last executing test programs:

9m23.454247995s ago: executing program 32 (id=281):
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x400)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a089, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x4, 0x800}, 0x2018, 0x0, 0x0, 0x8, 0x1000, 0x9, 0x7, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r2=>0xffffffffffffffff})
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0)
recvmsg$unix(r2, &(0x7f0000000940)={&(0x7f0000000180), 0x6e, &(0x7f0000000840)=[{&(0x7f0000000200)=""/245, 0xf5}, {&(0x7f0000000300)=""/174, 0xae}, {&(0x7f00000003c0)=""/199, 0xc7}, {&(0x7f00000004c0)=""/44, 0x2c}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/172, 0xac}, {&(0x7f0000000600)=""/217, 0xd9}, {&(0x7f0000000700)=""/43, 0x2b}, {&(0x7f0000000740)=""/86, 0x56}, {&(0x7f00000007c0)=""/125, 0x7d}], 0xa, &(0x7f0000000900)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x30}, 0x0)
syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x800d080, 0x0, 0x0, 0x0, 0x0, 0x0)

7m30.64038958s ago: executing program 1 (id=1376):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x5, 0x6, 0x203, 0x40, 0x0, 0x1}, 0x48) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x5, 0x6, 0x203, 0x40, 0x0, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000003c0), 0x8002, r0}, 0x38) (async)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000003c0), 0x8002, r0}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000280)={0x0, &(0x7f00000004c0)=""/4096, &(0x7f00000014c0), &(0x7f00000024c0), 0x6, r0}, 0x38)
r1 = perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x1, 0x2c}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000000)="7180", 0x2}], 0x1}, 0x48000)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x58, &(0x7f00000001c0)}, 0xffffffffffffff05) (async)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0}}, 0xffffffffffffff05)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000800000000000000", @ANYRES32, @ANYRES32=r3, @ANYRES32=r3, @ANYRES8=r1], 0xfffffffffffffe13)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xe, 0x16, &(0x7f00000003c0)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}}, @jmp={0x5, 0x1, 0x4, 0x4, 0x0, 0xffffffffffffffe0}, @alu={0x7, 0x1, 0xa, 0x6, 0xb, 0xffffffffffffffe0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @generic={0x7, 0x8, 0x0, 0x1, 0xdf0e}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7fff}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffff9}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x5}], &(0x7f0000000000)='syzkaller\x00', 0x5, 0xd2, &(0x7f0000000180)=""/210, 0x0, 0x0, '\x00', r3}, 0x94)

7m29.476644038s ago: executing program 1 (id=1391):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, <r1=>0xffffffffffffffff}, 0x4)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc29a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000b80)="3e0000003a000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a000380dc861d3e000000000000006ccdfb0a8259104247f3d8", 0x3e}], 0x1, 0x0, 0x0, 0x39c}, 0x0)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00'}, 0x10)
r4 = socket$kcm(0x10, 0x5, 0x10)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000000850000001700000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r7}, 0xc)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r1, <r8=>0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)='%+9llu \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={r0, <r9=>0xffffffffffffffff}, 0x4)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000640)={r6, 0x58, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r10=>0x0}}, 0x10)
r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@fwd={0x6}, @restrict={0xe, 0x0, 0x0, 0xb, 0x3}, @var={0x3, 0x0, 0x0, 0xe, 0x3, 0x1}]}, {0x0, [0x4f]}}, &(0x7f0000000700)=""/103, 0x43, 0x67, 0x1, 0x381}, 0x28)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={0xffffffffffffffff, 0xe0, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f00000008c0)=[0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0], <r12=>0x0, 0xca, &(0x7f0000000940)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000a40), &(0x7f0000000a80), 0x8, 0xe9, 0x8, 0x8, &(0x7f0000000b00)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x12, 0x1b, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x56}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @map_fd={0x18, 0x4, 0x1, 0x0, r8}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x1}]}, &(0x7f0000000580)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', r10, @fallback=0x1b, r11, 0x8, &(0x7f00000007c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000800)={0x1, 0xd, 0xc1, 0x800}, 0x10, r12, 0xffffffffffffffff, 0x3, &(0x7f0000000cc0)=[r5, r0, r1, r5], &(0x7f0000000d00)=[{0x4, 0x1, 0x4}, {0x1, 0x3, 0x4, 0x8}, {0x4, 0x1, 0xc, 0x7}], 0x10, 0x2}, 0x94)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003567d25a806f8c6394f93224fc60320011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff)

7m29.175267366s ago: executing program 1 (id=1394):
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
socket$kcm(0x10, 0x400000002, 0x0)
socket$kcm(0x11, 0x200000000000002, 0x300)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x58, &(0x7f00000001c0)}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x86bf2056334f3ae6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
close(0xffffffffffffffff)
r0 = socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
close(0xffffffffffffffff)
perf_event_open(&(0x7f0000000240)={0x8, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x7e674f9da07d633b}, 0x8000000, 0xa0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), 0x0}, 0x20)
write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[], 0xfe33)

7m28.851588784s ago: executing program 1 (id=1397):
r0 = socket$kcm(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x82a6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="1400000033000b0f29523cbfbf2f9be00b2d3e21", 0x14}], 0x1}, 0x20000890)
r1 = socket$kcm(0x10, 0x2, 0x10)
bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x15, 0x0, &(0x7f00000000c0)="dc7a3ee3f92d5b5ee2cbfaaddf5813e4f68e1a07d2", 0x0, 0x7, 0x0, 0x14, 0x0, &(0x7f0000000100)="67be1534b5a75e86202714557609b0559127f478", 0x0, 0x2, 0x0, 0x6}, 0x50)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f97e24fc6004030e001c740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x74000000}, 0x0)

7m28.617287788s ago: executing program 1 (id=1401):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x8}, 0x0, 0x0, 0x0, 0x0, 0x46fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x109}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$kcm(0x11, 0x3, 0x0)
r2 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="27031c00160014000000002f1e", 0xd}], 0x1}, 0x4)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000))
setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x9, 0x9}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000580)="62042700590200000000002f1eafbcf711e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e23", 0x48}, {0x0}], 0x2}, 0x4008001)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext, 0x101000, 0x9, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x48000)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20040010)
r4 = socket$kcm(0x11, 0x2, 0x300)
socket$kcm(0x11, 0x200000000000002, 0x300)
recvmsg(r4, &(0x7f0000000400)={&(0x7f0000000240)=@generic, 0x80, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/136, 0x88}, {&(0x7f0000000380)=""/97, 0x61}, {&(0x7f0000000500)=""/80, 0x50}, {&(0x7f0000000940)=""/4096, 0x1000}], 0x4}, 0x12000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x101000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r5 = socket$kcm(0x10, 0x100000000002, 0x4)
sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0)
syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x401)
ioctl$SIOCSIFHWADDR(r0, 0x89f6, &(0x7f0000000900)={'tunl0\x00', @random="0000230c1100"})
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000000000000691138000000000085100000020000008500000005000000950000ec25ad524a6369000000000095"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70)

7m28.028302723s ago: executing program 1 (id=1407):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x16, 0x2, 0x0, 0x0, 0x0, 0x1, 0x220, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x5ff, 0x100000001}, 0x11619d, 0x80006, 0xfffffbff, 0x5, 0x2, 0x200, 0x3, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x9)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x8000000000000000, 0x5}, 0x4130, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfff4}, 0x0, 0x0, r0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, r0, 0x0)
r1 = syz_clone(0x200400, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000186eea00", @ANYRES32, @ANYRES64=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8fe00000}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000400)=ANY=[@ANYRESDEC=r0, @ANYRES16], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7fffffe}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0x15be}, 0x116026, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r5)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020039000b05d25a806f8c6394f90224fc602f00000008000300feff000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x5)
perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0xfffffffc, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r7 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="1400000035000b63717a3c4a01d8985b0808aa78", 0x14}], 0x1}, 0x0)
r8 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r8, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x80, &(0x7f0000000140)=[{0x0, 0x2}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18aa000000000000000013082954690c5b3b0000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe89}, 0x94)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000400000000100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000300"/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

7m12.91353903s ago: executing program 33 (id=1407):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x16, 0x2, 0x0, 0x0, 0x0, 0x1, 0x220, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x5ff, 0x100000001}, 0x11619d, 0x80006, 0xfffffbff, 0x5, 0x2, 0x200, 0x3, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x9)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x8000000000000000, 0x5}, 0x4130, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfff4}, 0x0, 0x0, r0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, r0, 0x0)
r1 = syz_clone(0x200400, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000186eea00", @ANYRES32, @ANYRES64=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8fe00000}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000400)=ANY=[@ANYRESDEC=r0, @ANYRES16], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7fffffe}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0x15be}, 0x116026, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r5)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020039000b05d25a806f8c6394f90224fc602f00000008000300feff000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x5)
perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0xfffffffc, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r7 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="1400000035000b63717a3c4a01d8985b0808aa78", 0x14}], 0x1}, 0x0)
r8 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r8, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x80, &(0x7f0000000140)=[{0x0, 0x2}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18aa000000000000000013082954690c5b3b0000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe89}, 0x94)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000400000000100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000300"/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

4m32.52035028s ago: executing program 0 (id=3060):
r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f0000000800)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x10000010000000, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

4m32.325285752s ago: executing program 0 (id=3062):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb60000000000000000850000007500000095"], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1f, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

4m32.17749149s ago: executing program 0 (id=3064):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000022000000000000f0400000000005f"], 0x0, 0x28}, 0x20)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x0, 0x1}, 0x50)
close(0xffffffffffffffff)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x3000)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112})
gettid()
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000010000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e1a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080e71113610e10d858e8327edb1fb6c86adac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18c65ae1bd4f4390af9a9ceafd07ed00b0000002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a469398685211bbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72c7ead0509d380578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9624d37c10223fdae7ed04935c3c9068000000bc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b40000000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f3ca1664fe2f3ced8416dc180604b60c2499d16d7d9158ffffffff00000000ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a9e90d7676074a0bde4471414c99d4894ee7f8139dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8070000001fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b2042b8ff8c21ad702cca54728acad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd20785f653b621491d04aaee0d409731091f4fb94c06006e3c1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e1590bab105b0cb578af7dc7d5e87d48d376444e2de02f47c61e8e84ff828de453f34c2b08660b080efc707e676e1fb4d5865c0ca177a4c7fbb4e829ab0894a1062b445c00f576b2b5cc7f819abd0f885cc4806f47ffb966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d3676329bb8cda690d192a070886df42b2708398773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169cdfaa4252d4ea6b8f6216ff202b5b5a182cb5e8380100632d03a7ca6f6d0339f9953c30930804fdc3690d10ecb65dc5b47481edbf1eee2e8893e903054d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026def743f1213bf817becd9e5a225d67521d1128eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979030000007081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f324661351df747aa6a65872dfdcfa68f65bd06b4082d43e121861b5cc09b986bf56c747d9a1cc5b506892c3a16ff10feea20bdac89bfb758cf3500000000000000000000000000000098e6db5a96055e764a3bfd4ccb20d2e800994f4b602d25b2c076f21c7102687e054bb93b2d013be6227fd99902b074c0de00733128c81c48c5e140b17d71ac48f137d10798c4272826d2ba55bbda0059636528c132ed06759d880d1bc291a76456ed7ee8bcb392fdf886dbc74879ec4b831904d7c101ebbaef3c0ae6d0cf0000000000000000000000000000000011cb735f66a559ef0cdb5163a15c0bb986474bf5d9542e3e48805ce53127e4c076d69d868df543717aaaa07d7aca056f7f036c2bcba0795d1a64868a29ac5321b3cd6ef5b1a741afc7124ee3df3a35e8014d6cb5fd6c054a10bb2146174c1d68b45fcfd7e531090ceae2f05536a4d5d6a4081e743827fb9c031d1fc9f195c2da189c49eaed6c30c71da0452e502ef393efeb02ebe82b1851cae5fa7c958ba23110b5e0e5b890803f28a356b2920e74564e0f8377b0ba5187fed2882b4780a1bcb583f1cb1470003ef9b592b9461328cfc01ebfce0ecdcea714a517dc40000000000000000000000000006bd0561e1cc72880cc3ec1bdf35eb670a9040e3b53cd826b94ad8aeb014e74787fe89fb3247a87d8bfb6d400142369f88964708d1d4db5a5df9d62ea6d805dfce568b885a50ed8e2eaf8a932287a1d3bfac17774e58875a63b77e07298e4b4f515189c6fcac3cd35dac9240e633219bb6a5a25865e6ed8e16caa5406b56702afe0befcabbc9a2a772a1a087f0d633d457bceb695b2cba3a1a2daa2dda796373cc0fe0a53236d028fc1076bb746b2717c8b6052f58c91bb8cc19474ab9d4d2160773829f078727f6c684ca74913"], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
r3 = perf_event_open$cgroup(&(0x7f0000000500)={0x3, 0x80, 0x1, 0x6, 0x7, 0xb9, 0x0, 0x80, 0x120, 0xb, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80, 0x4, @perf_bp={&(0x7f00000002c0), 0x5}, 0x18000, 0x2, 0x1, 0x7, 0x9de8, 0x10, 0x6, 0x0, 0x2, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000300)='@\x00')

4m31.761342775s ago: executing program 0 (id=3070):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffc, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b400000000000000dd000000730131000000000095000ac72c000000000000472526a27faa40fb"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x59}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c)
bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000690400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x16, 0x3, &(0x7f0000001280)=ANY=[@ANYBLOB="620ac4ff000000007110930000000000950008000000000095920dda3eac875497a6cfbb82d8d0c712992ad424d877908601af785b8bd8e6320d70860e6d680f037fedd4b6d91000b50e6064c699e1beb1c699adb7012443a3704affcf8d52d794187130bf2fbf0eaab81f47840a0018fcaa009c74530079eb43d73c44ce5994f73e26826bf9911279babef2bb477e5c7cc373b27ac7dcb3266cafc85c4126b749d50b84062267144f98de806b6bf345e448e6f40d660902d8028d4778dedc19d8b631e9cc92de1e19c66fb216931b5994c64a308a24d79d1764015cd36f83e6ace933ae6e9eb848eb7f374825d89cfc3daa29d2"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)

4m31.623027273s ago: executing program 0 (id=3072):
r0 = socket$kcm(0x1e, 0x1, 0x0)
perf_event_open(0x0, 0x0, 0x4000000001, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00)
r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x0, r0}, 0x18)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000002bc0), 0x1000, 0x0)
ioctl$TUNGETSNDBUF(r3, 0x800454d3, &(0x7f0000002c00))
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4)
perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x33}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x1a)
socket$kcm(0x10, 0x2, 0x0)
r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0xf7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5, @perf_bp={&(0x7f00000002c0)}, 0x9010, 0x1, 0x0, 0x9, 0x3, 0x5, 0x2002, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000c63f1de100000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r7 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = socket$kcm(0x10, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, 0xffffffffffffffff)
r9 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r8, &(0x7f0000000080)={0x0, 0x9, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r8, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x0)
recvmsg$kcm(r9, &(0x7f0000000240)={0x0, 0xffffffffffffff96, 0x0}, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50)

4m30.49335234s ago: executing program 0 (id=3081):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.empty_time\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/296], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x7300, 0x4000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x4}, 0x28)
close(r0)
socket$kcm(0x23, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100"})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18)
syz_clone(0x48002000, 0x0, 0x0, 0x0, 0x0, 0x0)

4m14.619294541s ago: executing program 34 (id=3081):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.empty_time\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/296], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x7300, 0x4000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x4}, 0x28)
close(r0)
socket$kcm(0x23, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100"})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18)
syz_clone(0x48002000, 0x0, 0x0, 0x0, 0x0, 0x0)

4m1.186728469s ago: executing program 4 (id=3232):
socket$kcm(0x10, 0x400000002, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1224, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b7020000b96871dfbfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe0000004f850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d62de53a9a53608c10556e5734eb84049761451ce2e2d9f8004e26f7fcc059c06220002595f6dba87b81d1106fb026cce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd6fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f2fcb6d753a78845d8363e0401861abebe428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae58e99e30810400000000000000d63d716c0975e1ce4a655362e7062ff6ab3934555c01840219829472ad529cefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47911834118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f804924600273ee26d8115cbca081a14cba24788779291745083fccdddc979ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b10700ac1e2bcc5ede5b5687aa418abfa09acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b183940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e357e4e90583ce8d43ec65ed491d87a51d7c13f665dcf772e3ead71112008b16b0ea821f70aee1ccbd71c5a1c21e87d5b7b73d356337d15b9dcae4d0d750ffa07909c955e718585b2456308beda2fa03bb9bcf03cdff31ee4b1665b987829c0f0872c006c6e4ed666fe23b343aae943923eedbdb0e7abee90e3da7b98b7d07d2d4816201ad1737798635b0a3ebd3aed120e4500c16e6c9dc729f009db49c6b8b19613e4d792cb4ff5106419291d4222980b49ddb9527ce785822d8f4e2"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000280)="61df718305a35997984d4763fcac", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000340)=@o_path={&(0x7f0000000300)='./file0\x00', 0x0, 0x0, r3}, 0x18)
r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380), 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r1, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[0x0], ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0], 0x0, 0x43, &(0x7f0000000480)=[{}], 0x8, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0xb1, 0x8, 0x8, &(0x7f0000000540)}}, 0x10)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback=0x2, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x1})
ioctl$TUNSETVNETHDRSZ(r8, 0x8927, &(0x7f0000000140))
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8914, &(0x7f0000000080))
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000200)=r7)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
write$cgroup_devices(r10, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd)

3m58.44317456s ago: executing program 4 (id=3238):
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000070000000080000001"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, <r1=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000740)={r1, 0x0, &(0x7f0000000840)=""/219}, 0x20)

3m58.060111753s ago: executing program 4 (id=3240):
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a00913a09b51bcb3cc5a05f0a"], 0xfe33)
perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x222)
r1 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x50)
bpf$PROG_LOAD(0x1c, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20)
bpf$OBJ_GET_PROG(0x7, &(0x7f00000006c0)=@o_path={&(0x7f0000000680)='./file0\x00', 0x0, 0x4010, r1}, 0x18)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r2, 0x0, &(0x7f0000000300)=""/219}, 0x20)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x10, &(0x7f00000007c0)=ANY=[@ANYBLOB="18520000020000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000090000008500000006000000850000006100000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70300009f6ed300000000850000000c000000b70000e161abcc00"], &(0x7f0000000140)='syzkaller\x00', 0x5, 0x92, &(0x7f0000000500)=""/146, 0x41000, 0x6, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x200, 0x1002}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000400)=[{0x0, 0x1, 0xf, 0x6}, {0x6, 0x2, 0x5, 0x4}, {0x0, 0x1, 0x5, 0xb}, {0x3, 0x2, 0xa, 0x1}, {0x4, 0x5, 0x3, 0x7}, {0x1, 0x1, 0x1000003, 0x3}]}, 0x94)
bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0xcc9e, <r4=>0x0}, 0x8)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={r4, 0x4, 0x18}, 0xc)

3m57.601242899s ago: executing program 4 (id=3243):
r0 = socket$kcm(0x10, 0x2, 0x4)
r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r1)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)

3m57.24919454s ago: executing program 4 (id=3244):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="000000000000000085000000a8000000"], 0x0, 0x753a}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000a3241b363338434930c378db34285bbbe47c57b930fe7a26531a8559544e6bbefb13d73ace7f9230e56309f7d3cb7419cb0f11d341ecf00081d3599b74bca3c63d968e205fd8c52b3780ecc2004bcfaf95ef098542808ce3968e2d7cb8014122930416d1b9ec294eeaaaaefb4437125b63bbd971a3c848515f11ed484420564b93f6fd171d716a", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r0, <r1=>r0}, 0x4)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0c0000000200000006000000fbffffff3e62000075e57eeab6264ed886212f1eb1fb784590102def0eebbe3aa98c87826a8cce046384da92c4e003f063bdf1952f07d3fdeba2b4b6ca9c00a05edbe8423e929908690ec895bf728432f7a3f21ddd7c7a4d07a1c22b0ee61a3672b4c49f748064e3063cbacd79127a25620dae4013febcbfceaca580fcdf7b73", @ANYRES32=r1, @ANYBLOB="040000dc00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000002000000050000000000"], 0x50)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000640)={&(0x7f0000000200)="645a5fc250ead743af57457c35eb80c0b241e112f641b6d4ea4175bf5150c840579504bdcac90371ba7c3f02a52870474e46a2", &(0x7f0000000540)=""/92, &(0x7f0000002480)="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", &(0x7f00000007c0)="a609f326ffbace2185e1dc0448472795daa8e01d27f89c8f99d6a048fe565cf4539c25ba948d0a0186eb56c52bc132129caf3199236adab40bea169e37f8fccef690f02419980d47b71c8df23215220e5958e936e563f38b2ab2c58cfcce6de21ecebd093f3f2b1cc89e7ec1c60adade7d3ec59a2a6317f07b7f48924fd1fecc1ac0b2d5b9be01676aa495fb2db65e51d8a3b2967ed389e935447c040a880dc11514356ac3d8defdc3f0bbdb479c2c2d79ede430cf0540294fbb031e1b7f29a3d79d2729688a20c39846288787de158f2a56160a32c7b05b28786de0421d03519d374c042a1b9ccd3510b6d5", 0xb3a1, r2, 0x4}, 0x38)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000feffffff18110000", @ANYRES32, @ANYBLOB="4a36bc18"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000340)="c1fc0a0869fd0e76753a00000400", 0x0, 0x400006, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x0, 0xc, &(0x7f0000000b40)=ANY=[@ANYBLOB="1809000000000000000000000000000085000000500000001901000020696c250000ff00000000bfa1000000000000072c275f4182abdaa37c75f451400b3405b765b515d878299d4d17471a9d658284eb77ffb2fe6fe0c0df86de83f29e5744acc2e91a228d6bde37886400000000000000000059de3abc786b857a8c7e0500ebd34eb10df14232708e86c4f8782ac54cfb0c6504db1608a4fd75245367db1969febe4359373c87b199adaafebcec028ef998598bede32848509eef173372ba8b6cf7592673cedf2feb2b99b2dda94135df9f389df44582c4b10a4cf3670cb09747505fecb09d1e7204dbbc184fc49f5be33588fab8b1b71876bdcd59d91ca46bc3e870a3d8be1fc7cbe4af0b8e3e346463f7bd9945dbab9de9347bcf0e8c1f273f89f2beebcd29a2ec1290248e3326405a0a19ad4943dc9f0afc7ea7b227e50000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4fc}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x100000001}, 0x4000, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x8}})
perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x25, 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000008000000e27f000001"], 0x48)
r6 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff)
socket$kcm(0x10, 0x2, 0x10)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10)
close(0x3)

3m56.646170825s ago: executing program 4 (id=3246):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.empty_time\x00', 0x26e1, 0x0)
close(r0)
r1 = socket$kcm(0x23, 0x2, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000040))
syz_clone(0x4eb82100, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100"})
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000000c0)={<r2=>r1})
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000001c0)={r2})
r3 = socket$kcm(0x15, 0x5, 0x0)
sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000500)=@l2tp={0x2, 0x0, @multicast1}, 0x80, 0x0}, 0x0)
ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0)

3m41.182555753s ago: executing program 35 (id=3246):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.empty_time\x00', 0x26e1, 0x0)
close(r0)
r1 = socket$kcm(0x23, 0x2, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000040))
syz_clone(0x4eb82100, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100"})
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000000c0)={<r2=>r1})
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000001c0)={r2})
r3 = socket$kcm(0x15, 0x5, 0x0)
sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000500)=@l2tp={0x2, 0x0, @multicast1}, 0x80, 0x0}, 0x0)
ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0)

2m15.708026748s ago: executing program 2 (id=3866):
r0 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="bb", 0x1}], 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB="20000000000000008400000002000000fe8041000000000092e0ffffff00000010"], 0x30}, 0x0)

2m15.549180167s ago: executing program 2 (id=3868):
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e0000000000000005"], 0x48)
r0 = socket$kcm(0xa, 0x3, 0x87)
sendmsg$kcm(r0, &(0x7f0000000580)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f00000004c0), 0x3e}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2)
r3 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0)
r4 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0)
r5 = socket$kcm(0x10, 0x3, 0x10)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r7 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33)
recvmsg(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000840)=""/4093, 0xffd}, {&(0x7f0000003700)=""/4074, 0xfea}, {&(0x7f0000000780)=""/174, 0xae}], 0x3}, 0x0)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r9 = openat$cgroup_devices(r8, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r9, &(0x7f0000000140)=ANY=[@ANYBLOB="62a02a3a340977770a89"], 0xa)
r10 = openat$cgroup_devices(r6, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r10, &(0x7f0000000200)=ANY=[@ANYBLOB='b *', @ANYRESDEC], 0xb)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b70500000000000061108c000000000007000000000000009500000000000000bdd77e459d5ebdd5a23e9985daa1f441a75611ee6d298391824360e634a2738b15d835f0f2bb922ba3a5d0b48245c7d83de0826c8c1bfb8119f9d24d014013380281e95424d45ec0958d13797ea3321a8a5efa0bc0b0ebb77d"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
sendmsg$inet(r3, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast1}}}], 0x20}, 0x4008804)
sendmsg$inet(r3, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0)
r11 = socket$kcm(0x10, 0x2, 0x0)
r12 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r5}, 0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000780)=""/206, 0x10b, 0xce, 0x1, 0x1, 0x10000, @value=r12}, 0x28)
sendmsg$kcm(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x40840)

2m14.707324226s ago: executing program 2 (id=3874):
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_RESET(r0, 0x40049409, 0x3)
r1 = socket$kcm(0x2, 0x200000000000001, 0x0)
r2 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000d40))
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x21)
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x7, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000d00)='GPL\x00', 0x4, 0xed, &(0x7f0000000340)=""/237, 0x40f00}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r5, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000001380)}}, 0x10)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1acffbdf19000000040000000400000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8b0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r8, 0x1, 0x32, 0x0, 0x0)
sendmsg$inet(r9, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000)
r10 = gettid()
r11 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='ext4_lazy_itable_init\x00'}, 0x18)
r12 = gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r12, r11, 0x0, 0x1, &(0x7f0000000740)='\x04 @=\xc8\xc1\xa75\xdf\\\x8eN\xc84\x05!\x9cI\xbc\xaf\x01\xd5\xd0GD\x96\x1c\x9c~\xbb\xc4wXB&\xf5\x8e\x00\x00\x00\x00\x8bY\xcasD\t\xe0\xac*\a\x95@\xd6\xd1C-Ft\x97)|\xad\xf1b\x15\x1f]\xf0>\xea$6\x9d\xe5(H@\x00\x00\x00\xe2-\x95\xb2\xa6\xac\xa8!N\x86\xe5\xb7\x95\xff+~\x9fF*\x1esP\x87(\x8f\xd7\xc5\xa8\xf7\x19\xc6\xc0\'\xa2\xc4\xc2\x99a\x00K\x0f\x1c\xbb\x8b>\xb1H{\xd6\xa1\xf0$\x86\xb4\t\x97\x81\x16\x8a\xde\x12\x15\xf0*\\\xc1q<\x18\xf1B\xa5\xf6\x89\x8c\xfb\xd2\x16\x92\xf9e\x0f\xb8\xe1\x005\xf7\x15\x820,\xdc\xd1\xfa\x82\xf1eb\xa7\tAM\xb5\xd4\xaf\xba\xcaV\r\x7fy\xa4q\x12\xa8C\x04O\xdb\xe7f\xa5-\a\x00\x00\x00\xab5\xce\x10\x92G\x02\x1eh<\x9a\x97\x1b\xbe\r\x13\x16\xb5U#\xd2ml&\xfa\xffu\x98Kt\xc5\\e\xf1/\xb3\xc8T\xfc\x03Uuq\xcd\xbc\xc7J[?_\xf6&\xd0y\xbe\xe8\x8a\x18\tg{LD\x81\x82I\x18\x16jD\xdb\x86\xfcN\xf7\xdcw\xd6-5\xce\xe0c\xb0\xf0K\xa7\xd1Z<]l\xad\x84;\x92=-jc|/\x88C9\xf8\xbaM\xda\x96\xe3\xe3lw\xa5\xb3y\x9eP\x9c%\fg\x15\x0e\x0e\x83-\x14ur$\x18\xd6\x1d\xa6\'#\xb4\xca\x18\xa9\xbbc9\xc5\xb3\x8f\xed\xea\a\xfa+F\x9aO\x9d\xb6\xfc#\xf96M\x0f\x1c\x19\x9f\xed\xd5$`\xffR\x8b\xa2\x86\xa6\xb4\xdb\x12@T\x7f\xe3\x13c\xbe\x0fU\x9a\xfb\xcf8\x048\xeb+aW E\x1bB\xf72\xf8\xea.hw\x97\x1f\x88[4`\xe0\x03b\xe2\xf8l\xe42:\xcdWy\x17#pZ\xdd\'\xc4+\xf3\xb3\x92\x85Q\xdf\xfb\"\x82]bO\xff\x00'}, 0x11)
sendmsg$unix(r8, &(0x7f0000001000)={&(0x7f0000000600)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000940)=[{&(0x7f0000000680)="34c49735774a907c468baa4e8b29010a6d39ce0215d948443432389f9bb40f60d1eb88047fce31ba9cf97a03e97815df2409a8ca5b1ca7201ebd0848beff8cabd8d558b87e30e8c1b1cb14e6021b370b630fef16f0905c4e2275d208ab253e460c451ef3492bfb7e2d6dc5af6f734b81602b37e9bc15055773e3af", 0x7b}, {&(0x7f0000000700)="7676b1924240320a76a388aa691b765fb952d81e8b705d8048387003e39615c9ace7cb7a534b0e835fbfb39a5b63161992a63654625392af793d03fbd40edaf338f7a6c0d2f4d7edaa5963b3f4233982677beb5bbee2ab4d017a3f3060fadd5ef07f51b578cdb8bee4e8382cf199f96dceb4d1ba51b165f67ec784981fa4f2f18a3acd039939c7accd6ce7d73eedb499a2497f39dc0252e444764ac4d2e7341c3caba672a691213c138e3f1fb3f2471c1a7b0d9f61f317d8f30511d35f9915e57d7d581badf1db0cb0fcc54d059fb017f41cb9d2c8eb3fd275", 0xd9}, {&(0x7f0000000a40)="8e523791442ef202ca913812cea56817921c755a1189c7f52cf3b5441f457afcae6c7d5722af42f637000b34d57367089cbcd7c3bb7bcf4dfa260c9b000e67a7af5a5ac005ab94e74f82636b4f7827481dbad04774ac6d6ea4e2331aa3c256f0ca4b02ce08794d450b05e549c0649574c82c7e2ef8aa7084efb9425078cc4d3793acc945169869f733a8bfc044e207b53d805a336872fa", 0x97}, {&(0x7f0000000800)="c73ea257cf50c52d61799494a7802e732e0f7cf6fe52649fbc0d4deead9c", 0x1e}, {&(0x7f0000000b00)="b7a523db31238778808e447ce2faa3e6016af8d5f1e7baaff72815b21ca6a83cc95c353676b09849a88507ce3c4284a30dc87e8e015e3be13d63c31663373afc89d03090659ac2d1dc9229e050074035d04fbb61f3e6197b389bb167c005e06a815603d7a0b72ed185bae37450f9abc2e7ffbb3ef50097e5933647b8eac1921db255f43070505abc636f935027067956f45db1da7b8db17691cc69bb84fe4012bfba72eefa51c8e00e8e80f18c62ed0d2e98d1301b9f3abe4e5069a5842fc71aeba1344845daa806f4a4a93cb2c521", 0xcf}, {&(0x7f0000000c00)="0176b7530a0b8397efb6f568902808f9b5e6eb4b5249071a34ed4e255aa226fe55f12ab4db47f320cae909d4c022a84c7ff1d2603e92f405f3af7f907446791009d6cf545d0ae0fc7aa03bc5a6f0e77ca92835ebc5189f7679ca2ae95e6721b19462270faa05185c57c11feda77b22d44d16aea6502c6b7831c6b09cffe6caf6b707cf524e5b74251163bd5359257a469a8034da1a35b8e342230e52271d7e0f96238a92ff4bec00c882d6431083b6ec118f9d8f167d62108f6266dc9d9eceae1b4236100172b18028651912454ccbcaa64968cec542bbc0be6c86153752e164228a8017c622f29755751d8017322c7413cdde88", 0xf4}], 0x6, &(0x7f0000000e80)=ANY=[@ANYRESHEX=r1, @ANYRES32=0x0, @ANYRES32, @ANYRES32=0xee00, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r10, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r12, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000006000000000000fac5ae3ee5a85cb43b6d82a329989d6257417a446291d38ec958feb029a45a6d23f24e170e12fa8619b46279164670746c44a7b1f2275d8373d75e291f82dcd7e96ca3ab8333bb2738786663a39e2efa8a06ea8f01f0e849d7f8926cd7e2b15975c633a01d1abbc65d9bbabbf5a2cf6d151b491330b224a0e05ada5e5794252e4e9528cbdfa50ac5389c0335a2b0b471995d3d7a2a8ce16afc", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r7, @ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0xc0, 0x80}, 0x0)
ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x0)
perf_event_open(&(0x7f00000002c0)={0x5, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0xc8a04, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000140), 0x2}, 0x0, 0x1, 0x8, 0x8, 0x200000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8fff7ff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b70500000000e000720a23fe000000008500000012000000b70000000000000095000000000000004e6258941c823b7505608556ba4ababb42684e890d31ae450400373a0a5447a801b8c1c4f0c4bd97c6555e61345400f9bd32abeb9ade0105000000000000a21902ff07000094a2b51c21df74924f5436a6ed89b98f75e800230c49c90fe1336481f3b92a63336c36fcd745d61d7739c6554ca201000000bebbe8282f8b1e26407437a397bf8f50e87ed4d27adfd876bffc402887781979461c4363bc5c9b6202ea471428197ef88bc333fbcec0ea4334f1ddb9d679ae95a90fd41d528f58d305000000435883df6c10ce86188c92292b2d0226082960be682836bdff8b0971f2a5405e453228e7b1005bd73479358a90df3e481947de6453736aa572158af6ea63d6d418fbbd2bba050000001da000ef78df03000000d19913a5fb03c79dac2e489f68127892658115e7ffb588a71dffffff951b8535167ab8069a2c92a3aa18e22517000026637b4c34bf2d0aa304ed42bf70480e9e97203fd169411f37fddd1f7fbe16dbbc0f307bceb5064f388a0350c3dc928b0e638b1e2b2a9d25264233e5d45eb377f56b95241024dbe30f67191c2b56b70328d6d3215dfffe5d89af1d10599bd494d921d1fb2db99b6aba0fa978f41eb1d4c553e5a9326ed550c13f8dd36716a899a1e79234294707c5312b924d142c17b20bb80ee202222c03fa84ccc374e717f694018630366397266090a82343aedfbf7afe892390c2eb775b0d16073da2229958db05de7df6ab7600004000010000006d8081cb3bf251d906c00da0e23b50465f8394820be571e3592d0000c7ef10fdc462e7040e7074ec43aa461fc54401a76406db718d4efd6c1bd10ce1d087cf9bba461162555a95524c84df0952d32093082b7aa71304e0d2d9ec310d1b676b378a5879e47941de1a28c3a8f400000000000000000e032b7d2badd0bc6617a859b7ac273b6304555f664469cec152030f06cc0ca1765838eb5590264736fbccfc3a8f4e3b10daf6a275daf5db2dac7096fe8ac8876acaad043663b3b0fedb05e6d31408fa20140c9d2db1c59ac8a3ce28e489d67d87d3a107ccea3007f58f2c5017e8807107f79ac50cc1d4f546b4443d137eb706b71b1767a10cca7a7c82b76c96e874aff249f36329a6526b354b6e674b08f7ef492b804c4b08fb10de807d79fd782027318cd7632e22d2faa16209272b39b5ec8d239832ea02cc88e249a2e77753a58987547571fbc8de747faab724bebb6401412b496e078fcb6c78ab447e871b76a8b0506f49594aa1d610567e14d739a60ff3ce04d0d2e5681e787c7e1ad25467bb81f2f440128207fe07a83759ec30cf9e0a3fd3f2fcee97fe8d273f8e712a8a64eaf2d89a1fa44554357fcd7ab531ff7a41c27164fca430a62d015b477de61853f5ee2e25b00a63642ec32ece2ff3bb5883deb895f52a923b5c744d8dccdd6a09ded8b90f1eeda8e6e884a4f090edb6ab9fc8107846508d51f3735493d5860cf80200ce31b92eb3563d485b5a7d192092d7a9fd2bc67d305d1d4573aad5f6501d1cd27657ce17330402dacb78d72d776330711645eed7d4c292f4448733c0826c4eb950f3d40453f82d7f792d106518f6bde874aff9e2bea7d73f74bebeeacfc700000000000000000000d40d73be47803297db004264c8c70b7761b22a7114a078a87d63d63b0c9dcc263a5b773bfeba212abef4181ad9e4872e328c0f105d51e3d167a2b717051d7681ba04552eeba18a000000b22b50d76d85040c9000ea68a528049a60d5e26b20455194f4be3b8466fd66d0e6cefcff7891c485d61cb66f4076cd60a22733cb00cf7cc12ca7d9bb864c0e650236a79a5c85349a9b1e6bbc3bace197e72490c566431cd3a08e9d1b641c1ba1f661d01573b904c3fa1427370fa15cecd294ac21fefe3d161fdf58e8bc5957ef145839f4370176e1be88d2e3516a1998c1621a00b4438b85a4dfee6f61827a1e50e158038b037dfda3ffb35069e41fc740ae720800de53948f176c3c15f3a529c02434b920d87f12a6e3420a2fdcb3559e7a5b1ddbb06b7a5977f63bfac701e673bf626d126b213c92e7169a930beb8d76f9db34e8098bea301baa96916d6458c923866dc192928b320738d1b298fb55f2a64500000000000000000000000000509885a38d9d995a46817e7ff7acddcc5f9253c63f86baf33f92820c9ff497cf76b6482c3ab53fb6ecea6d220b91b99b2fb4279ab09ae0645ab92df309000000000000a4868411948f8e3e259f717d722a1eebd3f6860a17f1ae9e10a1178f6aef4951b192d13e9600c1f700ca7b1d127e451034469bf2a8f93dbae6ad8e932e431dc18323794156238625bb9c45c5a76a68a8646e701b29a71ffbd854f50f195833106a5625ff94221f1f04c72525b50aae69081de9626de9847bf53475d90642d9730101d80b1b0000000000000000822b0641698d60160d9157548302dd2636d12c431f96728ae4a45361e6d47a1c4a52d67c0f0a62585c09fcfd70d0f249f87c44b47283c1c6f2430d70c751e4ada9b646e6e7c1719faee476d88a2943c71a21da55b7497dd7ed385ac2e8cb916390a3a0ed52e7371e1a141e69afa07b46ac20f3521fb251b72c82ee1c7eb4f67c0deed5618d0db925ce7a7c50a99835544c540f5d528587d1a26e78df1bc9a8e4d90c57d0b8122eae7b23e4456624f5337c16c42648c7a3d0b799ad409befe0cbe2aa781ba826918df7aa80dff4f62258e54419629eb1d37de7f6a3512bd618781d1ad3a4d4b0da44df9f9a93f0487f79a9b16dfa6f68b06ce6a96ca344d194cded05702c2300d1a4f451b33830765f8131f6c28fada65701851bba089b8a8347900e72d68cea965feb6a06225dd3f0e135323a5bde3b43c9d242b73abf9e05336af040a4a6bb5918146393f1d50705c1d1e986bf2f690de51ee8727d37339df5fc1db535bb1e9bb3e5dadb6e5a2bb4faa2dcbc6ca9b40ac96e448b9dadeb08fc2cf3a960f22bf20b9e967b7a75687372b8e3edc543896c360674d901a7f56b07ba1479b46eea3d94026a9c7e670ab40bb2c1ca1a7c90299361239bef773140af974c7efc285a64633d21513481b3ac62dec9fa3e8ce6156d76b82baa145bc550b0ccbc0934ccfea45292caa2f0654fe18dc0669a4f2af9fa232a293ad94261f55675cc686db72783a6bacc0df6a1ea943ae266af112f35319980cd681811a369e0d03cf7d22bed7cbe1afe498b88942b1bf7edae441a0d0d88fce65cb4e848793a28cbd7373f6acd3b5a48c034e487750388929d37fa3165f205dab3be5f3e5781a84298687cbf02dcaf0e14a2b260293f349d076eb75a2ddc5382d106f0beea02aa45018fe36d1176cf7704383b6922d10dc9feca3982ae232d4bb47c722c83a7cf6ee8832f038b072eb803a47cd7f753e80c9f6eedb89ee1c95361debf58f671170cfa57fb0c9cbad5c70244a2b6de2062cbd1ba2c85f73689d3ffcd37022ab9fcabd17fd40bfd316088dffe92728016ec5c72e21da52d09f849ab4a4b2d9b4799bab3a6d7f2ba57e100e7ffec0bd4c0659ebaf7b225edaa0af3f5aa99d1551d34b2d2faf0971dbe852142088b1c9b052e1177c47365d950e22c2b04283f62fec31837b5068dab60c5c2c1547acd52ab5e5cde41d24563b05e223e2aafe2c55ba3001d12e4de86597487e99c3b2bf193d7d6d0821481c16fd7cece5df2567182ca1ad6028028bf9f72d503b3d70e1c3c4b5e73ac286abb2b3b069f2ccda4c6a7a3759302b02034e8217b4ecdb9f1118a4117fd49d5467a84b70fae675af118bd885ee7798782765438caaf69856e236bf4b37bff5f971df3fd5e03a9ea39d5397b4e5c5a0d7eacf2"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4}, 0x48)
ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0)
ioctl$TUNSETCARRIER(r4, 0x400454e2, &(0x7f00000000c0))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r13, 0x300f000, 0xe, 0x0, &(0x7f0000000080)="0069c2704ade28eddb0000200000", 0x0, 0x48b8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

2m13.728613494s ago: executing program 2 (id=3880):
r0 = socket$kcm(0xa, 0x1, 0x106)
setsockopt$sock_attach_bpf(r0, 0x29, 0x1a, 0x0, 0x4)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$kcm(0xa, 0x1, 0x106) (async)
setsockopt$sock_attach_bpf(r0, 0x29, 0x1a, 0x0, 0x4) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x50) (async)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)

2m13.457033229s ago: executing program 2 (id=3883):
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_RESET(r0, 0x40049409, 0x3)
r1 = socket$kcm(0x2, 0x200000000000001, 0x0)
r2 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000d40))
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x21)
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x7, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000d00)='GPL\x00', 0x4, 0xed, &(0x7f0000000340)=""/237, 0x40f00}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r5, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000001380)}}, 0x10)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1acffbdf19000000040000000400000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8b0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4)
sendmsg$inet(r9, 0x0, 0x20000000)
r10 = gettid()
r11 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='ext4_lazy_itable_init\x00'}, 0x18)
r12 = gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r12, r11, 0x0, 0x1, &(0x7f0000000740)='\x04 @=\xc8\xc1\xa75\xdf\\\x8eN\xc84\x05!\x9cI\xbc\xaf\x01\xd5\xd0GD\x96\x1c\x9c~\xbb\xc4wXB&\xf5\x8e\x00\x00\x00\x00\x8bY\xcasD\t\xe0\xac*\a\x95@\xd6\xd1C-Ft\x97)|\xad\xf1b\x15\x1f]\xf0>\xea$6\x9d\xe5(H@\x00\x00\x00\xe2-\x95\xb2\xa6\xac\xa8!N\x86\xe5\xb7\x95\xff+~\x9fF*\x1esP\x87(\x8f\xd7\xc5\xa8\xf7\x19\xc6\xc0\'\xa2\xc4\xc2\x99a\x00K\x0f\x1c\xbb\x8b>\xb1H{\xd6\xa1\xf0$\x86\xb4\t\x97\x81\x16\x8a\xde\x12\x15\xf0*\\\xc1q<\x18\xf1B\xa5\xf6\x89\x8c\xfb\xd2\x16\x92\xf9e\x0f\xb8\xe1\x005\xf7\x15\x820,\xdc\xd1\xfa\x82\xf1eb\xa7\tAM\xb5\xd4\xaf\xba\xcaV\r\x7fy\xa4q\x12\xa8C\x04O\xdb\xe7f\xa5-\a\x00\x00\x00\xab5\xce\x10\x92G\x02\x1eh<\x9a\x97\x1b\xbe\r\x13\x16\xb5U#\xd2ml&\xfa\xffu\x98Kt\xc5\\e\xf1/\xb3\xc8T\xfc\x03Uuq\xcd\xbc\xc7J[?_\xf6&\xd0y\xbe\xe8\x8a\x18\tg{LD\x81\x82I\x18\x16jD\xdb\x86\xfcN\xf7\xdcw\xd6-5\xce\xe0c\xb0\xf0K\xa7\xd1Z<]l\xad\x84;\x92=-jc|/\x88C9\xf8\xbaM\xda\x96\xe3\xe3lw\xa5\xb3y\x9eP\x9c%\fg\x15\x0e\x0e\x83-\x14ur$\x18\xd6\x1d\xa6\'#\xb4\xca\x18\xa9\xbbc9\xc5\xb3\x8f\xed\xea\a\xfa+F\x9aO\x9d\xb6\xfc#\xf96M\x0f\x1c\x19\x9f\xed\xd5$`\xffR\x8b\xa2\x86\xa6\xb4\xdb\x12@T\x7f\xe3\x13c\xbe\x0fU\x9a\xfb\xcf8\x048\xeb+aW E\x1bB\xf72\xf8\xea.hw\x97\x1f\x88[4`\xe0\x03b\xe2\xf8l\xe42:\xcdWy\x17#pZ\xdd\'\xc4+\xf3\xb3\x92\x85Q\xdf\xfb\"\x82]bO\xff\x00'}, 0x11)
sendmsg$unix(r8, &(0x7f0000001000)={&(0x7f0000000600)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000940)=[{&(0x7f0000000680)="34c49735774a907c468baa4e8b29010a6d39ce0215d948443432389f9bb40f60d1eb88047fce31ba9cf97a03e97815df2409a8ca5b1ca7201ebd0848beff8cabd8d558b87e30e8c1b1cb14e6021b370b630fef16f0905c4e2275d208ab253e460c451ef3492bfb7e2d6dc5af6f734b81602b37e9bc15055773e3af", 0x7b}, {&(0x7f0000000700)="7676b1924240320a76a388aa691b765fb952d81e8b705d8048387003e39615c9ace7cb7a534b0e835fbfb39a5b63161992a63654625392af793d03fbd40edaf338f7a6c0d2f4d7edaa5963b3f4233982677beb5bbee2ab4d017a3f3060fadd5ef07f51b578cdb8bee4e8382cf199f96dceb4d1ba51b165f67ec784981fa4f2f18a3acd039939c7accd6ce7d73eedb499a2497f39dc0252e444764ac4d2e7341c3caba672a691213c138e3f1fb3f2471c1a7b0d9f61f317d8f30511d35f9915e57d7d581badf1db0cb0fcc54d059fb017f41cb9d2c8eb3fd275", 0xd9}, {&(0x7f0000000a40)="8e523791442ef202ca913812cea56817921c755a1189c7f52cf3b5441f457afcae6c7d5722af42f637000b34d57367089cbcd7c3bb7bcf4dfa260c9b000e67a7af5a5ac005ab94e74f82636b4f7827481dbad04774ac6d6ea4e2331aa3c256f0ca4b02ce08794d450b05e549c0649574c82c7e2ef8aa7084efb9425078cc4d3793acc945169869f733a8bfc044e207b53d805a336872fa", 0x97}, {&(0x7f0000000800)="c73ea257cf50c52d61799494a7802e732e0f7cf6fe52649fbc0d4deead9c", 0x1e}, {&(0x7f0000000b00)="b7a523db31238778808e447ce2faa3e6016af8d5f1e7baaff72815b21ca6a83cc95c353676b09849a88507ce3c4284a30dc87e8e015e3be13d63c31663373afc89d03090659ac2d1dc9229e050074035d04fbb61f3e6197b389bb167c005e06a815603d7a0b72ed185bae37450f9abc2e7ffbb3ef50097e5933647b8eac1921db255f43070505abc636f935027067956f45db1da7b8db17691cc69bb84fe4012bfba72eefa51c8e00e8e80f18c62ed0d2e98d1301b9f3abe4e5069a5842fc71aeba1344845daa806f4a4a93cb2c521", 0xcf}, {&(0x7f0000000c00)="0176b7530a0b8397efb6f568902808f9b5e6eb4b5249071a34ed4e255aa226fe55f12ab4db47f320cae909d4c022a84c7ff1d2603e92f405f3af7f907446791009d6cf545d0ae0fc7aa03bc5a6f0e77ca92835ebc5189f7679ca2ae95e6721b19462270faa05185c57c11feda77b22d44d16aea6502c6b7831c6b09cffe6caf6b707cf524e5b74251163bd5359257a469a8034da1a35b8e342230e52271d7e0f96238a92ff4bec00c882d6431083b6ec118f9d8f167d62108f6266dc9d9eceae1b4236100172b18028651912454ccbcaa64968cec542bbc0be6c86153752e164228a8017c622f29755751d8017322c7413cdde88", 0xf4}], 0x6, &(0x7f0000000e80)=ANY=[@ANYRESHEX=r1, @ANYRES32=0x0, @ANYRES32, @ANYRES32=0xee00, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r10, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r12, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000006000000000000fac5ae3ee5a85cb43b6d82a329989d6257417a446291d38ec958feb029a45a6d23f24e170e12fa8619b46279164670746c44a7b1f2275d8373d75e291f82dcd7e96ca3ab8333bb2738786663a39e2efa8a06ea8f01f0e849d7f8926cd7e2b15975c633a01d1abbc65d9bbabbf5a2cf6d151b491330b224a0e05ada5e5794252e4e9528cbdfa50ac5389c0335a2b0b471995d3d7a2a8ce16afc", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r7, @ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0xc0, 0x80}, 0x0)
ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x0)
perf_event_open(&(0x7f00000002c0)={0x5, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0xc8a04, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000140), 0x2}, 0x0, 0x1, 0x8, 0x8, 0x200000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4}, 0x48)
ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0)
ioctl$TUNSETCARRIER(r4, 0x400454e2, &(0x7f00000000c0))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r13, 0x300f000, 0xe, 0x0, &(0x7f0000000080)="0069c2704ade28eddb0000200000", 0x0, 0x48b8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

2m12.900832982s ago: executing program 2 (id=3886):
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0400000004000000040000000c00000000000000", @ANYRES32, @ANYBLOB="00a543a9e88c000000000000000000000000001f0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r0 = socket$kcm(0xa, 0x2, 0x73)
setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f0000000200), 0x4)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="100000000000000000000000000000001800000000000000290000000b00000023e9c63444a6f52e430dec9a1ddc8b1d6294cb3a33ca1db9fd391e0762d8f3aef13e31be06ce3d19f43df5285ee35eb3551d554efecdc83bc4cfa594599b9e44c8b050aacbf7329f203702d5b568cedd33a6cbf12e11e46cd6be09a2ad7b44348437aa984e4a1d696a1557700017ded93d1fb898b221a33bab86032f2bebc483b1530c5812bbc8c18e98e2378974925fc6248182ebb1b57f4ea6d3736f9d4c052c23ee92b6498ff70794bd3b6fb3cc000029ed8724eef8954d99bb601cf79d0e4ab5911e0c3900900cde0e462d2022ac31f892ab5d2fe28026de0011dd0971efc7ccfcd6b2d52ba3833a3f8ec598dc1c5c75a091fc49563641d67d6702e58aa2c4e3309143fc600fbd"], 0x28}, 0x44081) (async)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="100000000000000000000000000000001800000000000000290000000b00000023e9c63444a6f52e430dec9a1ddc8b1d6294cb3a33ca1db9fd391e0762d8f3aef13e31be06ce3d19f43df5285ee35eb3551d554efecdc83bc4cfa594599b9e44c8b050aacbf7329f203702d5b568cedd33a6cbf12e11e46cd6be09a2ad7b44348437aa984e4a1d696a1557700017ded93d1fb898b221a33bab86032f2bebc483b1530c5812bbc8c18e98e2378974925fc6248182ebb1b57f4ea6d3736f9d4c052c23ee92b6498ff70794bd3b6fb3cc000029ed8724eef8954d99bb601cf79d0e4ab5911e0c3900900cde0e462d2022ac31f892ab5d2fe28026de0011dd0971efc7ccfcd6b2d52ba3833a3f8ec598dc1c5c75a091fc49563641d67d6702e58aa2c4e3309143fc600fbd"], 0x28}, 0x44081)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) (async)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000021000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000900000000000000000000000105000000"], 0x0, 0x42}, 0x28)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1d64, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1d64, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb01001800000000000000400000004000000002000000000000000000000300000000030000000200000000000000000000000000000105000000000003000000000200040000000000d3fa2b11ac801b27d72fec2868d2f26909011c305fe553e3657db0090057b2c8ae0f95c79f46412d48f08e80b31ea9a15945207743b349da29cbbd634fc8499a2c50614d2e1791e463e332d8eb0657f1d83d94bd4057a25045eaff39a822e4634cdf56f67087f93e4b519288a88c489887683e93ad25886e93d5ce49f65a37ac139b7aefc362fe0409520918b535c1000000000000000000"], 0x0, 0x5a}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r4}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
r5 = socket$kcm(0x2c, 0x3, 0x0)
setsockopt$sock_attach_bpf(r5, 0x11b, 0x6, 0x0, 0x0)
close(0x3)
syz_clone(0x4b200000, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
syz_clone(0x4b200000, 0x0, 0x0, 0x0, 0x0, 0x0)

2m8.493380571s ago: executing program 7 (id=3925):
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@ifindex, 0xd, 0x1, 0x9, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0}, 0x40)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3, 0x4, 0x4, 0x98, 0x0, 0x1}, 0x48)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218100000", @ANYRES32=r0, @ANYBLOB="000000000000000018100000", @ANYRES32=r1, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r2, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5ff, 0x0, 0x8, 0x0, 0x0}}, 0x10)

2m8.263524974s ago: executing program 7 (id=3927):
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1000000000000, 0xffffffffffffffff, 0x0)
socket$kcm(0x2, 0x1000000000000002, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x10, 0x110, 0x1}], 0x10}, 0x1100)

2m8.013939909s ago: executing program 7 (id=3929):
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_RESET(r0, 0x40049409, 0x3)
r1 = socket$kcm(0x2, 0x200000000000001, 0x0)
r2 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000d40))
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x21)
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x7, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000d00)='GPL\x00', 0x4, 0xed, &(0x7f0000000340)=""/237, 0x40f00}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r5, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000001380)}}, 0x10)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1acffbdf19000000040000000400000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8b0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4)
sendmsg$inet(r9, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000)
r10 = gettid()
r11 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r12 = gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r12, r11, 0x0, 0x1, &(0x7f0000000740)='\x04 @=\xc8\xc1\xa75\xdf\\\x8eN\xc84\x05!\x9cI\xbc\xaf\x01\xd5\xd0GD\x96\x1c\x9c~\xbb\xc4wXB&\xf5\x8e\x00\x00\x00\x00\x8bY\xcasD\t\xe0\xac*\a\x95@\xd6\xd1C-Ft\x97)|\xad\xf1b\x15\x1f]\xf0>\xea$6\x9d\xe5(H@\x00\x00\x00\xe2-\x95\xb2\xa6\xac\xa8!N\x86\xe5\xb7\x95\xff+~\x9fF*\x1esP\x87(\x8f\xd7\xc5\xa8\xf7\x19\xc6\xc0\'\xa2\xc4\xc2\x99a\x00K\x0f\x1c\xbb\x8b>\xb1H{\xd6\xa1\xf0$\x86\xb4\t\x97\x81\x16\x8a\xde\x12\x15\xf0*\\\xc1q<\x18\xf1B\xa5\xf6\x89\x8c\xfb\xd2\x16\x92\xf9e\x0f\xb8\xe1\x005\xf7\x15\x820,\xdc\xd1\xfa\x82\xf1eb\xa7\tAM\xb5\xd4\xaf\xba\xcaV\r\x7fy\xa4q\x12\xa8C\x04O\xdb\xe7f\xa5-\a\x00\x00\x00\xab5\xce\x10\x92G\x02\x1eh<\x9a\x97\x1b\xbe\r\x13\x16\xb5U#\xd2ml&\xfa\xffu\x98Kt\xc5\\e\xf1/\xb3\xc8T\xfc\x03Uuq\xcd\xbc\xc7J[?_\xf6&\xd0y\xbe\xe8\x8a\x18\tg{LD\x81\x82I\x18\x16jD\xdb\x86\xfcN\xf7\xdcw\xd6-5\xce\xe0c\xb0\xf0K\xa7\xd1Z<]l\xad\x84;\x92=-jc|/\x88C9\xf8\xbaM\xda\x96\xe3\xe3lw\xa5\xb3y\x9eP\x9c%\fg\x15\x0e\x0e\x83-\x14ur$\x18\xd6\x1d\xa6\'#\xb4\xca\x18\xa9\xbbc9\xc5\xb3\x8f\xed\xea\a\xfa+F\x9aO\x9d\xb6\xfc#\xf96M\x0f\x1c\x19\x9f\xed\xd5$`\xffR\x8b\xa2\x86\xa6\xb4\xdb\x12@T\x7f\xe3\x13c\xbe\x0fU\x9a\xfb\xcf8\x048\xeb+aW E\x1bB\xf72\xf8\xea.hw\x97\x1f\x88[4`\xe0\x03b\xe2\xf8l\xe42:\xcdWy\x17#pZ\xdd\'\xc4+\xf3\xb3\x92\x85Q\xdf\xfb\"\x82]bO\xff\x00'}, 0x11)
sendmsg$unix(r8, &(0x7f0000001000)={&(0x7f0000000600)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000940)=[{&(0x7f0000000680)="34c49735774a907c468baa4e8b29010a6d39ce0215d948443432389f9bb40f60d1eb88047fce31ba9cf97a03e97815df2409a8ca5b1ca7201ebd0848beff8cabd8d558b87e30e8c1b1cb14e6021b370b630fef16f0905c4e2275d208ab253e460c451ef3492bfb7e2d6dc5af6f734b81602b37e9bc15055773e3af", 0x7b}, {&(0x7f0000000700)="7676b1924240320a76a388aa691b765fb952d81e8b705d8048387003e39615c9ace7cb7a534b0e835fbfb39a5b63161992a63654625392af793d03fbd40edaf338f7a6c0d2f4d7edaa5963b3f4233982677beb5bbee2ab4d017a3f3060fadd5ef07f51b578cdb8bee4e8382cf199f96dceb4d1ba51b165f67ec784981fa4f2f18a3acd039939c7accd6ce7d73eedb499a2497f39dc0252e444764ac4d2e7341c3caba672a691213c138e3f1fb3f2471c1a7b0d9f61f317d8f30511d35f9915e57d7d581badf1db0cb0fcc54d059fb017f41cb9d2c8eb3fd275", 0xd9}, {&(0x7f0000000a40)="8e523791442ef202ca913812cea56817921c755a1189c7f52cf3b5441f457afcae6c7d5722af42f637000b34d57367089cbcd7c3bb7bcf4dfa260c9b000e67a7af5a5ac005ab94e74f82636b4f7827481dbad04774ac6d6ea4e2331aa3c256f0ca4b02ce08794d450b05e549c0649574c82c7e2ef8aa7084efb9425078cc4d3793acc945169869f733a8bfc044e207b53d805a336872fa", 0x97}, {&(0x7f0000000800)="c73ea257cf50c52d61799494a7802e732e0f7cf6fe52649fbc0d4deead9c", 0x1e}, {&(0x7f0000000b00)="b7a523db31238778808e447ce2faa3e6016af8d5f1e7baaff72815b21ca6a83cc95c353676b09849a88507ce3c4284a30dc87e8e015e3be13d63c31663373afc89d03090659ac2d1dc9229e050074035d04fbb61f3e6197b389bb167c005e06a815603d7a0b72ed185bae37450f9abc2e7ffbb3ef50097e5933647b8eac1921db255f43070505abc636f935027067956f45db1da7b8db17691cc69bb84fe4012bfba72eefa51c8e00e8e80f18c62ed0d2e98d1301b9f3abe4e5069a5842fc71aeba1344845daa806f4a4a93cb2c521", 0xcf}, {&(0x7f0000000c00)="0176b7530a0b8397efb6f568902808f9b5e6eb4b5249071a34ed4e255aa226fe55f12ab4db47f320cae909d4c022a84c7ff1d2603e92f405f3af7f907446791009d6cf545d0ae0fc7aa03bc5a6f0e77ca92835ebc5189f7679ca2ae95e6721b19462270faa05185c57c11feda77b22d44d16aea6502c6b7831c6b09cffe6caf6b707cf524e5b74251163bd5359257a469a8034da1a35b8e342230e52271d7e0f96238a92ff4bec00c882d6431083b6ec118f9d8f167d62108f6266dc9d9eceae1b4236100172b18028651912454ccbcaa64968cec542bbc0be6c86153752e164228a8017c622f29755751d8017322c7413cdde88", 0xf4}], 0x6, &(0x7f0000000e80)=ANY=[@ANYRESHEX=r1, @ANYRES32=0x0, @ANYRES32, @ANYRES32=0xee00, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r10, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r12, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000006000000000000fac5ae3ee5a85cb43b6d82a329989d6257417a446291d38ec958feb029a45a6d23f24e170e12fa8619b46279164670746c44a7b1f2275d8373d75e291f82dcd7e96ca3ab8333bb2738786663a39e2efa8a06ea8f01f0e849d7f8926cd7e2b15975c633a01d1abbc65d9bbabbf5a2cf6d151b491330b224a0e05ada5e5794252e4e9528cbdfa50ac5389c0335a2b0b471995d3d7a2a8ce16afc", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r7, @ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0xc0, 0x80}, 0x0)
ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x0)
perf_event_open(&(0x7f00000002c0)={0x5, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0xc8a04, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000140), 0x2}, 0x0, 0x1, 0x8, 0x8, 0x200000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4}, 0x48)
ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0)
ioctl$TUNSETCARRIER(r4, 0x400454e2, &(0x7f00000000c0))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r13, 0x300f000, 0xe, 0x0, &(0x7f0000000080)="0069c2704ade28eddb0000200000", 0x0, 0x48b8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

2m7.338496948s ago: executing program 7 (id=3935):
r0 = socket$kcm(0x10, 0x2, 0x4)
r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ceb71c0010ec90db133c22a690ae7080000000000040875b0089"], 0xfe1b)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="1c00000000000300000000000000010045"], 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x100, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f3, &(0x7f0000000480)='G\xe0\xd7\xb7\xb5\x05s0\xcd\xc67w\xc9\xdbt\x14,\x13uF\xd5\x05\xfc\x8bg\x18\x00\x91j\\VD\xe4\xe7\xb1\x91\x8d\xa7A,9\xc0p{\xdekB\xdb\xab{%\x11\xe0\xff\x82\v\x91\x13\x91\xa0\x9fB\x1c\xebY\xb0\xd8\x94x&')
close(r1)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d0002117ea6e070d6064e22000300000001250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

2m7.031316087s ago: executing program 7 (id=3937):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r2}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x20, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000fffffff80000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000007000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020737200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2m6.681031307s ago: executing program 7 (id=3939):
syz_clone(0x10eb22f000, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x5}, 0x14105, 0x2f, 0xff7ffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xc, 0xffffffffffffffff, 0x9)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r2, &(0x7f0000000000)={'a', ' *:* ', 'w\x00'}, 0x8)
r3 = openat$cgroup_devices(r1, &(0x7f0000000640)='devices.allow\x00', 0x2, 0x0) (async)
r4 = socket$kcm(0x25, 0x5, 0x0)
sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)}], 0x1}, 0x0) (async)
r5 = openat$cgroup_devices(r1, &(0x7f0000000580)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r5, &(0x7f00000000c0)={'c', ' *:* ', 'm\x00'}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r6 = openat$cgroup_ro(r1, &(0x7f00000009c0)='cpuset.memory_pressure\x00', 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x13, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={<r9=>0xffffffffffffffff})
recvmsg$unix(r9, &(0x7f0000000540)={&(0x7f00000003c0), 0x6e, &(0x7f0000000300)=[{&(0x7f00000004c0)=""/99, 0x63}, {&(0x7f0000000740)=""/252, 0xfc}, {&(0x7f00000005c0)=""/122, 0x7a}, {&(0x7f0000000b40)=""/217, 0xd9}], 0x4, &(0x7f0000000840)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}, 0x160) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r10}, 0x3d) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='hrtimer_start\x00', r7}, 0x18)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
write$cgroup_devices(r3, 0x0, 0x9) (async)
syz_clone(0x24001100, 0x0, 0x8, 0x0, 0x0, 0x0)

1m57.497572386s ago: executing program 36 (id=3886):
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0400000004000000040000000c00000000000000", @ANYRES32, @ANYBLOB="00a543a9e88c000000000000000000000000001f0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r0 = socket$kcm(0xa, 0x2, 0x73)
setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f0000000200), 0x4)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x28}, 0x44081) (async)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x28}, 0x44081)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) (async)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000021000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000900000000000000000000000105000000"], 0x0, 0x42}, 0x28)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1d64, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1d64, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb01001800000000000000400000004000000002000000000000000000000300000000030000000200000000000000000000000000000105000000000003000000000200040000000000d3fa2b11ac801b27d72fec2868d2f26909011c305fe553e3657db0090057b2c8ae0f95c79f46412d48f08e80b31ea9a15945207743b349da29cbbd634fc8499a2c50614d2e1791e463e332d8eb0657f1d83d94bd4057a25045eaff39a822e4634cdf56f67087f93e4b519288a88c489887683e93ad25886e93d5ce49f65a37ac139b7aefc362fe0409520918b535c1000000000000000000"], 0x0, 0x5a}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r4}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
r5 = socket$kcm(0x2c, 0x3, 0x0)
setsockopt$sock_attach_bpf(r5, 0x11b, 0x6, 0x0, 0x0)
close(0x3)
syz_clone(0x4b200000, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
syz_clone(0x4b200000, 0x0, 0x0, 0x0, 0x0, 0x0)

1m50.937206651s ago: executing program 37 (id=3939):
syz_clone(0x10eb22f000, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x5}, 0x14105, 0x2f, 0xff7ffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xc, 0xffffffffffffffff, 0x9)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r2, &(0x7f0000000000)={'a', ' *:* ', 'w\x00'}, 0x8)
r3 = openat$cgroup_devices(r1, &(0x7f0000000640)='devices.allow\x00', 0x2, 0x0) (async)
r4 = socket$kcm(0x25, 0x5, 0x0)
sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)}], 0x1}, 0x0) (async)
r5 = openat$cgroup_devices(r1, &(0x7f0000000580)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r5, &(0x7f00000000c0)={'c', ' *:* ', 'm\x00'}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r6 = openat$cgroup_ro(r1, &(0x7f00000009c0)='cpuset.memory_pressure\x00', 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x13, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={<r9=>0xffffffffffffffff})
recvmsg$unix(r9, &(0x7f0000000540)={&(0x7f00000003c0), 0x6e, &(0x7f0000000300)=[{&(0x7f00000004c0)=""/99, 0x63}, {&(0x7f0000000740)=""/252, 0xfc}, {&(0x7f00000005c0)=""/122, 0x7a}, {&(0x7f0000000b40)=""/217, 0xd9}], 0x4, &(0x7f0000000840)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}, 0x160) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r10}, 0x3d) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='hrtimer_start\x00', r7}, 0x18)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
write$cgroup_devices(r3, 0x0, 0x9) (async)
syz_clone(0x24001100, 0x0, 0x8, 0x0, 0x0, 0x0)

4.218898152s ago: executing program 5 (id=4898):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], 0x0}, 0x94)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x10100}, 0x0, 0xaffffffeffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080))
write$cgroup_subtree(r2, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102032900fe08000e40000200875a65969ff57b00000000000000000000000000ac"], 0xfdef)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001680)=ANY=[@ANYBLOB="05000000010000008e000000c9e7000001"], 0x48)
bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xe30a, r4}, 0x38)

4.173501815s ago: executing program 8 (id=4899):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$tipc(r3, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0)
recvmsg(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x2000000)

3.91331026s ago: executing program 3 (id=4904):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001", @ANYRES32=0x0], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x210840, 0x0)
ioctl$TUNGETVNETBE(r3, 0x800454df, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, &(0x7f0000000340), &(0x7f0000000380)=r5}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080))
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r1)

3.841184324s ago: executing program 9 (id=4905):
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x49, 0x1}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{}, 0x0, 0x0}, 0x20)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"})

3.278994077s ago: executing program 8 (id=4910):
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffd, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x2037, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x8}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r2}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000fffe800000000000"], 0xfdef)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0xffffffffffffffae}, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xfdef)

3.112891987s ago: executing program 8 (id=4912):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x401}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000680)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102033300fe08000e40000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef)

3.025939612s ago: executing program 5 (id=4913):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080))
write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd63"], 0xfdef)

3.021558082s ago: executing program 9 (id=4914):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x4, 0xfff, 0x6}, 0x50)

2.915194719s ago: executing program 3 (id=4915):
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l')
r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080))
write$cgroup_pid(r2, 0x0, 0x0)

2.877470641s ago: executing program 9 (id=4916):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11100, 0x0, 0xfffffffc, 0x0, 0x0, 0x81}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(0x0, 0x100)
close(0xffffffffffffffff)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000003c0)}, 0x2000010)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000740)='ns/uts\x00')
bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000640)='cpuset.mem_hardwall\x00', 0x2, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$tipc(r2, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)}, 0x0)
syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0)

2.845909032s ago: executing program 8 (id=4917):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0xfffffffffffffd85, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x739d, 0x0, 0x0, 0xfffffffffffffff3}, 0x28)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x440, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r3}, 0x10)
unlink(&(0x7f0000000140)='./cgroup\x00')
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000140)=ANY=[], 0xfffffdef)

2.629369005s ago: executing program 6 (id=4918):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x1}, 0x15008}, r0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800})

2.356901332s ago: executing program 5 (id=4919):
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x39, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000001000}, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x9)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x275a, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
write$cgroup_int(r0, &(0x7f0000000200), 0x43451)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='memory.events\x00', 0x100002, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0x43451)

2.173359582s ago: executing program 9 (id=4920):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000b9f1dc47c5a77bc50000000000000000", @ANYRES32=0x0, @ANYRES32], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f5085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_clone(0x22023500, 0x0, 0x20010, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x29, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f005dd1be0ffff00fe3a21632f77fbac14141de007031762079f4b4d2f87", 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x4, 0x8, 0x2c, 0x5, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={0x0, 0xb}, 0x14ae4, 0x9, 0x9, 0x9, 0x0, 0x0, 0xfff, 0x0, 0x7ff, 0x0, 0x9}, 0x0, 0x40003, 0xffffffffffffffff, 0x1)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x400})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f0, &(0x7f0000000080))
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b8000f06da1560001000000000000000000000071107ac9ecfc1642445760784c64a7bfbf6ea27579f0f9844137a8c1fa749a0684d6403ddb9bee9a156f8d679100a47c3994ce23e3738c546a70d2d1a2ac9d30f69407413a0d707d2f1737f8abd4045691ccee6cf510ab37b68ab15f1e774e6426244b085a6491c09897e5f33fa0ed10e396a295124b149f3c21093f39eb28cadcf6f03531e78ad246c2279605dea967ae7ae40d3fdf09836fefd01de482ed0661b3c15ec5f0574de1b2b9a04d9a00ca5fd2c4daf167e2ccecaf65d539091ef30f31f64ab8c38da5de", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0)
ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110c23003f)
write$cgroup_int(r4, &(0x7f00000002c0)=0x9, 0x12)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2e}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.061456569s ago: executing program 6 (id=4921):
bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x1c, 0x20000000000000bb, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1, <r2=>0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r2, 0x0, &(0x7f0000001780)=""/4096}, 0x20)

1.947165935s ago: executing program 5 (id=4922):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES16=r0], 0x48)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffd63)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x28, 0x6, 0x0, 0x44)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0}}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x200, '\x00', r3, 0xffffffffffffffff, 0x1, 0x2, 0x1}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz0\x00', 0x200002, 0x0)
mkdirat$cgroup(r4, &(0x7f00000003c0)='syz0\x00', 0x1ff)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='task_rename\x00'}, 0x10)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x2, 0xc}, 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001540)={{r8}, &(0x7f00000014c0), &(0x7f0000001500)=r7}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7968dd98"], 0xfdef)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000140)={'nr0\x00', 0x6132})
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xfe3a)

1.854217751s ago: executing program 6 (id=4923):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r2}, 0x10)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)={<r3=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r3, 0x1, 0x1d, &(0x7f0000000200), 0x4)

1.785441015s ago: executing program 3 (id=4924):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000300), &(0x7f00000003c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000c0000000000000000000002020000000000"], &(0x7f0000000640)=""/204, 0x5c, 0xcc, 0x1}, 0x28)

1.69303847s ago: executing program 8 (id=4925):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000003c0)='mm_page_alloc\x00', r1}, 0x18)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8f1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
close(r4)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r4, 0x40047451, &(0x7f0000000180))

1.577142137s ago: executing program 3 (id=4926):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2620}, 0x94)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
socketpair(0x2, 0x1, 0x0, &(0x7f0000000000))
write$cgroup_subtree(r0, &(0x7f0000000080), 0xfffffffffffffda5)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
close(r3)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x72}, [@ldst={0x3, 0x3, 0x3, 0x1c10a1, 0x0, 0x98}]}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40305828, &(0x7f0000000040))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)

1.411644097s ago: executing program 6 (id=4927):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc)

1.268697575s ago: executing program 5 (id=4928):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000006000000000000000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r0}, 0x10)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5}, 0x0, 0x0, r1, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xb, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000611214000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000200))
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/63}, 0x20)

1.171848981s ago: executing program 6 (id=4929):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='kmem_cache_free\x00', r0}, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r1, &(0x7f0000000940)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e488a8"], 0x12)

715.789968ms ago: executing program 5 (id=4930):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'pim6reg1\x00', 0x2})
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r3}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast})

233.965696ms ago: executing program 8 (id=4931):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000010080)={{r1}, 0x0, 0x0}, 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
close(r3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
unlink(0x0)

196.719558ms ago: executing program 6 (id=4932):
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1})
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r1}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r3}, 0x10)
close(r0)

133.454722ms ago: executing program 9 (id=4933):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00', r0}, 0x10)
perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xfe, 0x3, 0x3, 0x2, 0x0, 0x0, 0x100281, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x108202, 0xc8, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1000005}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$unix(r2, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r1, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000000)={[{0x2b, 'freezer'}, {0x2d, 'net_cls'}]}, 0x12)

132.999892ms ago: executing program 3 (id=4934):
bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e)

12.132369ms ago: executing program 9 (id=4935):
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}, 0xa08, 0x0, 0x0, 0x3, 0x3, 0xa547}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080))

0s ago: executing program 3 (id=4936):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
close(r0)

kernel console output (not intermixed with test programs):

_0
[  464.472320][  T144] batman_adv: batadv0: Removing interface: batadv_slave_0
[  464.489342][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  464.502352][  T144] batman_adv: batadv0: Removing interface: batadv_slave_1
[  464.522881][  T144] device bridge_slave_1 left promiscuous mode
[  464.570224][  T144] bridge0: port 2(bridge_slave_1) entered disabled state
[  464.593415][  T144] device bridge_slave_0 left promiscuous mode
[  464.625191][  T144] bridge0: port 1(bridge_slave_0) entered disabled state
[  464.656474][  T144] device veth1_macvtap left promiscuous mode
[  464.662577][  T144] device veth0_macvtap left promiscuous mode
[  464.675503][  T144] device veth1_vlan left promiscuous mode
[  464.691688][  T144] device veth0_vlan left promiscuous mode
[  464.923561][   T23] Bluetooth: hci4: command 0x040f tx timeout
[  465.418811][  T144] team0 (unregistering): Port device team_slave_1 removed
[  465.442078][  T144] team0 (unregistering): Port device team_slave_0 removed
[  465.470751][  T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  465.485579][T14881] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.3336'.
[  465.503167][  T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  465.591744][  T144] bond0 (unregistering): Released all slaves
[  465.726551][T14845] device syzkaller0 entered promiscuous mode
[  465.919808][T14620] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  466.117715][T14891] netlink: 196 bytes leftover after parsing attributes in process `syz.5.3340'.
[  466.134685][T14620] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  466.175292][T14620] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  466.282167][T14620] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  466.461495][T14910] netlink: 209844 bytes leftover after parsing attributes in process `syz.7.3343'.
[  466.673085][T14914] netlink: 'syz.5.3344': attribute type 5 has an invalid length.
[  466.838781][T14620] 8021q: adding VLAN 0 to HW filter on device bond0
[  466.946428][T14851] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  466.974050][T14851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  467.000945][T14620] 8021q: adding VLAN 0 to HW filter on device team0
[  467.009557][   T23] Bluetooth: hci4: command 0x0419 tx timeout
[  467.075160][T14250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  467.104299][T14250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  467.131453][T14250] bridge0: port 1(bridge_slave_0) entered blocking state
[  467.138664][T14250] bridge0: port 1(bridge_slave_0) entered forwarding state
[  467.211447][T14250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  467.276926][T14930] netlink: 'syz.7.3347': attribute type 3 has an invalid length.
[  467.284586][T14250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  467.326443][T14930] netlink: 13435 bytes leftover after parsing attributes in process `syz.7.3347'.
[  467.343867][T14250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  467.382431][T14250] bridge0: port 2(bridge_slave_1) entered blocking state
[  467.389625][T14250] bridge0: port 2(bridge_slave_1) entered forwarding state
[  467.450977][T14250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  467.655359][T14250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  467.667669][T14250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  467.703498][T14250] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  467.712705][T14250] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  467.733184][T14946] netlink: 'syz.5.3351': attribute type 10 has an invalid length.
[  467.769574][T14946] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3351'.
[  467.795925][T14946] batman_adv: batadv0: Adding interface: virt_wifi0
[  467.802589][T14946] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  467.893119][T14946] batman_adv: batadv0: Interface activated: virt_wifi0
[  467.905286][T14250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  467.941398][T14250] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  467.987272][T14851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  468.039579][T14851] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  468.081765][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  468.102563][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  468.157609][T14620] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  468.754742][T14961] netlink: 144316 bytes leftover after parsing attributes in process `syz.5.3355'.
[  469.258627][T14974] netlink: 'syz.5.3358': attribute type 3 has an invalid length.
[  469.326749][T14974] netlink: 118424 bytes leftover after parsing attributes in process `syz.5.3358'.
[  469.471993][T14250] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  469.490089][T14250] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  469.551593][T14620] 8021q: adding VLAN 0 to HW filter on device batadv0
[  470.444389][T15002] device syzkaller0 entered promiscuous mode
[  471.465007][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  471.554423][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  471.620632][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  471.647157][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  471.684442][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  471.703496][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  471.762653][T14620] device veth0_vlan entered promiscuous mode
[  471.843891][T14620] device veth1_vlan entered promiscuous mode
[  471.970139][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  472.013594][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  472.039980][T14620] device veth0_macvtap entered promiscuous mode
[  472.087992][T15045] netlink: 'syz.5.3372': attribute type 9 has an invalid length.
[  472.111157][T14620] device veth1_macvtap entered promiscuous mode
[  472.133605][T15045] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.3372'.
[  472.441812][T14620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  472.479598][T14620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  472.490824][T14620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  472.502070][T14620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  472.512383][T14620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  472.572967][T14620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  472.582847][T14620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  472.615449][T14620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  472.632365][T14620] batman_adv: batadv0: Interface activated: batadv_slave_0
[  472.686385][T14250] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  472.702540][T14250] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  472.766914][T14250] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  472.791013][T14250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  472.816939][T14620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  472.835012][T14620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  472.850626][T14620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  472.861778][T14620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  472.884156][T14620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  472.906726][T14620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  472.933079][T14620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  472.954930][T14620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  472.976280][T14620] batman_adv: batadv0: Interface activated: batadv_slave_1
[  473.066363][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  473.076719][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  473.091607][T14620] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  473.114197][T14620] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  473.129162][T14620] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  473.147550][T14620] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  473.419556][  T144] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  473.595736][  T144] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  473.837661][  T144] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  474.192347][T14851] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  474.202086][T15106] netlink: 'syz.5.3389': attribute type 10 has an invalid length.
[  474.358695][T14851] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  474.390135][T15106] team0: Port device dummy0 added
[  474.493748][  T144] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  474.525798][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  474.554067][ T4364] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  474.632472][ T4364] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  474.657762][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  474.871307][T15123] netlink: 144316 bytes leftover after parsing attributes in process `syz.5.3391'.
[  475.058595][T15130] netlink: 'syz.7.3394': attribute type 10 has an invalid length.
[  475.998278][T15157] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.3399'.
[  478.224129][T15242] FAULT_INJECTION: forcing a failure.
[  478.224129][T15242] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  478.253096][T15242] CPU: 1 PID: 15242 Comm: syz.6.3422 Not tainted syzkaller #0
[  478.260866][T15242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  478.270975][T15242] Call Trace:
[  478.274385][T15242]  <TASK>
[  478.277372][T15242]  dump_stack_lvl+0x188/0x250
[  478.282103][T15242]  ? show_regs_print_info+0x20/0x20
[  478.287351][T15242]  ? load_image+0x400/0x400
[  478.291916][T15242]  ? __lock_acquire+0x7d10/0x7d10
[  478.297001][T15242]  ? vfs_write+0x8b2/0xd60
[  478.301549][T15242]  should_fail+0x38c/0x4c0
[  478.306023][T15242]  _copy_from_user+0x2e/0x170
[  478.310742][T15242]  __sys_bpf+0x26d/0x6f0
[  478.315030][T15242]  ? bpf_link_show_fdinfo+0x380/0x380
[  478.320494][T15242]  ? vtime_user_exit+0x2c8/0x3e0
[  478.325579][T15242]  __x64_sys_bpf+0x78/0x90
[  478.330040][T15242]  do_syscall_64+0x4c/0xa0
[  478.334496][T15242]  ? clear_bhb_loop+0x30/0x80
[  478.339212][T15242]  ? clear_bhb_loop+0x30/0x80
[  478.343943][T15242]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  478.349996][T15242] RIP: 0033:0x7fbd64c51cb9
[  478.354446][T15242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  478.374091][T15242] RSP: 002b:00007fbd62ead028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  478.382648][T15242] RAX: ffffffffffffffda RBX: 00007fbd64eccfa0 RCX: 00007fbd64c51cb9
[  478.390670][T15242] RDX: 0000000000000094 RSI: 0000200000000b00 RDI: 0000000000000005
[  478.398748][T15242] RBP: 00007fbd62ead090 R08: 0000000000000000 R09: 0000000000000000
[  478.406762][T15242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  478.414788][T15242] R13: 00007fbd64ecd038 R14: 00007fbd64eccfa0 R15: 00007ffc4af50328
[  478.423017][T15242]  </TASK>
[  478.634392][T15247] netlink: 'syz.8.3424': attribute type 3 has an invalid length.
[  478.656560][T15247] netlink: 118424 bytes leftover after parsing attributes in process `syz.8.3424'.
[  479.500833][T15274] netlink: 'syz.5.3431': attribute type 10 has an invalid length.
[  479.632405][  T144] device hsr_slave_0 left promiscuous mode
[  479.649104][  T144] device hsr_slave_1 left promiscuous mode
[  479.682472][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  479.695815][  T144] batman_adv: batadv0: Removing interface: batadv_slave_0
[  479.714468][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  479.722349][  T144] batman_adv: batadv0: Removing interface: batadv_slave_1
[  479.743910][  T144] device bridge_slave_1 left promiscuous mode
[  479.768864][  T144] bridge0: port 2(bridge_slave_1) entered disabled state
[  480.131712][  T144] device bridge_slave_0 left promiscuous mode
[  480.142434][  T144] bridge0: port 1(bridge_slave_0) entered disabled state
[  480.188234][  T144] device veth1_vlan left promiscuous mode
[  480.217671][  T144] device veth0_vlan left promiscuous mode
[  480.711706][  T144] team0 (unregistering): Port device team_slave_1 removed
[  480.761451][  T144] team0 (unregistering): Port device team_slave_0 removed
[  480.782536][  T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  480.809990][  T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  480.906211][  T144] team0 (unregistering): Port device dummy0 removed
[  480.958026][  T144] bond0 (unregistering): Released all slaves
[  481.760117][T15328] netlink: 'syz.7.3449': attribute type 10 has an invalid length.
[  481.817469][T15328] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3449'.
[  483.111521][T15364] device syzkaller0 entered promiscuous mode
[  483.594679][T15378] tap0: tun_chr_ioctl cmd 2147767511
[  483.612235][T15380] tap0: tun_chr_ioctl cmd 1074025677
[  483.618946][T15380] tap0: linktype set to 2
[  483.944839][T15398] netlink: 26 bytes leftover after parsing attributes in process `syz.8.3470'.
[  485.118658][T15453] netlink: 2759 bytes leftover after parsing attributes in process `syz.2.3482'.
[  485.384050][T15441] device syzkaller0 entered promiscuous mode
[  485.521729][T15447] device syzkaller0 entered promiscuous mode
[  486.388607][T14851] tipc: Subscription rejected, illegal request
[  486.467071][T15484] netlink: 'syz.6.3492': attribute type 1 has an invalid length.
[  486.503889][T15484] netlink: 168864 bytes leftover after parsing attributes in process `syz.6.3492'.
[  487.073870][T15514] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  487.692150][T15519] netlink: 'syz.5.3500': attribute type 10 has an invalid length.
[  487.973803][T15519] team0 (unregistering): Port device team_slave_0 removed
[  488.364529][T15519] team0 (unregistering): Port device team_slave_1 removed
[  488.380619][T15519] team0 (unregistering): Port device dummy0 removed
[  488.535911][T15536] device syzkaller0 entered promiscuous mode
[  488.727005][T15553] netlink: 'syz.5.3507': attribute type 9 has an invalid length.
[  488.793341][T15553] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.3507'.
[  488.957549][T15549] netlink: 'syz.7.3506': attribute type 10 has an invalid length.
[  489.002511][T15549] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3506'.
[  489.163999][T15549] batman_adv: batadv0: Adding interface: hsr_slave_1
[  489.184628][T15549] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  489.220593][T15549] batman_adv: batadv0: Interface activated: hsr_slave_1
[  489.484861][T15548] delete_channel: no stack
[  489.794784][T15578] netlink: 'syz.7.3513': attribute type 10 has an invalid length.
[  490.066283][T15584] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  490.247835][T15591] netlink: 209844 bytes leftover after parsing attributes in process `syz.7.3516'.
[  492.513059][T15636] netlink: 144 bytes leftover after parsing attributes in process `syz.8.3528'.
[  492.869320][T15644] netlink: 144 bytes leftover after parsing attributes in process `syz.8.3530'.
[  493.910673][T15660] netlink: 'syz.5.3532': attribute type 10 has an invalid length.
[  493.948399][T15660] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3532'.
[  494.006134][T15660] batman_adv: batadv0: Adding interface: hsr_slave_1
[  494.029965][T15660] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  494.107966][T15660] batman_adv: batadv0: Interface activated: hsr_slave_1
[  494.186295][T15671] netlink: 'syz.8.3534': attribute type 10 has an invalid length.
[  494.372070][T15659] delete_channel: no stack
[  494.382554][T15671] team0 (unregistering): Port device team_slave_0 removed
[  494.421735][T15678] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  494.451464][T15671] team0 (unregistering): Port device team_slave_1 removed
[  495.314847][T15707] netlink: 180 bytes leftover after parsing attributes in process `syz.2.3543'.
[  495.366213][T15715] netlink: 'syz.6.3544': attribute type 10 has an invalid length.
[  495.467703][T15715] netlink: 55 bytes leftover after parsing attributes in process `syz.6.3544'.
[  495.786865][T15724] netlink: 'syz.2.3548': attribute type 29 has an invalid length.
[  495.851853][T15724] netlink: 'syz.2.3548': attribute type 29 has an invalid length.
[  495.888304][T15729] netlink: 'syz.2.3548': attribute type 29 has an invalid length.
[  495.947642][T15734] netlink: 'syz.2.3548': attribute type 29 has an invalid length.
[  496.016378][T15727] netlink: 'syz.7.3549': attribute type 10 has an invalid length.
[  496.840880][T15727] team0 (unregistering): Port device team_slave_0 removed
[  496.895774][T15727] team0 (unregistering): Port device team_slave_1 removed
[  496.958557][T15742] netlink: 'syz.5.3552': attribute type 1 has an invalid length.
[  496.975544][T15742] netlink: 116376 bytes leftover after parsing attributes in process `syz.5.3552'.
[  497.036869][T15747] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  498.477348][T15792] netlink: 209592 bytes leftover after parsing attributes in process `syz.5.3565'.
[  498.727322][T15801] FAULT_INJECTION: forcing a failure.
[  498.727322][T15801] name failslab, interval 1, probability 0, space 0, times 0
[  498.772327][T15801] CPU: 1 PID: 15801 Comm: syz.8.3568 Not tainted syzkaller #0
[  498.779958][T15801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  498.790050][T15801] Call Trace:
[  498.793366][T15801]  <TASK>
[  498.796481][T15801]  dump_stack_lvl+0x188/0x250
[  498.801197][T15801]  ? show_regs_print_info+0x20/0x20
[  498.806423][T15801]  ? load_image+0x400/0x400
[  498.810968][T15801]  ? __might_sleep+0xf0/0xf0
[  498.815587][T15801]  ? __lock_acquire+0x7d10/0x7d10
[  498.820644][T15801]  should_fail+0x38c/0x4c0
[  498.825088][T15801]  should_failslab+0x5/0x20
[  498.829608][T15801]  slab_pre_alloc_hook+0x51/0xc0
[  498.834569][T15801]  kmem_cache_alloc_node_trace+0x4a/0x300
[  498.840311][T15801]  ? __get_vm_area_node+0x119/0x2d0
[  498.845540][T15801]  __get_vm_area_node+0x119/0x2d0
[  498.850594][T15801]  __vmalloc_node_range+0xef/0x8b0
[  498.855724][T15801]  ? bpf_prog_alloc_no_stats+0x36/0x2c0
[  498.861293][T15801]  ? end_current_label_crit_section+0x170/0x170
[  498.867550][T15801]  ? __lock_acquire+0x7d10/0x7d10
[  498.872596][T15801]  ? perf_trace_lock_acquire+0xed/0x3e0
[  498.878251][T15801]  ? bpf_prog_alloc_no_stats+0x36/0x2c0
[  498.883816][T15801]  __vmalloc+0x76/0x80
[  498.887928][T15801]  ? bpf_prog_alloc_no_stats+0x36/0x2c0
[  498.893494][T15801]  bpf_prog_alloc_no_stats+0x36/0x2c0
[  498.898918][T15801]  bpf_prog_alloc+0x1a/0x1e0
[  498.903529][T15801]  bpf_prog_load+0x7c6/0x1510
[  498.908239][T15801]  ? map_freeze+0x350/0x350
[  498.912759][T15801]  ? __might_fault+0xb7/0x110
[  498.917584][T15801]  ? __might_fault+0xb3/0x110
[  498.922282][T15801]  ? bpf_lsm_bpf+0x5/0x10
[  498.926631][T15801]  ? security_bpf+0x7a/0xa0
[  498.931164][T15801]  __sys_bpf+0x532/0x6f0
[  498.935430][T15801]  ? bpf_link_show_fdinfo+0x380/0x380
[  498.940835][T15801]  ? vtime_user_exit+0x2c8/0x3e0
[  498.945834][T15801]  __x64_sys_bpf+0x78/0x90
[  498.950293][T15801]  do_syscall_64+0x4c/0xa0
[  498.954731][T15801]  ? clear_bhb_loop+0x30/0x80
[  498.959425][T15801]  ? clear_bhb_loop+0x30/0x80
[  498.964123][T15801]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  498.970039][T15801] RIP: 0033:0x7fea6d052cb9
[  498.974479][T15801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  498.994212][T15801] RSP: 002b:00007fea6b2ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  499.002665][T15801] RAX: ffffffffffffffda RBX: 00007fea6d2cdfa0 RCX: 00007fea6d052cb9
[  499.010665][T15801] RDX: 0000000000000094 RSI: 0000200000000b00 RDI: 0000000000000005
[  499.018655][T15801] RBP: 00007fea6b2ae090 R08: 0000000000000000 R09: 0000000000000000
[  499.026646][T15801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  499.034659][T15801] R13: 00007fea6d2ce038 R14: 00007fea6d2cdfa0 R15: 00007fff30a72308
[  499.042667][T15801]  </TASK>
[  499.103579][T15801] syz.8.3568: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz8,mems_allowed=0-1
[  499.193090][T15801] CPU: 0 PID: 15801 Comm: syz.8.3568 Not tainted syzkaller #0
[  499.200637][T15801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  499.210737][T15801] Call Trace:
[  499.214091][T15801]  <TASK>
[  499.217049][T15801]  dump_stack_lvl+0x188/0x250
[  499.221797][T15801]  ? rcu_lock_release+0x5/0x20
[  499.226652][T15801]  ? show_regs_print_info+0x20/0x20
[  499.231900][T15801]  ? load_image+0x400/0x400
[  499.236542][T15801]  warn_alloc+0x243/0x320
[  499.240914][T15801]  ? zone_watermark_ok_safe+0x240/0x240
[  499.246515][T15801]  ? __get_vm_area_node+0x2b5/0x2d0
[  499.251774][T15801]  __vmalloc_node_range+0x2b1/0x8b0
[  499.257022][T15801]  ? end_current_label_crit_section+0x170/0x170
[  499.263317][T15801]  ? __lock_acquire+0x7d10/0x7d10
[  499.268393][T15801]  ? perf_trace_lock_acquire+0xed/0x3e0
[  499.274081][T15801]  ? bpf_prog_alloc_no_stats+0x36/0x2c0
[  499.279757][T15801]  __vmalloc+0x76/0x80
[  499.283868][T15801]  ? bpf_prog_alloc_no_stats+0x36/0x2c0
[  499.289461][T15801]  bpf_prog_alloc_no_stats+0x36/0x2c0
[  499.294972][T15801]  bpf_prog_alloc+0x1a/0x1e0
[  499.299816][T15801]  bpf_prog_load+0x7c6/0x1510
[  499.304561][T15801]  ? map_freeze+0x350/0x350
[  499.309125][T15801]  ? __might_fault+0xb7/0x110
[  499.314205][T15801]  ? __might_fault+0xb3/0x110
[  499.318929][T15801]  ? bpf_lsm_bpf+0x5/0x10
[  499.323305][T15801]  ? security_bpf+0x7a/0xa0
[  499.327855][T15801]  __sys_bpf+0x532/0x6f0
[  499.332231][T15801]  ? bpf_link_show_fdinfo+0x380/0x380
[  499.337867][T15801]  ? vtime_user_exit+0x2c8/0x3e0
[  499.342855][T15801]  __x64_sys_bpf+0x78/0x90
[  499.347323][T15801]  do_syscall_64+0x4c/0xa0
[  499.351775][T15801]  ? clear_bhb_loop+0x30/0x80
[  499.356486][T15801]  ? clear_bhb_loop+0x30/0x80
[  499.361197][T15801]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  499.367296][T15801] RIP: 0033:0x7fea6d052cb9
[  499.371852][T15801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  499.391625][T15801] RSP: 002b:00007fea6b2ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  499.400189][T15801] RAX: ffffffffffffffda RBX: 00007fea6d2cdfa0 RCX: 00007fea6d052cb9
[  499.408206][T15801] RDX: 0000000000000094 RSI: 0000200000000b00 RDI: 0000000000000005
[  499.416257][T15801] RBP: 00007fea6b2ae090 R08: 0000000000000000 R09: 0000000000000000
[  499.424261][T15801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  499.432274][T15801] R13: 00007fea6d2ce038 R14: 00007fea6d2cdfa0 R15: 00007fff30a72308
[  499.440471][T15801]  </TASK>
[  500.054267][T15801] Mem-Info:
[  500.057655][T15801] active_anon:315 inactive_anon:17912 isolated_anon:0
[  500.057655][T15801]  active_file:23621 inactive_file:37414 isolated_file:0
[  500.057655][T15801]  unevictable:768 dirty:135 writeback:0
[  500.057655][T15801]  slab_reclaimable:21129 slab_unreclaimable:97020
[  500.057655][T15801]  mapped:32357 shmem:11153 pagetables:900 bounce:0
[  500.057655][T15801]  kernel_misc_reclaimable:0
[  500.057655][T15801]  free:1346848 free_pcp:11948 free_cma:0
[  500.358561][T15801] Node 0 active_anon:1228kB inactive_anon:64740kB active_file:94380kB inactive_file:149656kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:131128kB dirty:736kB writeback:0kB shmem:36136kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:12072kB pagetables:3700kB all_unreclaimable? no
[  500.514125][T15801] Node 1 active_anon:32kB inactive_anon:508kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no
[  500.774098][T15801] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  500.883045][T15801] lowmem_reserve[]: 0 2539 2540 2540 2540
[  500.888900][T15801] Node 0 DMA32 free:1468992kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:1228kB inactive_anon:56540kB active_file:94380kB inactive_file:149656kB unevictable:1536kB writepending:832kB present:3129332kB managed:2606560kB mlocked:0kB bounce:0kB free_pcp:41248kB local_pcp:21352kB free_cma:0kB
[  501.043225][T15801] lowmem_reserve[]: 0 0 0 0 0
[  501.048020][T15801] Node 0 Normal free:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB
[  501.113753][T15801] lowmem_reserve[]: 0 0 0 0 0
[  501.144686][T15801] Node 1 Normal free:3916072kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:32kB inactive_anon:508kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:7756kB local_pcp:0kB free_cma:0kB
[  501.246658][T15851] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.3578'.
[  501.287340][T15801] lowmem_reserve[]: 0 0 0 0 0
[  501.292155][T15801] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB 
[  501.298968][T15853] netlink: 'syz.6.3580': attribute type 10 has an invalid length.
[  501.333117][T15801] (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  501.339020][T15801] Node 0 DMA32: 2750*4kB (UME) 560*8kB (UME) 273*16kB (UME) 478*32kB (UME) 497*64kB (UME) 166*128kB (UME) 54*256kB (ME) 22*512kB (UM) 17*1024kB (UM) 2*2048kB (ME) 327*4096kB (UM) = 1474184kB
[  501.413155][T15801] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB
[  501.487802][T15801] Node 1 Normal: 112*4kB (UE) 25*8kB (UM) 22*16kB (UME) 166*32kB (UE) 60*64kB (UME) 23*128kB (UME) 10*256kB (UME) 4*512kB (U) 1*1024kB (U) 1*2048kB (M) 951*4096kB (M) = 3916072kB
[  501.565539][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  501.572389][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  501.594080][T15801] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  501.646692][T15801] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  501.725040][T15801] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  501.923167][T15801] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  501.951427][T15801] 68021 total pagecache pages
[  501.963275][T15801] 0 pages in swap cache
[  501.967787][T15801] Swap cache stats: add 0, delete 0, find 0/0
[  502.003118][T15801] Free swap  = 124996kB
[  502.012061][T15801] Total swap = 124996kB
[  502.035790][T15801] 2097051 pages RAM
[  502.046944][T15801] 0 pages HighMem/MovableOnly
[  502.059989][T15801] 411488 pages reserved
[  502.094145][T15801] 0 pages cma reserved
[  503.912574][T15888] device bond0 entered promiscuous mode
[  503.936091][T15888] device bond_slave_0 entered promiscuous mode
[  503.948535][T15888] device bond_slave_1 entered promiscuous mode
[  503.955415][T15866] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  504.402684][T15895] netlink: 'syz.6.3593': attribute type 10 has an invalid length.
[  504.426235][T15895] netlink: 168 bytes leftover after parsing attributes in process `syz.6.3593'.
[  504.436773][T15897] netlink: 'syz.2.3592': attribute type 2 has an invalid length.
[  504.448354][T15897] netlink: 'syz.2.3592': attribute type 8 has an invalid length.
[  504.493186][T15897] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3592'.
[  504.542730][T15898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  504.565756][T15903] netlink: 'syz.8.3595': attribute type 11 has an invalid length.
[  504.720683][T15915] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3597'.
[  504.990545][T15929] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  505.034574][T15929] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  506.226937][T15967] netlink: 'syz.6.3608': attribute type 3 has an invalid length.
[  506.265535][T15967] netlink: 118424 bytes leftover after parsing attributes in process `syz.6.3608'.
[  506.362559][T15946] device syzkaller0 entered promiscuous mode
[  506.836396][T15978] netlink: 'syz.6.3612': attribute type 6 has an invalid length.
[  506.858657][T15978] netlink: 164 bytes leftover after parsing attributes in process `syz.6.3612'.
[  507.019014][T15984] netlink: 209844 bytes leftover after parsing attributes in process `syz.5.3614'.
[  507.150688][T15990] netlink: 'syz.7.3616': attribute type 10 has an invalid length.
[  507.559026][T16008] netlink: 188 bytes leftover after parsing attributes in process `syz.5.3621'.
[  508.838988][T16034] delete_channel: no stack
[  509.712999][T16063] netlink: 'syz.6.3639': attribute type 10 has an invalid length.
[  509.783276][T16063] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3639'.
[  509.837024][T16063] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  510.117411][T16085] netlink: 'syz.6.3645': attribute type 10 has an invalid length.
[  510.173651][T16088] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3646'.
[  510.186299][T16085] netlink: 'syz.6.3645': attribute type 10 has an invalid length.
[  510.248021][T16088] debugfs: Directory '!!ô' with parent 'ieee80211' already present!
[  510.604662][T16104] FAULT_INJECTION: forcing a failure.
[  510.604662][T16104] name failslab, interval 1, probability 0, space 0, times 0
[  510.683823][T16104] CPU: 0 PID: 16104 Comm: syz.6.3653 Not tainted syzkaller #0
[  510.691367][T16104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  510.701574][T16104] Call Trace:
[  510.704876][T16104]  <TASK>
[  510.707826][T16104]  dump_stack_lvl+0x188/0x250
[  510.712538][T16104]  ? show_regs_print_info+0x20/0x20
[  510.717756][T16104]  ? load_image+0x400/0x400
[  510.722286][T16104]  ? __might_sleep+0xf0/0xf0
[  510.726906][T16104]  ? __lock_acquire+0x7d10/0x7d10
[  510.731953][T16104]  ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0
[  510.738566][T16104]  should_fail+0x38c/0x4c0
[  510.743112][T16104]  should_failslab+0x5/0x20
[  510.747736][T16104]  slab_pre_alloc_hook+0x51/0xc0
[  510.752864][T16104]  ? sk_prot_alloc+0x57/0x210
[  510.757569][T16104]  kmem_cache_alloc+0x3d/0x290
[  510.762379][T16104]  sk_prot_alloc+0x57/0x210
[  510.766996][T16104]  ? sk_alloc+0x1d/0x310
[  510.771259][T16104]  sk_alloc+0x2f/0x310
[  510.775451][T16104]  ? inet_create+0x70c/0xef0
[  510.780154][T16104]  inet_create+0x728/0xef0
[  510.784598][T16104]  __sock_create+0x47b/0x900
[  510.789215][T16104]  udp_sock_create4+0xc7/0x480
[  510.794000][T16104]  ? erspan_exit_batch_net+0x20/0x20
[  510.799421][T16104]  rxrpc_lookup_local+0xcc8/0x1580
[  510.804672][T16104]  ? rxrpc_process_local_events+0x930/0x930
[  510.810601][T16104]  ? lockdep_hardirqs_on+0x94/0x140
[  510.816007][T16104]  ? _local_bh_enable+0xa0/0xa0
[  510.820893][T16104]  rxrpc_sendmsg+0x3f1/0x890
[  510.825520][T16104]  ? rxrpc_getsockopt+0x150/0x150
[  510.830649][T16104]  ____sys_sendmsg+0x5b7/0x8f0
[  510.835439][T16104]  ? __sys_sendmsg_sock+0x30/0x30
[  510.840577][T16104]  ? import_iovec+0x6f/0xa0
[  510.845107][T16104]  ___sys_sendmsg+0x236/0x2e0
[  510.849972][T16104]  ? __sys_sendmsg+0x2a0/0x2a0
[  510.854794][T16104]  ? vfs_write+0x8b2/0xd60
[  510.859461][T16104]  __se_sys_sendmsg+0x1af/0x290
[  510.864358][T16104]  ? __x64_sys_sendmsg+0x80/0x80
[  510.869321][T16104]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  510.875354][T16104]  ? lockdep_hardirqs_on+0x94/0x140
[  510.880604][T16104]  do_syscall_64+0x4c/0xa0
[  510.885060][T16104]  ? clear_bhb_loop+0x30/0x80
[  510.889775][T16104]  ? clear_bhb_loop+0x30/0x80
[  510.894483][T16104]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  510.900400][T16104] RIP: 0033:0x7fbd64c51cb9
[  510.904832][T16104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  510.924545][T16104] RSP: 002b:00007fbd62ead028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  510.932980][T16104] RAX: ffffffffffffffda RBX: 00007fbd64eccfa0 RCX: 00007fbd64c51cb9
[  510.940974][T16104] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005
[  510.948989][T16104] RBP: 00007fbd62ead090 R08: 0000000000000000 R09: 0000000000000000
[  510.956996][T16104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  510.965067][T16104] R13: 00007fbd64ecd038 R14: 00007fbd64eccfa0 R15: 00007ffc4af50328
[  510.973078][T16104]  </TASK>
[  511.555708][T16131] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3664'.
[  513.162546][T16144] device syzkaller0 entered promiscuous mode
[  514.023567][T16176] netlink: 'syz.8.3680': attribute type 10 has an invalid length.
[  514.047766][T16176] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3680'.
[  514.111314][T16176] bridge0: port 3(ipvlan1) entered blocking state
[  514.119271][T16176] bridge0: port 3(ipvlan1) entered disabled state
[  514.132680][T16176] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  514.334875][T16194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  514.483756][T16191] netlink: 'syz.5.3685': attribute type 10 has an invalid length.
[  514.690787][T16200] netlink: 'syz.2.3687': attribute type 10 has an invalid length.
[  514.754770][T16200] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3687'.
[  515.080778][T16202] netlink: 'syz.7.3688': attribute type 10 has an invalid length.
[  515.338615][T16214] netlink: 188 bytes leftover after parsing attributes in process `syz.8.3692'.
[  516.634344][T16253] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3702'.
[  517.164029][T16270] netlink: 209844 bytes leftover after parsing attributes in process `syz.8.3710'.
[  517.973344][T16288] device syzkaller0 entered promiscuous mode
[  517.981993][T16293] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3719'.
[  518.211347][T16293] netlink: 'syz.5.3719': attribute type 1 has an invalid length.
[  518.234641][T16293] bridge0: port 1(bridge_slave_0) entered forwarding state
[  518.380905][T16307] FAULT_INJECTION: forcing a failure.
[  518.380905][T16307] name failslab, interval 1, probability 0, space 0, times 0
[  518.404034][T16307] CPU: 1 PID: 16307 Comm: syz.5.3723 Not tainted syzkaller #0
[  518.411569][T16307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  518.421682][T16307] Call Trace:
[  518.425015][T16307]  <TASK>
[  518.427971][T16307]  dump_stack_lvl+0x188/0x250
[  518.432688][T16307]  ? show_regs_print_info+0x20/0x20
[  518.437940][T16307]  ? load_image+0x400/0x400
[  518.442479][T16307]  ? __might_sleep+0xf0/0xf0
[  518.447100][T16307]  ? __lock_acquire+0x7d10/0x7d10
[  518.452154][T16307]  ? netlink_insert+0xe95/0x11f0
[  518.457153][T16307]  should_fail+0x38c/0x4c0
[  518.461627][T16307]  should_failslab+0x5/0x20
[  518.466161][T16307]  slab_pre_alloc_hook+0x51/0xc0
[  518.471142][T16307]  kmem_cache_alloc_node+0x47/0x2d0
[  518.476462][T16307]  ? __alloc_skb+0xf4/0x750
[  518.481007][T16307]  __alloc_skb+0xf4/0x750
[  518.485420][T16307]  netlink_sendmsg+0x654/0xbe0
[  518.490222][T16307]  ? netlink_getsockopt+0x570/0x570
[  518.495452][T16307]  ? aa_sock_msg_perm+0x94/0x150
[  518.500426][T16307]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  518.505744][T16307]  ? security_socket_sendmsg+0x7c/0xa0
[  518.511254][T16307]  ? netlink_getsockopt+0x570/0x570
[  518.516475][T16307]  ____sys_sendmsg+0x5b7/0x8f0
[  518.521290][T16307]  ? __sys_sendmsg_sock+0x30/0x30
[  518.526359][T16307]  ? import_iovec+0x6f/0xa0
[  518.531077][T16307]  ___sys_sendmsg+0x236/0x2e0
[  518.535798][T16307]  ? __sys_sendmsg+0x2a0/0x2a0
[  518.540609][T16307]  ? trace_event_raw_event_lock+0x270/0x270
[  518.546535][T16307]  ? vfs_write+0x8b2/0xd60
[  518.551023][T16307]  __se_sys_sendmsg+0x1af/0x290
[  518.555911][T16307]  ? __x64_sys_sendmsg+0x80/0x80
[  518.560876][T16307]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  518.566903][T16307]  ? lockdep_hardirqs_on+0x94/0x140
[  518.572134][T16307]  do_syscall_64+0x4c/0xa0
[  518.576579][T16307]  ? clear_bhb_loop+0x30/0x80
[  518.581364][T16307]  ? clear_bhb_loop+0x30/0x80
[  518.586157][T16307]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  518.592071][T16307] RIP: 0033:0x7fbf31ce5cb9
[  518.596544][T16307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  518.616268][T16307] RSP: 002b:00007fbf2ff41028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  518.624717][T16307] RAX: ffffffffffffffda RBX: 00007fbf31f60fa0 RCX: 00007fbf31ce5cb9
[  518.632715][T16307] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005
[  518.640714][T16307] RBP: 00007fbf2ff41090 R08: 0000000000000000 R09: 0000000000000000
[  518.648718][T16307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  518.656710][T16307] R13: 00007fbf31f61038 R14: 00007fbf31f60fa0 R15: 00007fff6517e438
[  518.664743][T16307]  </TASK>
[  519.540622][T16332] netlink: 'syz.2.3732': attribute type 2 has an invalid length.
[  519.549572][T16333] netlink: 'syz.5.3726': attribute type 16 has an invalid length.
[  519.559172][T16333] netlink: 156 bytes leftover after parsing attributes in process `syz.5.3726'.
[  519.892438][T16343] netlink: 'syz.6.3735': attribute type 22 has an invalid length.
[  519.934308][T16343] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3735'.
[  520.047443][T16352] netlink: 'syz.2.3738': attribute type 2 has an invalid length.
[  520.061877][T16355] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3739'.
[  520.095705][T16352] netlink: 198692 bytes leftover after parsing attributes in process `syz.2.3738'.
[  520.844734][T16397] netlink: 'syz.7.3755': attribute type 2 has an invalid length.
[  520.952090][T16397] netlink: 'syz.7.3755': attribute type 13 has an invalid length.
[  521.296922][T16419] netlink: 'syz.8.3764': attribute type 9 has an invalid length.
[  521.312419][T16423] netlink: 'syz.2.3766': attribute type 10 has an invalid length.
[  521.341749][T16419] netlink: 209836 bytes leftover after parsing attributes in process `syz.8.3764'.
[  522.797984][T16445] netlink: 'syz.7.3773': attribute type 2 has an invalid length.
[  522.879109][T16445] netlink: 198692 bytes leftover after parsing attributes in process `syz.7.3773'.
[  523.101841][T16440] device syzkaller0 entered promiscuous mode
[  525.616153][T16502] netlink: 'syz.2.3792': attribute type 2 has an invalid length.
[  525.673622][T16502] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3792'.
[  526.118567][T16510] device syzkaller0 entered promiscuous mode
[  526.320368][T16520] netlink: 'syz.2.3797': attribute type 10 has an invalid length.
[  526.356895][T16520] netlink: 55 bytes leftover after parsing attributes in process `syz.2.3797'.
[  527.490362][T16543] netlink: 188 bytes leftover after parsing attributes in process `syz.6.3802'.
[  527.867015][T16553] netlink: 'syz.7.3806': attribute type 29 has an invalid length.
[  527.933754][T16553] netlink: 'syz.7.3806': attribute type 29 has an invalid length.
[  528.060650][T16553] netlink: 'syz.7.3806': attribute type 27 has an invalid length.
[  528.140370][T16553] netlink: 164 bytes leftover after parsing attributes in process `syz.7.3806'.
[  529.266811][ T4971] Bluetooth: hci0: command 0x0406 tx timeout
[  529.493405][T16569] netlink: 17267 bytes leftover after parsing attributes in process `syz.7.3810'.
[  531.442293][T16602] netlink: 'syz.6.3820': attribute type 10 has an invalid length.
[  531.507609][T16602] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3820'.
[  531.567536][T16602] device dummy0 entered promiscuous mode
[  532.164727][T16602] team0: Port device dummy0 removed
[  532.170784][T16602] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  533.532351][T16638] FAULT_INJECTION: forcing a failure.
[  533.532351][T16638] name failslab, interval 1, probability 0, space 0, times 0
[  533.576599][T16636] netlink: 15999 bytes leftover after parsing attributes in process `syz.7.3831'.
[  533.613291][T16638] CPU: 1 PID: 16638 Comm: syz.2.3832 Not tainted syzkaller #0
[  533.620981][T16638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  533.631095][T16638] Call Trace:
[  533.634490][T16638]  <TASK>
[  533.637465][T16638]  dump_stack_lvl+0x188/0x250
[  533.642207][T16638]  ? show_regs_print_info+0x20/0x20
[  533.647452][T16638]  ? load_image+0x400/0x400
[  533.652017][T16638]  ? __might_sleep+0xf0/0xf0
[  533.656659][T16638]  ? __lock_acquire+0x7d10/0x7d10
[  533.661753][T16638]  should_fail+0x38c/0x4c0
[  533.666246][T16638]  should_failslab+0x5/0x20
[  533.670788][T16638]  slab_pre_alloc_hook+0x51/0xc0
[  533.675768][T16638]  ? rxrpc_alloc_call+0x243/0xbf0
[  533.680839][T16638]  kmem_cache_alloc+0x3d/0x290
[  533.685671][T16638]  rxrpc_alloc_call+0x243/0xbf0
[  533.690672][T16638]  rxrpc_new_client_call+0xf3/0xd30
[  533.695918][T16638]  ? rxrpc_do_sendmsg+0xaa7/0x10a0
[  533.701422][T16638]  ? do_raw_read_unlock+0x39/0x70
[  533.706513][T16638]  rxrpc_do_sendmsg+0xaa7/0x10a0
[  533.711485][T16638]  ? rxrpc_process_local_events+0x930/0x930
[  533.717481][T16638]  ? rcu_lock_release+0x20/0x20
[  533.722446][T16638]  ? rxrpc_sendmsg+0x467/0x890
[  533.727305][T16638]  ? rxrpc_getsockopt+0x150/0x150
[  533.732380][T16638]  ____sys_sendmsg+0x5b7/0x8f0
[  533.737322][T16638]  ? __sys_sendmsg_sock+0x30/0x30
[  533.742414][T16638]  ? import_iovec+0x6f/0xa0
[  533.746972][T16638]  ___sys_sendmsg+0x236/0x2e0
[  533.751737][T16638]  ? __sys_sendmsg+0x2a0/0x2a0
[  533.756605][T16638]  ? trace_event_raw_event_lock+0x270/0x270
[  533.762551][T16638]  ? vfs_write+0x8b2/0xd60
[  533.767111][T16638]  __se_sys_sendmsg+0x1af/0x290
[  533.772039][T16638]  ? __x64_sys_sendmsg+0x80/0x80
[  533.777032][T16638]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  533.783126][T16638]  ? lockdep_hardirqs_on+0x94/0x140
[  533.788401][T16638]  do_syscall_64+0x4c/0xa0
[  533.792885][T16638]  ? clear_bhb_loop+0x30/0x80
[  533.797619][T16638]  ? clear_bhb_loop+0x30/0x80
[  533.802372][T16638]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  533.808328][T16638] RIP: 0033:0x7f488d5a3cb9
[  533.812818][T16638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  533.832929][T16638] RSP: 002b:00007f488b7ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  533.841407][T16638] RAX: ffffffffffffffda RBX: 00007f488d81efa0 RCX: 00007f488d5a3cb9
[  533.849449][T16638] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005
[  533.857471][T16638] RBP: 00007f488b7ff090 R08: 0000000000000000 R09: 0000000000000000
[  533.865506][T16638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  533.873541][T16638] R13: 00007f488d81f038 R14: 00007f488d81efa0 R15: 00007fffbc3d9708
[  533.881630][T16638]  </TASK>
[  534.648805][T16651] sctp: [Deprecated]: syz.5.3836 (pid 16651) Use of int in max_burst socket option deprecated.
[  534.648805][T16651] Use struct sctp_assoc_value instead
[  535.273743][T16664] netlink: 'syz.7.3841': attribute type 10 has an invalid length.
[  535.499547][T16664] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  535.663212][T16673] netlink: 17267 bytes leftover after parsing attributes in process `syz.5.3840'.
[  537.124812][T16685] device syzkaller0 entered promiscuous mode
[  538.325970][T16698] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3848'.
[  539.996739][T16724] netlink: 'syz.5.3858': attribute type 6 has an invalid length.
[  542.786425][T16731] device syzkaller0 entered promiscuous mode
[  542.841085][T16738] device syzkaller0 entered promiscuous mode
[  542.940311][T16727] device syzkaller0 entered promiscuous mode
[  542.960940][T16747] tap0: tun_chr_ioctl cmd 1074025675
[  542.993403][T16747] tap0: persist enabled
[  543.180140][T16750] netlink: 'syz.5.3864': attribute type 4 has an invalid length.
[  543.216691][T16750] netlink: 'syz.5.3864': attribute type 1 has an invalid length.
[  543.237389][T16750] netlink: 181400 bytes leftover after parsing attributes in process `syz.5.3864'.
[  543.682959][T16759] netlink: 'syz.2.3868': attribute type 10 has an invalid length.
[  543.857833][T16759] team0 (unregistering): Port device team_slave_0 removed
[  543.922177][T16759] team0 (unregistering): Port device team_slave_1 removed
[  543.988181][T16759] team0 (unregistering): Port device geneve1 removed
[  544.173152][T16759] team0 (unregistering): Port device dummy0 removed
[  545.357555][T16787] netlink: 'syz.7.3878': attribute type 29 has an invalid length.
[  545.382527][T16787] netlink: 'syz.7.3878': attribute type 29 has an invalid length.
[  545.420384][T16789] netlink: 'syz.6.3879': attribute type 2 has an invalid length.
[  545.443137][T16787] netlink: 'syz.7.3878': attribute type 29 has an invalid length.
[  545.468607][T16789] netlink: 199824 bytes leftover after parsing attributes in process `syz.6.3879'.
[  545.493614][T16787] netlink: 'syz.7.3878': attribute type 29 has an invalid length.
[  545.534803][T16787] netlink: 'syz.7.3878': attribute type 29 has an invalid length.
[  545.812016][T16798] device syzkaller0 entered promiscuous mode
[  546.364128][T16811] syz.2.3886[16811] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  546.364258][T16811] syz.2.3886[16811] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  546.562285][T16820] netlink: 209844 bytes leftover after parsing attributes in process `syz.6.3889'.
[  548.071046][T16854] device syzkaller0 entered promiscuous mode
[  548.498781][T16871] netlink: 'syz.8.3906': attribute type 4 has an invalid length.
[  549.380382][T16892] netlink: 'syz.7.3913': attribute type 10 has an invalid length.
[  549.440963][T16893] netlink: 'syz.6.3914': attribute type 2 has an invalid length.
[  549.455281][T16892] netlink: 55 bytes leftover after parsing attributes in process `syz.7.3913'.
[  549.484789][T16893] netlink: 171236 bytes leftover after parsing attributes in process `syz.6.3914'.
[  549.724296][   T21] Bluetooth: hci3: command 0x0406 tx timeout
[  549.744059][   T21] Bluetooth: hci5: command 0x0406 tx timeout
[  550.135815][T16904] device syzkaller0 entered promiscuous mode
[  550.212525][T16909] netlink: 'syz.8.3919': attribute type 29 has an invalid length.
[  550.532612][T16922] netlink: 64967 bytes leftover after parsing attributes in process `syz.7.3923'.
[  551.771485][T16949] netlink: 209844 bytes leftover after parsing attributes in process `syz.6.3933'.
[  551.893301][T16950] netlink: 132 bytes leftover after parsing attributes in process `syz.8.3934'.
[  552.262084][T16951] team0: Port device team_slave_0 removed
[  552.340218][T16951] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  552.587103][T16964] validate_nla: 4 callbacks suppressed
[  552.587120][T16964] netlink: 'syz.8.3938': attribute type 2 has an invalid length.
[  552.653428][T16964] netlink: 199824 bytes leftover after parsing attributes in process `syz.8.3938'.
[  552.854401][T16969] FAULT_INJECTION: forcing a failure.
[  552.854401][T16969] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  553.007227][T16969] CPU: 1 PID: 16969 Comm: syz.5.3940 Not tainted syzkaller #0
[  553.014789][T16969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  553.024903][T16969] Call Trace:
[  553.028233][T16969]  <TASK>
[  553.031225][T16969]  dump_stack_lvl+0x188/0x250
[  553.036143][T16969]  ? show_regs_print_info+0x20/0x20
[  553.041407][T16969]  ? load_image+0x400/0x400
[  553.046005][T16969]  ? __lock_acquire+0x7d10/0x7d10
[  553.051132][T16969]  should_fail+0x38c/0x4c0
[  553.055648][T16969]  _copy_from_iter+0x22e/0x1170
[  553.060575][T16969]  ? __lock_acquire+0x7d10/0x7d10
[  553.065711][T16969]  ? copy_mc_pipe_to_iter+0x7d0/0x7d0
[  553.071269][T16969]  ? __virt_addr_valid+0x3c6/0x470
[  553.076450][T16969]  ? __phys_addr_symbol+0x2b/0x70
[  553.081540][T16969]  ? __check_object_size+0x30c/0x410
[  553.087119][T16969]  netlink_sendmsg+0x758/0xbe0
[  553.091991][T16969]  ? netlink_getsockopt+0x570/0x570
[  553.097268][T16969]  ? aa_sock_msg_perm+0x94/0x150
[  553.102285][T16969]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  553.107652][T16969]  ? security_socket_sendmsg+0x7c/0xa0
[  553.113201][T16969]  ? netlink_getsockopt+0x570/0x570
[  553.118470][T16969]  ____sys_sendmsg+0x5b7/0x8f0
[  553.123339][T16969]  ? __sys_sendmsg_sock+0x30/0x30
[  553.128522][T16969]  ? import_iovec+0x6f/0xa0
[  553.133113][T16969]  ___sys_sendmsg+0x236/0x2e0
[  553.137900][T16969]  ? __sys_sendmsg+0x2a0/0x2a0
[  553.142870][T16969]  ? trace_event_raw_event_lock+0x270/0x270
[  553.148829][T16969]  ? vfs_write+0x8b2/0xd60
[  553.153420][T16969]  __se_sys_sendmsg+0x1af/0x290
[  553.158354][T16969]  ? __x64_sys_sendmsg+0x80/0x80
[  553.163355][T16969]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  553.169457][T16969]  ? lockdep_hardirqs_on+0x94/0x140
[  553.174743][T16969]  do_syscall_64+0x4c/0xa0
[  553.179220][T16969]  ? clear_bhb_loop+0x30/0x80
[  553.183967][T16969]  ? clear_bhb_loop+0x30/0x80
[  553.188731][T16969]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  553.194712][T16969] RIP: 0033:0x7fbf31ce5cb9
[  553.199284][T16969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  553.219063][T16969] RSP: 002b:00007fbf2ff41028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  553.227643][T16969] RAX: ffffffffffffffda RBX: 00007fbf31f60fa0 RCX: 00007fbf31ce5cb9
[  553.235709][T16969] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005
[  553.243738][T16969] RBP: 00007fbf2ff41090 R08: 0000000000000000 R09: 0000000000000000
[  553.251766][T16969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  553.259802][T16969] R13: 00007fbf31f61038 R14: 00007fbf31f60fa0 R15: 00007fff6517e438
[  553.267978][T16969]  </TASK>
[  554.035639][T16979] netlink: 'syz.8.3945': attribute type 10 has an invalid length.
[  554.073368][T16979] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3945'.
[  554.107318][T16979] batman_adv: batadv0: Adding interface: virt_wifi0
[  554.123281][T16979] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  554.189208][T16979] batman_adv: batadv0: Interface activated: virt_wifi0
[  555.154946][T16999] netlink: 'syz.8.3953': attribute type 2 has an invalid length.
[  555.208005][T16999] netlink: 199824 bytes leftover after parsing attributes in process `syz.8.3953'.
[  555.320432][T16998] netlink: 'syz.5.3951': attribute type 10 has an invalid length.
[  555.454590][T16998] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3951'.
[  555.748967][T16998] bridge0: port 3(ipvlan1) entered blocking state
[  555.792257][T16998] bridge0: port 3(ipvlan1) entered disabled state
[  555.880678][T16998] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  558.341050][T17017] device syzkaller0 entered promiscuous mode
[  562.019218][T17062] netlink: 'syz.5.3976': attribute type 2 has an invalid length.
[  562.047073][T17062] netlink: 198692 bytes leftover after parsing attributes in process `syz.5.3976'.
[  562.119526][T17065] netlink: 'syz.8.3977': attribute type 10 has an invalid length.
[  563.015162][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  563.021618][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  564.518728][T17082] netlink: 'syz.8.3980': attribute type 10 has an invalid length.
[  564.933649][   T23] Bluetooth: hci1: command 0x0409 tx timeout
[  565.064571][T17088] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  565.934609][T17071] chnl_net:caif_netlink_parms(): no params data found
[  566.628483][T17071] bridge0: port 1(bridge_slave_0) entered blocking state
[  566.666794][T17071] bridge0: port 1(bridge_slave_0) entered disabled state
[  566.729196][T17071] device bridge_slave_0 entered promiscuous mode
[  566.776611][T17071] bridge0: port 2(bridge_slave_1) entered blocking state
[  566.827554][T17071] bridge0: port 2(bridge_slave_1) entered disabled state
[  566.867950][T17071] device bridge_slave_1 entered promiscuous mode
[  567.003683][   T21] Bluetooth: hci1: command 0x041b tx timeout
[  567.058211][T17071] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  567.209352][T17071] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  567.236076][T17111] netlink: 144 bytes leftover after parsing attributes in process `syz.6.3989'.
[  567.675556][T17071] team0: Port device team_slave_0 added
[  567.724763][T17071] team0: Port device team_slave_1 added
[  567.949564][T17071] batman_adv: batadv0: Adding interface: batadv_slave_0
[  568.023004][T17071] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  568.135148][T17071] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  568.275249][T17071] batman_adv: batadv0: Adding interface: batadv_slave_1
[  568.282292][T17071] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  568.437821][T17071] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  569.093274][ T4294] Bluetooth: hci1: command 0x040f tx timeout
[  569.312114][T17071] device hsr_slave_0 entered promiscuous mode
[  569.340008][T17071] device hsr_slave_1 entered promiscuous mode
[  570.274838][T17152] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.3999'.
[  570.363819][T17133] chnl_net:caif_netlink_parms(): no params data found
[  570.423293][T17152] debugfs: Directory '!!ô' with parent 'ieee80211' already present!
[  570.587263][T17071] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  570.653525][T17071] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  570.978753][T17071] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  571.077070][T17071] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  571.173095][ T4294] Bluetooth: hci1: command 0x0419 tx timeout
[  571.266965][T17133] bridge0: port 1(bridge_slave_0) entered blocking state
[  571.336454][T17133] bridge0: port 1(bridge_slave_0) entered disabled state
[  571.384249][T17133] device bridge_slave_0 entered promiscuous mode
[  571.430518][T17174] netlink: 'syz.8.4005': attribute type 2 has an invalid length.
[  571.454314][T17174] netlink: 'syz.8.4005': attribute type 9 has an invalid length.
[  571.466471][T17174] netlink: 'syz.8.4005': attribute type 10 has an invalid length.
[  571.484064][T17174] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4005'.
[  571.493921][   T21] Bluetooth: hci6: command 0x0409 tx timeout
[  571.560752][T17133] bridge0: port 2(bridge_slave_1) entered blocking state
[  571.570845][T17133] bridge0: port 2(bridge_slave_1) entered disabled state
[  571.596310][T17133] device bridge_slave_1 entered promiscuous mode
[  571.782303][T17133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  571.918081][T17180] device syzkaller0 entered promiscuous mode
[  571.952022][T17133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  571.998213][T17133] team0: Port device team_slave_0 added
[  572.019150][T17133] team0: Port device team_slave_1 added
[  572.212161][T17188] netlink: 209844 bytes leftover after parsing attributes in process `syz.5.4008'.
[  572.222546][T17133] batman_adv: batadv0: Adding interface: batadv_slave_0
[  572.253177][T17133] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  572.321351][T17133] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  572.399659][T17133] batman_adv: batadv0: Adding interface: batadv_slave_1
[  572.424849][T17133] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  572.504536][T17133] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  572.546917][T17194] sctp: [Deprecated]: syz.8.4010 (pid 17194) Use of struct sctp_assoc_value in delayed_ack socket option.
[  572.546917][T17194] Use struct sctp_sack_info instead
[  572.666707][T17071] 8021q: adding VLAN 0 to HW filter on device bond0
[  572.764238][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  572.778020][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  572.806118][T17071] 8021q: adding VLAN 0 to HW filter on device team0
[  572.838411][T17133] device hsr_slave_0 entered promiscuous mode
[  572.870924][T17133] device hsr_slave_1 entered promiscuous mode
[  572.891216][T17133] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  572.901698][T17133] Cannot create hsr debugfs directory
[  572.910736][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  572.948032][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  572.961967][  T144] bridge0: port 1(bridge_slave_0) entered blocking state
[  572.969164][  T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[  573.004247][T17196] netlink: 'syz.5.4011': attribute type 10 has an invalid length.
[  573.015656][T17196] device veth0_macvtap left promiscuous mode
[  573.065576][T17196] batman_adv: batadv0: Adding interface: macvtap0
[  573.092698][T17196] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  573.129452][T17196] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active
[  573.144662][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  573.165466][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  573.182850][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  573.218225][  T144] bridge0: port 2(bridge_slave_1) entered blocking state
[  573.225424][  T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[  573.270052][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  573.563571][ T7664] Bluetooth: hci6: command 0x041b tx timeout
[  573.590302][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  573.611003][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  573.624607][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  573.763276][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  573.772659][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  573.805025][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  573.868784][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  573.901198][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  573.943971][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  574.015214][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  574.072642][T17071] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  574.776943][T17233] netlink: 'syz.8.4021': attribute type 1 has an invalid length.
[  574.793206][T17233] netlink: 116376 bytes leftover after parsing attributes in process `syz.8.4021'.
[  574.975323][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  574.988811][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  575.028969][T17071] 8021q: adding VLAN 0 to HW filter on device batadv0
[  575.644154][ T7664] Bluetooth: hci6: command 0x040f tx timeout
[  575.786824][T17270] netlink: 'syz.8.4031': attribute type 2 has an invalid length.
[  575.829425][T17270] netlink: 198692 bytes leftover after parsing attributes in process `syz.8.4031'.
[  575.849026][T17133] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  575.884927][T17133] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  575.940056][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  575.950672][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  575.963514][T17133] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  575.986487][T17133] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  576.010823][T17071] device veth0_vlan entered promiscuous mode
[  576.028057][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  576.042715][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  576.066926][T17071] device veth1_vlan entered promiscuous mode
[  576.073303][T17278] netlink: 'syz.8.4041': attribute type 9 has an invalid length.
[  576.093011][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  576.102227][T17278] netlink: 209836 bytes leftover after parsing attributes in process `syz.8.4041'.
[  576.117487][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  576.129912][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  576.186962][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  576.196967][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  576.208673][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  576.236196][T17071] device veth0_macvtap entered promiscuous mode
[  576.270194][T17071] device veth1_macvtap entered promiscuous mode
[  576.297901][T17071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  576.309951][T17071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  576.329529][T17071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  576.340552][T17071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  576.357289][T17071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  576.370253][T17071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  576.380942][T17071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  576.398053][T17071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  576.410394][T17071] batman_adv: batadv0: Interface activated: batadv_slave_0
[  576.427552][T14851] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  576.436319][T14851] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  576.445810][T14851] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  576.456180][T14851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  576.470783][T17071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  576.482706][T17071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  576.493191][T17071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  576.504738][T17071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  576.515363][T17071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  576.527440][T17071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  576.539208][T17071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  576.550156][T17071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  576.562207][T17071] batman_adv: batadv0: Interface activated: batadv_slave_1
[  576.573845][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  576.584689][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  576.601783][T17071] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  576.612606][T17071] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  576.634465][T17071] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  576.645679][T17071] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  576.757811][T17133] 8021q: adding VLAN 0 to HW filter on device bond0
[  576.867251][T17133] 8021q: adding VLAN 0 to HW filter on device team0
[  576.891919][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  576.910859][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  576.923878][T14851] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  576.969105][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  576.977667][T14851] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  577.013571][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  577.034617][ T4377] bridge0: port 1(bridge_slave_0) entered blocking state
[  577.041982][ T4377] bridge0: port 1(bridge_slave_0) entered forwarding state
[  577.094592][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  577.117356][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  577.130528][ T4377] bridge0: port 2(bridge_slave_1) entered blocking state
[  577.137803][ T4377] bridge0: port 2(bridge_slave_1) entered forwarding state
[  577.155286][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  577.164053][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  577.230544][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  577.239922][ T4364] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  577.257630][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  577.315619][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  577.327972][ T4364] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  577.338632][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  577.416690][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  577.441810][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  577.494820][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  577.544258][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  577.620866][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  577.660577][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  577.688509][T17133] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  577.723431][   T23] Bluetooth: hci6: command 0x0419 tx timeout
[  577.748809][T17133] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  577.777129][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  577.809012][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  578.600007][T17317] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4045'.
[  578.633581][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  578.658605][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  578.811767][T17133] 8021q: adding VLAN 0 to HW filter on device batadv0
[  578.851989][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  578.864322][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  578.937908][T17339] netlink: 'syz.6.4050': attribute type 2 has an invalid length.
[  579.020799][T17339] netlink: 198692 bytes leftover after parsing attributes in process `syz.6.4050'.
[  579.117047][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  579.154618][T17343] netlink: 'syz.5.4051': attribute type 3 has an invalid length.
[  579.176383][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  579.189758][T17343] netlink: 13435 bytes leftover after parsing attributes in process `syz.5.4051'.
[  579.231782][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  579.244598][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  579.504004][T17133] device veth0_vlan entered promiscuous mode
[  579.591823][T17133] device veth1_vlan entered promiscuous mode
[  579.720060][T17362] netlink: 'syz.5.4059': attribute type 2 has an invalid length.
[  579.733410][T17362] netlink: 198692 bytes leftover after parsing attributes in process `syz.5.4059'.
[  579.773042][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  579.789416][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  579.803892][T17133] device veth0_macvtap entered promiscuous mode
[  579.819851][T17364] netlink: 61211 bytes leftover after parsing attributes in process `syz.6.4060'.
[  579.870057][T17133] device veth1_macvtap entered promiscuous mode
[  579.916553][T17364] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4060'.
[  580.019136][T17371] netlink: 'syz.5.4063': attribute type 2 has an invalid length.
[  580.170667][T17371] netlink: 198692 bytes leftover after parsing attributes in process `syz.5.4063'.
[  580.262551][T17133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  580.358055][T17133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  580.381134][T17133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  580.398600][T17133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  580.409249][T17133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  580.421091][T17133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  580.431821][T17133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  580.443082][T17133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  580.454170][T17133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  580.468209][T17133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  580.480845][T17133] batman_adv: batadv0: Interface activated: batadv_slave_0
[  580.489489][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  580.525490][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  580.559929][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  580.572473][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  580.613228][T17133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  580.649585][T17133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  580.680476][T17133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  580.702215][T17133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  580.723291][T17133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  580.752912][T17133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  580.766794][T17133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  580.794146][T17133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  580.812923][T17133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  580.842208][T17133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  580.874621][T17133] batman_adv: batadv0: Interface activated: batadv_slave_1
[  580.882456][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  580.903506][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  581.012682][T17133] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  581.050953][T17133] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  581.101059][T17133] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  581.120308][T17133] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  582.129566][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  582.158272][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  582.250010][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  582.299655][ T4389] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  582.321854][ T4389] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  582.370857][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  583.329659][T17430] netlink: 'syz.6.4084': attribute type 2 has an invalid length.
[  583.383193][T17430] netlink: 198692 bytes leftover after parsing attributes in process `syz.6.4084'.
[  583.817684][T17453] FAULT_INJECTION: forcing a failure.
[  583.817684][T17453] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  583.853698][T17453] CPU: 0 PID: 17453 Comm: syz.6.4090 Not tainted syzkaller #0
[  583.861261][T17453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  583.871799][T17453] Call Trace:
[  583.875128][T17453]  <TASK>
[  583.878098][T17453]  dump_stack_lvl+0x188/0x250
[  583.882835][T17453]  ? show_regs_print_info+0x20/0x20
[  583.888089][T17453]  ? load_image+0x400/0x400
[  583.892661][T17453]  ? __lock_acquire+0x7d10/0x7d10
[  583.897753][T17453]  should_fail+0x38c/0x4c0
[  583.902766][T17453]  _copy_to_user+0x2e/0x130
[  583.907474][T17453]  simple_read_from_buffer+0xe3/0x150
[  583.912919][T17453]  proc_fail_nth_read+0x1a6/0x220
[  583.918013][T17453]  ? proc_fault_inject_write+0x310/0x310
[  583.923735][T17453]  ? fsnotify_perm+0x254/0x560
[  583.928642][T17453]  ? proc_fault_inject_write+0x310/0x310
[  583.934350][T17453]  vfs_read+0x301/0xd60
[  583.938585][T17453]  ? kernel_read+0x1e0/0x1e0
[  583.943242][T17453]  ? __fget_files+0x40f/0x480
[  583.948055][T17453]  ? mutex_lock_nested+0x17/0x20
[  583.953074][T17453]  ? __fdget_pos+0x2bf/0x370
[  583.957718][T17453]  ? ksys_read+0x71/0x260
[  583.962222][T17453]  ksys_read+0x152/0x260
[  583.966527][T17453]  ? vfs_write+0xd60/0xd60
[  583.970997][T17453]  ? lockdep_hardirqs_on+0x94/0x140
[  583.976264][T17453]  do_syscall_64+0x4c/0xa0
[  583.980814][T17453]  ? clear_bhb_loop+0x30/0x80
[  583.985646][T17453]  ? clear_bhb_loop+0x30/0x80
[  583.990433][T17453]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  583.996463][T17453] RIP: 0033:0x7fbd64c1258e
[  584.000925][T17453] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  584.020698][T17453] RSP: 002b:00007fbd62eacfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  584.029198][T17453] RAX: ffffffffffffffda RBX: 00007fbd62ead6c0 RCX: 00007fbd64c1258e
[  584.037255][T17453] RDX: 000000000000000f RSI: 00007fbd62ead0a0 RDI: 0000000000000006
[  584.045378][T17453] RBP: 00007fbd62ead090 R08: 0000000000000000 R09: 0000000000000000
[  584.053498][T17453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  584.061617][T17453] R13: 00007fbd64ecd038 R14: 00007fbd64eccfa0 R15: 00007ffc4af50328
[  584.069940][T17453]  </TASK>
[  584.277009][T17439] netlink: 'syz.9.4087': attribute type 19 has an invalid length.
[  584.301975][T17439] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4087'.
[  584.786144][T17471] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4096'.
[  584.799403][T17466] netlink: 209844 bytes leftover after parsing attributes in process `syz.9.4094'.
[  585.563122][   T23] Bluetooth: hci4: command 0x0406 tx timeout
[  585.782396][T17479] netlink: 'syz.6.4098': attribute type 10 has an invalid length.
[  585.822108][T17479] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4098'.
[  585.854816][T17479] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  588.121573][T17504] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4108'.
[  589.333574][T17522] netlink: 'syz.6.4113': attribute type 10 has an invalid length.
[  589.476940][T17522] team0: Port device geneve1 added
[  589.606693][T17529] FAULT_INJECTION: forcing a failure.
[  589.606693][T17529] name failslab, interval 1, probability 0, space 0, times 0
[  589.666017][T17514] device syzkaller0 entered promiscuous mode
[  589.683156][T17529] CPU: 1 PID: 17529 Comm: syz.5.4115 Not tainted syzkaller #0
[  589.690976][T17529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  589.701213][T17529] Call Trace:
[  589.704549][T17529]  <TASK>
[  589.707532][T17529]  dump_stack_lvl+0x188/0x250
[  589.712294][T17529]  ? show_regs_print_info+0x20/0x20
[  589.717564][T17529]  ? load_image+0x400/0x400
[  589.722147][T17529]  ? __might_sleep+0xf0/0xf0
[  589.726794][T17529]  ? __lock_acquire+0x7d10/0x7d10
[  589.731896][T17529]  should_fail+0x38c/0x4c0
[  589.736503][T17529]  should_failslab+0x5/0x20
[  589.741601][T17529]  slab_pre_alloc_hook+0x51/0xc0
[  589.746605][T17529]  kmem_cache_alloc_trace+0x47/0x2a0
[  589.751953][T17529]  ? rxrpc_alloc_peer+0x78/0x340
[  589.756958][T17529]  ? __rxrpc_lookup_peer_rcu+0x8e/0x5a0
[  589.762593][T17529]  rxrpc_alloc_peer+0x78/0x340
[  589.767451][T17529]  rxrpc_lookup_peer+0x3cb/0x7d0
[  589.772565][T17529]  rxrpc_connect_call+0x91/0xe30
[  589.777574][T17529]  ? _local_bh_enable+0xa0/0xa0
[  589.782497][T17529]  ? do_raw_spin_unlock+0x11d/0x230
[  589.787866][T17529]  rxrpc_new_client_call+0x85f/0xd30
[  589.793490][T17529]  ? rxrpc_do_sendmsg+0xaa7/0x10a0
[  589.798696][T17529]  rxrpc_do_sendmsg+0xaa7/0x10a0
[  589.803687][T17529]  ? rxrpc_process_local_events+0x930/0x930
[  589.809679][T17529]  ? rcu_lock_release+0x20/0x20
[  589.814708][T17529]  ? rxrpc_sendmsg+0x467/0x890
[  589.819684][T17529]  ? rxrpc_getsockopt+0x150/0x150
[  589.824804][T17529]  ____sys_sendmsg+0x5b7/0x8f0
[  589.829656][T17529]  ? __sys_sendmsg_sock+0x30/0x30
[  589.834748][T17529]  ? import_iovec+0x6f/0xa0
[  589.839319][T17529]  ___sys_sendmsg+0x236/0x2e0
[  589.844381][T17529]  ? __sys_sendmsg+0x2a0/0x2a0
[  589.849238][T17529]  ? vfs_write+0x8b2/0xd60
[  589.853761][T17529]  __se_sys_sendmsg+0x1af/0x290
[  589.858754][T17529]  ? __x64_sys_sendmsg+0x80/0x80
[  589.863734][T17529]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  589.869792][T17529]  ? lockdep_hardirqs_on+0x94/0x140
[  589.875046][T17529]  do_syscall_64+0x4c/0xa0
[  589.879496][T17529]  ? clear_bhb_loop+0x30/0x80
[  589.884213][T17529]  ? clear_bhb_loop+0x30/0x80
[  589.888942][T17529]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  589.894974][T17529] RIP: 0033:0x7fbf31ce5cb9
[  589.899440][T17529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  589.919184][T17529] RSP: 002b:00007fbf2ff41028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  589.927666][T17529] RAX: ffffffffffffffda RBX: 00007fbf31f60fa0 RCX: 00007fbf31ce5cb9
[  589.935685][T17529] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005
[  589.943694][T17529] RBP: 00007fbf2ff41090 R08: 0000000000000000 R09: 0000000000000000
[  589.951893][T17529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  589.959904][T17529] R13: 00007fbf31f61038 R14: 00007fbf31f60fa0 R15: 00007fff6517e438
[  589.967959][T17529]  </TASK>
[  590.174427][T17538] netlink: 17279 bytes leftover after parsing attributes in process `syz.6.4118'.
[  590.497282][T17551] netlink: 63503 bytes leftover after parsing attributes in process `syz.6.4122'.
[  591.920417][T17584] device syzkaller0 entered promiscuous mode
[  592.006623][T17598] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  592.037529][T17593] netlink: 'syz.6.4137': attribute type 10 has an invalid length.
[  592.822359][T17615] netlink: 'syz.9.4143': attribute type 3 has an invalid length.
[  592.846747][T17613] netlink: 'syz.3.4144': attribute type 9 has an invalid length.
[  592.865166][T17613] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.4144'.
[  592.886897][T17615] netlink: 132 bytes leftover after parsing attributes in process `syz.9.4143'.
[  593.689659][T17642] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  594.329568][T17668] netlink: 'syz.5.4161': attribute type 6 has an invalid length.
[  594.547809][T17650] device syzkaller0 entered promiscuous mode
[  595.422441][T17697] netlink: 'syz.3.4174': attribute type 10 has an invalid length.
[  595.461862][T17697] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4174'.
[  596.193570][T17708] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  596.232247][T17708] batman_adv: batadv0: Removing interface: batadv_slave_0
[  596.262205][T17709] netlink: 'syz.9.4175': attribute type 3 has an invalid length.
[  596.333375][T17709] netlink: 105116 bytes leftover after parsing attributes in process `syz.9.4175'.
[  596.514893][T17708] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  596.533418][T17708] batman_adv: batadv0: Removing interface: batadv_slave_1
[  596.649317][T17714] sock: sock_timestamping_bind_phc: sock not bind to device
[  596.690169][T17713] netlink: 'syz.5.4178': attribute type 3 has an invalid length.
[  596.703313][T17713] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4178'.
[  596.736133][T17717] device bond0 entered promiscuous mode
[  596.763412][T17717] device bond_slave_0 entered promiscuous mode
[  596.800719][T17717] device bond_slave_1 entered promiscuous mode
[  597.019919][T17722] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  597.235999][T17730] netlink: 'syz.3.4185': attribute type 10 has an invalid length.
[  597.989807][T17742] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4188'.
[  598.468480][T17757] netlink: 'syz.5.4195': attribute type 2 has an invalid length.
[  598.489803][T17757] netlink: 198692 bytes leftover after parsing attributes in process `syz.5.4195'.
[  598.877516][ T4389] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  599.649161][ T4389] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  599.866763][T17794] device bridge_slave_1 left promiscuous mode
[  599.897413][T17794] bridge0: port 2(bridge_slave_1) entered disabled state
[  600.005426][T17794] device bridge_slave_0 left promiscuous mode
[  600.063642][T17794] bridge0: port 1(bridge_slave_0) entered disabled state
[  600.101556][T17808] netlink: 'syz.6.4211': attribute type 2 has an invalid length.
[  600.147105][T17808] netlink: 199824 bytes leftover after parsing attributes in process `syz.6.4211'.
[  600.260748][T17797] netlink: 'syz.9.4207': attribute type 7 has an invalid length.
[  600.302813][T17797] netlink: 'syz.9.4207': attribute type 6 has an invalid length.
[  600.347793][ T4389] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  600.487421][ T4389] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  600.635414][T17818] netlink: 144 bytes leftover after parsing attributes in process `syz.5.4216'.
[  601.112458][T17823] device syzkaller0 entered promiscuous mode
[  602.411261][T17862] netlink: 'syz.3.4230': attribute type 6 has an invalid length.
[  602.428840][T17862] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4230'.
[  602.614709][T17872] netlink: 'syz.5.4232': attribute type 2 has an invalid length.
[  602.622604][T17872] netlink: 199824 bytes leftover after parsing attributes in process `syz.5.4232'.
[  603.633670][T17892] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4242'.
[  604.090125][T17892] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4242'.
[  604.266017][T17909] netlink: 'syz.9.4247': attribute type 10 has an invalid length.
[  604.761543][T17926] netlink: 'syz.6.4253': attribute type 2 has an invalid length.
[  604.820155][T17926] netlink: 199824 bytes leftover after parsing attributes in process `syz.6.4253'.
[  605.323672][ T4389] device hsr_slave_0 left promiscuous mode
[  605.363313][ T4389] device hsr_slave_1 left promiscuous mode
[  605.586525][ T4389] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  605.604455][ T4389] batman_adv: batadv0: Removing interface: batadv_slave_0
[  605.710161][ T4389] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  605.751924][ T4389] batman_adv: batadv0: Removing interface: batadv_slave_1
[  605.836699][ T4389] batman_adv: batadv0: Interface deactivated: hsr_slave_1
[  605.851911][ T4389] batman_adv: batadv0: Removing interface: hsr_slave_1
[  605.868713][ T4389] device bridge_slave_1 left promiscuous mode
[  605.895552][ T4389] bridge0: port 2(bridge_slave_1) entered disabled state
[  606.054300][ T4389] device bridge_slave_0 left promiscuous mode
[  606.060644][ T4389] bridge0: port 1(bridge_slave_0) entered disabled state
[  606.611576][ T4389] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  606.658701][T17969] netlink: 209844 bytes leftover after parsing attributes in process `syz.8.4268'.
[  606.678820][ T4389] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  606.768220][ T4389] bond0 (unregistering): Released all slaves
[  606.832384][T17947] netlink: 144 bytes leftover after parsing attributes in process `syz.9.4260'.
[  607.021309][T17972] netlink: 'syz.3.4269': attribute type 3 has an invalid length.
[  607.031213][T17972] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4269'.
[  607.068680][T17976] netlink: 209844 bytes leftover after parsing attributes in process `syz.9.4271'.
[  607.143544][T17977] netlink: 'syz.6.4272': attribute type 4 has an invalid length.
[  607.151347][T17977] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4272'.
[  607.297025][T17985] netlink: 'syz.8.4273': attribute type 2 has an invalid length.
[  607.343119][T17985] netlink: 199824 bytes leftover after parsing attributes in process `syz.8.4273'.
[  609.781436][T18054] netlink: 'syz.8.4297': attribute type 2 has an invalid length.
[  609.883690][T18054] netlink: 199824 bytes leftover after parsing attributes in process `syz.8.4297'.
[  610.331138][T18061] netlink: 'syz.3.4301': attribute type 10 has an invalid length.
[  610.361469][T18061] netlink: 55 bytes leftover after parsing attributes in process `syz.3.4301'.
[  611.157512][T18070] netlink: 10 bytes leftover after parsing attributes in process `syz.5.4304'.
[  611.820836][T18111] netlink: 'syz.8.4318': attribute type 2 has an invalid length.
[  611.874757][T18111] netlink: 199824 bytes leftover after parsing attributes in process `syz.8.4318'.
[  612.807071][T18131] device syzkaller0 entered promiscuous mode
[  613.361123][T18148] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4331'.
[  613.724958][T18154] netlink: 156 bytes leftover after parsing attributes in process `syz.8.4334'.
[  613.758148][T18140] device syzkaller0 entered promiscuous mode
[  613.942620][T18169] netlink: 'syz.8.4337': attribute type 2 has an invalid length.
[  613.961732][T18169] netlink: 199824 bytes leftover after parsing attributes in process `syz.8.4337'.
[  615.309464][T18204] netlink: 'syz.9.4349': attribute type 33 has an invalid length.
[  615.322823][T18204] netlink: 152 bytes leftover after parsing attributes in process `syz.9.4349'.
[  615.369137][T18211] netlink: 14 bytes leftover after parsing attributes in process `syz.6.4355'.
[  615.486043][T18211] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  615.541920][T18211] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  615.578557][T18211] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  615.597710][T18211] bond0 (unregistering): Released all slaves
[  615.838471][T18232] netlink: 'syz.5.4360': attribute type 23 has an invalid length.
[  615.851778][T18232] netlink: 168 bytes leftover after parsing attributes in process `syz.5.4360'.
[  615.926485][T18228] netlink: 'syz.5.4360': attribute type 21 has an invalid length.
[  616.017290][T18228] device syzkaller0 entered promiscuous mode
[  616.187304][T18246] netlink: 'syz.6.4365': attribute type 2 has an invalid length.
[  616.201817][T18246] netlink: 199824 bytes leftover after parsing attributes in process `syz.6.4365'.
[  617.249215][T18274] netlink: 'syz.6.4376': attribute type 21 has an invalid length.
[  618.121977][T18272] device syzkaller0 entered promiscuous mode
[  618.284741][T18315] netlink: 'syz.5.4387': attribute type 2 has an invalid length.
[  618.317976][T18315] netlink: 199824 bytes leftover after parsing attributes in process `syz.5.4387'.
[  619.109466][T18328] netlink: 63503 bytes leftover after parsing attributes in process `syz.6.4395'.
[  619.287813][T18339] netlink: 'syz.8.4400': attribute type 10 has an invalid length.
[  619.934956][T18354] device syzkaller0 entered promiscuous mode
[  620.414156][T18369] netlink: 'syz.6.4410': attribute type 2 has an invalid length.
[  620.431840][T18370] netlink: 'syz.8.4411': attribute type 10 has an invalid length.
[  620.450384][T18369] netlink: 199824 bytes leftover after parsing attributes in process `syz.6.4410'.
[  620.466333][T18370] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4411'.
[  621.433062][T18408] device wlan0 entered promiscuous mode
[  621.464670][T18408] netlink: 'syz.8.4423': attribute type 9 has an invalid length.
[  621.485465][T18408] netlink: 209836 bytes leftover after parsing attributes in process `syz.8.4423'.
[  622.158527][T18445] netlink: 'syz.3.4432': attribute type 2 has an invalid length.
[  622.190282][T18445] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.4432'.
[  622.236736][T18414] device syzkaller0 entered promiscuous mode
[  622.421886][T18456] FAULT_INJECTION: forcing a failure.
[  622.421886][T18456] name failslab, interval 1, probability 0, space 0, times 0
[  622.444543][T18456] CPU: 0 PID: 18456 Comm: syz.6.4436 Not tainted syzkaller #0
[  622.452226][T18456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  622.462335][T18456] Call Trace:
[  622.465774][T18456]  <TASK>
[  622.468747][T18456]  dump_stack_lvl+0x188/0x250
[  622.473489][T18456]  ? show_regs_print_info+0x20/0x20
[  622.478874][T18456]  ? load_image+0x400/0x400
[  622.483505][T18456]  ? __lock_acquire+0x7d10/0x7d10
[  622.488563][T18456]  should_fail+0x38c/0x4c0
[  622.493067][T18456]  should_failslab+0x5/0x20
[  622.498003][T18456]  slab_pre_alloc_hook+0x51/0xc0
[  622.503004][T18456]  kmem_cache_alloc_trace+0x47/0x2a0
[  622.508348][T18456]  ? rxrpc_alloc_bundle+0x75/0x210
[  622.513597][T18456]  rxrpc_alloc_bundle+0x75/0x210
[  622.518568][T18456]  rxrpc_connect_call+0x63c/0xe30
[  622.523631][T18456]  rxrpc_new_client_call+0x85f/0xd30
[  622.529017][T18456]  ? rxrpc_do_sendmsg+0xaa7/0x10a0
[  622.534169][T18456]  rxrpc_do_sendmsg+0xaa7/0x10a0
[  622.539166][T18456]  ? rxrpc_process_local_events+0x930/0x930
[  622.545174][T18456]  ? rcu_lock_release+0x20/0x20
[  622.550118][T18456]  ? rxrpc_sendmsg+0x467/0x890
[  622.554941][T18456]  ? rxrpc_getsockopt+0x150/0x150
[  622.560005][T18456]  ____sys_sendmsg+0x5b7/0x8f0
[  622.564795][T18456]  ? __sys_sendmsg_sock+0x30/0x30
[  622.569849][T18456]  ? import_iovec+0x6f/0xa0
[  622.574374][T18456]  ___sys_sendmsg+0x236/0x2e0
[  622.579101][T18456]  ? __sys_sendmsg+0x2a0/0x2a0
[  622.583886][T18456]  ? trace_event_raw_event_lock+0x270/0x270
[  622.590139][T18456]  ? vfs_write+0x8b2/0xd60
[  622.594649][T18456]  __se_sys_sendmsg+0x1af/0x290
[  622.599541][T18456]  ? __x64_sys_sendmsg+0x80/0x80
[  622.604496][T18456]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  622.610523][T18456]  ? lockdep_hardirqs_on+0x94/0x140
[  622.615740][T18456]  do_syscall_64+0x4c/0xa0
[  622.620250][T18456]  ? clear_bhb_loop+0x30/0x80
[  622.625284][T18456]  ? clear_bhb_loop+0x30/0x80
[  622.630030][T18456]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  622.635959][T18456] RIP: 0033:0x7fbd64c51cb9
[  622.640393][T18456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  622.660029][T18456] RSP: 002b:00007fbd62ead028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  622.668468][T18456] RAX: ffffffffffffffda RBX: 00007fbd64eccfa0 RCX: 00007fbd64c51cb9
[  622.676460][T18456] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005
[  622.684452][T18456] RBP: 00007fbd62ead090 R08: 0000000000000000 R09: 0000000000000000
[  622.692447][T18456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  622.700429][T18456] R13: 00007fbd64ecd038 R14: 00007fbd64eccfa0 R15: 00007ffc4af50328
[  622.708535][T18456]  </TASK>
[  623.642383][T18487] netlink: 'syz.3.4448': attribute type 2 has an invalid length.
[  623.655112][T18487] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.4448'.
[  623.704668][ T4364] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  623.853390][ T4364] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  623.983943][ T4364] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  624.220405][T18469] chnl_net:caif_netlink_parms(): no params data found
[  624.251693][ T4364] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  624.471310][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  624.478127][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  624.959862][T18469] bridge0: port 1(bridge_slave_0) entered blocking state
[  624.985154][T18469] bridge0: port 1(bridge_slave_0) entered disabled state
[  625.020124][T18469] device bridge_slave_0 entered promiscuous mode
[  625.036704][ T4959] syzkaller0: tun_net_xmit 76
[  625.042491][ T4959] syzkaller0: tun_net_xmit 48
[  625.069347][ T4973] syzkaller0: tun_net_xmit 76
[  625.095266][T18469] bridge0: port 2(bridge_slave_1) entered blocking state
[  625.102390][T18469] bridge0: port 2(bridge_slave_1) entered disabled state
[  625.110250][T18435] syzkaller0: tun_net_xmit 76
[  625.122316][T18469] device bridge_slave_1 entered promiscuous mode
[  625.278988][T18469] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  625.311072][T18469] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  625.413629][T18435] Bluetooth: hci0: command 0x0409 tx timeout
[  625.506595][T18551] netlink: 'syz.8.4468': attribute type 2 has an invalid length.
[  625.601927][T18551] netlink: 199824 bytes leftover after parsing attributes in process `syz.8.4468'.
[  625.666459][T18469] team0: Port device team_slave_0 added
[  626.025043][T18469] team0: Port device team_slave_1 added
[  626.084673][T18469] batman_adv: batadv0: Adding interface: batadv_slave_0
[  626.092237][T18469] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  626.133606][T18469] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  626.187290][T18469] batman_adv: batadv0: Adding interface: batadv_slave_1
[  626.205093][T18469] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  626.239538][T18469] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  626.362513][T18564] netlink: 10 bytes leftover after parsing attributes in process `syz.5.4474'.
[  626.459692][T18570] netlink: 'syz.8.4477': attribute type 9 has an invalid length.
[  626.516708][T18570] netlink: 209836 bytes leftover after parsing attributes in process `syz.8.4477'.
[  626.528348][T18469] device hsr_slave_0 entered promiscuous mode
[  626.545307][T18469] device hsr_slave_1 entered promiscuous mode
[  626.554330][T18469] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  626.562126][T18469] Cannot create hsr debugfs directory
[  627.493182][T18444] Bluetooth: hci0: command 0x041b tx timeout
[  627.863777][T18605] netlink: 'syz.5.4487': attribute type 2 has an invalid length.
[  627.871674][T18605] netlink: 199824 bytes leftover after parsing attributes in process `syz.5.4487'.
[  628.391553][T18615] netlink: 'syz.8.4493': attribute type 6 has an invalid length.
[  628.487268][T18469] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  628.588834][T18469] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  628.678396][T18469] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  628.800202][T18469] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  628.842737][T18625] netlink: 'syz.5.4497': attribute type 21 has an invalid length.
[  628.898775][T18625] netlink: 156 bytes leftover after parsing attributes in process `syz.5.4497'.
[  629.292769][T18620] device syzkaller0 entered promiscuous mode
[  629.332895][T18636] netlink: 'syz.5.4497': attribute type 10 has an invalid length.
[  629.344649][T18636] bond0: (slave bond_slave_0): Releasing backup interface
[  629.352524][T18636] device bond_slave_0 left promiscuous mode
[  629.580402][ T4192] Bluetooth: hci0: command 0x040f tx timeout
[  629.804148][T18663] netlink: 'syz.9.4507': attribute type 2 has an invalid length.
[  629.811964][T18663] netlink: 199824 bytes leftover after parsing attributes in process `syz.9.4507'.
[  629.838144][T18664] mac80211_hwsim hwsim56 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  629.886485][T18469] 8021q: adding VLAN 0 to HW filter on device bond0
[  629.956328][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  629.984288][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  630.007994][T18469] 8021q: adding VLAN 0 to HW filter on device team0
[  630.051565][T18669] netlink: 'syz.8.4510': attribute type 10 has an invalid length.
[  630.061256][T18669] netlink: 168 bytes leftover after parsing attributes in process `syz.8.4510'.
[  630.075370][T14851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  630.097925][T14851] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  630.198338][T14851] bridge0: port 1(bridge_slave_0) entered blocking state
[  630.205549][T14851] bridge0: port 1(bridge_slave_0) entered forwarding state
[  630.305932][T14851] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  630.395679][T14851] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  630.422279][T14851] bridge0: port 2(bridge_slave_1) entered blocking state
[  630.429576][T14851] bridge0: port 2(bridge_slave_1) entered forwarding state
[  630.523966][T14851] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  630.539390][T14851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  630.579931][T14851] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  630.703050][ T4364] device hsr_slave_0 left promiscuous mode
[  630.710019][ T4364] device hsr_slave_1 left promiscuous mode
[  630.874942][ T4364] team0 (unregistering): Port device geneve1 removed
[  631.031261][ T4364] team0 (unregistering): Port device team_slave_1 removed
[  631.213646][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  631.226700][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  631.255838][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  631.271391][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  631.290523][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  631.571965][T18469] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  631.597607][T18469] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  631.838022][T18448] Bluetooth: hci0: command 0x0419 tx timeout
[  631.868764][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  631.890234][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  631.986243][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  632.094279][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  632.104256][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  632.121600][T18698] netlink: 'syz.3.4521': attribute type 10 has an invalid length.
[  632.161890][T18698] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4521'.
[  632.678225][T18716] netlink: 'syz.3.4526': attribute type 2 has an invalid length.
[  632.702971][T18716] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.4526'.
[  632.862602][T18724] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  632.918614][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  632.947902][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  632.972217][T18469] 8021q: adding VLAN 0 to HW filter on device batadv0
[  634.215111][T18745] netlink: 'syz.3.4535': attribute type 10 has an invalid length.
[  634.478561][T18755] netlink: 132 bytes leftover after parsing attributes in process `syz.9.4537'.
[  634.616410][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  634.629272][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  634.756168][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  634.780230][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  634.996814][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  635.057657][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  635.135405][T18469] device veth0_vlan entered promiscuous mode
[  635.254813][T18469] device veth1_vlan entered promiscuous mode
[  635.268730][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  635.428169][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  635.444126][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  635.462250][T18469] device veth0_macvtap entered promiscuous mode
[  635.480572][T18469] device veth1_macvtap entered promiscuous mode
[  635.493973][T18780] netlink: 'syz.9.4546': attribute type 2 has an invalid length.
[  635.553626][T18780] netlink: 199824 bytes leftover after parsing attributes in process `syz.9.4546'.
[  636.234776][T18469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  636.288565][T18469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  636.325441][T18469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  636.355930][T18469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  636.387407][T18469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  636.419846][T18469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  636.440492][T18469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  636.474931][T18469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  636.497221][T18469] batman_adv: batadv0: Interface activated: batadv_slave_0
[  636.515916][T18789] netlink: 'syz.5.4549': attribute type 1 has an invalid length.
[  636.533097][T18790] netlink: 'syz.5.4549': attribute type 1 has an invalid length.
[  636.844271][T18784] device syzkaller0 entered promiscuous mode
[  636.870533][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  636.883017][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  636.916534][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  636.957461][T18804] netlink: 'syz.5.4554': attribute type 2 has an invalid length.
[  636.973635][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  636.982103][T18804] netlink: 'syz.5.4554': attribute type 1 has an invalid length.
[  637.014615][T18469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  637.046778][T18469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  637.091939][T18469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  637.102778][T18469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  637.113074][T18469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  637.123854][T18469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  637.135411][T18469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  637.149224][T18469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  637.197322][T18469] batman_adv: batadv0: Interface activated: batadv_slave_1
[  637.233297][T18804] netlink: 'syz.5.4554': attribute type 17 has an invalid length.
[  637.241369][T18804] netlink: 'syz.5.4554': attribute type 16 has an invalid length.
[  637.263920][T18804] netlink: 152 bytes leftover after parsing attributes in process `syz.5.4554'.
[  637.427478][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  637.446968][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  637.514196][T18469] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  637.528616][T18469] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  637.549735][T18469] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  637.617131][T18469] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  637.736799][T18820] netlink: 'syz.8.4560': attribute type 2 has an invalid length.
[  637.773298][T18820] netlink: 199824 bytes leftover after parsing attributes in process `syz.8.4560'.
[  637.889817][T18822] netlink: 'syz.9.4561': attribute type 7 has an invalid length.
[  637.941919][T18822] netlink: 'syz.9.4561': attribute type 6 has an invalid length.
[  637.970674][T18829] netlink: 144 bytes leftover after parsing attributes in process `syz.5.4564'.
[  638.046873][ T4389] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  638.058945][ T4389] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  638.105845][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  638.736340][T18841] ÿÿÿÿÿÿ: renamed from vlan1
[  638.868689][ T4369] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  638.903229][ T4364] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  638.917187][ T4369] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  638.981070][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  639.055503][ T4364] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  639.147613][T18860] netlink: 'syz.8.4577': attribute type 21 has an invalid length.
[  639.172553][T18860] netlink: 144 bytes leftover after parsing attributes in process `syz.8.4577'.
[  639.246415][T18870] netlink: 'syz.5.4580': attribute type 2 has an invalid length.
[  639.345288][T18870] netlink: 199824 bytes leftover after parsing attributes in process `syz.5.4580'.
[  640.644867][ T4364] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  640.674860][T18888] netlink: 'syz.5.4584': attribute type 6 has an invalid length.
[  640.683374][T18888] netlink: 164 bytes leftover after parsing attributes in process `syz.5.4584'.
[  640.807936][ T4364] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  640.860663][T18895] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  641.018502][T18901] netlink: 'syz.8.4589': attribute type 29 has an invalid length.
[  641.052690][T18906] netlink: 'syz.3.4592': attribute type 1 has an invalid length.
[  641.082127][T18906] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.4592'.
[  641.218986][T18911] netlink: 199824 bytes leftover after parsing attributes in process `syz.9.4594'.
[  641.873756][T18927] netlink: 13439 bytes leftover after parsing attributes in process `syz.3.4600'.
[  642.623707][T18943] device syzkaller0 entered promiscuous mode
[  642.932278][T18967] netlink: 144 bytes leftover after parsing attributes in process `syz.5.4613'.
[  643.604585][ T4364] bond0: (slave wlan1): Releasing backup interface
[  643.861232][T18982] validate_nla: 3 callbacks suppressed
[  643.861254][T18982] netlink: 'syz.6.4616': attribute type 2 has an invalid length.
[  643.964336][T18982] netlink: 199824 bytes leftover after parsing attributes in process `syz.6.4616'.
[  644.065849][T18985] netlink: 'syz.9.4617': attribute type 1 has an invalid length.
[  644.104710][T18985] netlink: 112860 bytes leftover after parsing attributes in process `syz.9.4617'.
[  644.134488][T18985] netlink: 9 bytes leftover after parsing attributes in process `syz.9.4617'.
[  644.632733][ T4364] device hsr_slave_0 left promiscuous mode
[  644.655645][T18998] netlink: 209844 bytes leftover after parsing attributes in process `syz.5.4623'.
[  644.677317][ T4364] device hsr_slave_1 left promiscuous mode
[  644.688297][ T4364] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  644.696388][ T4364] batman_adv: batadv0: Removing interface: batadv_slave_0
[  644.707929][ T4364] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  644.727553][ T4364] batman_adv: batadv0: Removing interface: batadv_slave_1
[  644.737484][ T4364] batman_adv: batadv0: Interface deactivated: hsr_slave_1
[  644.745430][ T4364] batman_adv: batadv0: Removing interface: hsr_slave_1
[  644.754478][ T4364] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  644.761840][ T4364] batman_adv: batadv0: Removing interface: virt_wifi0
[  644.932900][ T4364] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  644.956263][ T4364] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  645.031907][ T4364] bond0 (unregistering): Released all slaves
[  645.080514][T19004] netlink: 'syz.9.4624': attribute type 5 has an invalid length.
[  645.109347][T19001] netlink: 'syz.9.4624': attribute type 5 has an invalid length.
[  645.231836][T19003] netlink: 209844 bytes leftover after parsing attributes in process `syz.6.4625'.
[  645.500453][T19008] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.4627'.
[  647.682659][T19042] netlink: 'syz.5.4637': attribute type 2 has an invalid length.
[  647.716943][T19042] netlink: 199824 bytes leftover after parsing attributes in process `syz.5.4637'.
[  649.771958][T19077] device syzkaller0 entered promiscuous mode
[  649.823658][T19096] netlink: 'syz.6.4655': attribute type 2 has an invalid length.
[  649.862940][T19096] netlink: 199824 bytes leftover after parsing attributes in process `syz.6.4655'.
[  650.038640][T19100] netlink: 'syz.9.4657': attribute type 10 has an invalid length.
[  650.051053][T19100] netlink: 55 bytes leftover after parsing attributes in process `syz.9.4657'.
[  650.565878][T19102] netlink: 128 bytes leftover after parsing attributes in process `syz.5.4658'.
[  651.462064][T19142] netlink: 'syz.3.4671': attribute type 2 has an invalid length.
[  651.489336][T19142] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.4671'.
[  651.935257][T19149] netlink: 132 bytes leftover after parsing attributes in process `syz.8.4674'.
[  652.124328][T19161] netlink: 132 bytes leftover after parsing attributes in process `syz.9.4678'.
[  652.259319][T19158] device syzkaller0 entered promiscuous mode
[  652.451203][T19168] netlink: 'syz.9.4681': attribute type 10 has an invalid length.
[  652.526025][T19168] team0: Port device geneve1 added
[  653.330173][T19204] netlink: 76 bytes leftover after parsing attributes in process `syz.6.4691'.
[  653.485356][T19211] netlink: 'syz.3.4694': attribute type 2 has an invalid length.
[  653.523157][T19211] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.4694'.
[  653.880078][T19219] device syzkaller0 entered promiscuous mode
[  655.541345][T19271] netlink: 'syz.8.4715': attribute type 2 has an invalid length.
[  655.571451][T19271] netlink: 199824 bytes leftover after parsing attributes in process `syz.8.4715'.
[  657.007659][T19280] device syzkaller0 entered promiscuous mode
[  657.398492][T19307] netlink: 'syz.5.4725': attribute type 21 has an invalid length.
[  657.826658][T19324] netlink: 'syz.8.4733': attribute type 2 has an invalid length.
[  657.862043][T19324] netlink: 199824 bytes leftover after parsing attributes in process `syz.8.4733'.
[  659.555421][T19364] netlink: 'syz.9.4745': attribute type 6 has an invalid length.
[  659.784691][T19376] netlink: 'syz.6.4752': attribute type 2 has an invalid length.
[  659.823247][T19376] netlink: 199824 bytes leftover after parsing attributes in process `syz.6.4752'.
[  660.434917][T19391] netlink: 209844 bytes leftover after parsing attributes in process `syz.6.4756'.
[  660.974925][T19402] netlink: 'syz.9.4759': attribute type 10 has an invalid length.
[  660.994771][T19402] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4759'.
[  661.016068][T19402] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  661.447925][T19419] netlink: 'syz.5.4767': attribute type 2 has an invalid length.
[  661.537737][T19419] netlink: 199824 bytes leftover after parsing attributes in process `syz.5.4767'.
[  661.989906][T19417] device syzkaller0 entered promiscuous mode
[  662.963656][T19463] netlink: 56 bytes leftover after parsing attributes in process `syz.9.4782'.
[  662.981876][T19465] FAULT_INJECTION: forcing a failure.
[  662.981876][T19465] name failslab, interval 1, probability 0, space 0, times 0
[  663.000391][T19463] netlink: 56 bytes leftover after parsing attributes in process `syz.9.4782'.
[  663.019005][T19462] netlink: 'syz.8.4781': attribute type 2 has an invalid length.
[  663.020148][T19465] CPU: 1 PID: 19465 Comm: syz.5.4783 Not tainted syzkaller #0
[  663.034380][T19465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  663.044478][T19465] Call Trace:
[  663.047792][T19465]  <TASK>
[  663.050776][T19465]  dump_stack_lvl+0x188/0x250
[  663.055842][T19465]  ? show_regs_print_info+0x20/0x20
[  663.061274][T19465]  ? load_image+0x400/0x400
[  663.065916][T19465]  ? __lock_acquire+0x7d10/0x7d10
[  663.070996][T19465]  should_fail+0x38c/0x4c0
[  663.075458][T19465]  should_failslab+0x5/0x20
[  663.080012][T19465]  slab_pre_alloc_hook+0x51/0xc0
[  663.085079][T19465]  kmem_cache_alloc_trace+0x47/0x2a0
[  663.090406][T19465]  ? rxrpc_alloc_connection+0x73/0x420
[  663.096055][T19465]  rxrpc_alloc_connection+0x73/0x420
[  663.101394][T19465]  rxrpc_maybe_add_conn+0x308/0x1060
[  663.106882][T19465]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  663.111563][T19462] netlink: 199824 bytes leftover after parsing attributes in process `syz.8.4781'.
[  663.112832][T19465]  ? _raw_spin_unlock+0x40/0x40
[  663.112873][T19465]  rxrpc_wait_for_channel+0x231/0x630
[  663.112911][T19465]  ? rxrpc_discard_expired_client_conns+0x4b0/0x4b0
[  663.112934][T19465]  ? do_raw_spin_lock+0x128/0x2f0
[  663.144134][T19465]  ? sched_dynamic_update+0x210/0x210
[  663.149596][T19465]  ? __rwlock_init+0x140/0x140
[  663.154407][T19465]  ? do_raw_spin_unlock+0x11d/0x230
[  663.159653][T19465]  rxrpc_connect_call+0x5f3/0xe30
[  663.164757][T19465]  rxrpc_new_client_call+0x85f/0xd30
[  663.170183][T19465]  ? rxrpc_do_sendmsg+0xaa7/0x10a0
[  663.175351][T19465]  rxrpc_do_sendmsg+0xaa7/0x10a0
[  663.180329][T19465]  ? rxrpc_process_local_events+0x930/0x930
[  663.186282][T19465]  ? rcu_lock_release+0x20/0x20
[  663.191186][T19465]  ? rxrpc_sendmsg+0x467/0x890
[  663.195999][T19465]  ? rxrpc_getsockopt+0x150/0x150
[  663.201059][T19465]  ____sys_sendmsg+0x5b7/0x8f0
[  663.205886][T19465]  ? __sys_sendmsg_sock+0x30/0x30
[  663.211226][T19465]  ? import_iovec+0x6f/0xa0
[  663.215785][T19465]  ___sys_sendmsg+0x236/0x2e0
[  663.220526][T19465]  ? __sys_sendmsg+0x2a0/0x2a0
[  663.225345][T19465]  ? vfs_write+0x8b2/0xd60
[  663.229835][T19465]  __se_sys_sendmsg+0x1af/0x290
[  663.234729][T19465]  ? __x64_sys_sendmsg+0x80/0x80
[  663.239702][T19465]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  663.245739][T19465]  ? lockdep_hardirqs_on+0x94/0x140
[  663.250975][T19465]  do_syscall_64+0x4c/0xa0
[  663.255409][T19465]  ? clear_bhb_loop+0x30/0x80
[  663.260116][T19465]  ? clear_bhb_loop+0x30/0x80
[  663.264831][T19465]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  663.270756][T19465] RIP: 0033:0x7fbf31ce5cb9
[  663.275200][T19465] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  663.294838][T19465] RSP: 002b:00007fbf2ff41028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  663.303289][T19465] RAX: ffffffffffffffda RBX: 00007fbf31f60fa0 RCX: 00007fbf31ce5cb9
[  663.311301][T19465] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005
[  663.319305][T19465] RBP: 00007fbf2ff41090 R08: 0000000000000000 R09: 0000000000000000
[  663.327309][T19465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  663.335312][T19465] R13: 00007fbf31f61038 R14: 00007fbf31f60fa0 R15: 00007fff6517e438
[  663.343339][T19465]  </TASK>
[  663.364288][T19470] netlink: 56 bytes leftover after parsing attributes in process `syz.9.4782'.
[  663.405952][T19463] netlink: 56 bytes leftover after parsing attributes in process `syz.9.4782'.
[  663.605447][T19474] netlink: 56 bytes leftover after parsing attributes in process `syz.9.4782'.
[  664.179404][T19504] netlink: 'syz.8.4798': attribute type 2 has an invalid length.
[  664.190604][T19504] netlink: 199824 bytes leftover after parsing attributes in process `syz.8.4798'.
[  665.240587][T19544] netlink: 'syz.5.4812': attribute type 2 has an invalid length.
[  665.263226][T19544] netlink: 199824 bytes leftover after parsing attributes in process `syz.5.4812'.
[  667.120441][T19583] netlink: 'syz.6.4827': attribute type 2 has an invalid length.
[  667.170904][T19583] netlink: 199824 bytes leftover after parsing attributes in process `syz.6.4827'.
[  667.182441][T19584] netlink: 14558 bytes leftover after parsing attributes in process `syz.9.4828'.
[  667.219245][T19588] netlink: 'syz.8.4830': attribute type 9 has an invalid length.
[  667.302598][T19588] netlink: 209836 bytes leftover after parsing attributes in process `syz.8.4830'.
[  667.723937][T19602] 
€Â0: renamed from pim6reg1
[  667.802760][T19602] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.4835'.
[  668.977315][T19599] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  669.029469][T19599] device syzkaller0 entered promiscuous mode
[  669.125853][T19624] netlink: 'syz.8.4842': attribute type 2 has an invalid length.
[  669.133959][T19624] netlink: 199824 bytes leftover after parsing attributes in process `syz.8.4842'.
[  669.289887][T19630] netlink: 'syz.3.4844': attribute type 6 has an invalid length.
[  670.085953][T19660] netlink: 'syz.5.4857': attribute type 2 has an invalid length.
[  670.116495][T19660] netlink: 199824 bytes leftover after parsing attributes in process `syz.5.4857'.
[  670.366453][T19668] netlink: 'syz.5.4860': attribute type 10 has an invalid length.
[  670.383800][T19668] netlink: 168 bytes leftover after parsing attributes in process `syz.5.4860'.
[  670.770550][T19670] device syzkaller0 entered promiscuous mode
[  671.378663][T19702] netlink: 'syz.8.4871': attribute type 2 has an invalid length.
[  671.463168][T19702] netlink: 199824 bytes leftover after parsing attributes in process `syz.8.4871'.
[  671.874608][T19715] netlink: 'syz.6.4875': attribute type 10 has an invalid length.
[  671.914947][T19715] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4875'.
[  671.978320][T19715] bridge0: port 3(ipvlan1) entered blocking state
[  672.002133][T19715] bridge0: port 3(ipvlan1) entered disabled state
[  672.039509][T19715] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  672.102996][T19717] netlink: 'syz.8.4876': attribute type 10 has an invalid length.
[  672.363053][T19717] device hsr_slave_0 left promiscuous mode
[  672.378077][T19717] device hsr_slave_1 left promiscuous mode
[  672.580475][T19727] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  672.682730][T19733] netlink: 'syz.3.4882': attribute type 10 has an invalid length.
[  672.760243][T19733] bridge0: port 2(bridge_slave_1) entered disabled state
[  672.808656][T19733] device bridge_slave_1 left promiscuous mode
[  672.867156][T19733] bridge0: port 2(bridge_slave_1) entered disabled state
[  673.055569][T19733] device bridge_slave_1 entered promiscuous mode
[  673.075367][T19733] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  673.194308][T19749] netlink: 'syz.8.4887': attribute type 2 has an invalid length.
[  673.223497][T19749] netlink: 199824 bytes leftover after parsing attributes in process `syz.8.4887'.
[  673.416060][T19736] netlink: 'syz.5.4884': attribute type 10 has an invalid length.
[  673.616185][T19736] batman_adv: batadv0: Removing interface: macvtap0
[  675.324758][T19790] device syzkaller0 entered promiscuous mode
[  676.351658][T19813] device syzkaller0 entered promiscuous mode
[  679.051671][T19870] device pim6reg1 entered promiscuous mode
[  679.183137][    C0] ------------[ cut here ]------------
[  679.189108][    C0] WARNING: CPU: 0 PID: 14620 at mm/maccess.c:226 copy_from_user_nofault+0x160/0x1c0
[  679.198619][    C0] Modules linked in:
[  679.202553][    C0] CPU: 0 PID: 14620 Comm: syz-executor Not tainted syzkaller #0
[  679.210361][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  679.220598][    C0] RIP: 0010:copy_from_user_nofault+0x160/0x1c0
[  679.226844][    C0] Code: 24 45 31 f6 31 ff 89 de e8 7d 94 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 00 91 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe
[  679.246678][    C0] RSP: 0018:ffffc900000079e0 EFLAGS: 00010246
[  679.252791][    C0] RAX: ffffffff81a08ea0 RBX: 0000000000000008 RCX: ffff888027ebbb80
[  679.260869][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000
[  679.269163][    C0] RBP: 0000000000000000 R08: dffffc0000000000 R09: 1ffffffff203a218
[  679.277219][    C0] R10: dffffc0000000000 R11: fffffbfff203a219 R12: ffff888027ebd308
[  679.285298][    C0] R13: dffffc0000000000 R14: ffffc90000007a48 R15: 0000000000000000
[  679.293357][    C0] FS:  00005555777a2500(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
[  679.302332][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  679.309071][    C0] CR2: 0000000000000000 CR3: 0000000060f07000 CR4: 00000000003506f0
[  679.317142][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  679.325197][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  679.333244][    C0] Call Trace:
[  679.336557][    C0]  <IRQ>
[  679.339436][    C0]  bpf_probe_read_user+0x26/0x70
[  679.344466][    C0]  bpf_prog_02073d59a3c0f06f+0x3d/0x340
[  679.350058][    C0]  bpf_trace_run2+0x163/0x2e0
[  679.354822][    C0]  ? bpf_trace_run1+0x2e0/0x2e0
[  679.359714][    C0]  ? shmem_free_in_core_inode+0x6f/0xb0
[  679.365376][    C0]  ? shmem_free_in_core_inode+0x6f/0xb0
[  679.370972][    C0]  __bpf_trace_kfree+0x6e/0x90
[  679.375815][    C0]  ? shmem_free_in_core_inode+0x6f/0xb0
[  679.381399][    C0]  kfree+0x25f/0x2a0
[  679.385379][    C0]  shmem_free_in_core_inode+0x6f/0xb0
[  679.390796][    C0]  rcu_core+0x9d2/0x1670
[  679.395142][    C0]  ? local_bh_disable+0x20/0x20
[  679.400038][    C0]  ? __lock_acquire+0x7d10/0x7d10
[  679.405166][    C0]  ? rebalance_domains+0xa0f/0xb30
[  679.410457][    C0]  handle_softirqs+0x339/0x830
[  679.415316][    C0]  ? __irq_exit_rcu+0x13b/0x230
[  679.420222][    C0]  ? do_softirq+0x210/0x210
[  679.424821][    C0]  ? irqtime_account_irq+0xb2/0x1b0
[  679.430200][    C0]  __irq_exit_rcu+0x13b/0x230
[  679.434971][    C0]  ? irq_exit_rcu+0x20/0x20
[  679.439528][    C0]  irq_exit_rcu+0x5/0x20
[  679.443865][    C0]  sysvec_apic_timer_interrupt+0xa0/0xc0
[  679.449632][    C0]  </IRQ>
[  679.452593][    C0]  <TASK>
[  679.455596][    C0]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  679.461657][    C0] RIP: 0010:in_lock_functions+0x11/0x20
[  679.467289][    C0] Code: 38 c1 0f 8c 77 ff ff ff 48 c7 c7 40 16 21 92 e8 e5 ef 5f 00 e9 66 ff ff ff 48 81 ff 50 53 c5 89 0f 93 c0 48 81 ff 9e 63 c5 89 <0f> 92 c1 20 c1 0f b6 c1 c3 00 00 cc cc 00 00 55 41 57 41 56 41 55
[  679.486986][    C0] RSP: 0018:ffffc900031aee60 EFLAGS: 00000297
[  679.493141][    C0] RAX: 0000000000000000 RBX: ffffffff81350d2c RCX: ffffffff962d7f03
[  679.501149][    C0] RDX: ffffc900031af038 RSI: dffffc0000000000 RDI: ffffffff81350d2c
[  679.509216][    C0] RBP: ffffc900031aeff0 R08: ffffc900031af001 R09: ffffc900031aefa8
[  679.517283][    C0] R10: dffffc0000000000 R11: fffff52000635e01 R12: ffffffff81352c1e
[  679.525469][    C0] R13: ffffc900031aef48 R14: dffffc0000000000 R15: dffffc0000000000
[  679.533542][    C0]  ? __unwind_start+0xee/0x740
[  679.538366][    C0]  ? unwind_next_frame+0xac/0x1d90
[  679.543587][    C0]  ? unwind_next_frame+0xac/0x1d90
[  679.548771][    C0]  preempt_count_add+0x8d/0x190
[  679.553727][    C0]  unwind_next_frame+0xac/0x1d90
[  679.558723][    C0]  ? __lock_acquire+0x13bc/0x7d10
[  679.563859][    C0]  ? __unwind_start+0xee/0x740
[  679.568684][    C0]  __unwind_start+0x5bb/0x740
[  679.573482][    C0]  ? stack_trace_save+0xf0/0xf0
[  679.578384][    C0]  arch_stack_walk+0xda/0x140
[  679.583286][    C0]  ? __unwind_start+0xee/0x740
[  679.588127][    C0]  stack_trace_save+0xa6/0xf0
[  679.592913][    C0]  ? stack_trace_snprint+0xf0/0xf0
[  679.598077][    C0]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  679.604179][    C0]  save_stack+0x121/0x230
[  679.608562][    C0]  ? __reset_page_owner+0x180/0x180
[  679.613890][    C0]  ? lock_chain_count+0x20/0x20
[  679.618794][    C0]  ? preempt_count_add+0x8d/0x190
[  679.623942][    C0]  __set_page_owner+0x41/0x2d0
[  679.628759][    C0]  ? post_alloc_hook+0x106/0x220
[  679.633819][    C0]  get_page_from_freelist+0x1bbd/0x1ca0
[  679.639438][    C0]  ? __alloc_pages+0x11b/0x480
[  679.644329][    C0]  ? __alloc_pages+0x480/0x480
[  679.649154][    C0]  ? prepare_alloc_pages+0x368/0x5f0
[  679.654680][    C0]  __alloc_pages+0x1ee/0x480
[  679.659335][    C0]  ? zone_statistics+0x170/0x170
[  679.664384][    C0]  ? alloc_pages+0x438/0x550
[  679.669174][    C0]  pte_alloc_one+0x7b/0x310
[  679.673776][    C0]  ? rcu_lock_release+0x20/0x20
[  679.678675][    C0]  ? __might_sleep+0xf0/0xf0
[  679.683349][    C0]  ? do_raw_spin_lock+0x128/0x2f0
[  679.688436][    C0]  __pte_alloc+0x21/0x150
[  679.692863][    C0]  copy_page_range+0x29c2/0x3230
[  679.697851][    C0]  ? copy_process+0x17eb/0x3e20
[  679.702923][    C0]  ? kernel_clone+0x23f/0x990
[  679.707703][    C0]  ? pfn_valid+0x380/0x380
[  679.712170][    C0]  ? validate_mm_rb+0x1fd/0x230
[  679.717125][    C0]  ? vma_gap_callbacks_rotate+0x1c1/0x1f0
[  679.722928][    C0]  copy_mm+0xc86/0x13f0
[  679.727146][    C0]  ? copy_signal+0x640/0x640
[  679.731805][    C0]  ? __init_rwsem+0x11e/0x160
[  679.736623][    C0]  ? copy_signal+0x537/0x640
[  679.741268][    C0]  copy_process+0x17eb/0x3e20
[  679.746061][    C0]  ? __pidfd_prepare+0x140/0x140
[  679.751075][    C0]  kernel_clone+0x23f/0x990
[  679.755720][    C0]  ? create_io_thread+0x180/0x180
[  679.760813][    C0]  __x64_sys_clone+0x19a/0x210
[  679.765856][    C0]  ? __ia32_sys_vfork+0x130/0x130
[  679.770938][    C0]  ? lockdep_hardirqs_on+0x94/0x140
[  679.776232][    C0]  do_syscall_64+0x4c/0xa0
[  679.780688][    C0]  ? clear_bhb_loop+0x30/0x80
[  679.785434][    C0]  ? clear_bhb_loop+0x30/0x80
[  679.790147][    C0]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  679.796117][    C0] RIP: 0033:0x7fea6d07b752
[  679.800573][    C0] Code: 89 e7 e8 f1 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00
[  679.820352][    C0] RSP: 002b:00007fff30a72520 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[  679.828845][    C0] RAX: ffffffffffffffda RBX: 00007fff30a72520 RCX: 00007fea6d07b752
[  679.837073][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[  679.845127][    C0] RBP: 00007fff30a726ac R08: 0000000000000000 R09: 0000000000000001
[  679.853193][    C0] R10: 00005555777a27d0 R11: 0000000000000246 R12: 0000000000000001
[  679.861342][    C0] R13: 00000000000927c0 R14: 00000000000a5c34 R15: 00007fff30a72700
[  679.869421][    C0]  </TASK>
[  679.872495][    C0] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  679.879795][    C0] CPU: 0 PID: 14620 Comm: syz-executor Not tainted syzkaller #0
[  679.887606][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  679.897708][    C0] Call Trace:
[  679.901020][    C0]  <IRQ>
[  679.903889][    C0]  dump_stack_lvl+0x188/0x250
[  679.908616][    C0]  ? show_regs_print_info+0x20/0x20
[  679.913848][    C0]  ? load_image+0x400/0x400
[  679.918403][    C0]  panic+0x2e5/0x810
[  679.922344][    C0]  ? bpf_jit_dump+0xd0/0xd0
[  679.926877][    C0]  ? asm_sysvec_call_function_single+0x16/0x20
[  679.933196][    C0]  ? __warn+0x230/0x2b0
[  679.937391][    C0]  ? copy_from_user_nofault+0x160/0x1c0
[  679.943065][    C0]  __warn+0x248/0x2b0
[  679.947090][    C0]  ? copy_from_user_nofault+0x160/0x1c0
[  679.952708][    C0]  report_bug+0x1b7/0x2e0
[  679.957101][    C0]  handle_bug+0x3a/0x70
[  679.961549][    C0]  exc_invalid_op+0x16/0x40
[  679.966098][    C0]  asm_exc_invalid_op+0x16/0x20
[  679.970989][    C0] RIP: 0010:copy_from_user_nofault+0x160/0x1c0
[  679.977241][    C0] Code: 24 45 31 f6 31 ff 89 de e8 7d 94 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 00 91 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe
[  679.996897][    C0] RSP: 0018:ffffc900000079e0 EFLAGS: 00010246
[  680.003021][    C0] RAX: ffffffff81a08ea0 RBX: 0000000000000008 RCX: ffff888027ebbb80
[  680.011144][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000
[  680.019158][    C0] RBP: 0000000000000000 R08: dffffc0000000000 R09: 1ffffffff203a218
[  680.027286][    C0] R10: dffffc0000000000 R11: fffffbfff203a219 R12: ffff888027ebd308
[  680.035308][    C0] R13: dffffc0000000000 R14: ffffc90000007a48 R15: 0000000000000000
[  680.043418][    C0]  ? copy_from_user_nofault+0x160/0x1c0
[  680.049014][    C0]  bpf_probe_read_user+0x26/0x70
[  680.053980][    C0]  bpf_prog_02073d59a3c0f06f+0x3d/0x340
[  680.059672][    C0]  bpf_trace_run2+0x163/0x2e0
[  680.064402][    C0]  ? bpf_trace_run1+0x2e0/0x2e0
[  680.069494][    C0]  ? shmem_free_in_core_inode+0x6f/0xb0
[  680.075084][    C0]  ? shmem_free_in_core_inode+0x6f/0xb0
[  680.080679][    C0]  __bpf_trace_kfree+0x6e/0x90
[  680.085482][    C0]  ? shmem_free_in_core_inode+0x6f/0xb0
[  680.091052][    C0]  kfree+0x25f/0x2a0
[  680.094966][    C0]  shmem_free_in_core_inode+0x6f/0xb0
[  680.100367][    C0]  rcu_core+0x9d2/0x1670
[  680.104644][    C0]  ? local_bh_disable+0x20/0x20
[  680.109535][    C0]  ? __lock_acquire+0x7d10/0x7d10
[  680.114611][    C0]  ? rebalance_domains+0xa0f/0xb30
[  680.119841][    C0]  handle_softirqs+0x339/0x830
[  680.124627][    C0]  ? __irq_exit_rcu+0x13b/0x230
[  680.129673][    C0]  ? do_softirq+0x210/0x210
[  680.134224][    C0]  ? irqtime_account_irq+0xb2/0x1b0
[  680.139570][    C0]  __irq_exit_rcu+0x13b/0x230
[  680.144291][    C0]  ? irq_exit_rcu+0x20/0x20
[  680.148840][    C0]  irq_exit_rcu+0x5/0x20
[  680.153103][    C0]  sysvec_apic_timer_interrupt+0xa0/0xc0
[  680.158757][    C0]  </IRQ>
[  680.161699][    C0]  <TASK>
[  680.164646][    C0]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  680.170652][    C0] RIP: 0010:in_lock_functions+0x11/0x20
[  680.176217][    C0] Code: 38 c1 0f 8c 77 ff ff ff 48 c7 c7 40 16 21 92 e8 e5 ef 5f 00 e9 66 ff ff ff 48 81 ff 50 53 c5 89 0f 93 c0 48 81 ff 9e 63 c5 89 <0f> 92 c1 20 c1 0f b6 c1 c3 00 00 cc cc 00 00 55 41 57 41 56 41 55
[  680.195839][    C0] RSP: 0018:ffffc900031aee60 EFLAGS: 00000297
[  680.201929][    C0] RAX: 0000000000000000 RBX: ffffffff81350d2c RCX: ffffffff962d7f03
[  680.209921][    C0] RDX: ffffc900031af038 RSI: dffffc0000000000 RDI: ffffffff81350d2c
[  680.217915][    C0] RBP: ffffc900031aeff0 R08: ffffc900031af001 R09: ffffc900031aefa8
[  680.225900][    C0] R10: dffffc0000000000 R11: fffff52000635e01 R12: ffffffff81352c1e
[  680.233899][    C0] R13: ffffc900031aef48 R14: dffffc0000000000 R15: dffffc0000000000
[  680.242024][    C0]  ? __unwind_start+0xee/0x740
[  680.246816][    C0]  ? unwind_next_frame+0xac/0x1d90
[  680.251953][    C0]  ? unwind_next_frame+0xac/0x1d90
[  680.257087][    C0]  preempt_count_add+0x8d/0x190
[  680.261951][    C0]  unwind_next_frame+0xac/0x1d90
[  680.266912][    C0]  ? __lock_acquire+0x13bc/0x7d10
[  680.271954][    C0]  ? __unwind_start+0xee/0x740
[  680.276741][    C0]  __unwind_start+0x5bb/0x740
[  680.281437][    C0]  ? stack_trace_save+0xf0/0xf0
[  680.286323][    C0]  arch_stack_walk+0xda/0x140
[  680.291026][    C0]  ? __unwind_start+0xee/0x740
[  680.295805][    C0]  stack_trace_save+0xa6/0xf0
[  680.300499][    C0]  ? stack_trace_snprint+0xf0/0xf0
[  680.305625][    C0]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  680.311651][    C0]  save_stack+0x121/0x230
[  680.316004][    C0]  ? __reset_page_owner+0x180/0x180
[  680.321341][    C0]  ? lock_chain_count+0x20/0x20
[  680.326241][    C0]  ? preempt_count_add+0x8d/0x190
[  680.331311][    C0]  __set_page_owner+0x41/0x2d0
[  680.336116][    C0]  ? post_alloc_hook+0x106/0x220
[  680.341080][    C0]  get_page_from_freelist+0x1bbd/0x1ca0
[  680.346665][    C0]  ? __alloc_pages+0x11b/0x480
[  680.351461][    C0]  ? __alloc_pages+0x480/0x480
[  680.356269][    C0]  ? prepare_alloc_pages+0x368/0x5f0
[  680.361583][    C0]  __alloc_pages+0x1ee/0x480
[  680.366242][    C0]  ? zone_statistics+0x170/0x170
[  680.371237][    C0]  ? alloc_pages+0x438/0x550
[  680.375876][    C0]  pte_alloc_one+0x7b/0x310
[  680.380404][    C0]  ? rcu_lock_release+0x20/0x20
[  680.385276][    C0]  ? __might_sleep+0xf0/0xf0
[  680.389891][    C0]  ? do_raw_spin_lock+0x128/0x2f0
[  680.394957][    C0]  __pte_alloc+0x21/0x150
[  680.399327][    C0]  copy_page_range+0x29c2/0x3230
[  680.404278][    C0]  ? copy_process+0x17eb/0x3e20
[  680.409146][    C0]  ? kernel_clone+0x23f/0x990
[  680.413874][    C0]  ? pfn_valid+0x380/0x380
[  680.418314][    C0]  ? validate_mm_rb+0x1fd/0x230
[  680.423189][    C0]  ? vma_gap_callbacks_rotate+0x1c1/0x1f0
[  680.428933][    C0]  copy_mm+0xc86/0x13f0
[  680.433122][    C0]  ? copy_signal+0x640/0x640
[  680.437728][    C0]  ? __init_rwsem+0x11e/0x160
[  680.442421][    C0]  ? copy_signal+0x537/0x640
[  680.447029][    C0]  copy_process+0x17eb/0x3e20
[  680.451745][    C0]  ? __pidfd_prepare+0x140/0x140
[  680.456713][    C0]  kernel_clone+0x23f/0x990
[  680.461241][    C0]  ? create_io_thread+0x180/0x180
[  680.466299][    C0]  __x64_sys_clone+0x19a/0x210
[  680.471085][    C0]  ? __ia32_sys_vfork+0x130/0x130
[  680.476142][    C0]  ? lockdep_hardirqs_on+0x94/0x140
[  680.481377][    C0]  do_syscall_64+0x4c/0xa0
[  680.485809][    C0]  ? clear_bhb_loop+0x30/0x80
[  680.490516][    C0]  ? clear_bhb_loop+0x30/0x80
[  680.495209][    C0]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  680.501113][    C0] RIP: 0033:0x7fea6d07b752
[  680.505544][    C0] Code: 89 e7 e8 f1 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00
[  680.525263][    C0] RSP: 002b:00007fff30a72520 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[  680.533699][    C0] RAX: ffffffffffffffda RBX: 00007fff30a72520 RCX: 00007fea6d07b752
[  680.541774][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[  680.549767][    C0] RBP: 00007fff30a726ac R08: 0000000000000000 R09: 0000000000000001
[  680.557751][    C0] R10: 00005555777a27d0 R11: 0000000000000246 R12: 0000000000000001
[  680.565744][    C0] R13: 00000000000927c0 R14: 00000000000a5c34 R15: 00007fff30a72700
[  680.573751][    C0]  </TASK>
[  680.577013][    C0] Kernel Offset: disabled
[  680.581535][    C0] Rebooting in 86400 seconds..