last executing test programs:

15m23.254061623s ago: executing program 0 (id=399):
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x8, 0x2}, 0x80, 0x0}, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x1f00)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x8, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r3 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030030000b12d25a80648c2594f90124fc60100c044002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0xa}, 0x0)
perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x80205, 0xf, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_bp={0x0, 0x5}, 0x100410, 0x200, 0x6, 0xfe, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0)

15m19.121373459s ago: executing program 0 (id=408):
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x320, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x63, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0x1}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x6, 0x0, 0xffda, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ecb, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0xfff, 0xfffffbff, 0x3, 0x2, 0x4, 0x8, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x114714, 0xc78, 0x9aec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r2 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0)
write$cgroup_type(r2, &(0x7f0000000280), 0x9)
r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000c40), 0x12)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12)
write$cgroup_int(r5, &(0x7f00000000c0), 0x12)
perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x9, 0x5, 0x7, 0x8, 0x0, 0x80000001, 0x100, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x8000000000000000, 0x5}, 0x4, 0xb5, 0x9, 0x2, 0x10000, 0x10001, 0x9, 0x0, 0x7f, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a1180015000600142603600e1209000a0000000401a80016000a0013", 0x33}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080b01000000e8fe55a1180015000600142603600e1208", 0x29}], 0x10000365}, 0x24000880)
r6 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x33fe0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xf0}, 0x2163)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x7d4d6b8e, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200})

15m18.101489374s ago: executing program 0 (id=416):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x28410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100810, 0x0, 0x100, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5c}, 0x94)
r0 = socket$kcm(0x2, 0x7, 0x84)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x10, &(0x7f0000000000), 0x8)
perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x8d, 0x1, 0x0, 0x0, 0x0, 0x2, 0x240d0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0x6f5f, 0x200, 0x0, 0xffff7fffffffffff, 0x1000}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x8)
r1 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00')
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r2, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0)
close(r3)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x1, 0x0, 0xfffff034}, {0x6, 0x0, 0x0, 0x7}]})
ioctl$TUNGETVNETLE(r3, 0x40107446, &(0x7f0000000180))
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$TUNSETOFFLOAD(r5, 0x4004743d, 0x110e22fff6)
write$cgroup_type(r5, &(0x7f0000000280), 0x9)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="c00e02002d000b02d25a806f8c2d94f90324fc602f1a0b000a7401", 0x1b}], 0x1, 0x0, 0x0, 0x4000}, 0x4080)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x440}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x50)

15m16.018314367s ago: executing program 0 (id=422):
recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x0)
r0 = perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d32, 0x24008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r1, 0x0, 0x200040c4)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0)
r3 = getpid()
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x83, 0x0, r2, 0xc12a, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x3}, 0x50)
r5 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000800)=[{&(0x7f0000000240)="809ef3a83992085464a9f7994345e6161463c4c5c60a9d3a45f267d3ee7f54d00c9c", 0x22}, {&(0x7f0000000380)}, {&(0x7f0000000440)="d262b40c402135fcfd3025ad22ea9f69291aaf443b0db6a6fcb6ff79a5307d7e4e299e922321883bd5782475771f85367c0486f57818d5d914cdcd848b70d48eca0f4ccd5b7dd0d1aecc69eaf11be5c1ceb418de55560b051b235edcbbc1230c5d803cd8bc72fb66342b8467d3f1064ca0f7dd3d75f07adf0db81833afc27d0c88beac90cb0f0cd76552d1bee717233f83a42fb371", 0x95}, {&(0x7f00000005c0)="66c89aeee39489650b4d13eb4524cbe217b2e3788627f7071534449f6cfed85dda7c8fedb0c3ac64146ca9325440cfa9ab55b37c870b7ce6d1c6a4de9034ec297923d916e3b3d908c4b2d393b312f63ac7e15d640e1dd28d79b48d218c03e3d062f71613b4b586097efc6b52aae8e69afd965191a6231f08475a27a068a6552d82e87637", 0x84}, {&(0x7f0000000680)="d728d82099c992c9f4de1ed694a2a67179e9b81fe9eaa9d9cf432e5bf0b8363f80271eacbe0f1e83dc459b3872433a2aa632c094d588b7320aff9456323b873695b4c1d1a2f7309a8ba40ecb986fc31688b654197f1ea2880fc9f9f04b72702c4c3f08cacbbcc9c0877b37672747bcd88b4a3c779e95c91e4f7c16035d47ad113b0254f6637aa35f53b39f15d89d91f1dc16834cae91440c117b5041d9c04c273ff1ff4a98fa0980", 0xa8}, {&(0x7f0000000740)="021d8d8f5ac9620a19341babcc080ab4c220aa44759a36322c00b5a8b840ae1d00ae40ff48cf1a027e91c1ad205cdb9808ec9237eedc611a70e12a75e151dbe81c36c20fd618f02dff68116a0ff2b52271d77e02fcf0a642", 0x58}], 0x6, &(0x7f0000000340)=[@rights={{0x18, 0x1, 0x1, [r0, r0]}}, @rights={{0x38, 0x1, 0x1, [r1, r2, 0xffffffffffffffff, r4, r4, r2, 0xffffffffffffffff, r1, 0xffffffffffffffff, r5]}}], 0x50, 0x1}, 0x84)
write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0)=r3, 0x12)
socket$kcm(0x10, 0x2, 0x4)
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x3, 0x7}, 0x0, 0xfff0000000000000, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001840)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r7 = openat$cgroup_devices(r6, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r7, &(0x7f0000000080)=ANY=[@ANYBLOB='b 7:', @ANYRESOCT], 0xd)

15m14.978600194s ago: executing program 0 (id=426):
socket$kcm(0x10, 0x2, 0x4)
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000000000008500000059"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000075"], 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socket$kcm(0x11, 0x5, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x2}, 0x0, 0x0, 0xfffffffd, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a000000000040611198000000000018000081000000000000000000000000951b000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x1, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r3, 0x6, 0x22, &(0x7f0000000200), 0x4)
openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0)

15m14.491419516s ago: executing program 0 (id=431):
r0 = socket$kcm(0x10, 0x2, 0x4)
syz_clone(0x62005000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
r3 = socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYRESDEC=r0, @ANYRESHEX=r0, @ANYRES8=r0], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r5 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001e00)={0x19, 0x3, &(0x7f00000001c0)=ANY=[@ANYRES32], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x4, '\x00', 0x0, @cgroup_sockopt=0x16}, 0x94)
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200001, 0x1, @perf_bp={0x0, 0x3}, 0x10781, 0x10, 0x0, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, r5, 0x1)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
r7 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r7, 0x0, 0x480, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848420000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1, 0x0, 0x0, 0x8000000}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
recvmsg$kcm(r9, &(0x7f0000001cc0)={&(0x7f0000000a80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f0000001d00)=[{&(0x7f0000000b00)=""/6, 0x6}, {&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f0000001b40)=""/98, 0x62}], 0x3, &(0x7f0000001c00)=""/161, 0xa1}, 0x100)
ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x89f1, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f2, &(0x7f0000000080))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000ff000000000000ffffff9f05000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x80)

14m59.240783855s ago: executing program 32 (id=431):
r0 = socket$kcm(0x10, 0x2, 0x4)
syz_clone(0x62005000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
r3 = socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYRESDEC=r0, @ANYRESHEX=r0, @ANYRES8=r0], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r5 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001e00)={0x19, 0x3, &(0x7f00000001c0)=ANY=[@ANYRES32], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x4, '\x00', 0x0, @cgroup_sockopt=0x16}, 0x94)
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200001, 0x1, @perf_bp={0x0, 0x3}, 0x10781, 0x10, 0x0, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, r5, 0x1)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
r7 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r7, 0x0, 0x480, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848420000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1, 0x0, 0x0, 0x8000000}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
recvmsg$kcm(r9, &(0x7f0000001cc0)={&(0x7f0000000a80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f0000001d00)=[{&(0x7f0000000b00)=""/6, 0x6}, {&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f0000001b40)=""/98, 0x62}], 0x3, &(0x7f0000001c00)=""/161, 0xa1}, 0x100)
ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x89f1, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f2, &(0x7f0000000080))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000ff000000000000ffffff9f05000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x80)

16.165424281s ago: executing program 3 (id=5034):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000000006c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.freeze\x00', 0x100002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'veth0_vlan\x00', @random="010000201000"})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
r4 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r3}, 0x8)
close(r4)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$LINK_DETACH(0x22, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x2000000, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000008c0)={&(0x7f0000000600)="0934252444f9bba674414d46804e84d25360a71e6024c5c6baafb85710d3ae10b8b853d7edcfa1296d1a415b7cf2ca62a1123bf266934641d8dfbb2787ae7d44edf588f37f0db3ece1768ab33dd1e7825bf6b049a121bb0d6aa1b56544c22766ef2a36fb90d4677dfbbf91aefd122446db87da3899ec8211219dc96ca31864ccfd421c71388a63c231c3d1552e44cf0b404edd4dd67a0473651a4bb03a89e39a622444927d28b6723dbd5c02356bd6b3d5150cacee6ac8eb0240b1e99f7962b5f1402050d362cb4ae21b80fbe2ccf2289b1823fb07", &(0x7f0000000700)=""/190, &(0x7f00000007c0)="295c56621ee568a42b119163a079deee9833b102c736b77f09af518c31cf90a5b3f337951469ef489887763a439d6b7f5944c6a77b01fe11a403ad8d62339904fc21c2bc01382ab522", &(0x7f0000000840)="64369a4cb0491f0452440b000626c8fb1eea1aeb4b6245506a6bededc05888e921567b89f15aa8761810fadc51def22ee1a912520dc3cd7a7ef7eb78d0d8332a031010221d87b219558c96549330495638499a0a08332e293415e9daaa11d96685c5b83b94df455610ca42d3902468a9cacebad0f338661ce2", 0x63d, 0xffffffffffffffff, 0x4}, 0x38)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x4}, 0x10c002, 0xac5d, 0xffffffff, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0)
close(r5)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080))
write$cgroup_subtree(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200102f"], 0xcfa4)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x0, 0xe, 0x0, &(0x7f0000000fc0)="cc9ff4088b000000000000000000", 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

14.54244413s ago: executing program 5 (id=5042):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1000000000000}, 0x104080, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0424fc602f6e35400c000200001cc00037153e370a00018025581d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0xffffffffffffffff, 0x4}, 0x38)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
socket$kcm(0x10, 0x2, 0x10)
r2 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000001540)=@in6={0xa, 0x4e20, 0x0, @mcast2}, 0x80, 0x0}, 0x400b8c8)
socket$kcm(0x28, 0x1, 0x0)
getpid()
openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x84401, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x2, 0x4, 0x9}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r4}, 0xc)
ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '})
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040200000000800000000015001000140009000d2009000d2000000401a80016000a000e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee062e1c547cbc7225e6756cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d939acd92954b43370e970100", 0xd8}], 0x1}, 0x0)

14.341079125s ago: executing program 4 (id=5045):
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
r1 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000340)="d8000000040081044e81f782db44b904021d0802010000001c00f0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a0000000000000000", 0xd5}], 0x1, 0x0, 0x0, 0x7400}, 0x20004800)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRES8=r1, @ANYRES32=r0, @ANYBLOB="04004000000000000000", @ANYRES16=r1, @ANYRES8=r1, @ANYBLOB="0000000000df00002b224fff1ff3c64e000000000000000000000000000000000000000023e3dc39155c321a5daf1cdcab8abf34d4b7376d93e42ad0f2509d1e209214eef8c4aa9018475c01b0158147f8ec9c20fca883835e3c79ae42efb063d4362f22b94ff5ba6cb97349f234c1319c92f746ab833aee94bd3e0439f9dc131911695b28cbcbe344192ac1bf58c530815cba076ec47b8f17aeb92aefab0bbb23523d06"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=<r3=>r2], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x7}, 0x44, 0x200000000, 0x3500, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xf, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x1}, 0x0, 0x0, 0xc2b8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r6 = socket$kcm(0x23, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89ee, &(0x7f0000000040)={r6})
close(r5)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r5, 0x4004743b, &(0x7f0000000180))
sendmsg$inet(0xffffffffffffffff, 0x0, 0x8040)
r8 = socket$kcm(0xf, 0x2, 0x2)
r9 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e00001d0b0007400000080000001a0305000000", @ANYRES32=0x1, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000000000000000000000400"/24, @ANYRES64=r3], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0xd, 0x0, 0x0, &(0x7f0000000300)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x55}, 0x94)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r9, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES64=r4, @ANYRES32=r2], 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x424, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
sendmsg$kcm(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000880)}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x4b, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000010008108040f9becdb4cb92e0a28b137140000004abd6efb2503eaff0d00010002", 0x25}], 0x1}, 0x40)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000600000000000000", @ANYRES32=r9, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000030003d2df87014ff3ce18124669a1a545f986db5c977853ecaa5baa691b5c85d4000000"], 0x50)
write$cgroup_subtree(r10, &(0x7f0000000040)=ANY=[], 0xfe33)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r11)

9.219106878s ago: executing program 1 (id=5048):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x1, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="2300100004006900080000000f00000000000000", @ANYRES32=0x1, @ANYBLOB='i\v\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000840)="3c00000033000b12d25a80648c2594f90124fc60100c034004000000002000119215a2281cf6b809f2db60490d20a735b16b6a4479b406db26a57b35", 0x3c}], 0x1}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000440)=[0x0], &(0x7f0000000500)=[0x0, 0x0], 0x0, 0xd9, 0x0, 0x0, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0xbd, 0x8, 0x8, &(0x7f0000000600)}}, 0x10)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f00000001c0)={0x2, 0x4e20, @remote}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000280)="a58e2fa4b0b1738d5a264801ca7c1b6dbf04f4d0fe0458749194d6947992239f7b9332fb34145dee24fb23f7ddea4690d51a576f70eb2b80fff42b9ebdd09670cd8dcd22316415af2ee076aaf92af14e461ee6", 0x53}, {&(0x7f0000000380)="7381d7f68be04a0af2c78db30ae815164d3a693a794bbef55ebebeeb50d55d0aceecf971e6fb1fd8316f2a3909a6e43136909edbd10c3e05e609", 0x3a}], 0x2, &(0x7f0000001080)=ANY=[@ANYBLOB="1c0000f2000000000000000008000000", @ANYRES32=r2, @ANYBLOB="ffffffffac141444000000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="64010100ffffffff0000000010000000000000000000000007000000"], 0x50}, 0x8000)
r3 = bpf$ITER_CREATE(0x21, &(0x7f00000004c0), 0x8)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5, <r6=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x22, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffff4}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@exit, @generic={0x3, 0x1, 0x4, 0x7, 0x9}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x591}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_fd={0x18, 0x9, 0x1, 0x0, r7}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0xc}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r8, 0x4020940d, &(0x7f00000005c0)=0x80000000000004)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x5, 0x1f, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@map_idx={0x18, 0x5}, @generic={0x0, 0x9, 0x0, 0x0, 0xea20}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='GPL\x00', 0x3, 0x2, &(0x7f0000000380)=""/2, 0x41100, 0x3, '\x00', r2, @fallback=0xf, r1, 0x8, &(0x7f0000000440)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000480)={0x1, 0x1, 0x3, 0xfffffffa}, 0x10, 0x0, r0, 0x3, &(0x7f0000000500)=[0x1, r3, r5, r7, r8], &(0x7f0000000540)=[{0x0, 0x3, 0x3, 0x8}, {0x0, 0x1, 0x4, 0x5}, {0x5, 0x5, 0x8, 0x5}], 0x10, 0x9}, 0x94)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l')
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080))
write$cgroup_subtree(r8, &(0x7f0000000200)={[{0x0, 'devices'}]}, 0x9)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x21, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
syz_clone(0x9900000, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)

9.15941941s ago: executing program 3 (id=5049):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x0, 0xffc9, 0x0, &(0x7f0000002d40)="b3070d5b19aa16a7489474168245f80bbfa179c79d3bffb79761ab0d8e009e9b42b881f247de05b072442debf7bc0ed4b393a763a2bf3d12b851fd541f7a7169bf1fbd1640409fb8f29f118ac55c111bb188b49c7bdb0b55d9b03ef63529493d44c4617aa69a7fe28b6438a324f15e3eb21a0f5a233ee9e9071b7d746b5ee5ec93c8f26de857054995b60874a9d27726d9c069ab61a1623c8951aeaabe0e5d7538f7dbd8bd0628798f4622ee0f72d66106093500348e147e9dcee5dae63af07a6fb007e4cf9d6d6359a252aa81ec8a9caefdcb28f79094b5cab4e154a22c44bf971c039f2d566c4aec66cebca90bfe16ada4b03ffc7e90b023eec64cce3c0351597828adc485980b2aaddd930e4e424e2d0314f7fe17c3092ec5f5e54b39844e714661ac9edf447a2e3dc89f110e54528a4e22d8a86585b4601028b2bbbb4f70b7ac3b6c7129d4d0c8ce0b02c3c1f5e4128a6d315002443ac28bdb0c9d7abe3e4286ec1055688ec813b9979121e900aea3693b9c8b427bb69576362dfb258f8df59e0dbefd7034c1e887a06731e1cc25113331eab4b0d022a63107f774b4a631fa71e16e290881c25fe6af9775fd65359e2af043ec9caad726b0ce923e3c6ef9d081f967e8ef34ef0329b1c84b7bf024bda4cfda93debe4ba05de3e1728c8e22cb844c74f8d769929e6295a16bea0c50727fa33b3c10d2e53e66b20761d9fc6ef5f24b311ff8a4239f81fba4a808a08785c8cb22ac1c4a06f7b3ce232806dfb41c5aa694cf55b9872aa2c53175a76a3427dbb5c00c15ed62686a048edba6bff31ef1a84d711eddc76a4db44c880f26a79da84b9f9cfaaf909267b67a9c853ea9eb1fe586db67a98dcf37a15d5295857ee0bb4e8a4b551f2629bfc72592c0854266245b837a91f3eefbc2612ee909fa43209d02af7d3b83ec13e5dbbfe1a34a8b45ce49722a5369c3c1b8bccd5386cf57baae0d5c4a355d5a729ddce5c0be3aaafaffa497dd6b7f363b5e53f3849c7a2013e0db1ca5d2d93b0a809d1c27306883edaf11b73199275301a9d28cb3e9b267e3342fad165a13f3e44d0d53afc95f44474d5761416489612b6054c17a383a03782bf380bf347742f2845be2df988310378dad9bbf1980a4a84a5e4f10b3a28db2e7829e25640b833b0cf6675eba6601502a7ae3177860dac93726ad9adabc6d98ce30a4cb01ce01b6309982898b617f20c55510253405d93e70fbc4c9ded36bacff16e49d9f70d852c41cec96d6e4f6c44167ed6990d04e63f15fd934e6120f9189fd04e8ff4554fe23751dea387ab1ef5b0973d9510c4cbb1fe89f80d7875c16b2ff9a746f8e2b4e9dc5594712c511dea6bf63c4d9fd7114092ffdcfc16dde14359b2fda592214ad728b4e19132970be209ed98dda93c1c3abe8cffef35679b61e9ac56802bbce8509a047415a1badd9c4a359b6971d73d994e5825115fffd6f389144fdec3bb012f9f392fee8310a847192dc6ff4247a6ba44ca75ed0bc40b50767407a7d6420018b2bd1dc9ed66e11fe5c7b768ff7aae6d1ae62516a0ad980f366b6f3ea5d9e407b3e88869749b15fe400509d70256d82b2d5428b2912e648ebe7022d6f3bfc8d0c9423cba893efc65394e63a56269b7a17f69294000b0bd27902730356f238b868803b7ff4da31013ad66e22c5c7afa1b370fd2d10e0175a3bfba66d88e29fb371998424be80737bfb38db011efc5d63f0fa17efcd90a5cd2d310ab8e4ff2631dc2fc2be5404d4026fb916c1cd481dd70ea1755813574a0ec1d01b1411c7a7a69f6ac972487f9b470090c419d1c57d8641d6f4cd10b1d55ce621ed8e14f28f11b579a6408bbff9fc13cf6fb07c22770e65ed772e790844ea608e38ae48302efb09c173d8c653aaf0c6be98d9a2d166c9d318dfbb8f06b9a241ac72d68a82dbf7f3255e2cb0af5227d854a71b7d4c89fe943db9c0c19ac1dd5264bf8515b217f1de94b5da0f3a4a73f587a71bad13e447eb5ca4d76d3645d749f2ba4b46da62a7717e544cfb025b364c5d19ec6330bc6fdf161a153c61720031dfa170f0c77de03b36fa898e8f00dcb04c21db7362200fae366363f82a2d7292e0d67b72f64e227fdd91edd3c455e7341a9a9b8832631891b563a8d064955d0074a216062147414c2c8badd2c547a51734a96c215d82c68f3eeba0f9a4954e479a0534a8fd131a4b9b1d069322907c1b49e5c68b86079841b34867ae69d42f9843a9c9d290d0ea9ab4068a58e9c76588391b12420af3d9e3d8bf672f3f0ac88a8c269a9570576f6a1a5a39d63cdf7e459a620af3fe5b6fdc7576732bae1f8ab81d5294562d5e82f1273ba1f2cc1f336f2ed3b4a9901dbb3e86f3859750ef51db3601247fcd157072bc3843aedb474433c4694942f1c13356d4cfbf56d5834f9c0250044a017137ae689db25feec05600827c11955e492fb67dc2239b75d7ecc3b279901670ef2ca4d2010cf7e8f08107781b2da20d716619117191f8df96cfe9a81ef18ec0ebcc99cc3558830265d0346f9767ddb6c2fbb2495a9b8ee91f82a1bea2324ec011f45f1462aa216c209186229c233006600414628beb9738efbdad2601cac6b2b7e4c803719d6b826c44e9ae057711f067de8b0f0d1ae2a2f78936a44e2dd9e9b19244ad4b07e6cb870b594fa6f86012f699455ee86aebab98c69f332876fd820f11e982b6023325ab335a28cdceb7ce3bc4706856b4aa37b67fc1a7dc1ce4d88b277db25ebad94140b6107310a4f6e597e8895277c749687e89f0a69bf3cb1de8b459b400806fa8fc5ba4441dce50d3ff057467285e4c21cb12bac00791c3ad4f27c46c58d15de6e9cd746acd26a4fbb7da8849aa6f423dbf3974c1c4610804b5e3e46d5d6d945415e22c039481224a30cbe2b3e271b9f50297afd5df882e5b96fe31acd3e92b8fc5d0cec29915946fd0c02bc2775ad54edfb2715c9e0e197e28e0e1a6505fafec1f24d848c18afc2acb48992cab420200e06db88bc50b985932b40b16bddfdf29480fbddf106f8a5caf40d0304e45ab7c19cea65e834ef6742c413563657b8d7c27b30f85fab4fc041b50c532ea646b0755437603f1a05f87b8d67976f3ae9e729c3fb8ddb91f26d7b26f003c1a8efae40acb42360ea5144d550203e38c4e0329e6c42353b08ef1278dc529cf272b2f8e32b578f6d874fbae55f12db0081a2a6b543a418e74b121e1698eadb8f1ef214d38c403768f4df4b96b2a97c18c584b8a81f3fedd0b0653c9380bb7b42db34217a4b2e57c07de829381de337f65415f794c02192ce775e6788b4d7bf3d06f5e027b89824853b086839c75932dcf6f43c5cfe72b8d89401c8ae441f15337483e46bb09cdf6394f4be8f66415cf842f4567d114dc50f3a2c15b54e4fe65b24bc9ffabe9ce60115f309b510f5433da6fb2cc0d9ff04282b355567841a4c04ffcb47d39d5da114fc167b4e8e35437cf55e7d84b3ef27c7a0390c76643e58691d55196fbd2e3070a9308d76af61c4b43005981ef641be82f6eb80ae69a60ec4e78f99cef86f84bc9ad1101397648dfd15b51dac18cdd46c58f433772c6598364b351e1ea15e21eaa5889ad09e6400c72cb3162034838141a86338ca2f47d0f88d6c0ca13729999d0d7233c7d91bfb8359c5b3e7248f6034a57b28299f6465cddb2622a8c07c221beaa2236a04fb9d3c52e5548d0f0f4506ff8ab3d5e24be3d9d11ac02ff44a8efef9145d16ec9af4fc0cb9d5428e70c62785c9a7bb3d818f7403d2547ff80e9bcd922fe58598590d14eddda8fd07aac6776a6ce015c7dd2cc8eafbd927f7ffc8f519b327e3759e7f41ffee8d4a2121d9b9b4ceb32fd820fff7ad156c74604cab787135cc27b715aa26671fe99a5b9b2f47694f0b8183a266a90ef7c724f95c39e3725e2e54c1bfec568dbf42150ff0cf200c6b22d52ffa932443d62a61e3890cee62516fb0dec3c4d310225ee20a3f29b3dd12f3b1d09225a9a6caf3c2e467f47b92ed3888ea6d7095d8c00a78f36c64a28c2feb102a661e7e4642b8ef4eb3fce7846060873c6a64f76081eb765cd9537d2e08c8bc44d07abc3e77b8e0dd366849d63b11667f5e64b96e89b2ef5fe21b4f5425a7ddc257ddd0202e241060e641341faf01b5ae6577e399fb7714a19add131bf9a89a5d5796140ade0561952c3ff17fc2a6a76efaaa13bd1758d79aa0c85cf6d2617c028ac1f3d5e45a4dd6f0957ebe735e1971251942ebf3927db2254bd5a496eb0a77ad70ced2f70aa837319c454a73041c76c6e01da43bb891140d845528c7c5a26f0dc4dc21d592ef72a105cb3677b9a11a63678882b16aee511b40bd177ec7d3ef272ce23839920c104aafc2f46a99a313a54655bf3ed9fa1492fafb57239ba23ef9325825728ef2d878290f83ac338284b863342353eec1bd132055ebb7d79cecd490b02c8e909cc47ec408f5b8d9571055a7976f54a7ed746e7800ad1f0540ae4046e2256b3afa18f98f28b197ed80f9cdeb2795e41558afd12ae6af37c8911a14235319bca43790c3b6b7b53f63ad85fa83f8f96f5b0460da232f7c239888f352d47b2e8d475d1229afb17143e95e06f786cebdab36d8ce9d281b48562e8b9b00991d1530639a8c5df2ddf58a2c836384b25eac8bf41252fdb8f6a22a88cbe9939fdb098d53a090ecf29e1840bb3b40ee5fc4cabf1fb4014c6aca89f9a781d21a5b14adef25cb2afc83c1f2e3a68ee9994d93f211d3eda73f921911ffec1d558a5e555d8663d3464e866d4985785d621b5fb01767978ee3a7a8356ab681537d17eca71a5dc5d25ab9f182a75b68b650b1a7b0e27b70aacbfe32912bf97ab9e9360f4e6263178c4568da1aede597ffae2ee62fa22fd42e667dac1b48acb807e7083c216a5ec3541cacb8af570fbf050b8f0b93d4f532f110f430d4b08dfbb88e00a6c260a240384ac924096a9d9a17e7580c3304e16ca73f3d6903d72921bba5e4c7a6fce1cb97cf0fc137ba4a1bdcf112e423188c55152559610ed7ae1479db0998bd3cb1ed893e82ff38c958d1e7c693a74ce26254ee515939f96089ccbdc602e225b914fce6b4a6cb193de80328b6eb5d4708405cd7f076d23858ddee1e2c5a68209b0cca0b2f3384dc9c161c62d43597f291162787d0caa3af350f37e76b26e77185aa570a3ff962debd2467abc6e4a06f58753c26edab7718f17f2f57ed7d93dfea748780f57bb1270bb59c9e5f3f9bce8d3c5d2c2f3054313e7987c6e8d0771b923122bc969f7d3fc78c2f3cb04a4c6f75592070773cf2a4573e9c9bd9ac3f28226581f76fd4fd369d99e50c0e35a81617089fb496b2c9c1186fde48682e4a319e4feb7590ce561a9bc4aa1b89910c6d9b124a7b68e9f6706f82eb35e12465fdefccc3e5d8dc11264e3b5baa746ef2822c97b65e6361b26b6c51d1d54a9b1ed5da29bf7717f11abb3d59d7c3b54cd1afd0effdbb73dcb2037f6c73ae29400862877bdae935e354c7b275615192eeb904ac8f1f2d08e83a370714e205f66400a17fe4b6b864d358cbffe04a78d5baeba230956e68569ac3fcd854b639b612095e4e7e405713616d69fca80e18f13b1185f1be523ec08794d326e7c2e218ad94e954e10fa37aa5adadc6a6d6e9e238909e7329b016543ec4e7e648efac549cf156bd4b2b7b3a78cfa9ffcfe4fd5d715d11a3a3105df5a27619200843de421d840a893e94e52d70ddb7a6b06f8c675e4dec51726e41e34cd9aeb753cc8123b5b276cc6e76671821994d802e87e6b4ecc84af312bdd4d7d310e89989a0fe976fba8a48bb71655197adceb140de613d1652e9d61d54bea56573c75ace8403cc5c05e637e225327323bd9e0ac1f8bf933625f07ccd7769235a005c0c738e84225c07651220711e991534cd58c2b1f5a5cecdbfc5feed7f5feb119a064a8bc93b6e680e742c0ba33f27059ca62c192983bcb075211db531d7c4cf85ca7a4f833c01ec1bddca9e4072dc854a7db6788bac2f03a86951621c75b0b5827d3f92f9ffd20633a7d2cd55441fe9fcd1658b4f4799caf995a4cd7aa829dd2e24f40", &(0x7f0000000040), 0x3, 0x0, 0x33, 0x6f, &(0x7f0000000100)="46cc00117877b1d08f679b92d46ce23b736d0feb470f4e1d46f158db88cf3de81ac77bccb45147c5d8b3964b10d7310feec810", &(0x7f0000000240)="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", 0x2, 0x0, 0x7ffc}, 0x21)

9.101614061s ago: executing program 5 (id=5050):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x13, &(0x7f00000009c0)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff0000e90000bda106000000000027010000f8ffffffb702000008000000b703000000000000850000000500000018010000202070250000000000202020db1af8ff41000000bca100000000000007"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$kcm(0xa, 0x922000000003, 0x11)
socket$kcm(0x10, 0x2, 0x4)
perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2420, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, 0x0, 0x0}, 0x20)
r2 = socket$kcm(0x10, 0x3, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x10, 0x2c}}, &(0x7f0000000000)='GPL\x00'}, 0x94)
r3 = socket$kcm(0x2, 0x200000000000006, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b07d25a806c8c6f94f90624fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0)
recvmsg$kcm(r2, &(0x7f0000000300)={0xffffffffffffffff, 0x5b, 0x0}, 0x10000)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="990000000280000000000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32], 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r5, 0x0, 0x0}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r5}, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r6 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x3, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94)
ioctl$PERF_EVENT_IOC_DISABLE(r6, 0x2401, 0xd)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000400)={r1})
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="01000000040000000800"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000002000085000000b00000001811", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$tipc(r8, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000000540)="7e2e153a3c1a8a956c677ce20c786e23fb618b4f36cb7d1eec0f72ff5db3ea70987d48d72725968e5600a1fe7b2b005b17e02999b6901f579108d5e247eff144f4472d0b16075d2b4c40634df7b8cb67bcb11c291caa172d640132c511351c732d7546024520242b74e7614703e76c77f83c2b565633272310be1ebb7535e3ccf1964cba", 0x84}, {&(0x7f00000006c0)="ccfb0910345a69bf4a76b985556dbaa8562860dcbfdb731b50f1fc7538993e978c096661714261cd68b2e1ef920bdc429c5c410913e581167449089a81b8e0a1ef96757da90b3bb0643148a250e565b9a558e57bdff63e8e094f1e946efbbf6ecc8a1ddd1765e75ea18fa11be3f3", 0x6e}, {&(0x7f0000000a80)="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", 0x1000}, {&(0x7f0000001a80)="de162d30f513663735ba12d34b81bbbb2fcddf558e012357d0e61ad3576c3707be1630a1c958f6ed2dc16206bf0cbfeb6ed01052094f6d36", 0x38}, {&(0x7f0000001ac0)="60748a3bb65cf9fed0116eb62360ce1ae662624b2238cc7cb3da49fe4358b2d4256bcd47579a63aef2144ad900ec464f16efe682b657053b3d8cdb6b30fa1dc2e16d324205dc95bbc34b1886094e43f0c1d471b16d9ff92f44252e", 0x5b}], 0x5, &(0x7f0000001bc0)="d8c31ebf17039bfde4ae2640335f4c47fd2d8e73a913d60bfed762f327e24d50c32b399a12c43eb30a5469ba73f7f8085a360f577f25136cedbb24e24a2a9919c3be3449e3d136ba79b565e5b79fc4d8b63c5f090d6732d7a4c7c8f307b1153a24cb91", 0x63, 0x40010}, 0x80)

9.087892831s ago: executing program 2 (id=5051):
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="0000000000f1000000004cee325951a9f8bc1dc6b2540c0ab0270e0e6ef35f5e757cb150b213dedbe92746a393e0abe401cf0af51834f1d290807840a8feaf3accc4678fa44122ec248650e950a55487f4a64460477747695dce367586cbc54406d3a0d0f5f8fdf7514e7677458a53a9d6c4730c0e482473dd9e2aa881bebcaaf1bf12cf908da252082af0e76bee693154d98db9daf64aa3a7ac52632165f3", @ANYBLOB='\x00'/27], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20}, 0x94)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x100000, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x7)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x50028, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2, 0x7}, 0x0, 0xfffffffffffffffd, 0xfffffffc, 0x4, 0x6, 0xcb62, 0xfffd, 0x0, 0x0, 0x0, 0x8000000000001001}, 0x0, 0x0, 0xffffffffffffffff, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0500000003f01f00660000007f"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000003140)={0x6, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'team0\x00', 0x800})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB="8f00"/20, @ANYRES32, @ANYRES32=r0, @ANYBLOB="05000000040000000300"/21], 0x50)
close(0xffffffffffffffff)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={&(0x7f0000000040), 0x4}, 0x21, 0x0, 0x0, 0x4, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x820}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002940)={&(0x7f00000027c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0xe000000, 0x0, 0x0, 0xd, 0x1}]}}, 0x0, 0x26}, 0x20)
r1 = socket$kcm(0x10, 0x2, 0x10)
recvmsg(r1, &(0x7f0000002880)={0x0, 0x0, 0x0}, 0x40010122)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xc, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1e000000ff010000ef6000000400000004000400a4c0551e678a82654991d2b08026cc0c03a79793d89384697d79534f6910f6f7a5e6b61dc22523ff78f04c6e2cc0a19455b45ff49de9cd7c6367c047316196a8b37961b94d", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x50)
r2 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
socket$kcm(0x11, 0x200000000000002, 0x300)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48)

9.000639253s ago: executing program 4 (id=5052):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000200)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f00000004c0), 0x4}, 0x11540, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0xa, 0x922000000003, 0x11)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x11, &(0x7f0000001540)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b000000b7080000000000007baaf8ff0000000094080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f00000001c0)={&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000002900000043"], 0x18}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r7 = socket$kcm(0x10, 0x2, 0x0)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080207000000040000a118000200e000000000000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
bpf$BPF_PROG_TEST_RUN(0x16, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080207000000040000a118000200e000000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00')
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@map=r2, 0x1d, 0x0, 0x200, &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_pressure(r9, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0)

8.774494889s ago: executing program 3 (id=5053):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xfffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)="d80000001d0081044e81f782db4400000000000002000000000000a1180015000600142603600e1208000f0000000401a80016002000014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3", 0x82}], 0x1}, 0x0)
r1 = gettid()
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4)
sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffc}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xffffffff}, 0x10}, 0x94)
r7 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r7, 0x0, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="110000000400000004000000"], 0x48)
socket$kcm(0x2c, 0x3, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r8}, &(0x7f0000000080), &(0x7f00000001c0)=r6}, 0x32)
recvmsg(r7, &(0x7f0000002440)={0x0, 0x0, 0x0}, 0x0)
r9 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r9, &(0x7f0000000040)=ANY=[@ANYBLOB="934300005a"], 0xfe33)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r11 = socket$kcm(0x2, 0xa, 0x2)
ioctl$TUNSETLINK(r10, 0x400454cd, 0x336)
ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
close(r10)
socket$kcm(0xa, 0x2, 0x73)

8.515996895s ago: executing program 1 (id=5054):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000004900000000"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x6, 0x8, 0x8}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x1], 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0xa4, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x18}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1a}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xa, 0x9}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

8.282406221s ago: executing program 4 (id=5055):
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffedc, &(0x7f0000000080)=[{&(0x7f00000000c0)="c018030020000b12d25a80648c2594f90224fc60100c074002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000a000000080000000100000f080102200e000000000000000300000000000000000000002e"], 0x0, 0x3a}, 0x20)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1200000004d9493ca91d8d81d119790100000800", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff99, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78)

8.225591332s ago: executing program 1 (id=5056):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="06000000040000000800000007"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000d000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)
r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x50)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x100010, 0x0, 0x8, 0x0, 0x4000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
socket$kcm(0x2b, 0x1, 0x0)
socket$kcm(0x2, 0x2, 0x88)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xa, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x0, 0x4}, 0x10c708, 0x89, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x105840, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680))
r4 = socket$kcm(0x10, 0x100000000002, 0x4)
sendmsg$kcm(r4, &(0x7f00000039c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af014a31ba377a1b2cc32b38d3aa2a70297400"/57, 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0)

7.984041748s ago: executing program 5 (id=5057):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x13, 0x4, 0xa, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x2, 0x1}, 0x50)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000640)={r0, 0x20, &(0x7f0000000600)={&(0x7f0000000300)=""/84, 0x54, <r1=>0x0, &(0x7f0000000500)=""/212, 0xd4}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000680)=r1, 0x4)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xf, 0xfe, 0x0, 0x2, 0x0, 0x4a5426b1, 0x28002, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x0, 0x0, 0xffff, 0x0, 0x10000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_vlan\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}})
socket$kcm(0xa, 0x5, 0x0)
r2 = socket$kcm(0x10, 0x400000002, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e00000009000000090000000180000001690600", @ANYRES32=0x1, @ANYBLOB="c26c0008000007"], 0x50)
write$cgroup_subtree(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="24000000660091ef"], 0xfe33)
openat$cgroup(0xffffffffffffffff, &(0x7f0000000a80)='syz0\x00', 0x200002, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080))
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0xffffffff, 0x1, 0x0, 0x0, 0xd}, 0x0, 0xa, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r3, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB='8\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x009'], 0x38}, 0x0)
close(0x3)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
socket$kcm(0x2, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000031000b03d25a806f8c6394f90824fc60", 0x14}], 0x1}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0)

6.883079765s ago: executing program 3 (id=5058):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r0}, 0xfed0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085100000ffffffff20000296f8533a72905e7f"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f00}, 0x94)
r1 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d640a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, &(0x7f0000000080))

6.433714616s ago: executing program 4 (id=5059):
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0x2c5d, 0x0, 0x0, 0x2, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000073010f00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000400)="d8000000180081054e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a8001600200003401c000200035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000200142603600e1208000f", 0x2b}], 0x1}, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33)
r3 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x74000000}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
syz_clone(0x20100000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x5}, 0x8)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
socket$kcm(0x15, 0x5, 0x0)

6.413456836s ago: executing program 5 (id=5060):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x10)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94)
r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100000000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x9)
r2 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x40)
sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000088a8ffff1144ee162fd4b8bf4a31accbe1", 0x27}], 0x1}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0)
write$cgroup_pid(r4, &(0x7f0000000000), 0x2a979d)
r5 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x83c2, 0x6, 0x800, 0x9, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x2000830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, 0x0)
r6 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(r6, 0x29, 0x3e, 0x0, 0x0)
r7 = socket$kcm(0xa, 0x2, 0x73)
ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x5411, &(0x7f0000000dc0))
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x110, 0x3, 0x0, 0x0)
socketpair(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8905, &(0x7f00000012c0))
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
socket$kcm(0x2, 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x800051, 0x8, 0x1, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x2a, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x440200, 0x0)

6.381914446s ago: executing program 2 (id=5061):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000040000000200000000000091030000000000000000000000000000020100000002000000000000080200000000005f"], 0x0, 0x44}, 0x20)
socket$kcm(0x10, 0x2, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x4}, 0x72f041ae438f2ac, 0x0, 0x0, 0x4, 0x2, 0x1ff, 0x100}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10150, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x1, 0x8, 0x0, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r3, 0x29, 0x23, &(0x7f0000000040), 0xcf)
r4 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r4, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="0213020902000000e4a17c4e2ca18baa", 0x10}], 0x1}, 0x0)
r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYRESHEX=r3], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000002100000000000000080000b7080000000000007b8af8ff00000000b708000035f500007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$kcm(0x2, 0x3, 0x84)
sendmsg$inet(r7, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e068000000110000000000000000dbc790ad000000fc000000000000001400000000000000000000000200000004000000000000001c000000000000000000"], 0x68}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r8 = socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000c0000000400000001000084020000000a0000000300000000000001010000000000000700200000000000000000000b02000000006100302e61306161616100"], 0x0, 0x54}, 0x28)
sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d080201000000120000a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x45, 0x0, &(0x7f0000000ac0)="b901040000000000000001be3e7d2a182f0000000064fc720873e42f080020cd0a40336c5bdd5d10c53d7f93b584400c681f881745a0a9e59a454dbce4e06d01008f10f100", 0x0, 0x104, 0x6000000000000000, 0x31, 0x0, &(0x7f0000000a80)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea01f0e6dcf2", 0x0, 0x4}, 0x50)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210000000401a8001600a400014020000300036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x3, 0x4, 0x0, 0x1000, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000240), 0xc}, 0x0, 0x0, 0xc2ba, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x4)

6.197741771s ago: executing program 1 (id=5062):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000000006c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.freeze\x00', 0x100002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'veth0_vlan\x00', @random="010000201000"})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
r4 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r3}, 0x8)
close(r4)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$LINK_DETACH(0x22, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x2000000, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000008c0)={&(0x7f0000000600)="0934252444f9bba674414d46804e84d25360a71e6024c5c6baafb85710d3ae10b8b853d7edcfa1296d1a415b7cf2ca62a1123bf266934641d8dfbb2787ae7d44edf588f37f0db3ece1768ab33dd1e7825bf6b049a121bb0d6aa1b56544c22766ef2a36fb90d4677dfbbf91aefd122446db87da3899ec8211219dc96ca31864ccfd421c71388a63c231c3d1552e44cf0b404edd4dd67a0473651a4bb03a89e39a622444927d28b6723dbd5c02356bd6b3d5150cacee6ac8eb0240b1e99f7962b5f1402050d362cb4ae21b80fbe2ccf2289b1823fb07", &(0x7f0000000700)=""/190, &(0x7f00000007c0)="295c56621ee568a42b119163a079deee9833b102c736b77f09af518c31cf90a5b3f337951469ef489887763a439d6b7f5944c6a77b01fe11a403ad8d62339904fc21c2bc01382ab522", &(0x7f0000000840)="64369a4cb0491f0452440b000626c8fb1eea1aeb4b6245506a6bededc05888e921567b89f15aa8761810fadc51def22ee1a912520dc3cd7a7ef7eb78d0d8332a031010221d87b219558c96549330495638499a0a08332e293415e9daaa11d96685c5b83b94df455610ca42d3902468a9cacebad0f338661ce2", 0x63d, 0xffffffffffffffff, 0x4}, 0x38)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x4}, 0x10c002, 0xac5d, 0xffffffff, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0)
close(r5)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080))
write$cgroup_subtree(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200102f"], 0xcfa4)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x0, 0xe, 0x0, &(0x7f0000000fc0)="cc9ff4088b000000000000000000", 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

5.483639128s ago: executing program 2 (id=5063):
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (async)
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000040)=r0, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) (async)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x50)
bpf$ITER_CREATE(0xb, &(0x7f00000002c0), 0x8)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
socket$kcm(0x10, 0x400000002, 0x0) (async)
r2 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="1b0000001a007f049e3d4ba3e7", 0xd}, {&(0x7f0000000200)="68cafc816fb5690af30380a8ffff", 0xe}], 0x2}, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="2008020022003507d25a806f8c6394f90524fc600df01141092305000400000037153e370248038011f01700d1bd", 0x33fe0}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0xa, 0x5, 0x0) (async)
r4 = socket$kcm(0xa, 0x5, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0a0000000100", @ANYRES8=r4, @ANYBLOB, @ANYRES64=0x0], 0x20) (async)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0a0000000100", @ANYRES8=r4, @ANYBLOB, @ANYRES64=0x0], 0x20)

5.232064145s ago: executing program 5 (id=5064):
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x1e, 0x1, 0x0)
socket$kcm(0x10, 0x3, 0x10) (async)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1c00000033000b12c25aa9cb8c2194f90124fc60100c034006000000", 0x1c}], 0x1}, 0x0) (async)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1c00000033000b12c25aa9cb8c2194f90124fc60100c034006000000", 0x1c}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="5400020029000b05d25a806f8c6394f90424fc602f0011002e2f0100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
socket$kcm(0x29, 0x7, 0x0)

5.173748415s ago: executing program 4 (id=5065):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000200)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f00000004c0), 0x4}, 0x11540, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0xa, 0x922000000003, 0x11)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x11, &(0x7f0000001540)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b000000b7080000000000007baaf8ff0000000094080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f00000001c0)={&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000002900000043"], 0x18}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r7 = socket$kcm(0x10, 0x2, 0x0)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080207000000040000a118000200e000000000000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
bpf$BPF_PROG_TEST_RUN(0x16, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080207000000040000a118000200e000000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00')
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@map=r2, 0x1d, 0x0, 0x200, &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_pressure(r9, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0)

4.923895602s ago: executing program 2 (id=5066):
socket$kcm(0xa, 0x5, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x64, '\x00', 0x0, @fallback=0x66, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x5d31, 0x86288, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}}, 0x0, 0xa, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x1}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
gettid()
r1 = socket$kcm(0x18, 0x7, 0x0)
sendmsg$kcm(r1, &(0x7f0000000ac0)={&(0x7f00000002c0)=@un=@abs={0x1, 0x0, 0x4e22}, 0x80, &(0x7f0000000400), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x408}, 0x4000040)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_type(r2, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r3, &(0x7f0000000280), 0x9)
r4 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f0000000c40), 0x12)
r5 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12)
r9 = openat$cgroup_procs(r6, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r9, &(0x7f0000000080)=r5, 0x12)

4.012840843s ago: executing program 2 (id=5067):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x13, &(0x7f00000009c0)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff0000e90000bda106000000000027010000f8ffffffb702000008000000b703000000000000850000000500000018010000202070250000000000202020db1af8ff41000000bca100000000000007"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$kcm(0xa, 0x922000000003, 0x11)
socket$kcm(0x10, 0x2, 0x4)
perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2420, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, 0x0, 0x0}, 0x20)
r2 = socket$kcm(0x10, 0x3, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x10, 0x2c}}, &(0x7f0000000000)='GPL\x00'}, 0x94)
r3 = socket$kcm(0x2, 0x200000000000006, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b07d25a806c8c6f94f90624fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0)
recvmsg$kcm(r2, &(0x7f0000000300)={0xffffffffffffffff, 0x5b, 0x0}, 0x10000)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="990000000280000000000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32], 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r5, 0x0, 0x0}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r5}, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r6 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x3, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94)
ioctl$PERF_EVENT_IOC_DISABLE(r6, 0x2401, 0xd)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000400)={r1})
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="01000000040000000800"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000002000085000000b00000001811", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$tipc(r8, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000000540)="7e2e153a3c1a8a956c677ce20c786e23fb618b4f36cb7d1eec0f72ff5db3ea70987d48d72725968e5600a1fe7b2b005b17e02999b6901f579108d5e247eff144f4472d0b16075d2b4c40634df7b8cb67bcb11c291caa172d640132c511351c732d7546024520242b74e7614703e76c77f83c2b565633272310be1ebb7535e3ccf1964cba", 0x84}, {&(0x7f00000006c0)="ccfb0910345a69bf4a76b985556dbaa8562860dcbfdb731b50f1fc7538993e978c096661714261cd68b2e1ef920bdc429c5c410913e581167449089a81b8e0a1ef96757da90b3bb0643148a250e565b9a558e57bdff63e8e094f1e946efbbf6ecc8a1ddd1765e75ea18fa11be3f3", 0x6e}, {&(0x7f0000000a80)="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", 0x1000}, {&(0x7f0000001a80)="de162d30f513663735ba12d34b81bbbb2fcddf558e012357d0e61ad3576c3707be1630a1c958f6ed2dc16206bf0cbfeb6ed01052094f6d36", 0x38}, {&(0x7f0000001ac0)="60748a3bb65cf9fed0116eb62360ce1ae662624b2238cc7cb3da49fe4358b2d4256bcd47579a63aef2144ad900ec464f16efe682b657053b3d8cdb6b30fa1dc2e16d324205dc95bbc34b1886094e43f0c1d471b16d9ff92f4425", 0x5a}], 0x5, &(0x7f0000001bc0)="d8c31ebf17039bfde4ae2640335f4c47fd2d8e73a913d60bfed762f327e24d50c32b399a12c43eb30a5469ba73f7f8085a360f577f25136cedbb24e24a2a9919c3be3449e3d136ba79b565e5b79fc4d8b63c5f090d6732d7a4c7c8f307b1153a24cb91", 0x63, 0x40010}, 0x80)

3.74413066s ago: executing program 3 (id=5068):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xfffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)="d80000001d0081044e81f782db4400000000000002000000000000a1180015000600142603600e1208000f0000000401a80016002000014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3", 0x82}], 0x1}, 0x0)
r1 = gettid()
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4)
sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffc}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xffffffff}, 0x10}, 0x94)
r7 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="110000000400000004000000"], 0x48)
socket$kcm(0x2c, 0x3, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r8}, &(0x7f0000000080), &(0x7f00000001c0)=r6}, 0x32)
recvmsg(r7, &(0x7f0000002440)={0x0, 0x0, 0x0}, 0x0)
r9 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r9, &(0x7f0000000040)=ANY=[@ANYBLOB="934300005a"], 0xfe33)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r11 = socket$kcm(0x2, 0xa, 0x2)
ioctl$TUNSETLINK(r10, 0x400454cd, 0x336)
ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
close(r10)
socket$kcm(0xa, 0x2, 0x73)

1.592526042s ago: executing program 4 (id=5069):
socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x3a)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000480)={0xffffffffffffffff, &(0x7f00000005c0)}, 0x20)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @loopback, 0xff000000}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0)

1.565437143s ago: executing program 1 (id=5070):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251ef60a84c9f4d4930f0000004509c5bb0000000000001da2b2ae3ae74cc4e8c3c811", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x48040)
perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x5, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x0, 0x100000002}, 0x8100, 0xc8, 0x8, 0x0, 0xfffffffffffffffe, 0x341, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0xa)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='\t\x00'], 0x50)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r3, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2212102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa200088be"], 0xcfa4)
recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000030c0)=""/4055, 0xfd7}, {&(0x7f00000007c0)=""/87, 0x57}, {&(0x7f00000001c0)=""/125, 0x7d}, {&(0x7f0000000000)=""/32, 0x20}], 0x4}, 0x22)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000007"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc)
recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd99}, 0x0)
recvmsg$kcm(r0, &(0x7f0000001300)={0x0, 0x0, 0x0}, 0x40002020)

1.460997255s ago: executing program 5 (id=5071):
perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2420, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000084000000000000a7bec337bb63e5e3cd4c4c87a1285e0bcf91680754446dd0ec195efc8e2683994e3da2369518bb76ee7feb43ded59d4b63cf476637c154d7cc2f926029959edc8afccb753c1ed0020ac24ba66f8cfe00e093f90424f369aa6d40e282e4dafdbea78fa203b914a2b04bfb08e501b956e605b4c3448ff1ea0ea7c466e65fe9ca1a22ceadb1131560a8eb505b9be25b7fcacce0af"], 0x0, 0x26}, 0x28)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0xd, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000f3000008001802", @ANYRES32, @ANYBLOB="0000000002000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, 0x14}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1a, 0x0, 0x0, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7d}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'})
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)}, 0x0)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
r3 = socket$kcm(0xa, 0x1, 0x0)
setsockopt$sock_attach_bpf(r3, 0x29, 0x43, &(0x7f0000000000)=r3, 0x4)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x80000000000000, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000000), 0x10)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xc00, &(0x7f0000000000)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb9d001800000000000000280600002800000002"], 0x0, 0x42}, 0x28)
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f0000000040)=0x700, 0x0}, 0x20)
r5 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x4)
ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000180)={r5})

1.460359475s ago: executing program 2 (id=5072):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="06000000040000000800000007"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000d000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)
r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x50)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x100010, 0x0, 0x8, 0x0, 0x4000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
socket$kcm(0x2b, 0x1, 0x0)
socket$kcm(0x2, 0x2, 0x88)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xa, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x0, 0x4}, 0x10c708, 0x89, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x105840, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680))
r4 = socket$kcm(0x10, 0x100000000002, 0x4)
sendmsg$kcm(r4, &(0x7f00000039c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af014a31ba377a1b2cc32b38d3aa2a70297400"/57, 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0)

1.459818065s ago: executing program 3 (id=5073):
socket$kcm(0xa, 0x1, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000f10d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000be000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
socket$kcm(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cpuacct.usage_all\x00', 0x275a, 0x0)
r1 = socket$kcm(0xa, 0x6, 0x0)
setsockopt$sock_attach_bpf(r1, 0x10d, 0xa, &(0x7f0000000000)=r0, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="190000000400"], 0x48)
close(0x3)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0xfffffffffffffff4, &(0x7f0000000340)}, 0x49)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x200000000000, 0x80420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110c230050)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f, 0x0, 0x0, 0x0, 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x1, @ANYRES32=0x0], 0x50)
r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x100010, 0x0, 0x8, 0x0, 0x4000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r6)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x18}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1a}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xa, 0x9}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

0s ago: executing program 1 (id=5074):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r0}, 0xfed0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085100000ffffffff20000296f8533a72905e7f"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f00}, 0x94)
r1 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d640a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, &(0x7f0000000080))

kernel console output (not intermixed with test programs):

8442][T18805]  ? trace_fib6_table_lookup+0x250/0x250
[  944.244166][T18805]  fib6_rule_lookup+0x35c/0x5e0
[  944.249072][T18805]  ? ip6_route_output_flags_noref+0x390/0x390
[  944.255172][T18805]  ? fib6_lookup+0x2d0/0x2d0
[  944.259782][T18805]  ? dev_get_by_index_rcu+0xea/0x100
[  944.265099][T18805]  ? __ipv6_addr_type+0xff/0x2e0
[  944.270072][T18805]  ? ip6_route_output_flags_noref+0x1b9/0x390
[  944.276150][T18805]  ip6_route_output_flags+0xe3/0x330
[  944.281463][T18805]  ? ip6_route_output_flags+0x27/0x330
[  944.286989][T18805]  icmpv6_xrlim_allow+0xbd/0x640
[  944.291993][T18805]  ? read_lock_is_recursive+0x10/0x10
[  944.297412][T18805]  ? make_kuid+0x1d7/0x680
[  944.301900][T18805]  ? dev_put+0x70/0x70
[  944.306020][T18805]  ? __put_user_ns+0x50/0x50
[  944.310657][T18805]  ? mip6_addr_swap+0x178/0x210
[  944.315557][T18805]  ? icmp6_send+0xd0b/0x1a60
[  944.320187][T18805]  ? bpf_lsm_xfrm_decode_session+0x5/0x10
[  944.325960][T18805]  icmp6_send+0xf13/0x1a60
[  944.330459][T18805]  ? icmp6_send+0xb7d/0x1a60
[  944.335100][T18805]  ? icmpv6_push_pending_frames+0x4b0/0x4b0
[  944.341047][T18805]  ? skb_pull_rcsum+0x22e/0x3f0
[  944.345994][T18805]  ? ip6erspan_rcv+0x628/0xb20
[  944.350850][T18805]  gre_rcv+0x50d/0x750
[  944.354978][T18805]  ? raw6_local_deliver+0x15f/0x9c0
[  944.360243][T18805]  ? erspan_build_header_v2+0x500/0x500
[  944.365842][T18805]  ? rawv6_mh_filter_unregister+0x20/0x20
[  944.371628][T18805]  ? xfrm6_policy_check+0xf1/0x340
[  944.376802][T18805]  ip6_protocol_deliver_rcu+0x97f/0x13c0
[  944.382530][T18805]  ? ip6_input_finish+0xd6/0x2c0
[  944.387508][T18805]  ip6_input_finish+0x181/0x2c0
[  944.392403][T18805]  NF_HOOK+0x329/0x3b0
[  944.396512][T18805]  ? ip6_input+0xa0/0xa0
[  944.400790][T18805]  ? NF_HOOK+0x9b/0x3b0
[  944.404983][T18805]  ? ip6_rcv_core+0x1700/0x1700
[  944.409873][T18805]  ? ip6_input+0xa0/0xa0
[  944.414167][T18805]  ? ip6_rcv_finish+0x196/0x230
[  944.419060][T18805]  NF_HOOK+0x329/0x3b0
[  944.423166][T18805]  ? sock_wfree+0x24b/0x600
[  944.427706][T18805]  ? ip6_rcv_core+0x1086/0x1700
[  944.432595][T18805]  ? refcount_add+0x80/0x80
[  944.437137][T18805]  ? NF_HOOK+0x9b/0x3b0
[  944.441322][T18805]  ? ip6_rcv_core+0x1700/0x1700
[  944.446218][T18805]  ? refcount_add+0x80/0x80
[  944.450781][T18805]  ? ip6_rcv_finish_core+0x420/0x420
[  944.456101][T18805]  __netif_receive_skb+0xcc/0x290
[  944.461178][T18805]  ? netif_receive_skb+0x11e/0x820
[  944.466330][T18805]  netif_receive_skb+0x1d4/0x820
[  944.471304][T18805]  ? __bpf_trace_tasklet+0x10/0x10
[  944.476450][T18805]  ? enqueue_to_backlog+0xdb0/0xdb0
[  944.481687][T18805]  ? ct_irq_exit_irqson+0x113/0x170
[  944.486926][T18805]  ? tun_rx_batched+0x182/0x780
[  944.491831][T18805]  tun_rx_batched+0x1db/0x780
[  944.496567][T18805]  ? pskb_may_pull+0xf0/0xf0
[  944.501191][T18805]  ? __local_bh_enable_ip+0x136/0x1c0
[  944.506595][T18805]  ? lockdep_hardirqs_on+0x94/0x140
[  944.511832][T18805]  ? read_lock_is_recursive+0x10/0x10
[  944.517240][T18805]  ? __local_bh_enable_ip+0x136/0x1c0
[  944.522646][T18805]  ? _local_bh_enable+0xa0/0xa0
[  944.527555][T18805]  tun_get_user+0x27cb/0x3c20
[  944.532285][T18805]  ? tun_get_user+0x23e9/0x3c20
[  944.537178][T18805]  ? trace_event_raw_event_lock+0x1d0/0x230
[  944.543122][T18805]  ? rcu_read_unlock+0xa0/0xa0
[  944.547946][T18805]  ? tun_get+0x1c/0x2e0
[  944.552150][T18805]  ? __lock_acquire+0x7c40/0x7c40
[  944.557227][T18805]  ? tun_get+0x1c/0x2e0
[  944.561439][T18805]  tun_chr_write_iter+0x112/0x1f0
[  944.566510][T18805]  vfs_write+0x482/0x9a0
[  944.570830][T18805]  ? file_end_write+0x250/0x250
[  944.575752][T18805]  ? __fget_files+0x3fc/0x460
[  944.580500][T18805]  ? __fdget_pos+0x1d4/0x360
[  944.585136][T18805]  ? ksys_write+0x70/0x260
[  944.589605][T18805]  ksys_write+0x14d/0x260
[  944.593992][T18805]  ? __ia32_sys_read+0x80/0x80
[  944.598816][T18805]  ? lockdep_hardirqs_on+0x94/0x140
[  944.604064][T18805]  do_syscall_64+0x4c/0xa0
[  944.608519][T18805]  ? clear_bhb_loop+0x60/0xb0
[  944.613236][T18805]  ? clear_bhb_loop+0x60/0xb0
[  944.617966][T18805]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  944.623894][T18805] RIP: 0033:0x7f4e4a19e0d9
[  944.628349][T18805] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  944.647990][T18805] RSP: 002b:00007f4e4b0dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  944.656442][T18805] RAX: ffffffffffffffda RBX: 00007f4e4a425fa0 RCX: 00007f4e4a19e0d9
[  944.664450][T18805] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8
[  944.672461][T18805] RBP: 00007f4e4b0dc090 R08: 0000000000000000 R09: 0000000000000000
[  944.680464][T18805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  944.688468][T18805] R13: 00007f4e4a426038 R14: 00007f4e4a425fa0 R15: 00007ffcc2158038
[  944.696510][T18805]  </TASK>
[  945.132274][T18821] validate_nla: 10 callbacks suppressed
[  945.132293][T18821] netlink: 'syz.5.4073': attribute type 10 has an invalid length.
[  945.176997][T18821] team0: Device hsr_slave_0 failed to register rx_handler
[  945.399307][T18833] __nla_validate_parse: 3 callbacks suppressed
[  945.399472][T18833] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4077'.
[  945.420198][T18833] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4077'.
[  945.435963][T18833] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  945.552627][T18835] netlink: 'syz.5.4078': attribute type 21 has an invalid length.
[  945.567305][T18835] netlink: 'syz.5.4078': attribute type 7 has an invalid length.
[  946.417023][T18841] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4079'.
[  946.432723][T18844] netlink: 'syz.4.4080': attribute type 10 has an invalid length.
[  946.485853][T18845] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.4081'.
[  946.550203][T18849] netlink: 'syz.5.4082': attribute type 28 has an invalid length.
[  946.612788][T18849] netlink: 'syz.5.4082': attribute type 4 has an invalid length.
[  946.641600][T18849] netlink: 136 bytes leftover after parsing attributes in process `syz.5.4082'.
[  946.737496][T18850] netlink: 'syz.5.4082': attribute type 10 has an invalid length.
[  946.793174][T18850] team0: Port device netdevsim0 added
[  946.798921][T18852] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4083'.
[  947.066700][T18857] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4085'.
[  947.557255][T18860] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4086'.
[  948.475461][T18871] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4090'.
[  948.487492][T18871] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4090'.
[  948.519750][T18871] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  948.671011][T18876] netlink: 'syz.3.4092': attribute type 29 has an invalid length.
[  948.693343][T18876] netlink: 'syz.3.4092': attribute type 29 has an invalid length.
[  948.722554][T18878] netlink: 'syz.1.4093': attribute type 21 has an invalid length.
[  949.807492][T18904] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  950.641790][T18918] validate_nla: 4 callbacks suppressed
[  950.641809][T18918] netlink: 'syz.5.4106': attribute type 29 has an invalid length.
[  950.670860][T18920] netlink: 'syz.4.4105': attribute type 21 has an invalid length.
[  950.703526][T18920] netlink: 'syz.4.4105': attribute type 7 has an invalid length.
[  950.792604][T18918] netlink: 'syz.5.4106': attribute type 29 has an invalid length.
[  950.851116][T18924] netlink: 'syz.1.4108': attribute type 10 has an invalid length.
[  950.973740][T18918] netlink: 'syz.5.4106': attribute type 2 has an invalid length.
[  951.013147][T18918] netlink: 'syz.5.4106': attribute type 8 has an invalid length.
[  951.043117][T18918] __nla_validate_parse: 5 callbacks suppressed
[  951.043135][T18918] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4106'.
[  951.071752][T18926] netlink: 'syz.5.4106': attribute type 2 has an invalid length.
[  951.094907][T18926] netlink: 'syz.5.4106': attribute type 8 has an invalid length.
[  951.172195][T18926] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4106'.
[  951.687789][T18941] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.4113'.
[  951.847504][T18945] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4114'.
[  952.110354][T18951] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4117'.
[  954.253194][T14339] Bluetooth: hci2: command 0x0406 tx timeout
[  954.306564][T18958] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4118'.
[  954.326965][T18963] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4118'.
[  954.337512][T18963] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  954.496869][T18971] netlink: 'syz.1.4120': attribute type 10 has an invalid length.
[  954.989531][T18979] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4123'.
[  955.210111][T18989] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4123'.
[  955.480155][T18998] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4128'.
[  955.768163][T14339] Bluetooth: hci2: unexpected event 0x34 length: 15 > 6
[  955.913791][T19011] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  956.435603][T19016] validate_nla: 8 callbacks suppressed
[  956.435623][T19016] netlink: 'syz.5.4134': attribute type 10 has an invalid length.
[  956.676437][T19025] netlink: 'syz.3.4137': attribute type 21 has an invalid length.
[  956.695613][T19025] netlink: 'syz.3.4137': attribute type 7 has an invalid length.
[  956.898251][T19033] netlink: 'syz.1.4140': attribute type 29 has an invalid length.
[  956.908369][T19033] netlink: 'syz.1.4140': attribute type 29 has an invalid length.
[  957.005306][T19035] netlink: 'syz.1.4140': attribute type 2 has an invalid length.
[  957.035787][T19035] netlink: 'syz.1.4140': attribute type 8 has an invalid length.
[  957.050847][T19035] __nla_validate_parse: 2 callbacks suppressed
[  957.050866][T19035] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4140'.
[  957.075358][T19033] netlink: 'syz.1.4140': attribute type 2 has an invalid length.
[  957.088482][T19033] netlink: 'syz.1.4140': attribute type 8 has an invalid length.
[  957.101227][T19033] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4140'.
[  957.106120][T19039] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.4142'.
[  957.372234][T19048] FAULT_INJECTION: forcing a failure.
[  957.372234][T19048] name failslab, interval 1, probability 0, space 0, times 0
[  957.418521][T19047] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4146'.
[  957.441650][T19047] netlink: 128 bytes leftover after parsing attributes in process `syz.5.4146'.
[  957.463921][T19048] CPU: 1 PID: 19048 Comm: syz.3.4145 Not tainted syzkaller #0
[  957.466913][T19047] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  957.471421][T19048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  957.471438][T19048] Call Trace:
[  957.471447][T19048]  <TASK>
[  957.471458][T19048]  dump_stack_lvl+0x188/0x24e
[  957.471496][T19048]  ? show_regs_print_info+0x12/0x12
[  957.471524][T19048]  ? load_image+0x410/0x410
[  957.517570][T19048]  ? __lock_acquire+0x7c40/0x7c40
[  957.522623][T19048]  should_fail_ex+0x390/0x4c0
[  957.527321][T19048]  should_failslab+0x5/0x20
[  957.531828][T19048]  slab_pre_alloc_hook+0x59/0x300
[  957.536858][T19048]  ? verify_lock_unused+0x140/0x140
[  957.542066][T19048]  ? bpf_test_init+0x9f/0x140
[  957.546763][T19048]  __kmem_cache_alloc_node+0x4f/0x270
[  957.552151][T19048]  ? bpf_test_init+0x9f/0x140
[  957.556836][T19048]  __kmalloc+0xa3/0x240
[  957.561025][T19048]  bpf_test_init+0x9f/0x140
[  957.565560][T19048]  bpf_prog_test_run_xdp+0x488/0xf80
[  957.570869][T19048]  ? __lock_acquire+0x7c40/0x7c40
[  957.575921][T19048]  ? dev_put+0x80/0x80
[  957.580026][T19048]  ? dev_put+0x80/0x80
[  957.584119][T19048]  bpf_prog_test_run+0x31c/0x390
[  957.589083][T19048]  __sys_bpf+0x62b/0x780
[  957.593376][T19048]  ? bpf_link_show_fdinfo+0x380/0x380
[  957.598781][T19048]  ? lock_chain_count+0x20/0x20
[  957.603653][T19048]  __x64_sys_bpf+0x78/0x90
[  957.608082][T19048]  do_syscall_64+0x4c/0xa0
[  957.612517][T19048]  ? clear_bhb_loop+0x60/0xb0
[  957.617204][T19048]  ? clear_bhb_loop+0x60/0xb0
[  957.621891][T19048]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  957.627795][T19048] RIP: 0033:0x7f25ae79e0d9
[  957.632221][T19048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  957.651832][T19048] RSP: 002b:00007f25af637028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  957.660262][T19048] RAX: ffffffffffffffda RBX: 00007f25aea25fa0 RCX: 00007f25ae79e0d9
[  957.668239][T19048] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[  957.676219][T19048] RBP: 00007f25af637090 R08: 0000000000000000 R09: 0000000000000000
[  957.684210][T19048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  957.692192][T19048] R13: 00007f25aea26038 R14: 00007f25aea25fa0 R15: 00007ffca6c8d848
[  957.700186][T19048]  </TASK>
[  957.740732][T19055] netlink: 'syz.4.4148': attribute type 10 has an invalid length.
[  959.016788][T19083] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4155'.
[  959.037716][T19083] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4155'.
[  959.229519][ T5515] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  959.477871][T19087] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.4157'.
[  959.799061][T19099] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4160'.
[  959.906445][T19094] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4160'.
[  959.929375][T19094] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  964.362191][T19128] validate_nla: 9 callbacks suppressed
[  964.362217][T19128] netlink: 'syz.5.4167': attribute type 21 has an invalid length.
[  964.383160][T19128] netlink: 'syz.5.4167': attribute type 7 has an invalid length.
[  965.058010][T19140] netlink: 'syz.4.4170': attribute type 29 has an invalid length.
[  965.080671][T19140] netlink: 'syz.4.4170': attribute type 29 has an invalid length.
[  965.279815][T19140] netlink: 'syz.4.4170': attribute type 2 has an invalid length.
[  965.299052][T19140] netlink: 'syz.4.4170': attribute type 8 has an invalid length.
[  965.308623][T19140] __nla_validate_parse: 1 callbacks suppressed
[  965.308658][T19140] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4170'.
[  966.271370][T19141] netlink: 'syz.4.4170': attribute type 2 has an invalid length.
[  966.282690][T19141] netlink: 'syz.4.4170': attribute type 8 has an invalid length.
[  966.295856][T19141] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4170'.
[  966.311748][T19150] netlink: 'syz.1.4174': attribute type 10 has an invalid length.
[  966.330865][T19153] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4175'.
[  966.345452][T19152] netlink: 128 bytes leftover after parsing attributes in process `syz.5.4175'.
[  966.370193][T19152] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  966.400289][T19157] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.4176'.
[  966.610198][T19162] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4178'.
[  966.734645][T19167] netlink: 'syz.2.4182': attribute type 21 has an invalid length.
[  967.799127][T19192] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4190'.
[  967.820419][T19192] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4190'.
[  967.837451][T19192] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  967.940144][T19195] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4189'.
[  967.946384][T19198] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.4192'.
[  970.479346][T19233] validate_nla: 10 callbacks suppressed
[  970.479368][T19233] netlink: 'syz.1.4203': attribute type 10 has an invalid length.
[  970.760813][T19244] __nla_validate_parse: 1 callbacks suppressed
[  970.760834][T19244] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4205'.
[  970.785244][T19244] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4205'.
[  970.795483][T19244] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  970.826858][T19246] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.4206'.
[  970.984730][T19251] netlink: 'syz.2.4209': attribute type 29 has an invalid length.
[  971.005254][T19251] netlink: 'syz.2.4209': attribute type 29 has an invalid length.
[  971.148513][T19258] netlink: 'syz.3.4210': attribute type 21 has an invalid length.
[  971.254465][T19258] netlink: 'syz.3.4210': attribute type 7 has an invalid length.
[  971.388582][T19251] netlink: 'syz.2.4209': attribute type 2 has an invalid length.
[  971.403605][T19251] netlink: 'syz.2.4209': attribute type 8 has an invalid length.
[  971.544606][T19251] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4209'.
[  971.566415][T19263] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4212'.
[  974.120539][T19276] netlink: 'syz.2.4217': attribute type 10 has an invalid length.
[  974.548414][T19292] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.4221'.
[  974.605011][T19294] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4220'.
[  974.694201][T19289] netlink: 'syz.3.4219': attribute type 33 has an invalid length.
[  974.806033][T19289] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4219'.
[  974.853605][T19294] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4220'.
[  974.883425][T19294] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  974.902045][T19304] netlink: 'syz.5.4224': attribute type 29 has an invalid length.
[  975.072012][T19304] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4224'.
[  976.503748][T19323] validate_nla: 7 callbacks suppressed
[  976.503770][T19323] netlink: 'syz.5.4230': attribute type 10 has an invalid length.
[  976.749360][T19328] __nla_validate_parse: 1 callbacks suppressed
[  976.749381][T19328] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4232'.
[  976.774425][T19330] device syzkaller0 entered promiscuous mode
[  977.211895][T19341] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.4236'.
[  977.350430][T19343] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4237'.
[  977.372161][T19343] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4237'.
[  977.383182][T19343] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  977.622362][T19355] netlink: 'syz.3.4240': attribute type 29 has an invalid length.
[  977.665035][T19355] netlink: 'syz.3.4240': attribute type 29 has an invalid length.
[  977.691748][T19357] netlink: 'syz.1.4242': attribute type 21 has an invalid length.
[  977.742125][T19357] netlink: 'syz.1.4242': attribute type 7 has an invalid length.
[  977.855386][T19358] netlink: 'syz.3.4240': attribute type 2 has an invalid length.
[  977.993738][T19358] netlink: 'syz.3.4240': attribute type 8 has an invalid length.
[  978.081528][T19358] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4240'.
[  978.133487][T19355] netlink: 'syz.3.4240': attribute type 2 has an invalid length.
[  978.193929][T19355] netlink: 'syz.3.4240': attribute type 8 has an invalid length.
[  978.226764][T19355] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4240'.
[  978.651923][T19369] netlink: 'syz.1.4245': attribute type 10 has an invalid length.
[  979.539529][T19384] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.4250'.
[  979.806768][T19392] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4253'.
[  979.830525][T19392] netlink: 128 bytes leftover after parsing attributes in process `syz.5.4253'.
[  979.850759][T19392] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  980.184732][T19405] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4257'.
[  980.248529][T19402] FAULT_INJECTION: forcing a failure.
[  980.248529][T19402] name failslab, interval 1, probability 0, space 0, times 0
[  980.270281][T19402] CPU: 0 PID: 19402 Comm: syz.1.4256 Not tainted syzkaller #0
[  980.277810][T19402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  980.287909][T19402] Call Trace:
[  980.291217][T19402]  <TASK>
[  980.294176][T19402]  dump_stack_lvl+0x188/0x24e
[  980.298894][T19402]  ? show_regs_print_info+0x12/0x12
[  980.304111][T19402]  ? load_image+0x410/0x410
[  980.308643][T19402]  ? perf_trace_lock+0xf8/0x390
[  980.313528][T19402]  should_fail_ex+0x390/0x4c0
[  980.318230][T19402]  should_failslab+0x5/0x20
[  980.322740][T19402]  slab_pre_alloc_hook+0x59/0x300
[  980.327787][T19402]  kmem_cache_alloc_node+0x5a/0x310
[  980.333004][T19402]  ? net_generic+0x1e/0x240
[  980.337583][T19402]  ? __alloc_skb+0xf9/0x7d0
[  980.342112][T19402]  __alloc_skb+0xf9/0x7d0
[  980.346475][T19402]  tipc_msg_reverse+0x229/0x910
[  980.351366][T19402]  tipc_sk_filter_rcv+0xd8a/0x3250
[  980.356565][T19402]  ? tipc_sk_publish+0x420/0x420
[  980.361516][T19402]  ? perf_trace_lock+0xf8/0x390
[  980.366405][T19402]  ? mark_lock+0x94/0x320
[  980.370770][T19402]  tipc_sk_backlog_rcv+0x138/0x260
[  980.375904][T19402]  ? tipc_sk_timeout+0xae0/0xae0
[  980.380862][T19402]  ? __local_bh_enable_ip+0x136/0x1c0
[  980.386268][T19402]  ? do_raw_spin_unlock+0x11d/0x230
[  980.391490][T19402]  __release_sock+0x1e6/0x460
[  980.396201][T19402]  release_sock+0x5b/0x1b0
[  980.400637][T19402]  tipc_release+0x12dc/0x2090
[  980.405329][T19402]  ? tipc_release+0x791/0x2090
[  980.410114][T19402]  ? tipc_sock_destruct+0x170/0x170
[  980.415345][T19402]  sock_close+0xbf/0x210
[  980.419597][T19402]  ? sock_mmap+0x90/0x90
[  980.423852][T19402]  __fput+0x20a/0x8b0
[  980.427864][T19402]  task_work_run+0x1d0/0x260
[  980.432530][T19402]  ? task_work_cancel+0x220/0x220
[  980.437578][T19402]  ? exit_to_user_mode_loop+0x3b/0x110
[  980.443088][T19402]  exit_to_user_mode_loop+0xe6/0x110
[  980.448389][T19402]  exit_to_user_mode_prepare+0xee/0x180
[  980.453954][T19402]  syscall_exit_to_user_mode+0x16/0x40
[  980.459425][T19402]  do_syscall_64+0x58/0xa0
[  980.463857][T19402]  ? clear_bhb_loop+0x60/0xb0
[  980.468546][T19402]  ? clear_bhb_loop+0x60/0xb0
[  980.473239][T19402]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  980.479147][T19402] RIP: 0033:0x7fd1f999e0d9
[  980.483575][T19402] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  980.503203][T19402] RSP: 002b:00007fd1f7bd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  980.511628][T19402] RAX: 0000000000000000 RBX: 00007fd1f9c26090 RCX: 00007fd1f999e0d9
[  980.519611][T19402] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[  980.527591][T19402] RBP: 00007fd1f7bd5090 R08: 0000000000000000 R09: 0000000000000000
[  980.535595][T19402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  980.543593][T19402] R13: 00007fd1f9c26128 R14: 00007fd1f9c26090 R15: 00007ffc94e6f3b8
[  980.551613][T19402]  </TASK>
[  981.989917][T19438] __nla_validate_parse: 2 callbacks suppressed
[  981.990023][T19438] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4269'.
[  982.057589][T19443] validate_nla: 9 callbacks suppressed
[  982.057609][T19443] netlink: 'syz.3.4271': attribute type 21 has an invalid length.
[  982.071399][T19443] netlink: 'syz.3.4271': attribute type 7 has an invalid length.
[  982.090240][T19445] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4269'.
[  982.223165][T19445] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  982.427839][T19451] netlink: 'syz.1.4273': attribute type 29 has an invalid length.
[  982.450633][T19451] netlink: 'syz.1.4273': attribute type 29 has an invalid length.
[  982.665257][T19458] netlink: 'syz.1.4273': attribute type 2 has an invalid length.
[  982.675418][T19458] netlink: 'syz.1.4273': attribute type 8 has an invalid length.
[  982.687330][T19458] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4273'.
[  982.698464][T19451] netlink: 'syz.1.4273': attribute type 2 has an invalid length.
[  982.708197][T19451] netlink: 'syz.1.4273': attribute type 8 has an invalid length.
[  982.738247][T19451] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4273'.
[  984.009985][T19480] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4284'.
[  984.038790][T19479] netlink: 'syz.3.4285': attribute type 21 has an invalid length.
[  984.049966][T19479] netlink: 'syz.3.4285': attribute type 7 has an invalid length.
[  984.058495][T19480] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4284'.
[  984.094625][T19480] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  984.942455][T19501] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4290'.
[  984.984481][T19501] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4290'.
[  985.797314][T19519] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4298'.
[  985.968775][T19522] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4298'.
[  985.998209][T19522] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  986.896474][T19535] team0 (unregistering): Port device team_slave_0 removed
[  986.956109][T19535] team0 (unregistering): Port device team_slave_1 removed
[  987.071278][T19545] validate_nla: 10 callbacks suppressed
[  987.071298][T19545] netlink: 'syz.3.4307': attribute type 29 has an invalid length.
[  987.143381][T19549] netlink: 'syz.3.4307': attribute type 2 has an invalid length.
[  987.156087][T19549] netlink: 'syz.3.4307': attribute type 8 has an invalid length.
[  987.169257][T19549] __nla_validate_parse: 1 callbacks suppressed
[  987.169273][T19549] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4307'.
[  987.194933][T19550] netlink: 'syz.3.4307': attribute type 2 has an invalid length.
[  987.204078][T19550] netlink: 'syz.3.4307': attribute type 8 has an invalid length.
[  987.214469][T19550] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4307'.
[  987.828536][T19565] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4313'.
[  988.119900][T19571] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4314'.
[  988.722384][T19565] netlink: 128 bytes leftover after parsing attributes in process `syz.5.4313'.
[  988.750025][T19565] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  988.936213][T19575] netlink: 'syz.5.4317': attribute type 21 has an invalid length.
[  988.944360][T19575] netlink: 'syz.5.4317': attribute type 7 has an invalid length.
[  989.319187][T19582] netlink: 'syz.1.4321': attribute type 29 has an invalid length.
[  989.347217][T19582] netlink: 'syz.1.4321': attribute type 29 has an invalid length.
[  989.553602][T19582] netlink: 'syz.1.4321': attribute type 2 has an invalid length.
[  989.562693][T19582] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4321'.
[  989.700863][T19585] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4321'.
[  990.297957][T19610] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4327'.
[  990.365495][T19604] netlink: 128 bytes leftover after parsing attributes in process `syz.5.4327'.
[  990.393979][T19604] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  991.214817][T10711] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  991.850029][T19639] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4338'.
[  992.367277][T19653] __nla_validate_parse: 2 callbacks suppressed
[  992.367299][T19653] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4344'.
[  992.390474][T19653] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4344'.
[  992.426003][T19653] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  992.853852][T19667] validate_nla: 11 callbacks suppressed
[  992.853873][T19667] netlink: 'syz.4.4348': attribute type 21 has an invalid length.
[  992.883230][T19667] netlink: 'syz.4.4348': attribute type 6 has an invalid length.
[  992.902486][T19667] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4348'.
[  993.012628][T19672] netlink: 'syz.1.4350': attribute type 21 has an invalid length.
[  993.048598][T19672] netlink: 'syz.1.4350': attribute type 7 has an invalid length.
[  993.136816][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  993.143388][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  993.927218][T19689] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.4355'.
[  993.969169][T19691] netlink: 'syz.5.4356': attribute type 29 has an invalid length.
[  993.993242][T19691] netlink: 'syz.5.4356': attribute type 29 has an invalid length.
[  994.084947][T19691] netlink: 'syz.5.4356': attribute type 2 has an invalid length.
[  994.092758][T19691] netlink: 'syz.5.4356': attribute type 8 has an invalid length.
[  994.202115][T19691] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4356'.
[  994.230224][T19692] netlink: 'syz.5.4356': attribute type 2 has an invalid length.
[  994.246051][T19692] netlink: 'syz.5.4356': attribute type 8 has an invalid length.
[  994.257177][T19692] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4356'.
[  994.291094][T19698] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4358'.
[  995.005757][T19705] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4361'.
[  995.615019][T19726] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.4370'.
[  995.997055][T19730] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4373'.
[  996.026510][T19730] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  998.535037][T19766] __nla_validate_parse: 3 callbacks suppressed
[  998.535058][T19766] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.4385'.
[  998.752430][T19777] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4389'.
[  999.152457][T19777] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4389'.
[  999.181473][T19777] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  999.744936][T19798] validate_nla: 10 callbacks suppressed
[  999.744957][T19798] netlink: 'syz.5.4393': attribute type 29 has an invalid length.
[  999.784946][T19798] netlink: 'syz.5.4393': attribute type 29 has an invalid length.
[  999.818035][T19805] netlink: 'syz.2.4394': attribute type 21 has an invalid length.
[  999.824335][T19804] netlink: 'syz.3.4396': attribute type 16 has an invalid length.
[  999.828588][T19805] netlink: 'syz.2.4394': attribute type 7 has an invalid length.
[  999.834130][T19804] netlink: 'syz.3.4396': attribute type 25 has an invalid length.
[  999.834149][T19804] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4396'.
[  999.949898][T19800] netlink: 'syz.5.4393': attribute type 2 has an invalid length.
[  999.983948][T19800] netlink: 'syz.5.4393': attribute type 8 has an invalid length.
[ 1000.106153][T19800] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4393'.
[ 1000.125506][T19798] netlink: 'syz.5.4393': attribute type 2 has an invalid length.
[ 1000.154581][T19798] netlink: 'syz.5.4393': attribute type 8 has an invalid length.
[ 1000.166301][T19798] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4393'.
[ 1000.465137][T19821] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.4401'.
[ 1000.851828][T19829] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4404'.
[ 1000.900188][T19829] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4404'.
[ 1000.933173][T19829] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1002.209475][T19848] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4408'.
[ 1002.415986][T14339] Bluetooth: hci0: unexpected subevent 0x05 length: 150 > 12
[ 1002.535245][T19865] FAULT_INJECTION: forcing a failure.
[ 1002.535245][T19865] name failslab, interval 1, probability 0, space 0, times 0
[ 1002.551825][T19865] CPU: 0 PID: 19865 Comm: syz.4.4415 Not tainted syzkaller #0
[ 1002.559356][T19865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1002.569452][T19865] Call Trace:
[ 1002.572779][T19865]  <TASK>
[ 1002.575738][T19865]  dump_stack_lvl+0x188/0x24e
[ 1002.580464][T19865]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1002.586668][T19865]  ? show_regs_print_info+0x12/0x12
[ 1002.591911][T19865]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1002.598118][T19865]  ? dump_stack+0x5/0x12
[ 1002.602395][T19865]  ? __sanitizer_cov_trace_pc+0x4/0x60
[ 1002.607886][T19865]  should_fail_ex+0x390/0x4c0
[ 1002.612608][T19865]  should_failslab+0x5/0x20
[ 1002.617148][T19865]  slab_pre_alloc_hook+0x59/0x300
[ 1002.622306][T19865]  ? kvmalloc_node+0x6c/0x180
[ 1002.627032][T19865]  __kmem_cache_alloc_node+0x4f/0x270
[ 1002.632449][T19865]  ? kvmalloc_node+0x6c/0x180
[ 1002.637167][T19865]  __kmalloc_node+0xa2/0x240
[ 1002.641807][T19865]  kvmalloc_node+0x6c/0x180
[ 1002.646352][T19865]  bpf_test_run_xdp_live+0x1da/0x1a90
[ 1002.651778][T19865]  ? bpf_dispatcher_change_prog+0xc90/0xf10
[ 1002.657694][T19865]  ? xdp_convert_md_to_buff+0x330/0x330
[ 1002.663280][T19865]  ? trace_raw_output_bpf_test_finish+0xd0/0xd0
[ 1002.669535][T19865]  ? bpf_prog_test_run_xdp+0x6bd/0xf80
[ 1002.675007][T19865]  bpf_prog_test_run_xdp+0x757/0xf80
[ 1002.680328][T19865]  ? __lock_acquire+0x7c40/0x7c40
[ 1002.685407][T19865]  ? dev_put+0x80/0x80
[ 1002.689513][T19865]  ? dev_put+0x80/0x80
[ 1002.693602][T19865]  bpf_prog_test_run+0x31c/0x390
[ 1002.698563][T19865]  __sys_bpf+0x62b/0x780
[ 1002.702828][T19865]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1002.708226][T19865]  ? lock_chain_count+0x20/0x20
[ 1002.713090][T19865]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 1002.719096][T19865]  __x64_sys_bpf+0x78/0x90
[ 1002.723526][T19865]  do_syscall_64+0x4c/0xa0
[ 1002.727953][T19865]  ? clear_bhb_loop+0x60/0xb0
[ 1002.732641][T19865]  ? clear_bhb_loop+0x60/0xb0
[ 1002.737329][T19865]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1002.743233][T19865] RIP: 0033:0x7f440d99e0d9
[ 1002.747655][T19865] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1002.767288][T19865] RSP: 002b:00007f440e7f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1002.775714][T19865] RAX: ffffffffffffffda RBX: 00007f440dc25fa0 RCX: 00007f440d99e0d9
[ 1002.783694][T19865] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[ 1002.791673][T19865] RBP: 00007f440e7f0090 R08: 0000000000000000 R09: 0000000000000000
[ 1002.799651][T19865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1002.807631][T19865] R13: 00007f440dc26038 R14: 00007f440dc25fa0 R15: 00007ffe25f5ae08
[ 1002.815623][T19865]  </TASK>
[ 1003.507557][T19880] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1004.161139][T19899] __nla_validate_parse: 4 callbacks suppressed
[ 1004.161207][T19899] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.4427'.
[ 1004.441427][T19906] device wg1 entered promiscuous mode
[ 1004.448805][T19906] team0: Device wg1 is of different type
[ 1004.476566][T19901] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4425'.
[ 1004.493324][T14339] Bluetooth: hci0: command 0x201b tx timeout
[ 1004.520938][T19907] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4425'.
[ 1004.696512][T19911] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4431'.
[ 1004.935071][T19917] validate_nla: 17 callbacks suppressed
[ 1004.935091][T19917] netlink: 'syz.2.4434': attribute type 21 has an invalid length.
[ 1005.031543][T19917] netlink: 'syz.2.4434': attribute type 7 has an invalid length.
[ 1005.243464][T19919] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4436'.
[ 1005.317658][T19919] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4436'.
[ 1005.385662][T19919] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1006.358477][T19937] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.4440'.
[ 1006.914422][T19946] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4442'.
[ 1007.445233][T19958] netlink: 'syz.4.4446': attribute type 29 has an invalid length.
[ 1007.472032][T19958] netlink: 'syz.4.4446': attribute type 29 has an invalid length.
[ 1007.644360][T19965] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4448'.
[ 1007.668096][T19958] netlink: 'syz.4.4446': attribute type 2 has an invalid length.
[ 1007.685767][T19958] netlink: 'syz.4.4446': attribute type 8 has an invalid length.
[ 1007.702574][T19958] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4446'.
[ 1007.721066][T19965] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1007.751919][T19963] netlink: 'syz.4.4446': attribute type 2 has an invalid length.
[ 1007.762468][T19963] netlink: 'syz.4.4446': attribute type 8 has an invalid length.
[ 1008.588244][T19976] netlink: 'syz.4.4452': attribute type 21 has an invalid length.
[ 1008.611870][T19976] netlink: 'syz.4.4452': attribute type 7 has an invalid length.
[ 1009.748830][T20002] __nla_validate_parse: 4 callbacks suppressed
[ 1009.748849][T20002] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4461'.
[ 1009.770817][T20002] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4461'.
[ 1009.793101][T20002] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1009.832983][T20000] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4460'.
[ 1009.852669][T20000] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4460'.
[ 1009.910465][T20004] netlink: 10 bytes leftover after parsing attributes in process `syz.2.4462'.
[ 1010.109979][T20011] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.4464'.
[ 1010.155308][T20013] validate_nla: 6 callbacks suppressed
[ 1010.155326][T20013] netlink: 'syz.5.4465': attribute type 21 has an invalid length.
[ 1010.276939][T20013] netlink: 'syz.5.4465': attribute type 7 has an invalid length.
[ 1010.320670][T20019] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4466'.
[ 1010.429533][T20019] openvswitch: netlink: Message has 6 unknown bytes.
[ 1011.625711][T20043] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4472'.
[ 1012.111883][T20050] FAULT_INJECTION: forcing a failure.
[ 1012.111883][T20050] name failslab, interval 1, probability 0, space 0, times 0
[ 1012.193105][T20050] CPU: 1 PID: 20050 Comm: syz.4.4474 Not tainted syzkaller #0
[ 1012.200638][T20050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1012.210728][T20050] Call Trace:
[ 1012.214035][T20050]  <TASK>
[ 1012.216996][T20050]  dump_stack_lvl+0x188/0x24e
[ 1012.221720][T20050]  ? show_regs_print_info+0x12/0x12
[ 1012.226965][T20050]  ? load_image+0x410/0x410
[ 1012.231503][T20050]  ? __might_sleep+0xd0/0xd0
[ 1012.236127][T20050]  ? __lock_acquire+0x7c40/0x7c40
[ 1012.241197][T20050]  should_fail_ex+0x390/0x4c0
[ 1012.245999][T20050]  should_failslab+0x5/0x20
[ 1012.250515][T20050]  slab_pre_alloc_hook+0x59/0x300
[ 1012.255548][T20050]  ? __lock_acquire+0x7c40/0x7c40
[ 1012.260585][T20050]  ? kvmalloc_node+0x6c/0x180
[ 1012.265287][T20050]  __kmem_cache_alloc_node+0x4f/0x270
[ 1012.270666][T20050]  ? schedule_delayed_monitor_work+0x160/0x160
[ 1012.276833][T20050]  ? kvmalloc_node+0x6c/0x180
[ 1012.281517][T20050]  __kmalloc_node+0xa2/0x240
[ 1012.286123][T20050]  kvmalloc_node+0x6c/0x180
[ 1012.290637][T20050]  bpf_test_run_xdp_live+0x1da/0x1a90
[ 1012.296023][T20050]  ? 0xffffffffa0004440
[ 1012.300188][T20050]  ? text_poke_copy+0x7b/0x90
[ 1012.304879][T20050]  ? 0xffffffffa0004440
[ 1012.309042][T20050]  ? bpf_dispatcher_change_prog+0xc90/0xf10
[ 1012.314968][T20050]  ? xdp_convert_md_to_buff+0x330/0x330
[ 1012.320549][T20050]  ? trace_raw_output_bpf_test_finish+0xd0/0xd0
[ 1012.326804][T20050]  ? bpf_test_init+0x119/0x140
[ 1012.331582][T20050]  ? xdp_convert_md_to_buff+0x5b/0x330
[ 1012.337053][T20050]  bpf_prog_test_run_xdp+0x757/0xf80
[ 1012.342357][T20050]  ? __lock_acquire+0x7c40/0x7c40
[ 1012.347418][T20050]  ? dev_put+0x80/0x80
[ 1012.351519][T20050]  ? dev_put+0x80/0x80
[ 1012.355605][T20050]  bpf_prog_test_run+0x31c/0x390
[ 1012.360568][T20050]  __sys_bpf+0x62b/0x780
[ 1012.364826][T20050]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1012.370232][T20050]  ? lock_chain_count+0x20/0x20
[ 1012.375108][T20050]  __x64_sys_bpf+0x78/0x90
[ 1012.379549][T20050]  do_syscall_64+0x4c/0xa0
[ 1012.383979][T20050]  ? clear_bhb_loop+0x60/0xb0
[ 1012.388667][T20050]  ? clear_bhb_loop+0x60/0xb0
[ 1012.393358][T20050]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1012.399292][T20050] RIP: 0033:0x7f440d99e0d9
[ 1012.403716][T20050] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1012.423718][T20050] RSP: 002b:00007f440e7cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1012.432158][T20050] RAX: ffffffffffffffda RBX: 00007f440dc26090 RCX: 00007f440d99e0d9
[ 1012.440149][T20050] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[ 1012.448131][T20050] RBP: 00007f440e7cf090 R08: 0000000000000000 R09: 0000000000000000
[ 1012.456112][T20050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1012.464092][T20050] R13: 00007f440dc26128 R14: 00007f440dc26090 R15: 00007ffe25f5ae08
[ 1012.472090][T20050]  </TASK>
[ 1012.614712][T20055] netlink: 152 bytes leftover after parsing attributes in process `syz.5.4476'.
[ 1012.629325][T20055] bond0: (slave bond_slave_0): Releasing backup interface
[ 1012.652321][T20055] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[ 1012.684928][T20053] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4475'.
[ 1012.705656][T20053] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1012.818436][T20060] netlink: 'syz.4.4477': attribute type 29 has an invalid length.
[ 1012.835517][T20060] netlink: 'syz.4.4477': attribute type 29 has an invalid length.
[ 1012.968428][T20060] netlink: 'syz.4.4477': attribute type 2 has an invalid length.
[ 1012.998099][T20060] netlink: 'syz.4.4477': attribute type 8 has an invalid length.
[ 1013.014580][T20060] netlink: 'syz.4.4477': attribute type 2 has an invalid length.
[ 1013.030607][T20060] netlink: 'syz.4.4477': attribute type 8 has an invalid length.
[ 1013.151356][T20067] netlink: 'syz.5.4481': attribute type 21 has an invalid length.
[ 1013.209824][T20067] netlink: 'syz.5.4481': attribute type 7 has an invalid length.
[ 1017.119959][T20105] FAULT_INJECTION: forcing a failure.
[ 1017.119959][T20105] name failslab, interval 1, probability 0, space 0, times 0
[ 1017.182857][T20105] CPU: 0 PID: 20105 Comm: syz.5.4489 Not tainted syzkaller #0
[ 1017.190398][T20105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1017.200482][T20105] Call Trace:
[ 1017.203774][T20105]  <TASK>
[ 1017.206744][T20105]  dump_stack_lvl+0x188/0x24e
[ 1017.211454][T20105]  ? show_regs_print_info+0x12/0x12
[ 1017.216681][T20105]  ? load_image+0x410/0x410
[ 1017.221211][T20105]  ? __might_sleep+0xd0/0xd0
[ 1017.225816][T20105]  ? __lock_acquire+0x7c40/0x7c40
[ 1017.230862][T20105]  should_fail_ex+0x390/0x4c0
[ 1017.235560][T20105]  should_failslab+0x5/0x20
[ 1017.240072][T20105]  slab_pre_alloc_hook+0x59/0x300
[ 1017.245107][T20105]  ? __lock_acquire+0x138a/0x7c40
[ 1017.250142][T20105]  ? tomoyo_realpath_from_path+0xe2/0x5c0
[ 1017.255879][T20105]  __kmem_cache_alloc_node+0x4f/0x270
[ 1017.261269][T20105]  ? tomoyo_realpath_from_path+0xe2/0x5c0
[ 1017.267001][T20105]  __kmalloc+0xa3/0x240
[ 1017.271179][T20105]  tomoyo_realpath_from_path+0xe2/0x5c0
[ 1017.276741][T20105]  ? tomoyo_domain+0xd2/0x120
[ 1017.281444][T20105]  ? tomoyo_path_number_perm+0x205/0x650
[ 1017.287088][T20105]  tomoyo_path_number_perm+0x22f/0x650
[ 1017.292561][T20105]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[ 1017.298037][T20105]  ? ksys_write+0x1ce/0x260
[ 1017.302556][T20105]  ? common_file_perm+0x171/0x1c0
[ 1017.307627][T20105]  ? __fget_files+0x28/0x460
[ 1017.312242][T20105]  security_file_ioctl+0x6c/0xa0
[ 1017.317190][T20105]  __se_sys_ioctl+0x48/0x170
[ 1017.321797][T20105]  do_syscall_64+0x4c/0xa0
[ 1017.326222][T20105]  ? clear_bhb_loop+0x60/0xb0
[ 1017.330923][T20105]  ? clear_bhb_loop+0x60/0xb0
[ 1017.335614][T20105]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1017.341513][T20105] RIP: 0033:0x7f4e4a19e0d9
[ 1017.345937][T20105] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1017.365554][T20105] RSP: 002b:00007f4e4b09a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1017.373977][T20105] RAX: ffffffffffffffda RBX: 00007f4e4a426180 RCX: 00007f4e4a19e0d9
[ 1017.381954][T20105] RDX: 0000200000001200 RSI: 0000000040047452 RDI: 0000000000000004
[ 1017.389933][T20105] RBP: 00007f4e4b09a090 R08: 0000000000000000 R09: 0000000000000000
[ 1017.397911][T20105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1017.405891][T20105] R13: 00007f4e4a426218 R14: 00007f4e4a426180 R15: 00007ffcc2158038
[ 1017.413885][T20105]  </TASK>
[ 1017.533938][T20105] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1017.798634][T20113] __nla_validate_parse: 3 callbacks suppressed
[ 1017.798655][T20113] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.4492'.
[ 1019.172745][T20099] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4490'.
[ 1019.191484][T20099] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1019.374760][T20122] netlink: 'syz.4.4494': attribute type 29 has an invalid length.
[ 1019.415004][T20122] netlink: 'syz.4.4494': attribute type 29 has an invalid length.
[ 1019.571383][T20124] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4495'.
[ 1020.145368][T20133] netlink: 'syz.4.4494': attribute type 2 has an invalid length.
[ 1020.255946][T20133] netlink: 'syz.4.4494': attribute type 8 has an invalid length.
[ 1020.294107][T20133] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4494'.
[ 1020.345863][T20137] netlink: 'syz.4.4494': attribute type 2 has an invalid length.
[ 1020.367160][T20137] netlink: 'syz.4.4494': attribute type 8 has an invalid length.
[ 1020.382988][T20137] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4494'.
[ 1020.539160][T20142] netlink: 'syz.3.4500': attribute type 21 has an invalid length.
[ 1020.552911][T20142] netlink: 'syz.3.4500': attribute type 7 has an invalid length.
[ 1020.898246][T20149] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.4503'.
[ 1021.401764][T20157] netlink: 128 bytes leftover after parsing attributes in process `syz.5.4506'.
[ 1021.424968][T20157] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1021.577146][T20164] netlink: 'syz.3.4508': attribute type 10 has an invalid length.
[ 1021.710484][T20169] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4509'.
[ 1021.845027][T20164] team0 (unregistering): Port device team_slave_0 removed
[ 1022.484211][T20164] team0 (unregistering): Port device team_slave_1 removed
[ 1022.500454][T20164] bridge0: port 3(batadv0) entered disabled state
[ 1022.508597][T20164] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1022.516042][T20164] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1022.552279][T20164] team0 (unregistering): Port device bridge0 removed
[ 1022.724979][T20184] netlink: 'syz.2.4513': attribute type 29 has an invalid length.
[ 1022.974628][T20195] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4513'.
[ 1023.844303][T20220] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4524'.
[ 1023.961609][T20224] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4525'.
[ 1024.000426][T20221] can: request_module (can-proto-0) failed.
[ 1024.569886][T20226] FAULT_INJECTION: forcing a failure.
[ 1024.569886][T20226] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1024.647975][T20226] CPU: 1 PID: 20226 Comm: syz.3.4526 Not tainted syzkaller #0
[ 1024.655504][T20226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1024.665574][T20226] Call Trace:
[ 1024.668861][T20226]  <TASK>
[ 1024.671798][T20226]  dump_stack_lvl+0x188/0x24e
[ 1024.676500][T20226]  ? show_regs_print_info+0x12/0x12
[ 1024.681717][T20226]  ? load_image+0x410/0x410
[ 1024.686230][T20226]  ? __lock_acquire+0x7c40/0x7c40
[ 1024.691273][T20226]  should_fail_ex+0x390/0x4c0
[ 1024.695988][T20226]  _copy_to_user+0x2c/0x130
[ 1024.700522][T20226]  simple_read_from_buffer+0xe3/0x150
[ 1024.705925][T20226]  proc_fail_nth_read+0x1a6/0x220
[ 1024.710969][T20226]  ? proc_fault_inject_write+0x310/0x310
[ 1024.716617][T20226]  ? fsnotify_perm+0x248/0x550
[ 1024.721389][T20226]  ? proc_fault_inject_write+0x310/0x310
[ 1024.727036][T20226]  vfs_read+0x2db/0x960
[ 1024.731213][T20226]  ? kernel_read+0x1e0/0x1e0
[ 1024.735818][T20226]  ? __fget_files+0x28/0x460
[ 1024.740426][T20226]  ? __fget_files+0x3fc/0x460
[ 1024.745121][T20226]  ? __fdget_pos+0x2ae/0x360
[ 1024.749719][T20226]  ? ksys_read+0x70/0x260
[ 1024.754060][T20226]  ksys_read+0x14d/0x260
[ 1024.758315][T20226]  ? vfs_write+0x9a0/0x9a0
[ 1024.762745][T20226]  ? syscall_enter_from_user_mode+0x2a/0x80
[ 1024.768652][T20226]  do_syscall_64+0x4c/0xa0
[ 1024.773080][T20226]  ? clear_bhb_loop+0x60/0xb0
[ 1024.777763][T20226]  ? clear_bhb_loop+0x60/0xb0
[ 1024.782453][T20226]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1024.788355][T20226] RIP: 0033:0x7f25ae75e90e
[ 1024.792782][T20226] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1024.812397][T20226] RSP: 002b:00007f25af636fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1024.820827][T20226] RAX: ffffffffffffffda RBX: 00007f25af6376c0 RCX: 00007f25ae75e90e
[ 1024.828807][T20226] RDX: 000000000000000f RSI: 00007f25af6370a0 RDI: 000000000000000c
[ 1024.836781][T20226] RBP: 00007f25af637090 R08: 0000000000000000 R09: 0000000000000000
[ 1024.844755][T20226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1024.852733][T20226] R13: 00007f25aea26038 R14: 00007f25aea25fa0 R15: 00007ffca6c8d848
[ 1024.860725][T20226]  </TASK>
[ 1025.291963][T20248] validate_nla: 5 callbacks suppressed
[ 1025.291988][T20248] netlink: 'syz.4.4533': attribute type 29 has an invalid length.
[ 1025.373429][T20248] netlink: 'syz.4.4533': attribute type 29 has an invalid length.
[ 1025.454458][T20248] netlink: 'syz.4.4533': attribute type 2 has an invalid length.
[ 1025.489136][T20248] netlink: 'syz.4.4533': attribute type 8 has an invalid length.
[ 1025.504929][T20248] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4533'.
[ 1025.585530][T20255] netlink: 'syz.4.4533': attribute type 2 has an invalid length.
[ 1025.643417][T20255] netlink: 'syz.4.4533': attribute type 8 has an invalid length.
[ 1025.670627][T20255] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4533'.
[ 1025.969356][T20257] netlink: 'syz.2.4535': attribute type 21 has an invalid length.
[ 1026.001159][T20257] netlink: 'syz.2.4535': attribute type 7 has an invalid length.
[ 1026.927938][T20273] netlink: 'syz.1.4538': attribute type 33 has an invalid length.
[ 1026.952986][T20273] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4538'.
[ 1026.977458][T20279] netlink: 'syz.2.4542': attribute type 2 has an invalid length.
[ 1026.997695][T20279] netlink: 17 bytes leftover after parsing attributes in process `syz.2.4542'.
[ 1027.034341][T20273] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4538'.
[ 1027.642311][T20283] netlink: 128 bytes leftover after parsing attributes in process `syz.5.4539'.
[ 1027.651624][T20283] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1027.742580][T20282] device geneve1 entered promiscuous mode
[ 1027.755890][T20282] team0: Port device geneve1 added
[ 1028.149939][T20302] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4547'.
[ 1028.196719][T20302] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4547'.
[ 1028.306311][T20312] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4549'.
[ 1030.323585][T20330] validate_nla: 10 callbacks suppressed
[ 1030.323604][T20330] netlink: 'syz.5.4556': attribute type 39 has an invalid length.
[ 1030.544561][T20330] device hsr_slave_1 left promiscuous mode
[ 1030.658935][T20338] netlink: 'syz.4.4560': attribute type 15 has an invalid length.
[ 1030.672256][T20338] netlink: 'syz.4.4560': attribute type 7 has an invalid length.
[ 1030.904784][T20345] netlink: 'syz.1.4562': attribute type 29 has an invalid length.
[ 1030.923443][T20345] netlink: 'syz.1.4562': attribute type 29 has an invalid length.
[ 1031.068745][T20345] netlink: 'syz.1.4562': attribute type 2 has an invalid length.
[ 1031.112934][T20356] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4564'.
[ 1031.151375][T20345] netlink: 'syz.1.4562': attribute type 8 has an invalid length.
[ 1031.169430][T20345] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4562'.
[ 1031.197225][T20350] netlink: 'syz.1.4562': attribute type 2 has an invalid length.
[ 1031.227605][T20350] netlink: 'syz.1.4562': attribute type 8 has an invalid length.
[ 1031.240016][T20350] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4562'.
[ 1032.121118][T20365] netlink: 'syz.1.4568': attribute type 41 has an invalid length.
[ 1032.806652][T20376] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4573'.
[ 1032.820439][T20376] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1034.406416][T20398] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4579'.
[ 1034.489329][T20399] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4579'.
[ 1035.402537][T20433] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4593'.
[ 1036.370061][T20458] validate_nla: 11 callbacks suppressed
[ 1036.370081][T20458] netlink: 'syz.1.4599': attribute type 29 has an invalid length.
[ 1036.393479][T20458] netlink: 'syz.1.4599': attribute type 29 has an invalid length.
[ 1036.510222][T20463] netlink: 'syz.3.4600': attribute type 21 has an invalid length.
[ 1036.530404][T20463] netlink: 'syz.3.4600': attribute type 7 has an invalid length.
[ 1036.567002][T20458] netlink: 'syz.1.4599': attribute type 2 has an invalid length.
[ 1036.605928][T20458] netlink: 'syz.1.4599': attribute type 8 has an invalid length.
[ 1036.694911][T20458] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4599'.
[ 1036.722879][T20461] netlink: 'syz.1.4599': attribute type 2 has an invalid length.
[ 1036.739680][T20461] netlink: 'syz.1.4599': attribute type 8 has an invalid length.
[ 1036.752220][T20461] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4599'.
[ 1036.803551][T20465] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4601'.
[ 1036.830952][T20465] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1038.694655][T20493] netlink: 'syz.1.4612': attribute type 39 has an invalid length.
[ 1039.265205][T20512] netlink: 'syz.3.4615': attribute type 29 has an invalid length.
[ 1039.327647][T20493] device hsr_slave_1 left promiscuous mode
[ 1039.601666][T20512] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4615'.
[ 1039.662384][T20514] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4615'.
[ 1039.972501][T20523] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4621'.
[ 1041.223283][T20550] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4627'.
[ 1041.293953][T20550] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1041.472355][ T5533] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller1: link becomes ready
[ 1041.496569][T20555] validate_nla: 7 callbacks suppressed
[ 1041.496586][T20555] netlink: 'syz.4.4631': attribute type 10 has an invalid length.
[ 1041.545656][T20555] team0: Device dummy0 is up. Set it down before adding it as a team port
[ 1041.737100][T20566] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4634'.
[ 1041.825034][T20567] netlink: 'syz.3.4633': attribute type 21 has an invalid length.
[ 1041.908026][T20567] netlink: 'syz.3.4633': attribute type 7 has an invalid length.
[ 1042.373047][T20574] netlink: 'syz.4.4636': attribute type 2 has an invalid length.
[ 1042.381568][T20574] netlink: 'syz.4.4636': attribute type 8 has an invalid length.
[ 1042.430308][T20574] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4636'.
[ 1042.464947][T20576] netlink: 'syz.4.4636': attribute type 2 has an invalid length.
[ 1042.506519][T20576] netlink: 'syz.4.4636': attribute type 8 has an invalid length.
[ 1042.610807][T20576] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4636'.
[ 1044.476390][T20611] netlink: 'syz.2.4648': attribute type 21 has an invalid length.
[ 1044.490234][T20611] netlink: 'syz.2.4648': attribute type 7 has an invalid length.
[ 1045.309430][T20622] netlink: 'syz.4.4651': attribute type 29 has an invalid length.
[ 1045.822097][T20628] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4651'.
[ 1045.920701][T20625] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4651'.
[ 1047.027467][T20652] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4661'.
[ 1049.154501][T20660] validate_nla: 5 callbacks suppressed
[ 1049.154520][T20660] netlink: 'syz.4.4662': attribute type 21 has an invalid length.
[ 1049.208666][T20660] netlink: 'syz.4.4662': attribute type 7 has an invalid length.
[ 1049.401444][T14339] Bluetooth: hci1: ISO packet for unknown connection handle 2097
[ 1050.660515][T20691] netlink: 'syz.5.4666': attribute type 29 has an invalid length.
[ 1050.674058][T20691] netlink: 'syz.5.4666': attribute type 29 has an invalid length.
[ 1050.827657][T20693] netlink: 'syz.5.4666': attribute type 2 has an invalid length.
[ 1050.846674][T20693] netlink: 'syz.5.4666': attribute type 8 has an invalid length.
[ 1050.861651][T20693] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4666'.
[ 1050.899974][T20693] netlink: 'syz.5.4666': attribute type 2 has an invalid length.
[ 1050.912615][T20693] netlink: 'syz.5.4666': attribute type 8 has an invalid length.
[ 1050.921052][T20693] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4666'.
[ 1051.397995][T20711] FAULT_INJECTION: forcing a failure.
[ 1051.397995][T20711] name failslab, interval 1, probability 0, space 0, times 0
[ 1051.429015][T20711] CPU: 1 PID: 20711 Comm: syz.1.4677 Not tainted syzkaller #0
[ 1051.430203][T20700] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4674'.
[ 1051.436528][T20711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1051.436544][T20711] Call Trace:
[ 1051.436554][T20711]  <TASK>
[ 1051.436564][T20711]  dump_stack_lvl+0x188/0x24e
[ 1051.436601][T20711]  ? show_regs_print_info+0x12/0x12
[ 1051.436637][T20711]  ? load_image+0x410/0x410
[ 1051.436665][T20711]  ? __might_sleep+0xd0/0xd0
[ 1051.436687][T20711]  ? __lock_acquire+0x7c40/0x7c40
[ 1051.436719][T20711]  should_fail_ex+0x390/0x4c0
[ 1051.436751][T20711]  should_failslab+0x5/0x20
[ 1051.436772][T20711]  slab_pre_alloc_hook+0x59/0x300
[ 1051.436793][T20711]  ? __lock_acquire+0x138a/0x7c40
[ 1051.436821][T20711]  ? tomoyo_realpath_from_path+0xe2/0x5c0
[ 1051.436850][T20711]  __kmem_cache_alloc_node+0x4f/0x270
[ 1051.436877][T20711]  ? tomoyo_realpath_from_path+0xe2/0x5c0
[ 1051.462564][T20706] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4676'.
[ 1051.466906][T20711]  __kmalloc+0xa3/0x240
[ 1051.466948][T20711]  tomoyo_realpath_from_path+0xe2/0x5c0
[ 1051.466978][T20711]  ? tomoyo_domain+0xd2/0x120
[ 1051.467006][T20711]  ? tomoyo_path_number_perm+0x205/0x650
[ 1051.467029][T20711]  tomoyo_path_number_perm+0x22f/0x650
[ 1051.467056][T20711]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[ 1051.467078][T20711]  ? ksys_write+0x1ce/0x260
[ 1051.467106][T20711]  ? common_file_perm+0x171/0x1c0
[ 1051.467173][T20711]  ? __fget_files+0x28/0x460
[ 1051.467216][T20711]  security_file_ioctl+0x6c/0xa0
[ 1051.467243][T20711]  __se_sys_ioctl+0x48/0x170
[ 1051.467273][T20711]  do_syscall_64+0x4c/0xa0
[ 1051.482184][T20700] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1051.486602][T20711]  ? clear_bhb_loop+0x60/0xb0
[ 1051.486641][T20711]  ? clear_bhb_loop+0x60/0xb0
[ 1051.486670][T20711]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1051.486693][T20711] RIP: 0033:0x7fd1f999e0d9
[ 1051.486715][T20711] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1051.486734][T20711] RSP: 002b:00007fd1f7bb4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1051.486761][T20711] RAX: ffffffffffffffda RBX: 00007fd1f9c26180 RCX: 00007fd1f999e0d9
[ 1051.486776][T20711] RDX: 0000200000001200 RSI: 0000000040047452 RDI: 0000000000000004
[ 1051.486791][T20711] RBP: 00007fd1f7bb4090 R08: 0000000000000000 R09: 0000000000000000
[ 1051.486806][T20711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1051.486820][T20711] R13: 00007fd1f9c26218 R14: 00007fd1f9c26180 R15: 00007ffc94e6f3b8
[ 1051.486855][T20711]  </TASK>
[ 1051.706481][T20711] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1051.772599][T20715] netlink: 'syz.2.4678': attribute type 21 has an invalid length.
[ 1051.784288][T20715] netlink: 'syz.2.4678': attribute type 7 has an invalid length.
[ 1052.196825][T20731] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4680'.
[ 1052.245903][T20722] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4681'.
[ 1052.879831][T20739] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4686'.
[ 1052.961218][T20739] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4686'.
[ 1053.661341][T20754] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4690'.
[ 1053.744234][T20754] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1054.157608][T20766] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4695'.
[ 1054.411578][T20772] validate_nla: 12 callbacks suppressed
[ 1054.411607][T20772] netlink: 'syz.2.4698': attribute type 39 has an invalid length.
[ 1054.490264][T20775] openvswitch: netlink: Message has 6 unknown bytes.
[ 1054.494748][T20772] netlink: 'syz.2.4698': attribute type 2 has an invalid length.
[ 1054.498786][T20777] netlink: 'syz.3.4701': attribute type 29 has an invalid length.
[ 1054.544584][T20777] netlink: 'syz.3.4701': attribute type 29 has an invalid length.
[ 1054.609540][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.615986][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[ 1054.695746][T20777] netlink: 'syz.3.4701': attribute type 2 has an invalid length.
[ 1054.729631][T20777] netlink: 'syz.3.4701': attribute type 8 has an invalid length.
[ 1054.782694][T20781] netlink: 'syz.3.4701': attribute type 2 has an invalid length.
[ 1054.813190][T20781] netlink: 'syz.3.4701': attribute type 8 has an invalid length.
[ 1054.966577][T20794] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1055.074228][T20801] netlink: 'syz.4.4706': attribute type 21 has an invalid length.
[ 1055.082945][T20801] netlink: 'syz.4.4706': attribute type 7 has an invalid length.
[ 1056.466062][T20837] __nla_validate_parse: 6 callbacks suppressed
[ 1056.466082][T20837] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4717'.
[ 1056.606599][T20834] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4717'.
[ 1057.654994][T20860] netlink: 128 bytes leftover after parsing attributes in process `syz.5.4723'.
[ 1057.675173][T20860] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1057.699632][T20861] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4724'.
[ 1057.918822][T20865] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.4725'.
[ 1058.294134][T20883] bridge0: port 3(batadv0) entered blocking state
[ 1058.300743][T20883] bridge0: port 3(batadv0) entered forwarding state
[ 1058.307717][T20883] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1058.314947][T20883] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1058.322321][T20883] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1058.329584][T20883] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1058.354723][T20883] bond0: (slave bridge0): Enslaving as an active interface with an up link
[ 1058.741563][T20888] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4731'.
[ 1058.759876][T20887] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4731'.
[ 1059.339398][T20903] netlink: 128 bytes leftover after parsing attributes in process `syz.5.4738'.
[ 1059.370322][T20903] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1060.163078][T20914] ref_ctr_offset mismatch. inode: 0x64b offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0
[ 1060.521076][T20927] validate_nla: 17 callbacks suppressed
[ 1060.521098][T20927] netlink: 'syz.1.4746': attribute type 29 has an invalid length.
[ 1060.575637][T20927] netlink: 'syz.1.4746': attribute type 29 has an invalid length.
[ 1060.597184][T20931] netlink: 9286 bytes leftover after parsing attributes in process `syz.5.4748'.
[ 1060.621523][T20931] netlink: 'syz.5.4748': attribute type 33 has an invalid length.
[ 1060.675490][T20931] netlink: 152 bytes leftover after parsing attributes in process `syz.5.4748'.
[ 1060.780132][T13577] tipc: Subscription rejected, illegal request
[ 1060.846405][T20932] netlink: 'syz.1.4746': attribute type 2 has an invalid length.
[ 1060.854664][T20932] netlink: 'syz.1.4746': attribute type 8 has an invalid length.
[ 1060.870010][T20927] netlink: 'syz.1.4746': attribute type 2 has an invalid length.
[ 1060.994733][T20927] netlink: 'syz.1.4746': attribute type 8 has an invalid length.
[ 1061.463938][T20945] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1061.500810][T20951] netlink: 'syz.1.4753': attribute type 21 has an invalid length.
[ 1061.515284][T20951] netlink: 'syz.1.4753': attribute type 7 has an invalid length.
[ 1061.633288][T20958] __nla_validate_parse: 3 callbacks suppressed
[ 1061.633307][T20958] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.4756'.
[ 1062.379999][T20968] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4760'.
[ 1062.423532][T20975] netlink: 'syz.1.4763': attribute type 29 has an invalid length.
[ 1062.659142][T20977] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4763'.
[ 1062.708356][T20980] netlink: 114680 bytes leftover after parsing attributes in process `syz.2.4764'.
[ 1063.014035][T20983] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.4765'.
[ 1063.229433][T20990] FAULT_INJECTION: forcing a failure.
[ 1063.229433][T20990] name failslab, interval 1, probability 0, space 0, times 0
[ 1063.254307][T20990] CPU: 1 PID: 20990 Comm: syz.1.4766 Not tainted syzkaller #0
[ 1063.261833][T20990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1063.271916][T20990] Call Trace:
[ 1063.275230][T20990]  <TASK>
[ 1063.278187][T20990]  dump_stack_lvl+0x188/0x24e
[ 1063.282914][T20990]  ? show_regs_print_info+0x12/0x12
[ 1063.288152][T20990]  ? load_image+0x410/0x410
[ 1063.292700][T20990]  ? __might_sleep+0xd0/0xd0
[ 1063.297323][T20990]  ? __lock_acquire+0x7c40/0x7c40
[ 1063.302394][T20990]  should_fail_ex+0x390/0x4c0
[ 1063.307119][T20990]  should_failslab+0x5/0x20
[ 1063.311652][T20990]  slab_pre_alloc_hook+0x59/0x300
[ 1063.316721][T20990]  ? __get_vm_area_node+0x122/0x330
[ 1063.321942][T20990]  __kmem_cache_alloc_node+0x4f/0x270
[ 1063.327325][T20990]  ? __get_vm_area_node+0x122/0x330
[ 1063.332533][T20990]  kmalloc_node_trace+0x22/0xe0
[ 1063.337400][T20990]  __get_vm_area_node+0x122/0x330
[ 1063.342432][T20990]  ? __local_bh_enable_ip+0x136/0x1c0
[ 1063.347814][T20990]  __vmalloc_node_range+0x357/0x1380
[ 1063.353111][T20990]  ? netlink_sendmsg+0x5ec/0xbd0
[ 1063.358092][T20990]  ? netlink_insert+0x28d/0x13b0
[ 1063.363059][T20990]  ? free_vm_area+0x50/0x50
[ 1063.367585][T20990]  ? netlink_sendmsg+0x5ec/0xbd0
[ 1063.372622][T20990]  vmalloc+0x75/0x80
[ 1063.376524][T20990]  ? netlink_sendmsg+0x5ec/0xbd0
[ 1063.381483][T20990]  netlink_sendmsg+0x5ec/0xbd0
[ 1063.386266][T20990]  ? netlink_getsockopt+0x550/0x550
[ 1063.391482][T20990]  ? apparmor_socket_sendmsg+0x8a/0x330
[ 1063.397043][T20990]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1063.402333][T20990]  ? security_socket_sendmsg+0x7c/0xa0
[ 1063.407798][T20990]  ? netlink_getsockopt+0x550/0x550
[ 1063.413013][T20990]  ____sys_sendmsg+0x5ed/0x9a0
[ 1063.417799][T20990]  ? __sys_sendmsg_sock+0x30/0x30
[ 1063.422841][T20990]  ? __import_iovec+0x306/0x510
[ 1063.427717][T20990]  ? import_iovec+0x6f/0xa0
[ 1063.432237][T20990]  ___sys_sendmsg+0x2a2/0x360
[ 1063.436929][T20990]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1063.441729][T20990]  ? __lock_acquire+0x7c40/0x7c40
[ 1063.446785][T20990]  __se_sys_sendmsg+0x1c3/0x2b0
[ 1063.451651][T20990]  ? __x64_sys_sendmsg+0x80/0x80
[ 1063.456616][T20990]  ? lockdep_hardirqs_on+0x94/0x140
[ 1063.461821][T20990]  do_syscall_64+0x4c/0xa0
[ 1063.466249][T20990]  ? clear_bhb_loop+0x60/0xb0
[ 1063.470938][T20990]  ? clear_bhb_loop+0x60/0xb0
[ 1063.475628][T20990]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1063.481533][T20990] RIP: 0033:0x7fd1f999e0d9
[ 1063.485956][T20990] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1063.505575][T20990] RSP: 002b:00007fd1f7bd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1063.513995][T20990] RAX: ffffffffffffffda RBX: 00007fd1f9c26090 RCX: 00007fd1f999e0d9
[ 1063.521975][T20990] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006
[ 1063.529954][T20990] RBP: 00007fd1f7bd5090 R08: 0000000000000000 R09: 0000000000000000
[ 1063.537930][T20990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1063.545906][T20990] R13: 00007fd1f9c26128 R14: 00007fd1f9c26090 R15: 00007ffc94e6f3b8
[ 1063.553900][T20990]  </TASK>
[ 1063.580299][T20990] syz.1.4766: vmalloc error: size 213312, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz1,mems_allowed=0-1
[ 1063.649460][T20990] CPU: 1 PID: 20990 Comm: syz.1.4766 Not tainted syzkaller #0
[ 1063.656998][T20990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1063.667085][T20990] Call Trace:
[ 1063.670394][T20990]  <TASK>
[ 1063.673354][T20990]  dump_stack_lvl+0x188/0x24e
[ 1063.678076][T20990]  ? cpuset_print_current_mems_allowed+0x1b/0x360
[ 1063.684531][T20990]  ? show_regs_print_info+0x12/0x12
[ 1063.689775][T20990]  ? load_image+0x410/0x410
[ 1063.694319][T20990]  ? cpuset_print_current_mems_allowed+0x1b/0x360
[ 1063.700768][T20990]  ? cpuset_print_current_mems_allowed+0x2e3/0x360
[ 1063.707309][T20990]  warn_alloc+0x242/0x330
[ 1063.711685][T20990]  ? __get_vm_area_node+0x122/0x330
[ 1063.716924][T20990]  ? zone_watermark_ok_safe+0x270/0x270
[ 1063.722510][T20990]  ? rcu_is_watching+0x11/0xa0
[ 1063.727322][T20990]  ? __get_vm_area_node+0x318/0x330
[ 1063.732559][T20990]  ? __local_bh_enable_ip+0x136/0x1c0
[ 1063.737972][T20990]  __vmalloc_node_range+0x37c/0x1380
[ 1063.743313][T20990]  ? netlink_insert+0x28d/0x13b0
[ 1063.748304][T20990]  ? free_vm_area+0x50/0x50
[ 1063.752852][T20990]  ? netlink_sendmsg+0x5ec/0xbd0
[ 1063.757832][T20990]  vmalloc+0x75/0x80
[ 1063.761764][T20990]  ? netlink_sendmsg+0x5ec/0xbd0
[ 1063.766747][T20990]  netlink_sendmsg+0x5ec/0xbd0
[ 1063.771568][T20990]  ? netlink_getsockopt+0x550/0x550
[ 1063.776817][T20990]  ? apparmor_socket_sendmsg+0x8a/0x330
[ 1063.782411][T20990]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1063.787737][T20990]  ? security_socket_sendmsg+0x7c/0xa0
[ 1063.793240][T20990]  ? netlink_getsockopt+0x550/0x550
[ 1063.798481][T20990]  ____sys_sendmsg+0x5ed/0x9a0
[ 1063.803297][T20990]  ? __sys_sendmsg_sock+0x30/0x30
[ 1063.808351][T20990]  ? __import_iovec+0x306/0x510
[ 1063.813258][T20990]  ? import_iovec+0x6f/0xa0
[ 1063.817810][T20990]  ___sys_sendmsg+0x2a2/0x360
[ 1063.822540][T20990]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1063.827376][T20990]  ? __lock_acquire+0x7c40/0x7c40
[ 1063.832478][T20990]  __se_sys_sendmsg+0x1c3/0x2b0
[ 1063.837383][T20990]  ? __x64_sys_sendmsg+0x80/0x80
[ 1063.842386][T20990]  ? lockdep_hardirqs_on+0x94/0x140
[ 1063.847622][T20990]  do_syscall_64+0x4c/0xa0
[ 1063.852087][T20990]  ? clear_bhb_loop+0x60/0xb0
[ 1063.856802][T20990]  ? clear_bhb_loop+0x60/0xb0
[ 1063.861521][T20990]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1063.867453][T20990] RIP: 0033:0x7fd1f999e0d9
[ 1063.871907][T20990] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1063.891556][T20990] RSP: 002b:00007fd1f7bd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1063.900010][T20990] RAX: ffffffffffffffda RBX: 00007fd1f9c26090 RCX: 00007fd1f999e0d9
[ 1063.908017][T20990] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006
[ 1063.916019][T20990] RBP: 00007fd1f7bd5090 R08: 0000000000000000 R09: 0000000000000000
[ 1063.924022][T20990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1063.932025][T20990] R13: 00007fd1f9c26128 R14: 00007fd1f9c26090 R15: 00007ffc94e6f3b8
[ 1063.940049][T20990]  </TASK>
[ 1063.952809][T20990] Mem-Info:
[ 1063.960179][T20990] active_anon:13179 inactive_anon:0 isolated_anon:0
[ 1063.960179][T20990]  active_file:23690 inactive_file:40353 isolated_file:0
[ 1063.960179][T20990]  unevictable:768 dirty:228 writeback:0
[ 1063.960179][T20990]  slab_reclaimable:22595 slab_unreclaimable:97148
[ 1063.960179][T20990]  mapped:35985 shmem:6350 pagetables:696
[ 1063.960179][T20990]  sec_pagetables:0 bounce:0
[ 1063.960179][T20990]  kernel_misc_reclaimable:0
[ 1063.960179][T20990]  free:1306000 free_pcp:8562 free_cma:0
[ 1064.020220][T20990] Node 0 active_anon:53420kB inactive_anon:0kB active_file:94760kB inactive_file:161208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:144616kB dirty:1000kB writeback:0kB shmem:24628kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10256kB pagetables:2928kB sec_pagetables:0kB all_unreclaimable? no
[ 1064.095013][T20990] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[ 1064.137524][T20990] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1064.166468][T20990] lowmem_reserve[]: 0 2527 2528 2528 2528
[ 1064.170032][T21001] team0: Device wg1 is of different type
[ 1064.173463][T20990] Node 0 DMA32 free:1310160kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:54320kB inactive_anon:0kB active_file:94760kB inactive_file:161208kB unevictable:1536kB writepending:1000kB present:3129332kB managed:2592912kB mlocked:0kB bounce:0kB free_pcp:15068kB local_pcp:7396kB free_cma:0kB
[ 1064.310726][T20990] lowmem_reserve[]: 0 0 1 1 1
[ 1064.316500][T20990] Node 0 Normal free:16kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB
[ 1064.344472][T20990] lowmem_reserve[]: 0 0 0 0 0
[ 1064.349451][T20990] Node 1 Normal free:3896696kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:20288kB local_pcp:7264kB free_cma:0kB
[ 1064.415170][T20990] lowmem_reserve[]: 0 0 0 0 0
[ 1064.420374][T20990] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 1064.443455][T20990] Node 0 DMA32: 2*4kB (E) 786*8kB (UME) 1507*16kB (UME) 1007*32kB (UM) 663*64kB (UME) 245*128kB (UME) 131*256kB (UME) 88*512kB (UME) 40*1024kB (UM) 12*2048kB (UME) 251*4096kB (M) = 1308648kB
[ 1064.553108][T20990] Node 0 Normal: 4*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB
[ 1064.577930][T20990] Node 1 Normal: 248*4kB (UME) 47*8kB (UME) 24*16kB (UE) 29*32kB (UME) 16*64kB (UME) 10*128kB (UME) 6*256kB (UME) 2*512kB (UM) 2*1024kB (UE) 2*2048kB (UE) 948*4096kB (M) = 3896696kB
[ 1064.632321][T20990] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1064.678373][T20990] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1064.749230][T20990] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1064.842636][T21014] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1064.850911][T20990] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1064.871059][T20990] 72234 total pagecache pages
[ 1064.899169][T20990] 0 pages in swap cache
[ 1064.922181][T21013] netlink: 114680 bytes leftover after parsing attributes in process `syz.4.4771'.
[ 1064.923213][T20990] Free swap  = 124996kB
[ 1064.963996][T20990] Total swap = 124996kB
[ 1064.971695][T20990] 2097051 pages RAM
[ 1064.992667][T20990] 0 pages HighMem/MovableOnly
[ 1065.003772][T20990] 415222 pages reserved
[ 1065.011939][T20990] 0 pages cma reserved
[ 1065.449127][T21020] device .*! entered promiscuous mode
[ 1065.725756][T21030] validate_nla: 9 callbacks suppressed
[ 1065.725775][T21030] netlink: 'syz.3.4776': attribute type 10 has an invalid length.
[ 1065.754707][T21032] netlink: 'syz.4.4777': attribute type 29 has an invalid length.
[ 1065.873214][T21032] netlink: 'syz.4.4777': attribute type 29 has an invalid length.
[ 1065.979012][T21032] netlink: 'syz.4.4777': attribute type 2 has an invalid length.
[ 1065.993714][T21035] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.4778'.
[ 1066.087583][T21032] netlink: 'syz.4.4777': attribute type 8 has an invalid length.
[ 1066.113625][T21032] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4777'.
[ 1066.115695][T21038] FAULT_INJECTION: forcing a failure.
[ 1066.115695][T21038] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1066.191293][T21036] netlink: 'syz.4.4777': attribute type 2 has an invalid length.
[ 1066.358992][T21036] netlink: 'syz.4.4777': attribute type 8 has an invalid length.
[ 1066.374454][T21038] CPU: 1 PID: 21038 Comm: syz.5.4779 Not tainted syzkaller #0
[ 1066.381983][T21038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1066.392065][T21038] Call Trace:
[ 1066.395366][T21038]  <TASK>
[ 1066.398303][T21038]  dump_stack_lvl+0x188/0x24e
[ 1066.403005][T21038]  ? show_regs_print_info+0x12/0x12
[ 1066.408219][T21038]  ? load_image+0x410/0x410
[ 1066.412738][T21038]  ? __lock_acquire+0x7c40/0x7c40
[ 1066.417791][T21038]  should_fail_ex+0x390/0x4c0
[ 1066.422489][T21038]  _copy_from_user+0x2c/0x170
[ 1066.427176][T21038]  __sys_bpf+0x2ea/0x780
[ 1066.431432][T21038]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1066.436832][T21038]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1066.443007][T21038]  __x64_sys_bpf+0x78/0x90
[ 1066.447432][T21038]  do_syscall_64+0x4c/0xa0
[ 1066.451859][T21038]  ? clear_bhb_loop+0x60/0xb0
[ 1066.456547][T21038]  ? clear_bhb_loop+0x60/0xb0
[ 1066.461235][T21038]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1066.467136][T21038] RIP: 0033:0x7f4e4a19e0d9
[ 1066.471556][T21038] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1066.491166][T21038] RSP: 002b:00007f4e4b0dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1066.499586][T21038] RAX: ffffffffffffffda RBX: 00007f4e4a425fa0 RCX: 00007f4e4a19e0d9
[ 1066.507563][T21038] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005
[ 1066.515540][T21038] RBP: 00007f4e4b0dc090 R08: 0000000000000000 R09: 0000000000000000
[ 1066.523519][T21038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1066.531493][T21038] R13: 00007f4e4a426038 R14: 00007f4e4a425fa0 R15: 00007ffcc2158038
[ 1066.539489][T21038]  </TASK>
[ 1066.568865][T21036] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4777'.
[ 1066.608617][T21045] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4780'.
[ 1066.640166][T21045] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1067.167354][T21048] netlink: 'syz.4.4782': attribute type 21 has an invalid length.
[ 1067.200708][T21048] netlink: 'syz.4.4782': attribute type 7 has an invalid length.
[ 1067.587585][T21063] netlink: 'syz.5.4785': attribute type 11 has an invalid length.
[ 1067.604105][T21063] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.4785'.
[ 1067.683215][T21063] netlink: 'syz.5.4785': attribute type 10 has an invalid length.
[ 1068.117168][T21063] bond0: (slave wlan1): Enslaving as an active interface with an up link
[ 1068.330668][T21071] can: request_module (can-proto-0) failed.
[ 1068.365746][T21062] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1068.466812][T21079] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.4788'.
[ 1068.540373][T21078] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.4788'.
[ 1069.873311][T21094] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4792'.
[ 1070.223972][T21100] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.4793'.
[ 1070.254966][T21095] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4792'.
[ 1070.509193][T21103] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4794'.
[ 1070.528318][T21103] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1071.503763][T21133] sctp: [Deprecated]: syz.4.4801 (pid 21133) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1071.503763][T21133] Use struct sctp_sack_info instead
[ 1072.741517][T21148] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4807'.
[ 1072.873837][T21151] validate_nla: 8 callbacks suppressed
[ 1072.873859][T21151] netlink: 'syz.5.4808': attribute type 29 has an invalid length.
[ 1073.344374][T21151] netlink: 'syz.5.4808': attribute type 29 has an invalid length.
[ 1073.405728][T21154] netlink: 'syz.5.4808': attribute type 2 has an invalid length.
[ 1073.451890][T21154] netlink: 'syz.5.4808': attribute type 8 has an invalid length.
[ 1073.520573][T21154] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4808'.
[ 1073.561222][T21155] netlink: 'syz.5.4808': attribute type 2 has an invalid length.
[ 1073.566498][T21157] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.4809'.
[ 1073.580479][T21155] netlink: 'syz.5.4808': attribute type 8 has an invalid length.
[ 1073.580505][T21155] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4808'.
[ 1074.159913][T21159] netlink: 'syz.3.4810': attribute type 21 has an invalid length.
[ 1074.180840][T21159] netlink: 'syz.3.4810': attribute type 7 has an invalid length.
[ 1074.228469][T21165] netlink: 184 bytes leftover after parsing attributes in process `syz.1.4812'.
[ 1074.291900][T21165] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4812'.
[ 1074.563741][T21165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1074.633159][T21165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1074.684363][T21165] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface
[ 1074.720070][T21165] bond0 (unregistering): Released all slaves
[ 1076.724658][T21204] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.4822'.
[ 1076.889587][T21211] netlink: 'syz.2.4825': attribute type 29 has an invalid length.
[ 1079.276850][T21178] netlink: 'syz.1.4815': attribute type 10 has an invalid length.
[ 1079.307591][T21209] netlink: 'syz.4.4824': attribute type 21 has an invalid length.
[ 1079.316850][T21209] netlink: 'syz.4.4824': attribute type 7 has an invalid length.
[ 1079.325746][T21211] netlink: 'syz.2.4825': attribute type 29 has an invalid length.
[ 1079.334088][T21213] netlink: 'syz.2.4825': attribute type 2 has an invalid length.
[ 1079.343417][T21213] netlink: 'syz.2.4825': attribute type 8 has an invalid length.
[ 1079.351300][T21213] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4825'.
[ 1079.383361][T21214] netlink: 'syz.2.4825': attribute type 2 has an invalid length.
[ 1079.391150][T21214] netlink: 'syz.2.4825': attribute type 8 has an invalid length.
[ 1079.417273][T21214] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4825'.
[ 1079.592786][T21225] FAULT_INJECTION: forcing a failure.
[ 1079.592786][T21225] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1079.651659][T21230] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4829'.
[ 1079.673202][T21225] CPU: 0 PID: 21225 Comm: syz.3.4826 Not tainted syzkaller #0
[ 1079.680733][T21225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1079.690819][T21225] Call Trace:
[ 1079.694132][T21225]  <TASK>
[ 1079.697091][T21225]  dump_stack_lvl+0x188/0x24e
[ 1079.701822][T21225]  ? show_regs_print_info+0x12/0x12
[ 1079.707077][T21225]  ? load_image+0x410/0x410
[ 1079.711627][T21225]  ? __lock_acquire+0x7c40/0x7c40
[ 1079.716698][T21225]  should_fail_ex+0x390/0x4c0
[ 1079.721426][T21225]  _copy_from_iter+0x1c0/0x1130
[ 1079.726333][T21225]  ? copyout_mc+0x110/0x110
[ 1079.730869][T21225]  ? __virt_addr_valid+0x188/0x540
[ 1079.735999][T21225]  ? __virt_addr_valid+0x188/0x540
[ 1079.741120][T21225]  ? __virt_addr_valid+0x467/0x540
[ 1079.746249][T21225]  ? __phys_addr_symbol+0x2b/0x70
[ 1079.751283][T21225]  ? __check_object_size+0x4f6/0xa70
[ 1079.756578][T21225]  kernfs_fop_write_iter+0x19a/0x520
[ 1079.761876][T21225]  vfs_write+0x482/0x9a0
[ 1079.766141][T21225]  ? file_end_write+0x250/0x250
[ 1079.771007][T21225]  ? __fget_files+0x3fc/0x460
[ 1079.775705][T21225]  ? __fdget_pos+0x2ae/0x360
[ 1079.780307][T21225]  ? ksys_write+0x70/0x260
[ 1079.784737][T21225]  ksys_write+0x14d/0x260
[ 1079.789083][T21225]  ? __ia32_sys_read+0x80/0x80
[ 1079.793870][T21225]  ? syscall_enter_from_user_mode+0x2a/0x80
[ 1079.799773][T21225]  do_syscall_64+0x4c/0xa0
[ 1079.804202][T21225]  ? clear_bhb_loop+0x60/0xb0
[ 1079.808886][T21225]  ? clear_bhb_loop+0x60/0xb0
[ 1079.813576][T21225]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1079.819480][T21225] RIP: 0033:0x7f25ae79e0d9
[ 1079.823901][T21225] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1079.843516][T21225] RSP: 002b:00007f25af637028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1079.851938][T21225] RAX: ffffffffffffffda RBX: 00007f25aea25fa0 RCX: 00007f25ae79e0d9
[ 1079.859914][T21225] RDX: 000000000000000a RSI: 0000200000001d80 RDI: 0000000000000006
[ 1079.867892][T21225] RBP: 00007f25af637090 R08: 0000000000000000 R09: 0000000000000000
[ 1079.875867][T21225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1079.883850][T21225] R13: 00007f25aea26038 R14: 00007f25aea25fa0 R15: 00007ffca6c8d848
[ 1079.891846][T21225]  </TASK>
[ 1079.930386][T21229] netlink: 128 bytes leftover after parsing attributes in process `syz.5.4828'.
[ 1079.993311][T21229] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1080.984504][T21256] netlink: 'syz.2.4837': attribute type 21 has an invalid length.
[ 1080.991972][T21257] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.4835'.
[ 1080.992373][T21256] netlink: 'syz.2.4837': attribute type 7 has an invalid length.
[ 1081.429994][T21268] FAULT_INJECTION: forcing a failure.
[ 1081.429994][T21268] name failslab, interval 1, probability 0, space 0, times 0
[ 1081.475499][T21268] CPU: 1 PID: 21268 Comm: syz.4.4841 Not tainted syzkaller #0
[ 1081.483037][T21268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1081.493134][T21268] Call Trace:
[ 1081.496448][T21268]  <TASK>
[ 1081.499417][T21268]  dump_stack_lvl+0x188/0x24e
[ 1081.504152][T21268]  ? show_regs_print_info+0x12/0x12
[ 1081.509397][T21268]  ? load_image+0x410/0x410
[ 1081.513956][T21268]  ? __might_sleep+0xd0/0xd0
[ 1081.516327][T21266] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4840'.
[ 1081.518570][T21268]  ? __lock_acquire+0x7c40/0x7c40
[ 1081.518603][T21268]  ? aa_file_perm+0x3ea/0xf00
[ 1081.518646][T21268]  should_fail_ex+0x390/0x4c0
[ 1081.518688][T21268]  should_failslab+0x5/0x20
[ 1081.518708][T21268]  slab_pre_alloc_hook+0x59/0x300
[ 1081.518737][T21268]  ? kernfs_fop_write_iter+0x154/0x520
[ 1081.518770][T21268]  __kmem_cache_alloc_node+0x4f/0x270
[ 1081.518805][T21268]  ? kernfs_fop_write_iter+0x154/0x520
[ 1081.518837][T21268]  __kmalloc+0xa3/0x240
[ 1081.518876][T21268]  kernfs_fop_write_iter+0x154/0x520
[ 1081.518916][T21268]  vfs_write+0x482/0x9a0
[ 1081.518961][T21268]  ? file_end_write+0x250/0x250
[ 1081.519002][T21268]  ? __fget_files+0x3fc/0x460
[ 1081.519053][T21268]  ? __fdget_pos+0x2ae/0x360
[ 1081.519078][T21268]  ? ksys_write+0x70/0x260
[ 1081.519114][T21268]  ksys_write+0x14d/0x260
[ 1081.519152][T21268]  ? __ia32_sys_read+0x80/0x80
[ 1081.519191][T21268]  ? lockdep_hardirqs_on+0x94/0x140
[ 1081.519226][T21268]  do_syscall_64+0x4c/0xa0
[ 1081.519251][T21268]  ? clear_bhb_loop+0x60/0xb0
[ 1081.519277][T21268]  ? clear_bhb_loop+0x60/0xb0
[ 1081.519308][T21268]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1081.519333][T21268] RIP: 0033:0x7f440d99e0d9
[ 1081.519357][T21268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1081.519376][T21268] RSP: 002b:00007f440e7f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1081.519404][T21268] RAX: ffffffffffffffda RBX: 00007f440dc25fa0 RCX: 00007f440d99e0d9
[ 1081.519421][T21268] RDX: 000000000000000a RSI: 0000200000000140 RDI: 0000000000000005
[ 1081.519437][T21268] RBP: 00007f440e7f0090 R08: 0000000000000000 R09: 0000000000000000
[ 1081.519453][T21268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1081.519468][T21268] R13: 00007f440dc26038 R14: 00007f440dc25fa0 R15: 00007ffe25f5ae08
[ 1081.519521][T21268]  </TASK>
[ 1081.595554][T21271] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4843'.
[ 1081.801147][T21278] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4840'.
[ 1082.025963][T14339] Bluetooth: hci0: ISO packet for unknown connection handle 2622
[ 1082.035947][T21283] netlink: 128 bytes leftover after parsing attributes in process `syz.5.4846'.
[ 1082.105277][T21283] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1082.659473][T21300] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.4852'.
[ 1083.569097][T21318] FAULT_INJECTION: forcing a failure.
[ 1083.569097][T21318] name failslab, interval 1, probability 0, space 0, times 0
[ 1083.602358][T21318] CPU: 1 PID: 21318 Comm: syz.4.4857 Not tainted syzkaller #0
[ 1083.609892][T21318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1083.619971][T21318] Call Trace:
[ 1083.623265][T21318]  <TASK>
[ 1083.626230][T21318]  dump_stack_lvl+0x188/0x24e
[ 1083.630962][T21318]  ? show_regs_print_info+0x12/0x12
[ 1083.636190][T21318]  ? load_image+0x410/0x410
[ 1083.640702][T21318]  ? __might_sleep+0xd0/0xd0
[ 1083.645315][T21318]  ? __lock_acquire+0x7c40/0x7c40
[ 1083.650380][T21318]  should_fail_ex+0x390/0x4c0
[ 1083.655096][T21318]  should_failslab+0x5/0x20
[ 1083.659625][T21318]  slab_pre_alloc_hook+0x59/0x300
[ 1083.664684][T21318]  ? kvmalloc_node+0x6c/0x180
[ 1083.669386][T21318]  __kmem_cache_alloc_node+0x4f/0x270
[ 1083.674779][T21318]  ? kvmalloc_node+0x6c/0x180
[ 1083.679501][T21318]  __kmalloc_node+0xa2/0x240
[ 1083.684138][T21318]  kvmalloc_node+0x6c/0x180
[ 1083.688686][T21318]  bpf_test_run_xdp_live+0x1da/0x1a90
[ 1083.694102][T21318]  ? 0xffffffffa0004440
[ 1083.698286][T21318]  ? text_poke_copy+0x7b/0x90
[ 1083.703013][T21318]  ? 0xffffffffa0004440
[ 1083.707208][T21318]  ? bpf_dispatcher_change_prog+0xc90/0xf10
[ 1083.713151][T21318]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1083.719352][T21318]  ? xdp_convert_md_to_buff+0x330/0x330
[ 1083.724972][T21318]  ? trace_raw_output_bpf_test_finish+0xd0/0xd0
[ 1083.731259][T21318]  ? xdp_convert_md_to_buff+0x5b/0x330
[ 1083.736761][T21318]  bpf_prog_test_run_xdp+0x757/0xf80
[ 1083.742091][T21318]  ? __lock_acquire+0x7c40/0x7c40
[ 1083.747172][T21318]  ? dev_put+0x80/0x80
[ 1083.751298][T21318]  ? dev_put+0x80/0x80
[ 1083.755402][T21318]  bpf_prog_test_run+0x31c/0x390
[ 1083.760370][T21318]  __sys_bpf+0x62b/0x780
[ 1083.764616][T21318]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1083.769996][T21318]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1083.776154][T21318]  __x64_sys_bpf+0x78/0x90
[ 1083.780571][T21318]  do_syscall_64+0x4c/0xa0
[ 1083.784985][T21318]  ? clear_bhb_loop+0x60/0xb0
[ 1083.789661][T21318]  ? clear_bhb_loop+0x60/0xb0
[ 1083.794336][T21318]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1083.800235][T21318] RIP: 0033:0x7f440d99e0d9
[ 1083.804689][T21318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1083.824334][T21318] RSP: 002b:00007f440e7f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1083.832789][T21318] RAX: ffffffffffffffda RBX: 00007f440dc25fa0 RCX: 00007f440d99e0d9
[ 1083.840794][T21318] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[ 1083.848788][T21318] RBP: 00007f440e7f0090 R08: 0000000000000000 R09: 0000000000000000
[ 1083.856775][T21318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1083.864775][T21318] R13: 00007f440dc26038 R14: 00007f440dc25fa0 R15: 00007ffe25f5ae08
[ 1083.872764][T21318]  </TASK>
[ 1084.301683][T21325] validate_nla: 11 callbacks suppressed
[ 1084.301702][T21325] netlink: 'syz.2.4860': attribute type 29 has an invalid length.
[ 1084.318236][T21327] netlink: 'syz.2.4860': attribute type 2 has an invalid length.
[ 1084.335608][T21327] netlink: 'syz.2.4860': attribute type 8 has an invalid length.
[ 1084.348386][T21329] netlink: 'syz.2.4860': attribute type 2 has an invalid length.
[ 1084.356217][T21329] netlink: 'syz.2.4860': attribute type 8 has an invalid length.
[ 1084.366025][T21329] __nla_validate_parse: 4 callbacks suppressed
[ 1084.366042][T21329] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4860'.
[ 1084.382004][T21333] netlink: 14719 bytes leftover after parsing attributes in process `syz.4.4861'.
[ 1084.434160][T21338] netlink: 1 bytes leftover after parsing attributes in process `syz.4.4861'.
[ 1084.473734][T21336] netlink: 128 bytes leftover after parsing attributes in process `syz.5.4862'.
[ 1084.493214][T21336] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1084.657284][T21346] netlink: 'syz.3.4866': attribute type 21 has an invalid length.
[ 1084.665406][T21346] netlink: 'syz.3.4866': attribute type 7 has an invalid length.
[ 1084.775418][T21347] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.4864'.
[ 1085.715265][T21366] netlink: 'syz.4.4871': attribute type 10 has an invalid length.
[ 1086.444681][T21366] bridge0: port 3(batadv0) entered disabled state
[ 1086.451919][T21366] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1086.459330][T21366] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1086.694007][T21377] netlink: 'syz.4.4874': attribute type 29 has an invalid length.
[ 1086.772166][T21377] netlink: 'syz.4.4874': attribute type 29 has an invalid length.
[ 1086.777231][T21375] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4873'.
[ 1087.164474][T21375] team0: Port device macvlan0 added
[ 1087.212421][T21377] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4874'.
[ 1087.276310][T21379] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4874'.
[ 1087.288191][T21388] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4878'.
[ 1087.399697][T21386] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4877'.
[ 1087.431310][T21386] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1090.043751][T21402] validate_nla: 6 callbacks suppressed
[ 1090.043770][T21402] netlink: 'syz.5.4880': attribute type 21 has an invalid length.
[ 1090.047516][T21399] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.4881'.
[ 1090.124529][T21402] netlink: 'syz.5.4880': attribute type 7 has an invalid length.
[ 1091.454361][T21414] netlink: 'syz.1.4885': attribute type 1 has an invalid length.
[ 1091.615972][T21417] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.4886'.
[ 1091.643198][T21417] netlink: zone id is out of range
[ 1091.648420][T21417] netlink: zone id is out of range
[ 1091.654868][T21417] netlink: zone id is out of range
[ 1091.719440][T21417] netlink: del zone limit has 4 unknown bytes
[ 1092.068528][T21423] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4888'.
[ 1092.102068][T21428] netlink: 'syz.5.4889': attribute type 29 has an invalid length.
[ 1092.139363][T21428] netlink: 'syz.5.4889': attribute type 29 has an invalid length.
[ 1092.707653][T21428] netlink: 'syz.5.4889': attribute type 2 has an invalid length.
[ 1092.735065][T21428] netlink: 'syz.5.4889': attribute type 8 has an invalid length.
[ 1092.755247][T21428] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4889'.
[ 1092.936107][T21432] netlink: 'syz.5.4889': attribute type 2 has an invalid length.
[ 1092.944564][T21432] netlink: 'syz.5.4889': attribute type 8 has an invalid length.
[ 1092.952401][T21432] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4889'.
[ 1092.983072][T21449] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4894'.
[ 1093.127358][T21454] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.4896'.
[ 1093.221786][T21461] netlink: 'syz.4.4899': attribute type 21 has an invalid length.
[ 1093.891900][T21460] device syzkaller0 entered promiscuous mode
[ 1095.378379][T21490] validate_nla: 1 callbacks suppressed
[ 1095.378397][T21490] netlink: 'syz.5.4908': attribute type 2 has an invalid length.
[ 1095.877596][T21498] netlink: 'syz.1.4909': attribute type 29 has an invalid length.
[ 1097.459891][T21490] device 0 entered promiscuous mode
[ 1097.470128][T21498] netlink: 'syz.1.4909': attribute type 29 has an invalid length.
[ 1097.485407][T21500] netlink: 'syz.1.4909': attribute type 2 has an invalid length.
[ 1097.508634][T21500] netlink: 'syz.1.4909': attribute type 8 has an invalid length.
[ 1097.531715][T21500] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4909'.
[ 1097.548837][T21499] netlink: 'syz.1.4909': attribute type 2 has an invalid length.
[ 1097.589218][T21499] netlink: 'syz.1.4909': attribute type 8 has an invalid length.
[ 1097.611844][T21499] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4909'.
[ 1097.696691][T21504] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.4911'.
[ 1097.796715][T21511] netlink: 'syz.4.4912': attribute type 21 has an invalid length.
[ 1097.844339][T21511] netlink: 'syz.4.4912': attribute type 7 has an invalid length.
[ 1099.163707][T21530] sctp: [Deprecated]: syz.1.4917 (pid 21530) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1099.163707][T21530] Use struct sctp_sack_info instead
[ 1099.613534][T21537] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4919'.
[ 1099.752534][T21541] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4922'.
[ 1099.772162][T21541] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1100.111338][T21558] netlink: 'syz.4.4925': attribute type 29 has an invalid length.
[ 1100.334922][T21561] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4925'.
[ 1100.344596][T21563] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4925'.
[ 1100.650074][T21569] validate_nla: 5 callbacks suppressed
[ 1100.650093][T21569] netlink: 'syz.3.4927': attribute type 21 has an invalid length.
[ 1100.652823][T21571] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.4928'.
[ 1100.670322][T21569] netlink: 'syz.3.4927': attribute type 7 has an invalid length.
[ 1100.704136][T21573] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.4929'.
[ 1100.880105][T21577] netlink: 'syz.4.4930': attribute type 21 has an invalid length.
[ 1100.915432][T21577] netlink: 'syz.4.4930': attribute type 7 has an invalid length.
[ 1101.194015][T21582] netlink: 'syz.1.4942': attribute type 21 has an invalid length.
[ 1101.212203][T21582] netlink: 'syz.1.4942': attribute type 7 has an invalid length.
[ 1103.388638][T21595] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.4934'.
[ 1103.450790][T21597] netlink: 'syz.2.4945': attribute type 29 has an invalid length.
[ 1103.474277][T21597] netlink: 'syz.2.4945': attribute type 29 has an invalid length.
[ 1103.673418][T21601] netlink: 10 bytes leftover after parsing attributes in process `syz.5.4935'.
[ 1103.727843][T21597] netlink: 'syz.2.4945': attribute type 2 has an invalid length.
[ 1103.750626][T21597] netlink: 'syz.2.4945': attribute type 8 has an invalid length.
[ 1103.819639][T21597] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4945'.
[ 1103.938829][T21599] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4945'.
[ 1103.964178][T21603] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4936'.
[ 1103.983333][T21603] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1104.390111][T21617] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4939'.
[ 1104.443136][T21618] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4939'.
[ 1104.691966][T21628] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4944'.
[ 1104.776474][T21631] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4946'.
[ 1105.447149][T21643] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4950'.
[ 1106.250144][T21653] validate_nla: 10 callbacks suppressed
[ 1106.250163][T21653] netlink: 'syz.5.4952': attribute type 29 has an invalid length.
[ 1106.318610][T21653] netlink: 'syz.5.4952': attribute type 29 has an invalid length.
[ 1106.465824][T21653] netlink: 'syz.5.4952': attribute type 2 has an invalid length.
[ 1106.498000][T21653] netlink: 'syz.5.4952': attribute type 8 has an invalid length.
[ 1106.571290][T21660] netlink: 'syz.5.4952': attribute type 2 has an invalid length.
[ 1106.623245][T21660] netlink: 'syz.5.4952': attribute type 8 has an invalid length.
[ 1106.639494][T21666] netlink: 'syz.3.4957': attribute type 29 has an invalid length.
[ 1106.698044][T21666] netlink: 'syz.3.4957': attribute type 29 has an invalid length.
[ 1106.943658][T21666] netlink: 'syz.3.4957': attribute type 2 has an invalid length.
[ 1106.957127][T21666] netlink: 'syz.3.4957': attribute type 8 has an invalid length.
[ 1108.463071][T21679] __nla_validate_parse: 7 callbacks suppressed
[ 1108.463095][T21679] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4959'.
[ 1109.222072][T21698] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4966'.
[ 1109.300461][T21695] netlink: 128 bytes leftover after parsing attributes in process `syz.5.4966'.
[ 1109.335446][T21695] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1109.749278][T21710] device .*! entered promiscuous mode
[ 1110.243378][T21722] netlink: 6 bytes leftover after parsing attributes in process `syz.4.4970'.
[ 1110.275250][T21722] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[ 1110.365478][T21722] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1110.442610][T21726] mac80211_hwsim hwsim37 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1110.465411][T21720] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4972'.
[ 1110.506264][T21731] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4975'.
[ 1110.616809][T21729] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4974'.
[ 1110.682132][T21729] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4974'.
[ 1110.734043][T21734] netlink: 10 bytes leftover after parsing attributes in process `syz.4.4976'.
[ 1110.768784][T21736] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4986'.
[ 1112.094598][T21755] validate_nla: 14 callbacks suppressed
[ 1112.094620][T21755] netlink: 'syz.1.4981': attribute type 21 has an invalid length.
[ 1112.127106][T21755] netlink: 'syz.1.4981': attribute type 7 has an invalid length.
[ 1112.488433][T21765] netlink: 'syz.5.4987': attribute type 2 has an invalid length.
[ 1112.552693][T21765] device .*! entered promiscuous mode
[ 1112.607430][T21769] netlink: 'syz.1.4989': attribute type 29 has an invalid length.
[ 1112.651859][T21769] netlink: 'syz.1.4989': attribute type 29 has an invalid length.
[ 1112.684245][T21765] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[ 1112.732157][T21765] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1112.748271][T21769] netlink: 'syz.1.4989': attribute type 2 has an invalid length.
[ 1112.759505][T21769] netlink: 'syz.1.4989': attribute type 8 has an invalid length.
[ 1112.845257][T21770] netlink: 'syz.1.4989': attribute type 2 has an invalid length.
[ 1112.858332][T21770] netlink: 'syz.1.4989': attribute type 8 has an invalid length.
[ 1112.975423][T10711] wlan1: Trigger new scan to find an IBSS to join
[ 1113.179519][T21779] netlink: 'syz.3.4993': attribute type 39 has an invalid length.
[ 1113.957872][T21779] device hsr_slave_1 left promiscuous mode
[ 1113.994420][T21785] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1114.003914][T21778] __nla_validate_parse: 6 callbacks suppressed
[ 1114.003929][T21778] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4991'.
[ 1115.043484][T21795] netlink: 128 bytes leftover after parsing attributes in process `syz.5.4996'.
[ 1115.059356][T21795] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1115.638178][T21808] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4999'.
[ 1115.697227][T21811] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4999'.
[ 1116.015351][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[ 1116.021724][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[ 1116.028411][ T5515] wlan1: Trigger new scan to find an IBSS to join
[ 1116.421748][T21824] netlink: 176 bytes leftover after parsing attributes in process `syz.4.5006'.
[ 1116.597930][T21827] sctp: [Deprecated]: syz.5.5005 (pid 21827) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1116.597930][T21827] Use struct sctp_sack_info instead
[ 1116.625799][T21826] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5003'.
[ 1116.630343][T21826] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5003'.
[ 1116.715609][T21830] netlink: 176 bytes leftover after parsing attributes in process `syz.3.5017'.
[ 1116.818555][T21835] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.5008'.
[ 1118.031266][T21832] device hsr_slave_1 left promiscuous mode
[ 1118.289910][T21847] validate_nla: 15 callbacks suppressed
[ 1118.289948][T21847] netlink: 'syz.5.5012': attribute type 3 has an invalid length.
[ 1118.310958][T21847] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.5012'.
[ 1118.602283][T21856] netlink: 'syz.2.5016': attribute type 29 has an invalid length.
[ 1118.620602][T21856] netlink: 'syz.2.5016': attribute type 29 has an invalid length.
[ 1118.753268][T21860] FAULT_INJECTION: forcing a failure.
[ 1118.753268][T21860] name failslab, interval 1, probability 0, space 0, times 0
[ 1118.784736][T21860] CPU: 1 PID: 21860 Comm: syz.5.5026 Not tainted syzkaller #0
[ 1118.792277][T21860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1118.802372][T21860] Call Trace:
[ 1118.805691][T21860]  <TASK>
[ 1118.808661][T21860]  dump_stack_lvl+0x188/0x24e
[ 1118.813388][T21860]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1118.814252][T21856] netlink: 'syz.2.5016': attribute type 2 has an invalid length.
[ 1118.819579][T21860]  ? show_regs_print_info+0x12/0x12
[ 1118.819640][T21860]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1118.819706][T21860]  should_fail_ex+0x390/0x4c0
[ 1118.819750][T21860]  should_failslab+0x5/0x20
[ 1118.819772][T21860]  slab_pre_alloc_hook+0x59/0x300
[ 1118.819809][T21860]  kmem_cache_alloc+0x56/0x2f0
[ 1118.819830][T21860]  ? skb_clone+0x1e7/0x370
[ 1118.819875][T21860]  skb_clone+0x1e7/0x370
[ 1118.819915][T21860]  __netlink_deliver_tap+0x3e4/0x7e0
[ 1118.819971][T21860]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1118.820009][T21860]  netlink_deliver_tap+0x19c/0x1b0
[ 1118.820042][T21860]  netlink_dump+0x80f/0xcd0
[ 1118.820109][T21860]  ? netlink_lookup+0x200/0x200
[ 1118.820136][T21860]  ? __netlink_lookup+0x2d/0x730
[ 1118.820176][T21860]  ? netlink_lookup+0x30/0x200
[ 1118.820204][T21860]  ? netlink_lookup+0x30/0x200
[ 1118.820250][T21860]  __netlink_dump_start+0x52c/0x6f0
[ 1118.820301][T21860]  unix_diag_handler_dump+0x1a1/0x8f0
[ 1118.828457][T21856] netlink: 'syz.2.5016': attribute type 8 has an invalid length.
[ 1118.833301][T21860]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1118.833336][T21860]  ? __unix_recvmsg+0xb0/0xb0
[ 1118.833367][T21860]  ? unix_diag_handler_dump+0x8f0/0x8f0
[ 1118.833417][T21860]  ? sock_diag_rcv_msg+0x460/0x5e0
[ 1118.833447][T21860]  ? __unix_recvmsg+0xb0/0xb0
[ 1118.833475][T21860]  sock_diag_rcv_msg+0x3c7/0x5e0
[ 1118.833508][T21860]  netlink_rcv_skb+0x1ef/0x440
[ 1118.833542][T21860]  ? sock_diag_bind+0xa0/0xa0
[ 1118.833574][T21860]  ? netlink_ack+0x1160/0x1160
[ 1118.833630][T21860]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1118.833670][T21860]  sock_diag_rcv+0x26/0x40
[ 1118.833692][T21860]  netlink_unicast+0x7ad/0x920
[ 1118.833750][T21860]  netlink_sendmsg+0x8ad/0xbd0
[ 1118.833803][T21860]  ? netlink_getsockopt+0x550/0x550
[ 1118.833840][T21860]  ? apparmor_socket_sendmsg+0x8a/0x330
[ 1118.833877][T21860]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1118.833900][T21860]  ? security_socket_sendmsg+0x7c/0xa0
[ 1118.833926][T21860]  ? netlink_getsockopt+0x550/0x550
[ 1118.833962][T21860]  ____sys_sendmsg+0x5ed/0x9a0
[ 1118.834009][T21860]  ? __import_iovec+0x2d5/0x510
[ 1118.834040][T21860]  ? __sys_sendmsg_sock+0x30/0x30
[ 1118.834074][T21860]  ? __import_iovec+0x306/0x510
[ 1118.834125][T21860]  ? import_iovec+0x6f/0xa0
[ 1118.834166][T21860]  ___sys_sendmsg+0x2a2/0x360
[ 1118.834211][T21860]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1118.834293][T21860]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1118.834385][T21860]  __se_sys_sendmsg+0x1c3/0x2b0
[ 1118.834414][T21860]  ? perf_trace_preemptirq_template+0x268/0x320
[ 1118.834448][T21860]  ? __x64_sys_sendmsg+0x80/0x80
[ 1118.834520][T21860]  ? lockdep_hardirqs_on+0x94/0x140
[ 1118.834552][T21860]  do_syscall_64+0x4c/0xa0
[ 1118.834579][T21860]  ? clear_bhb_loop+0x60/0xb0
[ 1118.834603][T21860]  ? clear_bhb_loop+0x60/0xb0
[ 1118.834636][T21860]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1118.834661][T21860] RIP: 0033:0x7f4e4a19e0d9
[ 1118.834685][T21860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1118.834702][T21860] RSP: 002b:00007f4e4b0dc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1118.834730][T21860] RAX: ffffffffffffffda RBX: 00007f4e4a425fa0 RCX: 00007f4e4a19e0d9
[ 1118.834748][T21860] RDX: 0000000000000000 RSI: 00002000000039c0 RDI: 000000000000000b
[ 1118.834764][T21860] RBP: 00007f4e4b0dc090 R08: 0000000000000000 R09: 0000000000000000
[ 1118.834778][T21860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1118.834793][T21860] R13: 00007f4e4a426038 R14: 00007f4e4a425fa0 R15: 00007ffcc2158038
[ 1118.834847][T21860]  </TASK>
[ 1119.199398][T21856] __nla_validate_parse: 1 callbacks suppressed
[ 1119.199463][T21856] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5016'.
[ 1119.220115][T10711] wlan1: Trigger new scan to find an IBSS to join
[ 1119.261614][T21861] netlink: 'syz.2.5016': attribute type 2 has an invalid length.
[ 1119.270092][T21861] netlink: 'syz.2.5016': attribute type 8 has an invalid length.
[ 1119.278241][T21861] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5016'.
[ 1119.424846][T21869] FAULT_INJECTION: forcing a failure.
[ 1119.424846][T21869] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1119.548874][T21869] CPU: 0 PID: 21869 Comm: syz.3.5019 Not tainted syzkaller #0
[ 1119.556436][T21869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1119.566527][T21869] Call Trace:
[ 1119.569822][T21869]  <TASK>
[ 1119.572778][T21869]  dump_stack_lvl+0x188/0x24e
[ 1119.577485][T21869]  ? show_regs_print_info+0x12/0x12
[ 1119.582707][T21869]  ? load_image+0x410/0x410
[ 1119.587248][T21869]  ? __lock_acquire+0x7c40/0x7c40
[ 1119.592302][T21869]  should_fail_ex+0x390/0x4c0
[ 1119.597009][T21869]  _copy_from_user+0x2c/0x170
[ 1119.601710][T21869]  kstrtouint_from_user+0xda/0x170
[ 1119.606846][T21869]  ? kstrtol_from_user+0x190/0x190
[ 1119.612004][T21869]  proc_fail_nth_write+0x8b/0x200
[ 1119.617045][T21869]  ? proc_fail_nth_read+0x220/0x220
[ 1119.622260][T21869]  ? common_file_perm+0x171/0x1c0
[ 1119.627312][T21869]  ? proc_fail_nth_read+0x220/0x220
[ 1119.632528][T21869]  vfs_write+0x2dc/0x9a0
[ 1119.636803][T21869]  ? file_end_write+0x250/0x250
[ 1119.641674][T21869]  ? __fget_files+0x28/0x460
[ 1119.646285][T21869]  ? __fget_files+0x3fc/0x460
[ 1119.650994][T21869]  ? __fdget_pos+0x2ae/0x360
[ 1119.655603][T21869]  ? ksys_write+0x70/0x260
[ 1119.660046][T21869]  ksys_write+0x14d/0x260
[ 1119.664404][T21869]  ? __ia32_sys_read+0x80/0x80
[ 1119.669281][T21869]  ? lockdep_hardirqs_on+0x94/0x140
[ 1119.674516][T21869]  do_syscall_64+0x4c/0xa0
[ 1119.678970][T21869]  ? clear_bhb_loop+0x60/0xb0
[ 1119.683665][T21869]  ? clear_bhb_loop+0x60/0xb0
[ 1119.688368][T21869]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1119.694294][T21869] RIP: 0033:0x7f25ae75e90e
[ 1119.698819][T21869] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1119.718448][T21869] RSP: 002b:00007f25af636fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1119.726884][T21869] RAX: ffffffffffffffda RBX: 00007f25af6376c0 RCX: 00007f25ae75e90e
[ 1119.734870][T21869] RDX: 0000000000000001 RSI: 00007f25af6370a0 RDI: 0000000000000005
[ 1119.742853][T21869] RBP: 00007f25af637090 R08: 0000000000000000 R09: 0000000000000000
[ 1119.750838][T21869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1119.758824][T21869] R13: 00007f25aea26038 R14: 00007f25aea25fa0 R15: 00007ffca6c8d848
[ 1119.766835][T21869]  </TASK>
[ 1119.792723][T21874] netlink: 'syz.2.5020': attribute type 11 has an invalid length.
[ 1119.837677][T21874] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.5020'.
[ 1119.909688][T21874] netlink: 'syz.2.5020': attribute type 10 has an invalid length.
[ 1119.951726][T21874] bond0: (slave wlan1): Enslaving as an active interface with an up link
[ 1120.180588][T21887] netlink: 'syz.4.5023': attribute type 16 has an invalid length.
[ 1120.256283][T21889] netlink: 'syz.4.5023': attribute type 10 has an invalid length.
[ 1120.365089][T21891] sctp: [Deprecated]: syz.3.5022 (pid 21891) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1120.365089][T21891] Use struct sctp_sack_info instead
[ 1120.367876][T13577] wlan1: Creating new IBSS network, BSSID c6:48:b2:86:c2:16
[ 1120.382756][T21872] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1120.398866][T21887] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5023'.
[ 1120.581452][T21889] device macvlan0 entered promiscuous mode
[ 1120.606804][T21889] team0: Port device macvlan0 added
[ 1120.646858][T21895] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5024'.
[ 1120.676530][T21895] netlink: 128 bytes leftover after parsing attributes in process `syz.5.5024'.
[ 1120.701301][T21895] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1122.032833][T13577] wlan1: Trigger new scan to find an IBSS to join
[ 1122.366615][T21917] netlink: 152 bytes leftover after parsing attributes in process `syz.5.5043'.
[ 1122.588222][T21921] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5033'.
[ 1122.821806][T21921] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5033'.
[ 1123.096479][T21925] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5046'.
[ 1123.592532][T21926] device syzkaller0 entered promiscuous mode
[ 1124.313593][T21964] validate_nla: 12 callbacks suppressed
[ 1124.313612][T21964] netlink: 'syz.5.5042': attribute type 2 has an invalid length.
[ 1127.054636][T13577] wlan1: Trigger new scan to find an IBSS to join
[ 1129.204868][ T5515] wlan1: Creating new IBSS network, BSSID 46:17:34:5c:db:2f
[ 1129.270463][T21950] netlink: 'syz.2.5039': attribute type 2 has an invalid length.
[ 1129.282970][T21953] __nla_validate_parse: 2 callbacks suppressed
[ 1129.282986][T21953] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5040'.
[ 1129.302131][T21954] netlink: 'syz.2.5039': attribute type 2 has an invalid length.
[ 1129.310101][T21952] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5040'.
[ 1129.329588][T21952] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1129.353911][T21964] netlink: 'syz.5.5042': attribute type 22 has an invalid length.
[ 1129.361779][T21964] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5042'.
[ 1129.790363][T21989] netlink: 'syz.4.5052': attribute type 29 has an invalid length.
[ 1129.862027][T21989] netlink: 'syz.4.5052': attribute type 29 has an invalid length.
[ 1130.021133][T21989] netlink: 'syz.4.5052': attribute type 2 has an invalid length.
[ 1130.042826][T21989] netlink: 'syz.4.5052': attribute type 8 has an invalid length.
[ 1130.053096][T21989] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5052'.
[ 1130.089337][T21989] netlink: 'syz.4.5052': attribute type 2 has an invalid length.
[ 1130.120698][T21989] netlink: 'syz.4.5052': attribute type 8 has an invalid length.
[ 1130.142832][T21989] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5052'.
[ 1130.607606][T22006] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.5055'.
[ 1132.055278][T22020] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5058'.
[ 1132.360321][T22023] netlink: 'syz.4.5059': attribute type 21 has an invalid length.
[ 1132.438505][T22023] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5059'.
[ 1132.639604][T22026] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5061'.
[ 1132.695415][T22028] netlink: 'syz.4.5059': attribute type 21 has an invalid length.
[ 1132.820206][T22028] netlink: 16166 bytes leftover after parsing attributes in process `syz.4.5059'.
[ 1133.455046][T22039] device syzkaller0 entered promiscuous mode
[ 1133.590356][T22051] netlink: 'syz.4.5065': attribute type 29 has an invalid length.
[ 1136.911564][T22051] netlink: 'syz.4.5065': attribute type 29 has an invalid length.
[ 1136.919689][T22054] netlink: 'syz.4.5065': attribute type 2 has an invalid length.
[ 1136.932127][T22054] netlink: 'syz.4.5065': attribute type 8 has an invalid length.
[ 1136.941238][T22054] __nla_validate_parse: 1 callbacks suppressed
[ 1136.941253][T22054] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5065'.
[ 1136.960638][T22052] netlink: 'syz.4.5065': attribute type 2 has an invalid length.
[ 1136.968766][T22052] netlink: 'syz.4.5065': attribute type 8 has an invalid length.
[ 1136.976920][T22052] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5065'.
[ 1137.228737][T22076] netlink: 'syz.1.5070': attribute type 29 has an invalid length.
[ 1137.285391][T22076] netlink: 'syz.1.5070': attribute type 29 has an invalid length.
[ 1137.287140][T22078] netlink: 'syz.5.5071': attribute type 11 has an invalid length.
[ 1137.306117][T22078] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.5071'.
[ 1137.336961][T22076] netlink: 'syz.1.5070': attribute type 29 has an invalid length.
[ 1137.422591][T22076] netlink: 'syz.1.5070': attribute type 29 has an invalid length.
[ 1137.501866][T22082] netlink: 'syz.1.5070': attribute type 29 has an invalid length.
[ 1164.043616][    T7] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 1-.... } 2661 jiffies s: 65249 root: 0x2/.
[ 1164.082749][    T7] rcu: blocking rcu_node structures (internal RCU debug):
[ 1164.089951][    T7] Sending NMI from CPU 0 to CPUs 1:
[ 1164.095483][    C1] NMI backtrace for cpu 1
[ 1164.095495][    C1] CPU: 1 PID: 22078 Comm: syz.5.5071 Not tainted syzkaller #0
[ 1164.095512][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1164.095520][    C1] RIP: 0010:__sanitizer_cov_trace_pc+0x1b/0x60
[ 1164.095544][    C1] Code: 89 de 5b e9 77 62 50 00 00 00 cc cc 00 00 cc 48 8b 04 24 65 48 8b 0d 14 41 80 7e 65 8b 15 15 41 80 7e 81 e2 00 01 ff 00 74 11 <81> fa 00 01 00 00 75 35 83 b9 1c 16 00 00 00 74 2c 8b 91 f8 15 00
[ 1164.095557][    C1] RSP: 0018:ffffc900001e0930 EFLAGS: 00000006
[ 1164.095571][    C1] RAX: ffffffff8139ec16 RBX: 00000000b8f3bbf0 RCX: ffff88807e5a0000
[ 1164.095582][    C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000
[ 1164.095592][    C1] RBP: 0000000000000001 R08: ffffffff8e210aef R09: 1ffffffff1c4215d
[ 1164.095604][    C1] R10: dffffc0000000000 R11: fffffbfff1c4215e R12: 0000000000000000
[ 1164.095615][    C1] R13: dffffc0000000001 R14: 000000000000002e R15: 0000000000000000
[ 1164.095625][    C1] FS:  00007f4e4b0dc6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[ 1164.095640][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1164.095653][    C1] CR2: 0000000000000004 CR3: 0000000075b09000 CR4: 00000000003506e0
[ 1164.095669][    C1] DR0: 00002000000004c0 DR1: 0000000000000000 DR2: 0000000000000000
[ 1164.095680][    C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[ 1164.095690][    C1] Call Trace:
[ 1164.095696][    C1]  <IRQ>
[ 1164.095701][    C1]  __phys_addr+0xb6/0x170
[ 1164.095728][    C1]  kasan_addr_to_slab+0x15/0xc0
[ 1164.095751][    C1]  __kasan_record_aux_stack+0xf/0xc0
[ 1164.095769][    C1]  irq_work_queue_on+0x10f/0x260
[ 1164.095796][    C1]  rcu_read_unlock_special+0x3c9/0x510
[ 1164.095821][    C1]  ? __rcu_read_unlock+0xd0/0xd0
[ 1164.095852][    C1]  __rcu_read_unlock+0x78/0xd0
[ 1164.095867][    C1]  ? trace_call_bpf+0xbf/0x6b0
[ 1164.095891][    C1]  trace_call_bpf+0x5bb/0x6b0
[ 1164.095911][    C1]  ? trace_call_bpf+0xbf/0x6b0
[ 1164.095939][    C1]  ? __bpf_trace_bpf_trace_printk+0x20/0x20
[ 1164.095965][    C1]  ? kvm_sched_clock_read+0x14/0x40
[ 1164.095981][    C1]  ? sched_clock_cpu+0x6e/0x260
[ 1164.096069][    C1]  perf_trace_run_bpf_submit+0x79/0x1c0
[ 1164.096095][    C1]  perf_trace_preemptirq_template+0x268/0x320
[ 1164.096116][    C1]  ? asm_sysvec_irq_work+0x16/0x20
[ 1164.096136][    C1]  ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0
[ 1164.096157][    C1]  ? __irq_exit_rcu+0x147/0x230
[ 1164.096172][    C1]  ? irq_exit_rcu+0x20/0x20
[ 1164.096189][    C1]  ? asm_sysvec_irq_work+0x16/0x20
[ 1164.096207][    C1]  trace_irq_enable_rcuidle+0xd3/0x140
[ 1164.096228][    C1]  trace_hardirqs_on+0x24/0x40
[ 1164.096245][    C1]  asm_sysvec_irq_work+0x16/0x20
[ 1164.096262][    C1] RIP: 0010:handle_softirqs+0x1b7/0x910
[ 1164.096277][    C1] Code: 89 7c 24 2c 0f b7 db 48 c7 c7 80 0d 8b 8a e8 60 ee e0 08 65 66 c7 05 d6 62 b4 7e 00 00 e8 81 53 39 00 fb 49 c7 c5 c0 a0 80 8c <89> 5c 24 34 b8 ff ff ff ff 0f bc 44 24 34 41 89 c6 41 ff c6 0f 84
[ 1164.096288][    C1] RSP: 0018:ffffc900001e0e20 EFLAGS: 00000282
[ 1164.096301][    C1] RAX: 63580b0a4b799e00 RBX: 0000000000000200 RCX: 63580b0a4b799e00
[ 1164.096311][    C1] RDX: dffffc0000000000 RSI: ffffffff8a8c17a0 RDI: ffffffff8adf5de0
[ 1164.096322][    C1] RBP: ffffc900001e0f30 R08: ffff8880b8f3580b R09: 1ffff110171e6b01
[ 1164.096332][    C1] R10: dffffc0000000000 R11: ffffed10171e6b02 R12: dffffc0000000000
[ 1164.096343][    C1] R13: ffffffff8c80a0c0 R14: ffff88807e5a0000 R15: 000000000000000a
[ 1164.096367][    C1]  ? sched_clock_cpu+0x6e/0x260
[ 1164.096386][    C1]  ? __irq_exit_rcu+0x13b/0x230
[ 1164.096403][    C1]  ? do_softirq+0x210/0x210
[ 1164.096416][    C1]  ? hrtimer_interrupt+0x775/0x980
[ 1164.096440][    C1]  __irq_exit_rcu+0x13b/0x230
[ 1164.096454][    C1]  ? irq_exit_rcu+0x20/0x20
[ 1164.096477][    C1]  irq_exit_rcu+0x5/0x20
[ 1164.096489][    C1]  sysvec_apic_timer_interrupt+0xa0/0xc0
[ 1164.096505][    C1]  </IRQ>
[ 1164.096510][    C1]  <TASK>
[ 1164.096515][    C1]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1164.096534][    C1] RIP: 0010:rcu_read_unlock_special+0xdc/0x510
[ 1164.096548][    C1] Code: 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 49 89 ff 42 c6 44 2b 08 00 48 c7 84 24 80 00 00 00 00 00 00 00 9c 8f 84 24 80 00 00 00 <4c> 8b a4 24 80 00 00 00 42 c6 44 2b 08 f8 fa 41 f7 c4 00 02 00 00
[ 1164.096559][    C1] RSP: 0018:ffffc900033579c0 EFLAGS: 00000246
[ 1164.096571][    C1] RAX: f2f2f2f8f1f1f1f1 RBX: 1ffff9200066af40 RCX: 0000000000080000
[ 1164.096581][    C1] RDX: ffffc90004dc1000 RSI: 0000000000006ecc RDI: ffff88807e5a0000
[ 1164.096591][    C1] RBP: ffffc90003357aa8 R08: ffff88801b9c417f R09: 1ffff1100373882f
[ 1164.096602][    C1] R10: dffffc0000000000 R11: ffffed1003738830 R12: 1ffff1100fcb4087
[ 1164.096612][    C1] R13: dffffc0000000000 R14: 0000000080000000 R15: ffff88807e5a0000
[ 1164.096635][    C1]  ? qlist_free_all+0x76/0xe0
[ 1164.096648][    C1]  ? kasan_quarantine_reduce+0x144/0x160
[ 1164.096663][    C1]  ? __kasan_slab_alloc+0x1e/0x80
[ 1164.096681][    C1]  ? slab_post_alloc_hook+0x4b/0x490
[ 1164.096696][    C1]  ? kmem_cache_alloc+0x18b/0x2f0
[ 1164.096710][    C1]  ? security_inode_alloc+0x30/0x110
[ 1164.096723][    C1]  ? inode_init_always+0x910/0xc90
[ 1164.096738][    C1]  ? new_inode_pseudo+0x91/0x1c0
[ 1164.096755][    C1]  ? __rcu_read_unlock+0xd0/0xd0
[ 1164.096767][    C1]  ? do_syscall_64+0x4c/0xa0
[ 1164.096786][    C1]  ? page_ext_get+0x1e/0x2a0
[ 1164.096828][    C1]  ? page_ext_get+0x1de/0x2a0
[ 1164.096850][    C1]  __rcu_read_unlock+0x78/0xd0
[ 1164.096866][    C1]  page_ext_put+0x91/0xb0
[ 1164.096884][    C1]  free_unref_page_prepare+0x8e5/0x9e0
[ 1164.096910][    C1]  free_unref_page+0x2e/0x3f0
[ 1164.096932][    C1]  __unfreeze_partials+0x188/0x1e0
[ 1164.096953][    C1]  put_cpu_partial+0x17c/0x250
[ 1164.096969][    C1]  ? put_cpu_partial+0x6e/0x250
[ 1164.096988][    C1]  qlist_free_all+0x76/0xe0
[ 1164.097014][    C1]  kasan_quarantine_reduce+0x144/0x160
[ 1164.097031][    C1]  __kasan_slab_alloc+0x1e/0x80
[ 1164.097051][    C1]  slab_post_alloc_hook+0x4b/0x490
[ 1164.097066][    C1]  ? slab_pre_alloc_hook+0x59/0x300
[ 1164.097086][    C1]  kmem_cache_alloc+0x18b/0x2f0
[ 1164.097100][    C1]  ? security_inode_alloc+0x30/0x110
[ 1164.097118][    C1]  security_inode_alloc+0x30/0x110
[ 1164.097135][    C1]  inode_init_always+0x910/0xc90
[ 1164.097154][    C1]  new_inode_pseudo+0x91/0x1c0
[ 1164.097172][    C1]  __sock_create+0x129/0x940
[ 1164.097192][    C1]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1164.097215][    C1]  __sys_socket+0xc4/0x190
[ 1164.097237][    C1]  __x64_sys_socket+0x76/0x80
[ 1164.097256][    C1]  do_syscall_64+0x4c/0xa0
[ 1164.097273][    C1]  ? clear_bhb_loop+0x60/0xb0
[ 1164.097290][    C1]  ? clear_bhb_loop+0x60/0xb0
[ 1164.097309][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1164.097327][    C1] RIP: 0033:0x7f4e4a19e0d9
[ 1164.097340][    C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1164.097351][    C1] RSP: 002b:00007f4e4b0dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[ 1164.097365][    C1] RAX: ffffffffffffffda RBX: 00007f4e4a425fa0 RCX: 00007f4e4a19e0d9
[ 1164.097376][    C1] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000010
[ 1164.097385][    C1] RBP: 00007f4e4a235024 R08: 0000000000000000 R09: 0000000000000000
[ 1164.097394][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1164.097403][    C1] R13: 00007f4e4a426038 R14: 00007f4e4a425fa0 R15: 00007ffcc2158038
[ 1164.097425][    C1]  </TASK>
[ 1168.494843][T10709] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)