syz.8.6463'.
[  847.780957][T22210] netlink: 'syz.7.6464': attribute type 21 has an invalid length.
[  847.876473][T22213] netlink: 'syz.4.6467': attribute type 10 has an invalid length.
[  847.899957][T22213] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  849.763689][T22250] netlink: 168 bytes leftover after parsing attributes in process `syz.4.6479'.
[  849.796854][T22250] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6479'.
[  849.832236][T22253] netlink: 'syz.7.6481': attribute type 10 has an invalid length.
[  849.842102][T22253] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  849.988712][T22257] netlink: 'syz.4.6483': attribute type 21 has an invalid length.
[  849.997865][T22257] FAULT_INJECTION: forcing a failure.
[  849.997865][T22257] name failslab, interval 1, probability 0, space 0, times 0
[  850.012378][T22257] CPU: 0 PID: 22257 Comm: syz.4.6483 Not tainted syzkaller #0
[  850.019927][T22257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  850.030152][T22257] Call Trace:
[  850.033470][T22257]  <TASK>
[  850.036424][T22257]  dump_stack_lvl+0x16c/0x230
[  850.041142][T22257]  ? show_regs_print_info+0x20/0x20
[  850.046402][T22257]  ? load_image+0x3b0/0x3b0
[  850.050987][T22257]  ? __might_sleep+0xe0/0xe0
[  850.055729][T22257]  ? __lock_acquire+0x7c80/0x7c80
[  850.060784][T22257]  ? ____sys_sendmsg+0x5bf/0x950
[  850.065766][T22257]  ? __se_sys_sendmsg+0x1a5/0x270
[  850.070837][T22257]  ? do_syscall_64+0x55/0xb0
[  850.075466][T22257]  should_fail_ex+0x39d/0x4d0
[  850.080193][T22257]  should_failslab+0x9/0x20
[  850.084753][T22257]  slab_pre_alloc_hook+0x59/0x310
[  850.089825][T22257]  ? ip_fib_metrics_init+0xc4/0x6f0
[  850.095099][T22257]  __kmem_cache_alloc_node+0x53/0x260
[  850.100535][T22257]  ? ip_fib_metrics_init+0xc4/0x6f0
[  850.105782][T22257]  kmalloc_trace+0x2a/0xe0
[  850.110243][T22257]  ip_fib_metrics_init+0xc4/0x6f0
[  850.115313][T22257]  ? __kmem_cache_alloc_node+0x13e/0x260
[  850.121034][T22257]  ? skb_gro_incr_csum_unnecessary+0x300/0x300
[  850.127236][T22257]  ? rcu_is_watching+0x15/0xb0
[  850.132050][T22257]  ? fib6_info_alloc+0x32/0xe0
[  850.136894][T22257]  ? __kmalloc+0xe2/0x240
[  850.141309][T22257]  ip6_route_info_create+0x498/0x1200
[  850.146766][T22257]  ip6_route_add+0x28/0x130
[  850.151314][T22257]  inet6_rtm_newroute+0x223/0x1b40
[  850.156507][T22257]  ? ipv6_route_sysctl_table_size+0x50/0x50
[  850.162488][T22257]  ? __mutex_trylock_common+0x153/0x250
[  850.168112][T22257]  ? trace_raw_output_contention_end+0xd0/0xd0
[  850.174335][T22257]  ? rcu_is_watching+0x15/0xb0
[  850.179142][T22257]  ? trace_contention_end+0x39/0xe0
[  850.184382][T22257]  ? __mutex_lock+0x304/0xcc0
[  850.189146][T22257]  ? ipv6_route_sysctl_table_size+0x50/0x50
[  850.195080][T22257]  rtnetlink_rcv_msg+0x7c7/0xf10
[  850.200060][T22257]  ? rtnetlink_rcv_msg+0x1eb/0xf10
[  850.205217][T22257]  ? rtnetlink_bind+0x80/0x80
[  850.209927][T22257]  ? perf_tp_event+0x12d7/0x13a0
[  850.214907][T22257]  ? perf_trace_run_bpf_submit+0x1c0/0x1c0
[  850.220743][T22257]  ? lockdep_hardirqs_on_prepare+0x400/0x760
[  850.226750][T22257]  ? __dev_queue_xmit+0x245/0x35a0
[  850.231940][T22257]  ? __dev_queue_xmit+0x245/0x35a0
[  850.237089][T22257]  ? __dev_queue_xmit+0x1449/0x35a0
[  850.242490][T22257]  ? perf_trace_run_bpf_submit+0xf4/0x1c0
[  850.248393][T22257]  ? perf_trace_lock+0x2ed/0x380
[  850.253378][T22257]  ? __copy_skb_header+0xa7/0x550
[  850.258453][T22257]  netlink_rcv_skb+0x216/0x480
[  850.263252][T22257]  ? rtnetlink_bind+0x80/0x80
[  850.267964][T22257]  ? netlink_ack+0x1110/0x1110
[  850.272792][T22257]  ? __lock_acquire+0x7c80/0x7c80
[  850.277874][T22257]  ? netlink_deliver_tap+0x2e/0x1b0
[  850.283208][T22257]  netlink_unicast+0x751/0x8d0
[  850.288028][T22257]  netlink_sendmsg+0x8c1/0xbe0
[  850.292834][T22257]  ? netlink_getsockopt+0x580/0x580
[  850.298065][T22257]  ? aa_sock_msg_perm+0x94/0x150
[  850.303035][T22257]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  850.308350][T22257]  ? security_socket_sendmsg+0x80/0xa0
[  850.313840][T22257]  ? netlink_getsockopt+0x580/0x580
[  850.319070][T22257]  ____sys_sendmsg+0x5bf/0x950
[  850.323885][T22257]  ? __asan_memset+0x22/0x40
[  850.328605][T22257]  ? __sys_sendmsg_sock+0x30/0x30
[  850.333658][T22257]  ? __import_iovec+0x5f2/0x860
[  850.338569][T22257]  ? import_iovec+0x73/0xa0
[  850.343124][T22257]  ___sys_sendmsg+0x220/0x290
[  850.348013][T22257]  ? __sys_sendmsg+0x270/0x270
[  850.352841][T22257]  ? __lock_acquire+0x7c80/0x7c80
[  850.357947][T22257]  __se_sys_sendmsg+0x1a5/0x270
[  850.362846][T22257]  ? __x64_sys_sendmsg+0x80/0x80
[  850.367848][T22257]  ? lockdep_hardirqs_on+0x98/0x150
[  850.373095][T22257]  do_syscall_64+0x55/0xb0
[  850.377541][T22257]  ? clear_bhb_loop+0x40/0x90
[  850.382253][T22257]  ? clear_bhb_loop+0x40/0x90
[  850.386967][T22257]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  850.392897][T22257] RIP: 0033:0x7fac8258f749
[  850.397351][T22257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  850.417344][T22257] RSP: 002b:00007fac8348e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  850.425797][T22257] RAX: ffffffffffffffda RBX: 00007fac827e5fa0 RCX: 00007fac8258f749
[  850.433823][T22257] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000d
[  850.441826][T22257] RBP: 00007fac8348e090 R08: 0000000000000000 R09: 0000000000000000
[  850.449844][T22257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  850.457845][T22257] R13: 00007fac827e6038 R14: 00007fac827e5fa0 R15: 00007ffea2a33378
[  850.465905][T22257]  </TASK>
[  850.724202][T22262] netlink: 'syz.4.6492': attribute type 10 has an invalid length.
[  850.743861][T22262] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  851.970945][T22290] netlink: 'syz.4.6496': attribute type 10 has an invalid length.
[  851.984338][T22290] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6496'.
[  852.026362][T22296] netlink: 'syz.8.6499': attribute type 10 has an invalid length.
[  852.034714][T22296] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  852.348224][T22306] FAULT_INJECTION: forcing a failure.
[  852.348224][T22306] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  852.370788][T22306] CPU: 0 PID: 22306 Comm: syz.4.6504 Not tainted syzkaller #0
[  852.378511][T22306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  852.388791][T22306] Call Trace:
[  852.392209][T22306]  <TASK>
[  852.395272][T22306]  dump_stack_lvl+0x16c/0x230
[  852.400140][T22306]  ? show_regs_print_info+0x20/0x20
[  852.405500][T22306]  ? load_image+0x3b0/0x3b0
[  852.410183][T22306]  ? __might_fault+0xaa/0x120
[  852.415012][T22306]  ? __lock_acquire+0x7c80/0x7c80
[  852.420431][T22306]  ? __virt_addr_valid+0x18c/0x540
[  852.425715][T22306]  should_fail_ex+0x39d/0x4d0
[  852.430598][T22306]  _copy_from_user+0x2f/0xe0
[  852.435340][T22306]  ___bpf_copy_key+0xb0/0x100
[  852.440149][T22306]  map_update_elem+0x260/0x700
[  852.445052][T22306]  __sys_bpf+0x652/0x800
[  852.449407][T22306]  ? bpf_link_show_fdinfo+0x350/0x350
[  852.454982][T22306]  ? lock_chain_count+0x20/0x20
[  852.460041][T22306]  __x64_sys_bpf+0x7c/0x90
[  852.464631][T22306]  do_syscall_64+0x55/0xb0
[  852.469189][T22306]  ? clear_bhb_loop+0x40/0x90
[  852.474020][T22306]  ? clear_bhb_loop+0x40/0x90
[  852.478840][T22306]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  852.484811][T22306] RIP: 0033:0x7fac8258f749
[  852.489324][T22306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  852.509018][T22306] RSP: 002b:00007fac8348e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  852.517535][T22306] RAX: ffffffffffffffda RBX: 00007fac827e5fa0 RCX: 00007fac8258f749
[  852.525591][T22306] RDX: 0000000000000020 RSI: 0000200000000000 RDI: 0000000000000002
[  852.533634][T22306] RBP: 00007fac8348e090 R08: 0000000000000000 R09: 0000000000000000
[  852.541771][T22306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  852.549945][T22306] R13: 00007fac827e6038 R14: 00007fac827e5fa0 R15: 00007ffea2a33378
[  852.558106][T22306]  </TASK>
[  852.607113][T22308] mac80211_hwsim hwsim36 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  853.799716][T22336] netlink: 'syz.8.6513': attribute type 10 has an invalid length.
[  853.817118][T22336] netlink: 156 bytes leftover after parsing attributes in process `syz.8.6513'.
[  853.832959][T22335] netlink: 'syz.7.6512': attribute type 10 has an invalid length.
[  853.858891][T22335] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  854.483092][T22358] netlink: 'syz.8.6524': attribute type 153 has an invalid length.
[  854.504027][T22358] netlink: 128124 bytes leftover after parsing attributes in process `syz.8.6524'.
[  854.794300][T22364] netlink: 'syz.8.6526': attribute type 10 has an invalid length.
[  854.854993][T22366] netlink: 'syz.6.6527': attribute type 10 has an invalid length.
[  855.080790][T22368] netlink: 'syz.4.6528': attribute type 6 has an invalid length.
[  855.096068][T22368] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6528'.
[  855.687844][T22391] netlink: 'syz.4.6538': attribute type 10 has an invalid length.
[  855.721976][T22391] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  855.911313][T22397] FAULT_INJECTION: forcing a failure.
[  855.911313][T22397] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  855.924881][T22397] CPU: 1 PID: 22397 Comm: syz.6.6539 Not tainted syzkaller #0
[  855.932400][T22397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  855.942537][T22397] Call Trace:
[  855.945862][T22397]  <TASK>
[  855.948818][T22397]  dump_stack_lvl+0x16c/0x230
[  855.953554][T22397]  ? show_regs_print_info+0x20/0x20
[  855.958805][T22397]  ? load_image+0x3b0/0x3b0
[  855.963345][T22397]  ? __lock_acquire+0x7c80/0x7c80
[  855.968410][T22397]  should_fail_ex+0x39d/0x4d0
[  855.973133][T22397]  prepare_alloc_pages+0x1e2/0x5f0
[  855.978583][T22397]  __alloc_pages+0x127/0x460
[  855.983242][T22397]  ? rcu_is_watching+0x15/0xb0
[  855.988054][T22397]  ? zone_statistics+0x170/0x170
[  855.993033][T22397]  ? __build_skb_around+0x255/0x3d0
[  855.998268][T22397]  alloc_skb_with_frags+0x23c/0x7c0
[  856.003557][T22397]  sock_alloc_send_pskb+0x857/0x990
[  856.008808][T22397]  ? sock_kzfree_s+0x50/0x50
[  856.013447][T22397]  tun_get_user+0x9dc/0x3bf0
[  856.018069][T22397]  ? aa_file_perm+0x120/0xec0
[  856.022777][T22397]  ? aa_file_perm+0x3e8/0xec0
[  856.027486][T22397]  ? rcu_read_unlock+0xa0/0xa0
[  856.032295][T22397]  ? tun_get+0x1c/0x2e0
[  856.036475][T22397]  ? __lock_acquire+0x7c80/0x7c80
[  856.041531][T22397]  ? tun_get+0x1c/0x2e0
[  856.045747][T22397]  tun_chr_write_iter+0x119/0x200
[  856.050831][T22397]  vfs_write+0x43b/0x940
[  856.055252][T22397]  ? file_end_write+0x250/0x250
[  856.060140][T22397]  ? __fget_files+0x44a/0x4d0
[  856.064849][T22397]  ? __fdget_pos+0x1d8/0x330
[  856.069466][T22397]  ? ksys_write+0x75/0x250
[  856.073910][T22397]  ksys_write+0x147/0x250
[  856.078276][T22397]  ? __ia32_sys_read+0x90/0x90
[  856.083076][T22397]  ? lockdep_hardirqs_on+0x98/0x150
[  856.088324][T22397]  do_syscall_64+0x55/0xb0
[  856.092755][T22397]  ? clear_bhb_loop+0x40/0x90
[  856.097462][T22397]  ? clear_bhb_loop+0x40/0x90
[  856.102166][T22397]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  856.108084][T22397] RIP: 0033:0x7f0c0af8f749
[  856.112517][T22397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  856.132146][T22397] RSP: 002b:00007f0c091d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  856.140587][T22397] RAX: ffffffffffffffda RBX: 00007f0c0b1e6090 RCX: 00007f0c0af8f749
[  856.148578][T22397] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8
[  856.156915][T22397] RBP: 00007f0c091d5090 R08: 0000000000000000 R09: 0000000000000000
[  856.165010][T22397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  856.173035][T22397] R13: 00007f0c0b1e6128 R14: 00007f0c0b1e6090 R15: 00007fffde48f938
[  856.181057][T22397]  </TASK>
[  857.230461][T22426] netlink: 'syz.7.6550': attribute type 10 has an invalid length.
[  857.256229][T22426] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  858.475878][T22443] tap0: tun_chr_ioctl cmd 1074025680
[  861.623774][T22467] netlink: 'syz.7.6562': attribute type 10 has an invalid length.
[  861.656227][T22467] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  862.447166][T22487] tap0: tun_chr_ioctl cmd 1074025680
[  863.806620][T22505] netlink: 209852 bytes leftover after parsing attributes in process `syz.8.6578'.
[  863.832291][T22505] openvswitch: netlink: Key type 29 is not supported
[  864.406429][T22517] tap0: tun_chr_ioctl cmd 1074025680
[  864.716662][T22521] netlink: 'syz.6.6583': attribute type 3 has an invalid length.
[  864.724786][T22521] netlink: 130984 bytes leftover after parsing attributes in process `syz.6.6583'.
[  865.563002][T22533] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.6588'.
[  865.584603][T22533] openvswitch: netlink: Key type 29 is not supported
[  865.732021][T22536] netlink: 'syz.7.6589': attribute type 10 has an invalid length.
[  865.753368][T22536] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  866.323653][T22554] netlink: 'syz.8.6596': attribute type 3 has an invalid length.
[  866.342131][T22554] netlink: 130984 bytes leftover after parsing attributes in process `syz.8.6596'.
[  866.376698][T22558] netlink: 'syz.6.6597': attribute type 10 has an invalid length.
[  867.021413][T22572] netlink: 'syz.7.6601': attribute type 10 has an invalid length.
[  867.041782][T22572] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  868.361397][T22601] netlink: 'syz.4.6612': attribute type 3 has an invalid length.
[  868.379123][T22601] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6612'.
[  868.464989][T22601] netlink: 'syz.4.6612': attribute type 3 has an invalid length.
[  868.479732][T22601] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6612'.
[  868.799241][T22612] netlink: 'syz.4.6615': attribute type 10 has an invalid length.
[  868.810519][T22612] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  870.173008][T22640] netlink: 199836 bytes leftover after parsing attributes in process `syz.8.6625'.
[  870.813454][T22660] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6633'.
[  870.826934][T22661] netlink: 164 bytes leftover after parsing attributes in process `syz.8.6634'.
[  871.522778][T22682] FAULT_INJECTION: forcing a failure.
[  871.522778][T22682] name failslab, interval 1, probability 0, space 0, times 0
[  871.557586][T22682] CPU: 0 PID: 22682 Comm: syz.4.6642 Not tainted syzkaller #0
[  871.565135][T22682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  871.575326][T22682] Call Trace:
[  871.578630][T22682]  <TASK>
[  871.581583][T22682]  dump_stack_lvl+0x16c/0x230
[  871.586293][T22682]  ? show_regs_print_info+0x20/0x20
[  871.591690][T22682]  ? load_image+0x3b0/0x3b0
[  871.596228][T22682]  ? __might_sleep+0xe0/0xe0
[  871.600838][T22682]  ? __lock_acquire+0x7c80/0x7c80
[  871.605895][T22682]  should_fail_ex+0x39d/0x4d0
[  871.610597][T22682]  should_failslab+0x9/0x20
[  871.615119][T22682]  slab_pre_alloc_hook+0x59/0x310
[  871.620183][T22682]  kmem_cache_alloc_node+0x60/0x330
[  871.625409][T22682]  ? __alloc_skb+0x108/0x2c0
[  871.630190][T22682]  __alloc_skb+0x108/0x2c0
[  871.634625][T22682]  alloc_skb_with_frags+0xca/0x7c0
[  871.639761][T22682]  ? mark_lock+0x94/0x320
[  871.644113][T22682]  sock_alloc_send_pskb+0x857/0x990
[  871.649345][T22682]  ? sock_kzfree_s+0x50/0x50
[  871.653979][T22682]  tun_get_user+0x9dc/0x3bf0
[  871.658681][T22682]  ? aa_file_perm+0x120/0xec0
[  871.663377][T22682]  ? aa_file_perm+0x3e8/0xec0
[  871.668080][T22682]  ? rcu_read_unlock+0xa0/0xa0
[  871.672879][T22682]  ? tun_get+0x1c/0x2e0
[  871.677069][T22682]  ? __lock_acquire+0x7c80/0x7c80
[  871.682206][T22682]  ? tun_get+0x1c/0x2e0
[  871.686482][T22682]  tun_chr_write_iter+0x119/0x200
[  871.691537][T22682]  vfs_write+0x43b/0x940
[  871.695925][T22682]  ? file_end_write+0x250/0x250
[  871.700827][T22682]  ? __fget_files+0x44a/0x4d0
[  871.705532][T22682]  ? __fdget_pos+0x1d8/0x330
[  871.710150][T22682]  ? ksys_write+0x75/0x250
[  871.714589][T22682]  ksys_write+0x147/0x250
[  871.718943][T22682]  ? __ia32_sys_read+0x90/0x90
[  871.723751][T22682]  ? lockdep_hardirqs_on+0x98/0x150
[  871.728981][T22682]  do_syscall_64+0x55/0xb0
[  871.733414][T22682]  ? clear_bhb_loop+0x40/0x90
[  871.738110][T22682]  ? clear_bhb_loop+0x40/0x90
[  871.743328][T22682]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  871.749240][T22682] RIP: 0033:0x7fac8258f749
[  871.753669][T22682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  871.773292][T22682] RSP: 002b:00007fac8348e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  871.781726][T22682] RAX: ffffffffffffffda RBX: 00007fac827e5fa0 RCX: 00007fac8258f749
[  871.789713][T22682] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8
[  871.797699][T22682] RBP: 00007fac8348e090 R08: 0000000000000000 R09: 0000000000000000
[  871.805692][T22682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  871.813681][T22682] R13: 00007fac827e6038 R14: 00007fac827e5fa0 R15: 00007ffea2a33378
[  871.821685][T22682]  </TASK>
[  871.958597][T22687] netlink: 132 bytes leftover after parsing attributes in process `syz.8.6644'.
[  872.021271][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  872.028082][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  872.100567][T22690] netlink: 'syz.4.6646': attribute type 22 has an invalid length.
[  872.126291][T22690] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6646'.
[  872.383621][T22694] netlink: 'syz.8.6649': attribute type 21 has an invalid length.
[  872.408109][T22694] netlink: 176 bytes leftover after parsing attributes in process `syz.8.6649'.
[  872.440809][T22702] netlink: 'syz.7.6651': attribute type 21 has an invalid length.
[  872.466064][T22702] netlink: 'syz.7.6651': attribute type 4 has an invalid length.
[  872.496530][T22702] netlink: 152 bytes leftover after parsing attributes in process `syz.7.6651'.
[  873.076851][T22712] delete_channel: no stack
[  873.948837][T22759] FAULT_INJECTION: forcing a failure.
[  873.948837][T22759] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  874.018643][T22759] CPU: 0 PID: 22759 Comm: syz.6.6671 Not tainted syzkaller #0
[  874.026182][T22759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  874.036277][T22759] Call Trace:
[  874.039583][T22759]  <TASK>
[  874.042533][T22759]  dump_stack_lvl+0x16c/0x230
[  874.047375][T22759]  ? show_regs_print_info+0x20/0x20
[  874.052602][T22759]  ? load_image+0x3b0/0x3b0
[  874.057128][T22759]  ? __might_fault+0xaa/0x120
[  874.061819][T22759]  ? __lock_acquire+0x7c80/0x7c80
[  874.066866][T22759]  should_fail_ex+0x39d/0x4d0
[  874.071568][T22759]  _copy_from_user+0x2f/0xe0
[  874.076174][T22759]  __sys_bpf+0x1e9/0x800
[  874.080439][T22759]  ? bpf_link_show_fdinfo+0x350/0x350
[  874.085841][T22759]  ? lock_chain_count+0x20/0x20
[  874.090742][T22759]  __x64_sys_bpf+0x7c/0x90
[  874.095169][T22759]  do_syscall_64+0x55/0xb0
[  874.099647][T22759]  ? clear_bhb_loop+0x40/0x90
[  874.104344][T22759]  ? clear_bhb_loop+0x40/0x90
[  874.109044][T22759]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  874.114960][T22759] RIP: 0033:0x7f0c0af8f749
[  874.119394][T22759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  874.139020][T22759] RSP: 002b:00007f0c091f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  874.147558][T22759] RAX: ffffffffffffffda RBX: 00007f0c0b1e5fa0 RCX: 00007f0c0af8f749
[  874.155566][T22759] RDX: 0000000000000010 RSI: 0000200000000740 RDI: 000000000000000a
[  874.163572][T22759] RBP: 00007f0c091f6090 R08: 0000000000000000 R09: 0000000000000000
[  874.171560][T22759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  874.179542][T22759] R13: 00007f0c0b1e6038 R14: 00007f0c0b1e5fa0 R15: 00007fffde48f938
[  874.187567][T22759]  </TASK>
[  874.223167][T22762] netlink: 'syz.7.6673': attribute type 11 has an invalid length.
[  874.232683][T22762] netlink: 140 bytes leftover after parsing attributes in process `syz.7.6673'.
[  874.459884][T22774] netlink: 'syz.7.6679': attribute type 1 has an invalid length.
[  874.507485][T22774] netlink: 168864 bytes leftover after parsing attributes in process `syz.7.6679'.
[  874.703173][T22773] netlink: 'syz.6.6678': attribute type 4 has an invalid length.
[  874.737920][T22773] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.6678'.
[  875.502714][T22797] netlink: 'syz.7.6687': attribute type 2 has an invalid length.
[  875.505502][T22811] netlink: 'syz.6.6691': attribute type 21 has an invalid length.
[  875.577185][T22797] netlink: 'syz.7.6687': attribute type 1 has an invalid length.
[  875.644360][T22797] netlink: 132 bytes leftover after parsing attributes in process `syz.7.6687'.
[  877.407219][T22835] delete_channel: no stack
[  878.126499][T22853] netlink: 'syz.7.6706': attribute type 10 has an invalid length.
[  878.136203][T22853] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  878.239485][T22857] netlink: 'syz.4.6707': attribute type 10 has an invalid length.
[  878.257284][T22857] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  878.925987][T22880] netlink: 'syz.7.6718': attribute type 10 has an invalid length.
[  878.935393][T22880] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  878.981641][T22870] delete_channel: no stack
[  879.057743][T22882] FAULT_INJECTION: forcing a failure.
[  879.057743][T22882] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  879.071788][T22882] CPU: 1 PID: 22882 Comm: syz.7.6719 Not tainted syzkaller #0
[  879.079344][T22882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  879.089487][T22882] Call Trace:
[  879.092840][T22882]  <TASK>
[  879.095854][T22882]  dump_stack_lvl+0x16c/0x230
[  879.100665][T22882]  ? show_regs_print_info+0x20/0x20
[  879.105963][T22882]  ? load_image+0x3b0/0x3b0
[  879.110634][T22882]  ? __lock_acquire+0x7c80/0x7c80
[  879.115750][T22882]  should_fail_ex+0x39d/0x4d0
[  879.120496][T22882]  prepare_alloc_pages+0x1e2/0x5f0
[  879.125691][T22882]  __alloc_pages+0x127/0x460
[  879.130344][T22882]  ? rcu_is_watching+0x15/0xb0
[  879.135275][T22882]  ? zone_statistics+0x170/0x170
[  879.140273][T22882]  ? __build_skb_around+0x255/0x3d0
[  879.145575][T22882]  alloc_skb_with_frags+0x23c/0x7c0
[  879.150865][T22882]  sock_alloc_send_pskb+0x857/0x990
[  879.156154][T22882]  ? sock_kzfree_s+0x50/0x50
[  879.160833][T22882]  tun_get_user+0x9dc/0x3bf0
[  879.165494][T22882]  ? trace_event_raw_event_lock+0x230/0x230
[  879.171458][T22882]  ? aa_file_perm+0x120/0xec0
[  879.176195][T22882]  ? aa_file_perm+0x3e8/0xec0
[  879.180953][T22882]  ? rcu_read_unlock+0xa0/0xa0
[  879.185821][T22882]  ? tun_get+0x1c/0x2e0
[  879.190031][T22882]  ? __lock_acquire+0x7c80/0x7c80
[  879.195118][T22882]  ? tun_get+0x1c/0x2e0
[  879.199344][T22882]  tun_chr_write_iter+0x119/0x200
[  879.204428][T22882]  vfs_write+0x43b/0x940
[  879.208764][T22882]  ? file_end_write+0x250/0x250
[  879.213713][T22882]  ? __fget_files+0x44a/0x4d0
[  879.218559][T22882]  ? __fdget_pos+0x1d8/0x330
[  879.223208][T22882]  ? ksys_write+0x75/0x250
[  879.227679][T22882]  ksys_write+0x147/0x250
[  879.232061][T22882]  ? __ia32_sys_read+0x90/0x90
[  879.236889][T22882]  ? lockdep_hardirqs_on+0x98/0x150
[  879.242146][T22882]  do_syscall_64+0x55/0xb0
[  879.246614][T22882]  ? clear_bhb_loop+0x40/0x90
[  879.251350][T22882]  ? clear_bhb_loop+0x40/0x90
[  879.256092][T22882]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  879.262020][T22882] RIP: 0033:0x7f34be18f749
[  879.266476][T22882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  879.286228][T22882] RSP: 002b:00007f34bc3f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  879.294699][T22882] RAX: ffffffffffffffda RBX: 00007f34be3e5fa0 RCX: 00007f34be18f749
[  879.302828][T22882] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8
[  879.310846][T22882] RBP: 00007f34bc3f6090 R08: 0000000000000000 R09: 0000000000000000
[  879.318852][T22882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  879.326966][T22882] R13: 00007f34be3e6038 R14: 00007f34be3e5fa0 R15: 00007ffde66b9a98
[  879.335032][T22882]  </TASK>
[  882.990398][T22908] netlink: 'syz.4.6725': attribute type 2 has an invalid length.
[  882.998527][T22908] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6725'.
[  886.206956][T22917] tap0: tun_chr_ioctl cmd 1074025680
[  886.616490][T22922] delete_channel: no stack
[  887.188897][T22953] C: renamed from team_slave_0 (while UP)
[  887.195185][T22954] netlink: 'syz.4.6739': attribute type 9 has an invalid length.
[  887.221177][T22954] netlink: 154020 bytes leftover after parsing attributes in process `syz.4.6739'.
[  887.233355][T22953] netlink: 'syz.8.6743': attribute type 1 has an invalid length.
[  887.275383][T22953] netlink: 152 bytes leftover after parsing attributes in process `syz.8.6743'.
[  887.308338][T22953] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  887.383534][T22959] netlink: 'syz.7.6744': attribute type 10 has an invalid length.
[  887.396685][T22959] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  887.882629][T22968] netlink: 132 bytes leftover after parsing attributes in process `syz.8.6746'.
[  888.078600][T22970] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6745'.
[  888.378077][T22974] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6748'.
[  888.944122][T22986] netlink: 164 bytes leftover after parsing attributes in process `syz.6.6752'.
[  889.233724][T22990] netlink: 'syz.6.6754': attribute type 1 has an invalid length.
[  889.286140][T22990] netlink: 'syz.6.6754': attribute type 3 has an invalid length.
[  889.294985][T22990] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6754'.
[  889.604662][T22995] netlink: 164 bytes leftover after parsing attributes in process `syz.4.6755'.
[  889.848842][T23001] netlink: 'syz.4.6758': attribute type 22 has an invalid length.
[  889.895129][T23001] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6758'.
[  890.684428][T23023] netlink: 'syz.8.6768': attribute type 6 has an invalid length.
[  890.693375][T23023] netlink: 147680 bytes leftover after parsing attributes in process `syz.8.6768'.
[  890.769587][T23033] FAULT_INJECTION: forcing a failure.
[  890.769587][T23033] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  890.805796][T23033] CPU: 1 PID: 23033 Comm: syz.6.6771 Not tainted syzkaller #0
[  890.813341][T23033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  890.823456][T23033] Call Trace:
[  890.826777][T23033]  <TASK>
[  890.829737][T23033]  dump_stack_lvl+0x16c/0x230
[  890.834471][T23033]  ? show_regs_print_info+0x20/0x20
[  890.839741][T23033]  ? load_image+0x3b0/0x3b0
[  890.844303][T23033]  ? __might_fault+0xaa/0x120
[  890.849014][T23033]  ? __lock_acquire+0x7c80/0x7c80
[  890.854087][T23033]  should_fail_ex+0x39d/0x4d0
[  890.858842][T23033]  _copy_to_user+0x2f/0xa0
[  890.863313][T23033]  bpf_prog_test_run_raw_tp+0x4bc/0x640
[  890.868922][T23033]  ? trace_bpf_test_finish+0x1a0/0x1a0
[  890.874447][T23033]  ? trace_bpf_test_finish+0x1a0/0x1a0
[  890.879965][T23033]  bpf_prog_test_run+0x321/0x390
[  890.884950][T23033]  __sys_bpf+0x440/0x800
[  890.889267][T23033]  ? bpf_link_show_fdinfo+0x350/0x350
[  890.894706][T23033]  ? lock_chain_count+0x20/0x20
[  890.899605][T23033]  __x64_sys_bpf+0x7c/0x90
[  890.904058][T23033]  do_syscall_64+0x55/0xb0
[  890.908518][T23033]  ? clear_bhb_loop+0x40/0x90
[  890.913249][T23033]  ? clear_bhb_loop+0x40/0x90
[  890.917970][T23033]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  890.923903][T23033] RIP: 0033:0x7f0c0af8f749
[  890.928356][T23033] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  890.948192][T23033] RSP: 002b:00007f0c091f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  890.956661][T23033] RAX: ffffffffffffffda RBX: 00007f0c0b1e5fa0 RCX: 00007f0c0af8f749
[  890.964682][T23033] RDX: 0000000000000010 RSI: 0000200000000740 RDI: 000000000000000a
[  890.972704][T23033] RBP: 00007f0c091f6090 R08: 0000000000000000 R09: 0000000000000000
[  890.980729][T23033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  890.988758][T23033] R13: 00007f0c0b1e6038 R14: 00007f0c0b1e5fa0 R15: 00007fffde48f938
[  890.996824][T23033]  </TASK>
[  892.026631][T23067] netlink: 'syz.4.6784': attribute type 10 has an invalid length.
[  892.052105][T23067] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  892.079938][T23071] netlink: 'syz.6.6786': attribute type 2 has an invalid length.
[  892.108375][T23071] netlink: 14 bytes leftover after parsing attributes in process `syz.6.6786'.
[  892.313127][T23076] netlink: 'syz.4.6788': attribute type 2 has an invalid length.
[  892.325874][T23076] netlink: 'syz.4.6788': attribute type 1 has an invalid length.
[  892.336530][T23076] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6788'.
[  893.148304][T23096] netlink: 'syz.7.6797': attribute type 1 has an invalid length.
[  893.178198][T23096] netlink: 'syz.7.6797': attribute type 3 has an invalid length.
[  893.190379][T23096] netlink: 132 bytes leftover after parsing attributes in process `syz.7.6797'.
[  893.662737][T23104] netlink: 'syz.4.6799': attribute type 33 has an invalid length.
[  893.826784][T23103] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6799'.
[  893.904276][T23102] delete_channel: no stack
[  894.244562][T23117] FAULT_INJECTION: forcing a failure.
[  894.244562][T23117] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  894.259793][T23117] CPU: 0 PID: 23117 Comm: syz.8.6806 Not tainted syzkaller #0
[  894.267410][T23117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  894.277790][T23117] Call Trace:
[  894.281233][T23117]  <TASK>
[  894.284312][T23117]  dump_stack_lvl+0x16c/0x230
[  894.289180][T23117]  ? show_regs_print_info+0x20/0x20
[  894.294505][T23117]  ? load_image+0x3b0/0x3b0
[  894.299160][T23117]  ? __lock_acquire+0x7c80/0x7c80
[  894.304399][T23117]  ? __virt_addr_valid+0x18c/0x540
[  894.309645][T23117]  should_fail_ex+0x39d/0x4d0
[  894.314464][T23117]  _copy_from_user+0x2f/0xe0
[  894.319171][T23117]  map_update_elem+0x4e8/0x700
[  894.324094][T23117]  __sys_bpf+0x652/0x800
[  894.328499][T23117]  ? bpf_link_show_fdinfo+0x350/0x350
[  894.334107][T23117]  ? lock_chain_count+0x20/0x20
[  894.339131][T23117]  __x64_sys_bpf+0x7c/0x90
[  894.343668][T23117]  do_syscall_64+0x55/0xb0
[  894.348173][T23117]  ? clear_bhb_loop+0x40/0x90
[  894.352953][T23117]  ? clear_bhb_loop+0x40/0x90
[  894.357750][T23117]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  894.363740][T23117] RIP: 0033:0x7fc6c538f749
[  894.368253][T23117] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  894.387946][T23117] RSP: 002b:00007fc6c62db038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  894.396475][T23117] RAX: ffffffffffffffda RBX: 00007fc6c55e5fa0 RCX: 00007fc6c538f749
[  894.404623][T23117] RDX: 0000000000000020 RSI: 0000200000000000 RDI: 0000000000000002
[  894.412684][T23117] RBP: 00007fc6c62db090 R08: 0000000000000000 R09: 0000000000000000
[  894.420744][T23117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  894.428816][T23117] R13: 00007fc6c55e6038 R14: 00007fc6c55e5fa0 R15: 00007ffdcc9205d8
[  894.436992][T23117]  </TASK>
[  894.503507][T23118] netlink: 4083 bytes leftover after parsing attributes in process `syz.6.6804'.
[  894.523646][T23118] netlink: 4083 bytes leftover after parsing attributes in process `syz.6.6804'.
[  894.539666][T23116] netlink: 4083 bytes leftover after parsing attributes in process `syz.6.6804'.
[  894.554972][T23118] netlink: 4083 bytes leftover after parsing attributes in process `syz.6.6804'.
[  894.623336][T23120] netlink: 4083 bytes leftover after parsing attributes in process `syz.6.6804'.
[  894.907502][T23122] netlink: 'syz.7.6808': attribute type 10 has an invalid length.
[  895.009890][T23137] FAULT_INJECTION: forcing a failure.
[  895.009890][T23137] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  895.077508][T23137] CPU: 0 PID: 23137 Comm: syz.4.6813 Not tainted syzkaller #0
[  895.085105][T23137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  895.095256][T23137] Call Trace:
[  895.098610][T23137]  <TASK>
[  895.101614][T23137]  dump_stack_lvl+0x16c/0x230
[  895.106400][T23137]  ? show_regs_print_info+0x20/0x20
[  895.111698][T23137]  ? load_image+0x3b0/0x3b0
[  895.116298][T23137]  ? __might_fault+0xaa/0x120
[  895.121062][T23137]  ? __lock_acquire+0x7c80/0x7c80
[  895.126174][T23137]  ? __might_fault+0xaa/0x120
[  895.130937][T23137]  should_fail_ex+0x39d/0x4d0
[  895.135718][T23137]  _copy_from_iter+0x1d3/0x1290
[  895.140648][T23137]  ? __might_fault+0xaa/0x120
[  895.145414][T23137]  ? _copy_from_iter+0x248/0x1290
[  895.150511][T23137]  ? __virt_addr_valid+0x18c/0x540
[  895.155700][T23137]  ? __lock_acquire+0x7c80/0x7c80
[  895.160807][T23137]  ? copyout_mc+0x70/0x70
[  895.165238][T23137]  ? copyout_mc+0x70/0x70
[  895.169646][T23137]  ? __virt_addr_valid+0x18c/0x540
[  895.174861][T23137]  ? page_copy_sane+0x16a/0x270
[  895.179804][T23137]  copy_page_from_iter+0x7b/0x100
[  895.184928][T23137]  skb_copy_datagram_from_iter+0x2e4/0x6e0
[  895.190855][T23137]  tun_get_user+0x1583/0x3bf0
[  895.195647][T23137]  ? trace_event_raw_event_lock+0x230/0x230
[  895.201627][T23137]  ? aa_file_perm+0x120/0xec0
[  895.206404][T23137]  ? aa_file_perm+0x3e8/0xec0
[  895.211184][T23137]  ? rcu_read_unlock+0xa0/0xa0
[  895.216089][T23137]  ? tun_get+0x1c/0x2e0
[  895.220336][T23137]  ? __lock_acquire+0x7c80/0x7c80
[  895.225465][T23137]  ? tun_get+0x1c/0x2e0
[  895.229742][T23137]  tun_chr_write_iter+0x119/0x200
[  895.234877][T23137]  vfs_write+0x43b/0x940
[  895.239226][T23137]  ? file_end_write+0x250/0x250
[  895.244177][T23137]  ? __fget_files+0x44a/0x4d0
[  895.248977][T23137]  ? __fdget_pos+0x1d8/0x330
[  895.253643][T23137]  ? ksys_write+0x75/0x250
[  895.258147][T23137]  ksys_write+0x147/0x250
[  895.262580][T23137]  ? __ia32_sys_read+0x90/0x90
[  895.267442][T23137]  ? lockdep_hardirqs_on+0x98/0x150
[  895.272743][T23137]  do_syscall_64+0x55/0xb0
[  895.277236][T23137]  ? clear_bhb_loop+0x40/0x90
[  895.282004][T23137]  ? clear_bhb_loop+0x40/0x90
[  895.286766][T23137]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  895.292745][T23137] RIP: 0033:0x7fac8258f749
[  895.297242][T23137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  895.317434][T23137] RSP: 002b:00007fac8348e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  895.325911][T23137] RAX: ffffffffffffffda RBX: 00007fac827e5fa0 RCX: 00007fac8258f749
[  895.334031][T23137] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8
[  895.342078][T23137] RBP: 00007fac8348e090 R08: 0000000000000000 R09: 0000000000000000
[  895.350127][T23137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  895.358176][T23137] R13: 00007fac827e6038 R14: 00007fac827e5fa0 R15: 00007ffea2a33378
[  895.366409][T23137]  </TASK>
[  895.584875][T23141] netlink: 'syz.8.6814': attribute type 21 has an invalid length.
[  895.620199][T23141] netlink: 152 bytes leftover after parsing attributes in process `syz.8.6814'.
[  895.632313][T23122] syz.7.6808 (23122) used greatest stack depth: 18984 bytes left
[  895.898097][T23148] netlink: 'syz.7.6817': attribute type 6 has an invalid length.
[  895.907074][T23148] netlink: 147680 bytes leftover after parsing attributes in process `syz.7.6817'.
[  896.021228][T23155] netlink: 192 bytes leftover after parsing attributes in process `syz.4.6820'.
[  896.057551][T23155] netlink: 'syz.4.6820': attribute type 21 has an invalid length.
[  896.344071][T23163] netlink: 'syz.6.6824': attribute type 10 has an invalid length.
[  896.805520][T23168] team0: Port device dummy0 removed
[  896.891323][T23168] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  896.901700][T23185] tc_dump_action: action bad kind
[  896.936414][T23191] IPv6: NLM_F_REPLACE set, but no existing node found!
[  897.716449][T23206] validate_nla: 1 callbacks suppressed
[  897.716467][T23206] netlink: 'syz.8.6838': attribute type 10 has an invalid length.
[  897.752856][T23206] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  899.271057][T23243] netlink: 'syz.8.6854': attribute type 1 has an invalid length.
[  899.280685][T23243] netlink: 'syz.8.6854': attribute type 3 has an invalid length.
[  899.326197][T23243] __nla_validate_parse: 4 callbacks suppressed
[  899.326261][T23243] netlink: 132 bytes leftover after parsing attributes in process `syz.8.6854'.
[  899.821999][T23272] netlink: 'syz.8.6862': attribute type 39 has an invalid length.
[  900.724710][T23285] netlink: 'syz.6.6868': attribute type 10 has an invalid length.
[  900.766491][T23285] dummy0: left promiscuous mode
[  900.783277][T23297] netlink: 199836 bytes leftover after parsing attributes in process `syz.8.6872'.
[  900.943855][T23285] dummy0: entered promiscuous mode
[  900.962548][T23285] dummy0: entered allmulticast mode
[  900.994390][T23285] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  901.434689][T23310] netlink: 'syz.4.6876': attribute type 41 has an invalid length.
[  901.674823][T23310] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.6876'.
[  901.912827][T23318] netlink: 164 bytes leftover after parsing attributes in process `syz.8.6878'.
[  902.853415][T23335] netlink: 164 bytes leftover after parsing attributes in process `syz.6.6883'.
[  903.018771][T23341] netlink: 'syz.6.6886': attribute type 1 has an invalid length.
[  903.045829][T23341] netlink: 'syz.6.6886': attribute type 3 has an invalid length.
[  903.265907][T23341] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6886'.
[  903.531828][    C1] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0)
[  903.752794][T23349] netlink: 'syz.4.6889': attribute type 39 has an invalid length.
[  904.250352][T23366] netlink: 'syz.8.6895': attribute type 10 has an invalid length.
[  904.286851][T23366] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  904.658770][T23377] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  904.703906][T23384] netlink: 'syz.8.6902': attribute type 41 has an invalid length.
[  904.799753][T23384] netlink: 209852 bytes leftover after parsing attributes in process `syz.8.6902'.
[  904.892928][T23384] debugfs: Directory '!!ô' with parent 'ieee80211' already present!
[  905.264261][T23396] netlink: 'syz.7.6906': attribute type 39 has an invalid length.
[  905.427189][T23403] netlink: 'syz.8.6908': attribute type 10 has an invalid length.
[  905.437366][T23403] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  905.616165][    C1] bridge0: received packet on bond0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0)
[  905.682786][T23409] FAULT_INJECTION: forcing a failure.
[  905.682786][T23409] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  905.706038][T23409] CPU: 0 PID: 23409 Comm: syz.8.6911 Not tainted syzkaller #0
[  905.713595][T23409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  905.723702][T23409] Call Trace:
[  905.727016][T23409]  <TASK>
[  905.729983][T23409]  dump_stack_lvl+0x16c/0x230
[  905.734736][T23409]  ? show_regs_print_info+0x20/0x20
[  905.740015][T23409]  ? load_image+0x3b0/0x3b0
[  905.744595][T23409]  ? __lock_acquire+0x7c80/0x7c80
[  905.749675][T23409]  ? snprintf+0xdb/0x120
[  905.754026][T23409]  should_fail_ex+0x39d/0x4d0
[  905.758774][T23409]  _copy_to_user+0x2f/0xa0
[  905.763256][T23409]  simple_read_from_buffer+0xe7/0x150
[  905.768668][T23409]  proc_fail_nth_read+0x1e3/0x250
[  905.773754][T23409]  ? proc_fault_inject_write+0x340/0x340
[  905.779415][T23409]  ? fsnotify_perm+0x271/0x5e0
[  905.784198][T23409]  ? proc_fault_inject_write+0x340/0x340
[  905.789958][T23409]  vfs_read+0x27e/0x920
[  905.794151][T23409]  ? kernel_read+0x1e0/0x1e0
[  905.798761][T23409]  ? __fget_files+0x28/0x4d0
[  905.803388][T23409]  ? __fget_files+0x44a/0x4d0
[  905.808579][T23409]  ? __fdget_pos+0x2a3/0x330
[  905.813325][T23409]  ? ksys_read+0x75/0x250
[  905.817723][T23409]  ksys_read+0x147/0x250
[  905.822041][T23409]  ? vfs_write+0x940/0x940
[  905.827129][T23409]  ? lockdep_hardirqs_on+0x98/0x150
[  905.832390][T23409]  do_syscall_64+0x55/0xb0
[  905.836872][T23409]  ? clear_bhb_loop+0x40/0x90
[  905.841598][T23409]  ? clear_bhb_loop+0x40/0x90
[  905.846328][T23409]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  905.852279][T23409] RIP: 0033:0x7fc6c538e15c
[  905.856732][T23409] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  905.876396][T23409] RSP: 002b:00007fc6c62db030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  905.884862][T23409] RAX: ffffffffffffffda RBX: 00007fc6c55e5fa0 RCX: 00007fc6c538e15c
[  905.892889][T23409] RDX: 000000000000000f RSI: 00007fc6c62db0a0 RDI: 0000000000000005
[  905.900908][T23409] RBP: 00007fc6c62db090 R08: 0000000000000000 R09: 0000000000000000
[  905.908924][T23409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  905.916938][T23409] R13: 00007fc6c55e6038 R14: 00007fc6c55e5fa0 R15: 00007ffdcc9205d8
[  905.924975][T23409]  </TASK>
[  906.053896][T23418] netlink: 'syz.6.6914': attribute type 1 has an invalid length.
[  906.064420][T23418] netlink: 'syz.6.6914': attribute type 3 has an invalid length.
[  906.083588][T23418] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6914'.
[  906.176053][T23423] pimreg1: tun_chr_ioctl cmd 1074025677
[  906.186054][T23423] pimreg1: linktype set to 769
[  906.422092][T23430] netlink: 'syz.6.6917': attribute type 41 has an invalid length.
[  906.583479][T23427] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.6917'.
[  906.611880][T23427] debugfs: Directory '!!ô' with parent 'ieee80211' already present!
[  906.715086][T23434] netlink: 65039 bytes leftover after parsing attributes in process `syz.8.6920'.
[  906.758016][T23434] netlink: 63503 bytes leftover after parsing attributes in process `syz.8.6920'.
[  906.871482][T23437] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  907.808629][T23471] netlink: 44 bytes leftover after parsing attributes in process `syz.8.6930'.
[  908.425106][T23481] validate_nla: 2 callbacks suppressed
[  908.425128][T23481] netlink: 'syz.6.6936': attribute type 10 has an invalid length.
[  908.751805][T23493] netlink: 'syz.8.6941': attribute type 21 has an invalid length.
[  908.886209][T23495] netlink: 'syz.6.6942': attribute type 1 has an invalid length.
[  908.926755][T23495] netlink: 'syz.6.6942': attribute type 3 has an invalid length.
[  908.952938][T23495] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6942'.
[  909.051476][T23499] netlink: 'syz.7.6943': attribute type 1 has an invalid length.
[  909.085893][T23499] netlink: 'syz.7.6943': attribute type 3 has an invalid length.
[  909.108959][T23499] netlink: 132 bytes leftover after parsing attributes in process `syz.7.6943'.
[  909.356526][T23505] netlink: 'syz.7.6944': attribute type 1 has an invalid length.
[  909.364455][T23505] netlink: 'syz.7.6944': attribute type 3 has an invalid length.
[  909.539590][T23505] netlink: 132 bytes leftover after parsing attributes in process `syz.7.6944'.
[  909.691518][T23507] netlink: 'syz.6.6946': attribute type 21 has an invalid length.
[  909.710488][T23507] netlink: 'syz.6.6946': attribute type 12 has an invalid length.
[  909.720905][T23507] netlink: 12914 bytes leftover after parsing attributes in process `syz.6.6946'.
[  910.316630][T23528] netlink: 126588 bytes leftover after parsing attributes in process `syz.8.6954'.
[  910.578889][T23533] FAULT_INJECTION: forcing a failure.
[  910.578889][T23533] name failslab, interval 1, probability 0, space 0, times 0
[  910.628004][T23533] CPU: 1 PID: 23533 Comm: syz.4.6956 Not tainted syzkaller #0
[  910.635594][T23533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  910.645702][T23533] Call Trace:
[  910.649028][T23533]  <TASK>
[  910.652002][T23533]  dump_stack_lvl+0x16c/0x230
[  910.656755][T23533]  ? show_regs_print_info+0x20/0x20
[  910.662016][T23533]  ? load_image+0x3b0/0x3b0
[  910.666586][T23533]  ? verify_lock_unused+0x140/0x140
[  910.671853][T23533]  should_fail_ex+0x39d/0x4d0
[  910.676605][T23533]  should_failslab+0x9/0x20
[  910.681176][T23533]  slab_pre_alloc_hook+0x59/0x310
[  910.686273][T23533]  kmem_cache_alloc+0x5a/0x2e0
[  910.691096][T23533]  ? skb_clone+0x1eb/0x370
[  910.695587][T23533]  skb_clone+0x1eb/0x370
[  910.699890][T23533]  __netlink_deliver_tap+0x41c/0x830
[  910.705253][T23533]  ? netlink_deliver_tap+0x2e/0x1b0
[  910.710504][T23533]  netlink_deliver_tap+0x19c/0x1b0
[  910.715671][T23533]  netlink_sendskb+0x68/0x130
[  910.720500][T23533]  netlink_ack+0xc7e/0x1110
[  910.725096][T23533]  ? netlink_dump+0xde0/0xde0
[  910.729926][T23533]  ? perf_trace_lock+0x2ed/0x380
[  910.734924][T23533]  ? __copy_skb_header+0xa7/0x550
[  910.740213][T23533]  netlink_rcv_skb+0x29a/0x480
[  910.745036][T23533]  ? rtnetlink_bind+0x80/0x80
[  910.749773][T23533]  ? netlink_ack+0x1110/0x1110
[  910.754625][T23533]  ? __lock_acquire+0x7c80/0x7c80
[  910.759716][T23533]  ? netlink_deliver_tap+0x2e/0x1b0
[  910.764975][T23533]  netlink_unicast+0x751/0x8d0
[  910.769823][T23533]  netlink_sendmsg+0x8c1/0xbe0
[  910.774658][T23533]  ? netlink_getsockopt+0x580/0x580
[  910.779912][T23533]  ? aa_sock_msg_perm+0x94/0x150
[  910.784907][T23533]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  910.790243][T23533]  ? security_socket_sendmsg+0x80/0xa0
[  910.795758][T23533]  ? netlink_getsockopt+0x580/0x580
[  910.801054][T23533]  ____sys_sendmsg+0x5bf/0x950
[  910.805908][T23533]  ? __asan_memset+0x22/0x40
[  910.810562][T23533]  ? __sys_sendmsg_sock+0x30/0x30
[  910.815643][T23533]  ? __import_iovec+0x5f2/0x860
[  910.820665][T23533]  ? import_iovec+0x73/0xa0
[  910.825240][T23533]  ___sys_sendmsg+0x220/0x290
[  910.829975][T23533]  ? __sys_sendmsg+0x270/0x270
[  910.834835][T23533]  ? __lock_acquire+0x7c80/0x7c80
[  910.839968][T23533]  __se_sys_sendmsg+0x1a5/0x270
[  910.844987][T23533]  ? __x64_sys_sendmsg+0x80/0x80
[  910.850209][T23533]  ? lockdep_hardirqs_on+0x98/0x150
[  910.855568][T23533]  do_syscall_64+0x55/0xb0
[  910.860043][T23533]  ? clear_bhb_loop+0x40/0x90
[  910.865385][T23533]  ? clear_bhb_loop+0x40/0x90
[  910.870300][T23533]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  910.876247][T23533] RIP: 0033:0x7fac8258f749
[  910.880713][T23533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  910.900376][T23533] RSP: 002b:00007fac8348e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  910.908850][T23533] RAX: ffffffffffffffda RBX: 00007fac827e5fa0 RCX: 00007fac8258f749
[  910.916870][T23533] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000d
[  910.924888][T23533] RBP: 00007fac8348e090 R08: 0000000000000000 R09: 0000000000000000
[  910.932916][T23533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  910.940934][T23533] R13: 00007fac827e6038 R14: 00007fac827e5fa0 R15: 00007ffea2a33378
[  910.949013][T23533]  </TASK>
[  912.079370][T23566] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  912.645334][T23581] FAULT_INJECTION: forcing a failure.
[  912.645334][T23581] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  912.665842][T23581] CPU: 1 PID: 23581 Comm: syz.7.6974 Not tainted syzkaller #0
[  912.673416][T23581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  912.683555][T23581] Call Trace:
[  912.686900][T23581]  <TASK>
[  912.689891][T23581]  dump_stack_lvl+0x16c/0x230
[  912.694692][T23581]  ? show_regs_print_info+0x20/0x20
[  912.699986][T23581]  ? load_image+0x3b0/0x3b0
[  912.704591][T23581]  ? __might_fault+0xaa/0x120
[  912.709349][T23581]  ? __lock_acquire+0x7c80/0x7c80
[  912.714448][T23581]  ? __might_fault+0xaa/0x120
[  912.719212][T23581]  should_fail_ex+0x39d/0x4d0
[  912.723987][T23581]  _copy_from_iter+0x1d3/0x1290
[  912.729003][T23581]  ? __might_fault+0xaa/0x120
[  912.733775][T23581]  ? _copy_from_iter+0x248/0x1290
[  912.738884][T23581]  ? __virt_addr_valid+0x18c/0x540
[  912.744086][T23581]  ? __lock_acquire+0x7c80/0x7c80
[  912.749187][T23581]  ? copyout_mc+0x70/0x70
[  912.753636][T23581]  ? copyout_mc+0x70/0x70
[  912.758018][T23581]  ? __virt_addr_valid+0x18c/0x540
[  912.763185][T23581]  ? page_copy_sane+0x16a/0x270
[  912.768096][T23581]  copy_page_from_iter+0x7b/0x100
[  912.773184][T23581]  skb_copy_datagram_from_iter+0x2e4/0x6e0
[  912.779069][T23581]  tun_get_user+0x1583/0x3bf0
[  912.783824][T23581]  ? trace_event_raw_event_lock+0x230/0x230
[  912.789771][T23581]  ? aa_file_perm+0x120/0xec0
[  912.794495][T23581]  ? aa_file_perm+0x3e8/0xec0
[  912.799220][T23581]  ? rcu_read_unlock+0xa0/0xa0
[  912.804060][T23581]  ? tun_get+0x1c/0x2e0
[  912.808293][T23581]  ? __lock_acquire+0x7c80/0x7c80
[  912.813373][T23581]  ? tun_get+0x1c/0x2e0
[  912.817604][T23581]  tun_chr_write_iter+0x119/0x200
[  912.822690][T23581]  vfs_write+0x43b/0x940
[  912.827084][T23581]  ? file_end_write+0x250/0x250
[  912.831998][T23581]  ? __fget_files+0x44a/0x4d0
[  912.836740][T23581]  ? __fdget_pos+0x1d8/0x330
[  912.841394][T23581]  ? ksys_write+0x75/0x250
[  912.846383][T23581]  ksys_write+0x147/0x250
[  912.850764][T23581]  ? __ia32_sys_read+0x90/0x90
[  912.855597][T23581]  ? lockdep_hardirqs_on+0x98/0x150
[  912.860858][T23581]  do_syscall_64+0x55/0xb0
[  912.865308][T23581]  ? clear_bhb_loop+0x40/0x90
[  912.870024][T23581]  ? clear_bhb_loop+0x40/0x90
[  912.874745][T23581]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  912.880825][T23581] RIP: 0033:0x7f34be18f749
[  912.885293][T23581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  912.904948][T23581] RSP: 002b:00007f34bc3f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  912.913498][T23581] RAX: ffffffffffffffda RBX: 00007f34be3e5fa0 RCX: 00007f34be18f749
[  912.921512][T23581] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8
[  912.929616][T23581] RBP: 00007f34bc3f6090 R08: 0000000000000000 R09: 0000000000000000
[  912.937626][T23581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  912.945631][T23581] R13: 00007f34be3e6038 R14: 00007f34be3e5fa0 R15: 00007ffde66b9a98
[  912.953698][T23581]  </TASK>
[  913.122229][T23589] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  913.224916][T23592] netlink: 126588 bytes leftover after parsing attributes in process `syz.8.6975'.
[  913.324702][T23584] netlink: 399 bytes leftover after parsing attributes in process `syz.8.6975'.
[  913.566393][T23597] validate_nla: 9 callbacks suppressed
[  913.566415][T23597] netlink: 'syz.4.6980': attribute type 1 has an invalid length.
[  913.711426][T23605] IPv6: NLM_F_REPLACE set, but no existing node found!
[  914.118879][T23616] netlink: 'syz.6.6985': attribute type 10 has an invalid length.
[  914.387192][T23621] netlink: 'syz.7.6989': attribute type 10 has an invalid length.
[  914.406382][T23621] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  915.727443][T23644] netlink: 16098 bytes leftover after parsing attributes in process `syz.7.6998'.
[  915.917957][T23652] netlink: 'syz.4.7001': attribute type 10 has an invalid length.
[  915.933269][T23652] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  916.596002][T23665] netlink: 'syz.7.7003': attribute type 10 has an invalid length.
[  916.757671][T23671] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  916.804521][T23671] syzkaller0: entered promiscuous mode
[  916.815504][T23671] syzkaller0: entered allmulticast mode
[  916.818523][T23675] netlink: 'syz.6.7011': attribute type 29 has an invalid length.
[  916.832468][T23675] netlink: 'syz.6.7011': attribute type 29 has an invalid length.
[  916.843560][T23675] netlink: 'syz.6.7011': attribute type 29 has an invalid length.
[  916.854324][T23675] netlink: 'syz.6.7011': attribute type 29 has an invalid length.
[  919.845833][T23696] tap0: tun_chr_ioctl cmd 1074025677
[  919.851380][T23696] tap0: linktype set to 6
[  919.937841][T23699] netlink: 'syz.6.7018': attribute type 33 has an invalid length.
[  919.965805][T23699] netlink: 164 bytes leftover after parsing attributes in process `syz.6.7018'.
[  920.080072][T23704] tap0: tun_chr_ioctl cmd 1074025680
[  920.227829][T23711] netlink: 'syz.7.7024': attribute type 21 has an invalid length.
[  920.242129][T23711] netlink: 'syz.7.7024': attribute type 6 has an invalid length.
[  920.250210][T23711] netlink: 132 bytes leftover after parsing attributes in process `syz.7.7024'.
[  920.319575][T23715] netlink: 'syz.6.7025': attribute type 10 has an invalid length.
[  920.442998][T23716] netlink: 'syz.8.7022': attribute type 12 has an invalid length.
[  920.461220][T23716] netlink: 14585 bytes leftover after parsing attributes in process `syz.8.7022'.
[  920.555660][T23713] netlink: 830 bytes leftover after parsing attributes in process `syz.8.7022'.
[  920.576679][T23713] bond_slave_0: entered promiscuous mode
[  920.585987][T23713] bond_slave_1: entered promiscuous mode
[  920.593970][T23713] bridge0: entered promiscuous mode
[  920.873937][T23728] netlink: 'syz.6.7030': attribute type 22 has an invalid length.
[  920.883910][T23728] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7030'.
[  921.043723][T23729] netlink: 'syz.7.7029': attribute type 10 has an invalid length.
[  921.157480][T23740] syz.6.7034[23740] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  921.157792][T23740] syz.6.7034[23740] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  921.179390][T23740] netlink: 'syz.6.7034': attribute type 1 has an invalid length.
[  921.203560][T23740] netlink: 112860 bytes leftover after parsing attributes in process `syz.6.7034'.
[  921.231355][T23740] netlink: 9 bytes leftover after parsing attributes in process `syz.6.7034'.
[  921.363321][T23745] netlink: 'syz.8.7035': attribute type 10 has an invalid length.
[  921.376301][T23745] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  921.764945][T23763] pimreg1: tun_chr_ioctl cmd 1074025677
[  921.772946][T23763] pimreg1: linktype set to 769
[  922.091483][T23765] netlink: 209844 bytes leftover after parsing attributes in process `syz.7.7043'.
[  922.106861][T23766] @: entered promiscuous mode
[  922.111658][T23766] @: entered allmulticast mode
[  923.077121][T23780] netlink: 'syz.6.7047': attribute type 10 has an invalid length.
[  923.412057][T23792] netlink: 830 bytes leftover after parsing attributes in process `syz.6.7051'.
[  923.491248][T23795] tap0: tun_chr_ioctl cmd 1074025680
[  923.822481][T23802] FAULT_INJECTION: forcing a failure.
[  923.822481][T23802] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  923.845873][T23802] CPU: 1 PID: 23802 Comm: syz.6.7054 Not tainted syzkaller #0
[  923.853452][T23802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  923.863554][T23802] Call Trace:
[  923.866872][T23802]  <TASK>
[  923.869941][T23802]  dump_stack_lvl+0x16c/0x230
[  923.874685][T23802]  ? show_regs_print_info+0x20/0x20
[  923.879935][T23802]  ? load_image+0x3b0/0x3b0
[  923.884487][T23802]  ? __might_fault+0xaa/0x120
[  923.889208][T23802]  ? __lock_acquire+0x7c80/0x7c80
[  923.894284][T23802]  should_fail_ex+0x39d/0x4d0
[  923.899016][T23802]  _copy_from_user+0x2f/0xe0
[  923.903645][T23802]  ___sys_sendmsg+0x159/0x290
[  923.908372][T23802]  ? __sys_sendmsg+0x270/0x270
[  923.913243][T23802]  ? __lock_acquire+0x7c80/0x7c80
[  923.918382][T23802]  __se_sys_sendmsg+0x1a5/0x270
[  923.923291][T23802]  ? __x64_sys_sendmsg+0x80/0x80
[  923.928312][T23802]  ? lockdep_hardirqs_on+0x98/0x150
[  923.933559][T23802]  do_syscall_64+0x55/0xb0
[  923.938015][T23802]  ? clear_bhb_loop+0x40/0x90
[  923.942734][T23802]  ? clear_bhb_loop+0x40/0x90
[  923.947472][T23802]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  923.953441][T23802] RIP: 0033:0x7f0c0af8f749
[  923.957910][T23802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  923.977558][T23802] RSP: 002b:00007f0c091f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  923.986011][T23802] RAX: ffffffffffffffda RBX: 00007f0c0b1e5fa0 RCX: 00007f0c0af8f749
[  923.994029][T23802] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000007
[  924.002037][T23802] RBP: 00007f0c091f6090 R08: 0000000000000000 R09: 0000000000000000
[  924.010045][T23802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  924.018050][T23802] R13: 00007f0c0b1e6038 R14: 00007f0c0b1e5fa0 R15: 00007fffde48f938
[  924.026102][T23802]  </TASK>
[  924.491285][T23812] netlink: 132 bytes leftover after parsing attributes in process `syz.6.7056'.
[  924.860055][T23820] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  925.148338][T18730] Bluetooth: hci6: unexpected event 0x06 length: 15 > 3
[  925.223078][T23822] validate_nla: 3 callbacks suppressed
[  925.223099][T23822] netlink: 'syz.7.7060': attribute type 12 has an invalid length.
[  925.245949][T23839] netlink: 'syz.8.7067': attribute type 2 has an invalid length.
[  925.253740][T23839] netlink: 'syz.8.7067': attribute type 1 has an invalid length.
[  925.285848][T23822] netlink: 14585 bytes leftover after parsing attributes in process `syz.7.7060'.
[  925.317927][T23839] netlink: 132 bytes leftover after parsing attributes in process `syz.8.7067'.
[  925.363047][T23822] netlink: 830 bytes leftover after parsing attributes in process `syz.7.7060'.
[  925.382928][T23822] bond_slave_0: entered promiscuous mode
[  925.389253][T23822] bond_slave_1: entered promiscuous mode
[  925.395019][T23822] batadv_slave_0: entered promiscuous mode
[  925.521215][T23848] tap0: tun_chr_ioctl cmd 1074025675
[  925.526932][T23848] tap0: persist enabled
[  925.589510][T23844] tap1: tun_chr_ioctl cmd 1074025677
[  925.595622][T23844] tap1: linktype set to 778
[  925.608400][T23844] tap0: tun_chr_ioctl cmd 1074025675
[  925.614053][T23844] tap0: persist enabled
[  925.768346][T23853] netlink: 'syz.7.7072': attribute type 10 has an invalid length.
[  925.793563][T23853] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  926.006026][T23864] netlink: 'syz.7.7076': attribute type 21 has an invalid length.
[  926.027720][T23864] FAULT_INJECTION: forcing a failure.
[  926.027720][T23864] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  926.050837][T23864] CPU: 1 PID: 23864 Comm: syz.7.7076 Not tainted syzkaller #0
[  926.058476][T23864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  926.068573][T23864] Call Trace:
[  926.071868][T23864]  <TASK>
[  926.074830][T23864]  dump_stack_lvl+0x16c/0x230
[  926.079578][T23864]  ? show_regs_print_info+0x20/0x20
[  926.084833][T23864]  ? load_image+0x3b0/0x3b0
[  926.089397][T23864]  ? __lock_acquire+0x7c80/0x7c80
[  926.094578][T23864]  ? snprintf+0xdb/0x120
[  926.098900][T23864]  should_fail_ex+0x39d/0x4d0
[  926.103653][T23864]  _copy_to_user+0x2f/0xa0
[  926.108129][T23864]  simple_read_from_buffer+0xe7/0x150
[  926.113559][T23864]  proc_fail_nth_read+0x1e3/0x250
[  926.118633][T23864]  ? proc_fault_inject_write+0x340/0x340
[  926.124334][T23864]  ? fsnotify_perm+0x271/0x5e0
[  926.129184][T23864]  ? proc_fault_inject_write+0x340/0x340
[  926.134852][T23864]  vfs_read+0x27e/0x920
[  926.139056][T23864]  ? kernel_read+0x1e0/0x1e0
[  926.143674][T23864]  ? __fget_files+0x28/0x4d0
[  926.148292][T23864]  ? __fget_files+0x44a/0x4d0
[  926.153014][T23864]  ? __fdget_pos+0x2a3/0x330
[  926.157630][T23864]  ? ksys_read+0x75/0x250
[  926.162014][T23864]  ksys_read+0x147/0x250
[  926.166291][T23864]  ? vfs_write+0x940/0x940
[  926.170749][T23864]  ? lockdep_hardirqs_on+0x98/0x150
[  926.175986][T23864]  do_syscall_64+0x55/0xb0
[  926.180532][T23864]  ? clear_bhb_loop+0x40/0x90
[  926.185269][T23864]  ? clear_bhb_loop+0x40/0x90
[  926.189988][T23864]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  926.195913][T23864] RIP: 0033:0x7f34be18e15c
[  926.200362][T23864] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  926.219995][T23864] RSP: 002b:00007f34bc3f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  926.228436][T23864] RAX: ffffffffffffffda RBX: 00007f34be3e5fa0 RCX: 00007f34be18e15c
[  926.236432][T23864] RDX: 000000000000000f RSI: 00007f34bc3f60a0 RDI: 000000000000000e
[  926.244428][T23864] RBP: 00007f34bc3f6090 R08: 0000000000000000 R09: 0000000000000000
[  926.252466][T23864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  926.260585][T23864] R13: 00007f34be3e6038 R14: 00007f34be3e5fa0 R15: 00007ffde66b9a98
[  926.268622][T23864]  </TASK>
[  926.590290][T23877] netlink: 'syz.7.7081': attribute type 10 has an invalid length.
[  926.753177][T23881] syzkaller0: entered promiscuous mode
[  926.753885][T23883] netlink: 'syz.8.7084': attribute type 1 has an invalid length.
[  926.766895][T23881] syzkaller0: entered allmulticast mode
[  926.773076][T23883] netlink: 15487 bytes leftover after parsing attributes in process `syz.8.7084'.
[  926.836911][T23885] netlink: 'syz.4.7085': attribute type 10 has an invalid length.
[  926.856163][T23885] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  929.024273][T23923] netlink: 'syz.8.7096': attribute type 10 has an invalid length.
[  929.066265][T23923] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  929.514063][T23926] FAULT_INJECTION: forcing a failure.
[  929.514063][T23926] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  929.596182][T23926] CPU: 0 PID: 23926 Comm: syz.4.7098 Not tainted syzkaller #0
[  929.603743][T23926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  929.613858][T23926] Call Trace:
[  929.617194][T23926]  <TASK>
[  929.620271][T23926]  dump_stack_lvl+0x16c/0x230
[  929.625040][T23926]  ? show_regs_print_info+0x20/0x20
[  929.630326][T23926]  ? load_image+0x3b0/0x3b0
[  929.634908][T23926]  ? __might_fault+0xaa/0x120
[  929.639643][T23926]  ? __lock_acquire+0x7c80/0x7c80
[  929.644762][T23926]  should_fail_ex+0x39d/0x4d0
[  929.649536][T23926]  _copy_from_iter+0x1d3/0x1290
[  929.654460][T23926]  ? __might_fault+0xaa/0x120
[  929.659225][T23926]  ? _copy_from_iter+0x248/0x1290
[  929.664422][T23926]  ? __virt_addr_valid+0x18c/0x540
[  929.669616][T23926]  ? __lock_acquire+0x7c80/0x7c80
[  929.674730][T23926]  ? copyout_mc+0x70/0x70
[  929.679139][T23926]  ? copyout_mc+0x70/0x70
[  929.683533][T23926]  ? __virt_addr_valid+0x18c/0x540
[  929.688815][T23926]  ? page_copy_sane+0x16a/0x270
[  929.693752][T23926]  copy_page_from_iter+0x7b/0x100
[  929.698861][T23926]  skb_copy_datagram_from_iter+0x2e4/0x6e0
[  929.704763][T23926]  tun_get_user+0x1583/0x3bf0
[  929.709539][T23926]  ? trace_event_raw_event_lock+0x230/0x230
[  929.715510][T23926]  ? aa_file_perm+0x120/0xec0
[  929.720264][T23926]  ? aa_file_perm+0x3e8/0xec0
[  929.725016][T23926]  ? rcu_read_unlock+0xa0/0xa0
[  929.729904][T23926]  ? tun_get+0x1c/0x2e0
[  929.734133][T23926]  ? __lock_acquire+0x7c80/0x7c80
[  929.739333][T23926]  ? tun_get+0x1c/0x2e0
[  929.743587][T23926]  tun_chr_write_iter+0x119/0x200
[  929.748693][T23926]  vfs_write+0x43b/0x940
[  929.753014][T23926]  ? file_end_write+0x250/0x250
[  929.757945][T23926]  ? __fget_files+0x44a/0x4d0
[  929.762713][T23926]  ? __fdget_pos+0x1d8/0x330
[  929.767381][T23926]  ? ksys_write+0x75/0x250
[  929.771882][T23926]  ksys_write+0x147/0x250
[  929.776295][T23926]  ? __ia32_sys_read+0x90/0x90
[  929.781150][T23926]  ? lockdep_hardirqs_on+0x98/0x150
[  929.786428][T23926]  do_syscall_64+0x55/0xb0
[  929.790894][T23926]  ? clear_bhb_loop+0x40/0x90
[  929.795631][T23926]  ? clear_bhb_loop+0x40/0x90
[  929.800400][T23926]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  929.806343][T23926] RIP: 0033:0x7fac8258f749
[  929.810825][T23926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  929.830489][T23926] RSP: 002b:00007fac8348e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  929.838959][T23926] RAX: ffffffffffffffda RBX: 00007fac827e5fa0 RCX: 00007fac8258f749
[  929.846987][T23926] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8
[  929.855189][T23926] RBP: 00007fac8348e090 R08: 0000000000000000 R09: 0000000000000000
[  929.863224][T23926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  929.871258][T23926] R13: 00007fac827e6038 R14: 00007fac827e5fa0 R15: 00007ffea2a33378
[  929.879358][T23926]  </TASK>
[  930.813855][T23951] netlink: 'syz.6.7107': attribute type 10 has an invalid length.
[  931.024029][T23950] netlink: 'syz.4.7108': attribute type 10 has an invalid length.
[  931.309973][T18726] Bluetooth: hci6: command 0x0406 tx timeout
[  931.693728][T23962] netlink: 209844 bytes leftover after parsing attributes in process `syz.6.7109'.
[  931.887356][T23969] @: entered promiscuous mode
[  931.892260][T23969] @: entered allmulticast mode
[  933.462589][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  933.477641][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  933.564708][T23991] netlink: 'syz.7.7117': attribute type 10 has an invalid length.
[  933.590823][T23991] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  933.673583][T23996] netlink: 'syz.4.7118': attribute type 21 has an invalid length.
[  933.829000][T23996] netlink: 'syz.4.7118': attribute type 21 has an invalid length.
[  933.848565][T23996] netlink: 128 bytes leftover after parsing attributes in process `syz.4.7118'.
[  933.877178][T23996] netlink: 'syz.4.7118': attribute type 4 has an invalid length.
[  933.895763][T23996] netlink: 3 bytes leftover after parsing attributes in process `syz.4.7118'.
[  934.091981][T18730] Bluetooth: hci7: ISO packet for unknown connection handle 3846
[  934.378661][T24007] FAULT_INJECTION: forcing a failure.
[  934.378661][T24007] name failslab, interval 1, probability 0, space 0, times 0
[  934.437108][T24007] CPU: 1 PID: 24007 Comm: syz.4.7123 Not tainted syzkaller #0
[  934.444762][T24007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  934.455035][T24007] Call Trace:
[  934.458354][T24007]  <TASK>
[  934.461321][T24007]  dump_stack_lvl+0x16c/0x230
[  934.466054][T24007]  ? show_regs_print_info+0x20/0x20
[  934.471386][T24007]  ? load_image+0x3b0/0x3b0
[  934.475942][T24007]  ? __might_sleep+0xe0/0xe0
[  934.480580][T24007]  ? __lock_acquire+0x7c80/0x7c80
[  934.485651][T24007]  should_fail_ex+0x39d/0x4d0
[  934.490377][T24007]  should_failslab+0x9/0x20
[  934.494946][T24007]  slab_pre_alloc_hook+0x59/0x310
[  934.500022][T24007]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  934.505786][T24007]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  934.511564][T24007]  __kmem_cache_alloc_node+0x53/0x260
[  934.516993][T24007]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  934.522765][T24007]  __kmalloc+0xa4/0x240
[  934.526969][T24007]  tomoyo_realpath_from_path+0xe3/0x5d0
[  934.532596][T24007]  tomoyo_path_number_perm+0x1ea/0x590
[  934.538127][T24007]  ? tomoyo_path_number_perm+0x1ba/0x590
[  934.543823][T24007]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  934.549340][T24007]  ? ksys_write+0x1c1/0x250
[  934.553940][T24007]  ? __fget_files+0x28/0x4d0
[  934.558618][T24007]  security_file_ioctl+0x70/0xa0
[  934.563700][T24007]  __se_sys_ioctl+0x48/0x170
[  934.568342][T24007]  do_syscall_64+0x55/0xb0
[  934.572793][T24007]  ? clear_bhb_loop+0x40/0x90
[  934.577510][T24007]  ? clear_bhb_loop+0x40/0x90
[  934.582341][T24007]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  934.588734][T24007] RIP: 0033:0x7fac8258f749
[  934.593195][T24007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  934.612878][T24007] RSP: 002b:00007fac8348e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  934.621360][T24007] RAX: ffffffffffffffda RBX: 00007fac827e5fa0 RCX: 00007fac8258f749
[  934.629376][T24007] RDX: 0000200000000000 RSI: 0000000000008916 RDI: 0000000000000004
[  934.637496][T24007] RBP: 00007fac8348e090 R08: 0000000000000000 R09: 0000000000000000
[  934.645507][T24007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  934.653518][T24007] R13: 00007fac827e6038 R14: 00007fac827e5fa0 R15: 00007ffea2a33378
[  934.661560][T24007]  </TASK>
[  934.795818][T24007] ERROR: Out of memory at tomoyo_realpath_from_path.
[  935.131587][T24023] netlink: 'syz.7.7128': attribute type 10 has an invalid length.
[  935.161061][T24023] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  935.644292][T24036] netlink: 4083 bytes leftover after parsing attributes in process `syz.7.7132'.
[  935.692554][T24038] netlink: 'syz.4.7133': attribute type 4 has an invalid length.
[  935.994245][T24044] netlink: 'syz.6.7131': attribute type 10 has an invalid length.
[  936.358894][T24055] netlink: 'syz.7.7140': attribute type 10 has an invalid length.
[  936.390582][T24055] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  936.765739][T24066] netlink: 164 bytes leftover after parsing attributes in process `syz.4.7145'.
[  937.010044][T24074] netlink: 'syz.7.7146': attribute type 2 has an invalid length.
[  937.036274][T24074] netlink: 132 bytes leftover after parsing attributes in process `syz.7.7146'.
[  937.189175][T24085] netlink: 128 bytes leftover after parsing attributes in process `syz.6.7151'.
[  937.226232][T24087] netlink: 'syz.7.7152': attribute type 10 has an invalid length.
[  937.252258][T24087] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  937.273184][T24085] netlink: 132 bytes leftover after parsing attributes in process `syz.6.7151'.
[  937.622803][T24106] netlink: 21 bytes leftover after parsing attributes in process `syz.6.7160'.
[  937.644114][T24106] ksmbd: Unknown IPC event: 0, ignore.
[  937.975915][T24124] netlink: 'syz.7.7166': attribute type 22 has an invalid length.
[  937.986197][T24124] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7166'.
[  938.303284][T24142] netlink: 144 bytes leftover after parsing attributes in process `syz.8.7173'.
[  938.315200][T24139] netlink: 'syz.6.7172': attribute type 11 has an invalid length.
[  938.324868][T24141] netlink: 'syz.6.7172': attribute type 11 has an invalid length.
[  938.349288][T24144] netlink: 'syz.7.7174': attribute type 1 has an invalid length.
[  938.932784][T24163] lo: entered promiscuous mode
[  939.049236][T24173] __nla_validate_parse: 5 callbacks suppressed
[  939.049258][T24173] netlink: 60 bytes leftover after parsing attributes in process `syz.8.7185'.
[  939.073663][T24173] netlink: 60 bytes leftover after parsing attributes in process `syz.8.7185'.
[  939.083979][T24173] netlink: 60 bytes leftover after parsing attributes in process `syz.8.7185'.
[  939.177368][T24177] netlink: 'syz.7.7186': attribute type 21 has an invalid length.
[  939.193087][T24177] netlink: 'syz.7.7186': attribute type 4 has an invalid length.
[  939.203436][T24178] netlink: 44 bytes leftover after parsing attributes in process `syz.8.7185'.
[  939.238712][T24177] netlink: 152 bytes leftover after parsing attributes in process `syz.7.7186'.
[  939.333414][T24183] netlink: 44 bytes leftover after parsing attributes in process `syz.7.7186'.
[  939.900605][T24188] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.7189'.
[  941.183568][T24222] validate_nla: 2 callbacks suppressed
[  941.183609][T24222] netlink: 'syz.6.7202': attribute type 2 has an invalid length.
[  941.202826][T24222] netlink: 'syz.6.7202': attribute type 1 has an invalid length.
[  941.211245][T24222] netlink: 132 bytes leftover after parsing attributes in process `syz.6.7202'.
[  941.502086][T18730] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15
[  941.526051][T24230] netlink: 'syz.4.7203': attribute type 2 has an invalid length.
[  941.549038][T24230] netlink: 14 bytes leftover after parsing attributes in process `syz.4.7203'.
[  941.937121][T24246] sctp: [Deprecated]: syz.7.7211 (pid 24246) Use of struct sctp_assoc_value in delayed_ack socket option.
[  941.937121][T24246] Use struct sctp_sack_info instead
[  942.036478][T24239] netlink: 'syz.4.7208': attribute type 10 has an invalid length.
[  942.090747][T24248] netlink: 'syz.6.7212': attribute type 10 has an invalid length.
[  942.120841][T24248] bond0: (slave dummy0): Releasing backup interface
[  942.129429][T24248] dummy0: left promiscuous mode
[  942.136397][T24248] dummy0: left allmulticast mode
[  942.520758][T24251] syzkaller0: entered promiscuous mode
[  942.539515][T24251] syzkaller0: entered allmulticast mode
[  946.411728][T24268] netlink: 'syz.4.7217': attribute type 10 has an invalid length.
[  946.424633][T24268] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  946.711304][T24282] netlink: 'syz.4.7223': attribute type 21 has an invalid length.
[  946.724179][T24282] netlink: 156 bytes leftover after parsing attributes in process `syz.4.7223'.
[  947.040613][T24286] netlink: 'syz.7.7225': attribute type 10 has an invalid length.
[  947.096388][T24286] dummy0: entered promiscuous mode
[  947.324491][T24297] netlink: 'syz.4.7229': attribute type 10 has an invalid length.
[  947.334087][T24297] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  947.718809][T24302] netlink: 'syz.4.7231': attribute type 21 has an invalid length.
[  948.017555][T24311] netlink: 144 bytes leftover after parsing attributes in process `syz.7.7232'.
[  948.058841][T24310] netlink: 'syz.6.7233': attribute type 2 has an invalid length.
[  948.085964][T24310] netlink: 'syz.6.7233': attribute type 8 has an invalid length.
[  948.093770][T24310] netlink: 132 bytes leftover after parsing attributes in process `syz.6.7233'.
[  948.714021][T24329] netlink: 'syz.4.7240': attribute type 10 has an invalid length.
[  949.032756][T24344] netlink: 'syz.7.7245': attribute type 39 has an invalid length.
[  949.104706][T24344] veth0_macvtap: left promiscuous mode
[  949.715188][T24354] netlink: 'syz.6.7248': attribute type 10 has an invalid length.
[  949.786020][T24354] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7248'.
[  949.799667][T24357] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.7248'.
[  949.811600][T24354] team0: entered promiscuous mode
[  949.906390][T24354] team_slave_0: entered promiscuous mode
[  949.913064][T24354] team_slave_1: entered promiscuous mode
[  949.941138][T24354] hsr0: entered promiscuous mode
[  949.951468][T24354] team0: entered allmulticast mode
[  949.957582][T24354] team_slave_0: entered allmulticast mode
[  949.963712][T24354] team_slave_1: entered allmulticast mode
[  949.984180][T24354] hsr0: entered allmulticast mode
[  949.997076][T24354] hsr_slave_0: entered allmulticast mode
[  950.005111][T24354] hsr_slave_1: entered allmulticast mode
[  950.057282][T24354] bridge0: port 4(team0) entered blocking state
[  950.082135][T24354] bridge0: port 4(team0) entered disabled state
[  950.307244][T24354] bridge0: port 4(team0) entered blocking state
[  950.321177][T24354] bridge0: port 4(team0) entered forwarding state
[  950.739309][T24367] tap0: tun_chr_ioctl cmd 1074025680
[  950.956065][T24379] FAULT_INJECTION: forcing a failure.
[  950.956065][T24379] name failslab, interval 1, probability 0, space 0, times 0
[  950.988700][T24379] CPU: 1 PID: 24379 Comm: syz.8.7256 Not tainted syzkaller #0
[  950.996237][T24379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  951.006340][T24379] Call Trace:
[  951.009657][T24379]  <TASK>
[  951.012632][T24379]  dump_stack_lvl+0x16c/0x230
[  951.017383][T24379]  ? show_regs_print_info+0x20/0x20
[  951.022640][T24379]  ? load_image+0x3b0/0x3b0
[  951.027243][T24379]  ? __might_sleep+0xe0/0xe0
[  951.031895][T24379]  ? __lock_acquire+0x7c80/0x7c80
[  951.036968][T24379]  should_fail_ex+0x39d/0x4d0
[  951.041698][T24379]  should_failslab+0x9/0x20
[  951.046249][T24379]  slab_pre_alloc_hook+0x59/0x310
[  951.051335][T24379]  ? tomoyo_encode+0x28b/0x540
[  951.056158][T24379]  ? tomoyo_encode+0x28b/0x540
[  951.060984][T24379]  __kmem_cache_alloc_node+0x53/0x260
[  951.066506][T24379]  ? tomoyo_encode+0x28b/0x540
[  951.071319][T24379]  __kmalloc+0xa4/0x240
[  951.075610][T24379]  tomoyo_encode+0x28b/0x540
[  951.080281][T24379]  tomoyo_realpath_from_path+0x592/0x5d0
[  951.086000][T24379]  tomoyo_path_number_perm+0x1ea/0x590
[  951.091594][T24379]  ? tomoyo_path_number_perm+0x1ba/0x590
[  951.097255][T24379]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  951.102739][T24379]  ? ksys_write+0x1c1/0x250
[  951.107290][T24379]  ? __fget_files+0x28/0x4d0
[  951.111911][T24379]  security_file_ioctl+0x70/0xa0
[  951.116873][T24379]  __se_sys_ioctl+0x48/0x170
[  951.121480][T24379]  do_syscall_64+0x55/0xb0
[  951.125921][T24379]  ? clear_bhb_loop+0x40/0x90
[  951.130614][T24379]  ? clear_bhb_loop+0x40/0x90
[  951.135304][T24379]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  951.141243][T24379] RIP: 0033:0x7fc6c538f749
[  951.145695][T24379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  951.165354][T24379] RSP: 002b:00007fc6c62db038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  951.173806][T24379] RAX: ffffffffffffffda RBX: 00007fc6c55e5fa0 RCX: 00007fc6c538f749
[  951.181801][T24379] RDX: 0000200000000000 RSI: 0000000000008916 RDI: 0000000000000004
[  951.189781][T24379] RBP: 00007fc6c62db090 R08: 0000000000000000 R09: 0000000000000000
[  951.197768][T24379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  951.205770][T24379] R13: 00007fc6c55e6038 R14: 00007fc6c55e5fa0 R15: 00007ffdcc9205d8
[  951.213790][T24379]  </TASK>
[  951.225890][T24379] ERROR: Out of memory at tomoyo_realpath_from_path.
[  951.668932][T24397] FAULT_INJECTION: forcing a failure.
[  951.668932][T24397] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  951.685974][T24397] CPU: 0 PID: 24397 Comm: syz.6.7263 Not tainted syzkaller #0
[  951.693690][T24397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  951.703875][T24397] Call Trace:
[  951.707192][T24397]  <TASK>
[  951.710153][T24397]  dump_stack_lvl+0x16c/0x230
[  951.714887][T24397]  ? show_regs_print_info+0x20/0x20
[  951.720137][T24397]  ? load_image+0x3b0/0x3b0
[  951.724692][T24397]  ? __lock_acquire+0x7c80/0x7c80
[  951.729802][T24397]  should_fail_ex+0x39d/0x4d0
[  951.734528][T24397]  prepare_alloc_pages+0x1e2/0x5f0
[  951.739695][T24397]  __alloc_pages+0x127/0x460
[  951.744319][T24397]  ? rcu_is_watching+0x15/0xb0
[  951.749109][T24397]  ? zone_statistics+0x170/0x170
[  951.754104][T24397]  ? __build_skb_around+0x255/0x3d0
[  951.759357][T24397]  alloc_skb_with_frags+0x23c/0x7c0
[  951.764599][T24397]  sock_alloc_send_pskb+0x857/0x990
[  951.770197][T24397]  ? sock_kzfree_s+0x50/0x50
[  951.774834][T24397]  tun_get_user+0x9dc/0x3bf0
[  951.779457][T24397]  ? aa_file_perm+0x120/0xec0
[  951.784152][T24397]  ? aa_file_perm+0x3e8/0xec0
[  951.788850][T24397]  ? rcu_read_unlock+0xa0/0xa0
[  951.793647][T24397]  ? tun_get+0x1c/0x2e0
[  951.797855][T24397]  ? __lock_acquire+0x7c80/0x7c80
[  951.802936][T24397]  ? tun_get+0x1c/0x2e0
[  951.807129][T24397]  tun_chr_write_iter+0x119/0x200
[  951.812270][T24397]  vfs_write+0x43b/0x940
[  951.816567][T24397]  ? file_end_write+0x250/0x250
[  951.821473][T24397]  ? __fget_files+0x44a/0x4d0
[  951.826179][T24397]  ? __fdget_pos+0x1d8/0x330
[  951.830802][T24397]  ? ksys_write+0x75/0x250
[  951.835244][T24397]  ksys_write+0x147/0x250
[  951.839592][T24397]  ? __ia32_sys_read+0x90/0x90
[  951.844381][T24397]  ? lockdep_hardirqs_on+0x98/0x150
[  951.849608][T24397]  do_syscall_64+0x55/0xb0
[  951.854050][T24397]  ? clear_bhb_loop+0x40/0x90
[  951.858737][T24397]  ? clear_bhb_loop+0x40/0x90
[  951.863439][T24397]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  951.869358][T24397] RIP: 0033:0x7f0c0af8f749
[  951.873795][T24397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  951.893456][T24397] RSP: 002b:00007f0c091f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  951.901930][T24397] RAX: ffffffffffffffda RBX: 00007f0c0b1e5fa0 RCX: 00007f0c0af8f749
[  951.909950][T24397] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8
[  951.917932][T24397] RBP: 00007f0c091f6090 R08: 0000000000000000 R09: 0000000000000000
[  951.925924][T24397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  951.933917][T24397] R13: 00007f0c0b1e6038 R14: 00007f0c0b1e5fa0 R15: 00007fffde48f938
[  951.941926][T24397]  </TASK>
[  952.167345][T24407] validate_nla: 1 callbacks suppressed
[  952.167362][T24407] netlink: 'syz.7.7268': attribute type 3 has an invalid length.
[  952.184458][T24407] netlink: 132 bytes leftover after parsing attributes in process `syz.7.7268'.
[  952.349643][T24413] netlink: 'syz.7.7271': attribute type 2 has an invalid length.
[  952.454003][T24418] tap0: tun_chr_ioctl cmd 2147767507
[  952.467491][T24418] netlink: 'syz.6.7272': attribute type 9 has an invalid length.
[  952.486073][T24418] netlink: 160308 bytes leftover after parsing attributes in process `syz.6.7272'.
[  952.576165][T24422] netlink: 'syz.6.7272': attribute type 9 has an invalid length.
[  952.584080][T24422] netlink: 193380 bytes leftover after parsing attributes in process `syz.6.7272'.
[  952.600809][T24425] netlink: 'syz.8.7276': attribute type 3 has an invalid length.
[  952.612176][T24425] netlink: 13435 bytes leftover after parsing attributes in process `syz.8.7276'.
[  952.718927][T24431] netlink: 'syz.8.7278': attribute type 49 has an invalid length.
[  952.727800][T24431] netlink: set zone limit has 8 unknown bytes
[  952.823935][T24435] netlink: set zone limit has 8 unknown bytes
[  953.164863][T24455] netlink: 'syz.4.7288': attribute type 33 has an invalid length.
[  953.181404][T24455] netlink: 'syz.4.7288': attribute type 1 has an invalid length.
[  953.200447][T24455] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.7288'.
[  953.234076][T24455] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.7288'.
[  953.275193][T24455] netlink: 6324 bytes leftover after parsing attributes in process `syz.4.7288'.
[  953.441002][T24465] netlink: 'syz.4.7291': attribute type 10 has an invalid length.
[  953.502506][T24467] netlink: 164 bytes leftover after parsing attributes in process `syz.6.7292'.
[  954.439421][T24493] netlink: 'syz.4.7300': attribute type 22 has an invalid length.
[  954.456950][T24493] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7300'.
[  954.669395][T24498] syz.4.7304[24498] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  954.669538][T24498] syz.4.7304[24498] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  954.684374][T24497] netlink: 126588 bytes leftover after parsing attributes in process `syz.7.7302'.
[  955.185981][T18721] unregister_netdevice: waiting for syz_tun to become free. Usage count = 3
[  955.195489][T18721] ref_tracker: syz_tun@ffff8880263cc5b8 has 1/2 users at
[  955.195489][T18721]      dst_init+0xd9/0x460
[  955.195489][T18721]      dst_alloc+0x12e/0x170
[  955.195489][T18721]      ip_route_output_key_hash_rcu+0x14f0/0x2360
[  955.195489][T18721]      ip_route_output_key_hash+0x20b/0x340
[  955.195489][T18721]      ip_route_output_flow+0x2a/0x150
[  955.195489][T18721]      geneve_link_config+0x196/0x5f0
[  955.195489][T18721]      geneve_newlink+0x127/0x180
[  955.195489][T18721]      rtnl_newlink+0x14d0/0x2020
[  955.195489][T18721]      rtnetlink_rcv_msg+0x7c7/0xf10
[  955.195489][T18721]      netlink_rcv_skb+0x216/0x480
[  955.195489][T18721]      netlink_unicast+0x751/0x8d0
[  955.195489][T18721]      netlink_sendmsg+0x8c1/0xbe0
[  955.195489][T18721]      __sys_sendto+0x46a/0x620
[  955.195489][T18721]      __x64_sys_sendto+0xde/0xf0
[  955.195489][T18721]      do_syscall_64+0x55/0xb0
[  955.195489][T18721]      entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  955.195489][T18721] 
[  955.287972][T18721] ref_tracker: syz_tun@ffff8880263cc5b8 has 1/2 users at
[  955.287972][T18721]      fib_check_nh+0xc37/0x1900
[  955.287972][T18721]      fib_create_info+0x142c/0x2460
[  955.287972][T18721]      fib_table_insert+0xc7/0x1b50
[  955.287972][T18721]      fib_magic+0x2c5/0x390
[  955.287972][T18721]      fib_add_ifaddr+0x38d/0x5e0
[  955.287972][T18721]      fib_netdev_event+0x389/0x490
[  955.287972][T18721]      notifier_call_chain+0x197/0x390
[  955.287972][T18721]      __dev_notify_flags+0x18e/0x2e0
[  955.287972][T18721]      dev_change_flags+0xe8/0x1a0
[  955.287972][T18721]      do_setlink+0xc74/0x3fb0
[  955.287972][T18721]      rtnl_newlink+0x175b/0x2020
[  955.287972][T18721]      rtnetlink_rcv_msg+0x7c7/0xf10
[  955.287972][T18721]      netlink_rcv_skb+0x216/0x480
[  955.287972][T18721]      netlink_unicast+0x751/0x8d0
[  955.287972][T18721]      netlink_sendmsg+0x8c1/0xbe0
[  955.287972][T18721]      __sys_sendto+0x46a/0x620
[  955.287972][T18721] 
[  956.015868][T18726] Bluetooth: hci0: command 0x0406 tx timeout