last executing test programs:

6m10.237522985s ago: executing program 0 (id=1672):
socket$kcm(0x11, 0x200000000000002, 0x300)
socket$kcm(0xa, 0x922000000003, 0x11)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r2 = openat$cgroup_devices(r1, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
recvmsg(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000001900)=""/4096, 0x1000}], 0x1}, 0x40000002)
setsockopt$sock_attach_bpf(r4, 0x1, 0x10, &(0x7f0000000000), 0x4)
sendmsg$inet(r4, &(0x7f0000002d40)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_devices(r2, &(0x7f0000000980)=ANY=[@ANYBLOB='b 5:', @ANYRESOCT=r2], 0xe)
r5 = socket$kcm(0x2, 0xa, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
sendmsg$kcm(r5, &(0x7f0000000a80)={&(0x7f0000000880)=@sco={0x1f, @fixed}, 0x12, 0x0}, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r7 = getpid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r7, 0xffffffffffffffff, 0x0, 0x33, 0x0}, 0x30)
perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x6, 0x6, 0x80, 0xfa, 0x0, 0x75c, 0x408, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfd, 0x4, @perf_bp={&(0x7f0000000040), 0x9}, 0xc6501de81572ba0b, 0x3ff, 0x9c5a, 0x0, 0x81, 0x3, 0x1, 0x0, 0x53cf, 0x0, 0x6}, r7, 0xc, r0, 0x2)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112})
ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff008}, {0x6}]})
r8 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9)
close(0x3)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x48844)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000400)
getpid()

6m8.556036264s ago: executing program 0 (id=1679):
r0 = socket$kcm(0xa, 0x6, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x1b, &(0x7f0000000100), 0x120)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_pressure(r1, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0)

6m8.555270294s ago: executing program 2 (id=1680):
socket$kcm(0x10, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00')
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2802, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x3, 0x8, 0x1, 0x720}]})
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100))
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0xffffffffffffffd6)
r3 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r3, 0x0, 0x4, 0x0, 0x0)
sendmsg$inet(r3, &(0x7f00000024c0)={0x0, 0x0, 0x0}, 0x24000000)
setsockopt$sock_attach_bpf(r3, 0x0, 0x4, 0x0, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f00000002c0)="bf4b3e9e3a9e9a758f8ea2a244a7", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r5 = socket$kcm(0x2, 0x1000000000000002, 0x0)
setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f0000000180), 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001b40)={r2, 0xe0, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x2, 0x4000000000000112, &(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x10, &(0x7f0000000540), 0x0, 0x10, &(0x7f0000000580), &(0x7f00000006c0), 0x8, 0xd, 0x8, 0x8, &(0x7f0000000700)}}, 0x10)
r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001940)=0xffffffffffffffff, 0x4)
r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001a00)={0xffffffffffffffff, 0x2, 0x18}, 0xc)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001a80)={0x6, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000060000000000000006000000180000000700b1de000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x400, 0x1000, &(0x7f0000000840)=""/4096, 0x41000, 0x10, '\x00', r6, 0x25, r7, 0x8, &(0x7f0000001980)={0x7, 0x3}, 0x8, 0x10, &(0x7f00000019c0)={0x3, 0xb, 0xd5, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001a40)=[0xffffffffffffffff, r8], 0x0, 0x10, 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x2000002, 0xfffffffffffffe37, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x10}, 0x50)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x1f, 0x0, 0x1, 0x2000, 0x10000}, 0x28)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63"], 0xfdef)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{}, 0x0, &(0x7f00000005c0)}, 0x20)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0)
r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000300))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001b80)={r9, 0x5, 0x1, 0x0, &(0x7f0000000540)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x50)

6m8.371841234s ago: executing program 0 (id=1683):
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000800)=0x200000000000fff9)
openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) (async)
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x10c002, 0xac5d, 0x10000200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x2162) (async)
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
r6 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r5}, 0x8) (async)
r7 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(r7, 0x1, 0x9, &(0x7f0000000800)=r6, 0x4)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r8, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) (async)
close(0xffffffffffffffff)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a20fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)

6m8.331698167s ago: executing program 2 (id=1684):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0x200000000000002, 0x300)
bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x98a78b1fe75b8017, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3283735f85c902a2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000300)={r1, r0}, 0xc)

6m8.187873965s ago: executing program 0 (id=1687):
perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00')
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000680)=""/140, 0x8c}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x40000004)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x9, 0x5, 0x8000, 0xfff7, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$tipc(r0, 0x0, 0x4000000)
close(r1)
r2 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000b80))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="07637075737401536463707508"], 0x12)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x90)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0], 0x48)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00'})
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080))

6m8.126641758s ago: executing program 2 (id=1688):
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
mkdir(0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='+cpu  '], 0xb)

6m7.891848362s ago: executing program 2 (id=1691):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x8a)
r0 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0), 0x4)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x5, 0x1, 0x3a0, 0x2}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1800, r1}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000640)={r1, &(0x7f0000000080), &(0x7f0000000540)=""/240}, 0x20)
r2 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r2, 0x6, 0x1d, &(0x7f0000000200), 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x9, 0x1, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0], 0x0, 0x70, &(0x7f0000000380)=[{}], 0x8, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x3f, 0x8, 0x8, &(0x7f0000000680)}}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x26e1, 0x0)
close(r4)
ioctl$SIOCSIFHWADDR(r4, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="2400008d00"})
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1e00000900000000090000000500000000010000", @ANYRES32=r1, @ANYBLOB='\b\x00'/20, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="0500000002000000020000000e00"/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r7, &(0x7f00000001c0)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0)
bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r0, 0x4)

6m7.60433241s ago: executing program 2 (id=1692):
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0xffffffffffffff0e, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x111120, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x2a, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000004440)=ANY=[@ANYBLOB="14000000040000000400000007"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r2, &(0x7f0000001600), 0x0}, 0x20)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e0000ebffffffffffffff000000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0x1, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0}}, 0x10)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0xb}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x3e}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000010c0)={r5, 0x20, &(0x7f0000001080)={0x0, 0x0, <r6=>0x0, 0x0}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=r6, 0x4)
r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)=@o_path={&(0x7f0000000340)='./file0\x00', 0x0, 0x4008, r0}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1e, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa6}, @call={0x85, 0x0, 0x0, 0xbf}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xffffffffffffffff}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000000)='syzkaller\x00', 0xfffffffd, 0x70, &(0x7f00000001c0)=""/112, 0x40f00, 0x4, '\x00', r4, @fallback=0x5, r5, 0x8, &(0x7f00000002c0)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0xe, 0x6}, 0x10, r6, r7, 0x9, 0x0, &(0x7f00000003c0)=[{0x5, 0x3, 0xb, 0xf}, {0x3, 0x2, 0x9, 0x1}, {0x3, 0x4, 0x7, 0xc}, {0x1, 0x2, 0x10, 0xc}, {0x1, 0x2, 0xb, 0x3}, {0x0, 0x6, 0x6, 0x1}, {0x0, 0x5, 0x10}, {0x2, 0x4, 0x3, 0x8}, {0x4, 0x1, 0xfffffffe}], 0x10, 0x7}, 0x94)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890c, 0x0)

6m7.440967449s ago: executing program 2 (id=1693):
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0x10c002, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32], 0x0}, 0x94)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f93b24fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x5452, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x3, 0x87, &(0x7f0000000140)=""/135}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x160, &(0x7f00000000c0)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x5, 0xff92, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26}, 0x48)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0)
close(r2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r1, &(0x7f0000000380)=ANY=[], 0x280)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0x801, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x840e}, 0x4000, 0x0, 0x0, 0x1, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socket$kcm(0x2, 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002, 0x0, 0x0, 0x2}]}, 0x94)
close(0x3)
r3 = socket$kcm(0x2, 0x1, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
recvmsg$unix(r4, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r6=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r3, 0x84, 0x64, &(0x7f0000000000)=r6, 0x10)
sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f00000005c0)="df", 0x1}], 0x1}, 0x0)

6m6.825598715s ago: executing program 0 (id=1697):
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x11c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x9)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
r2 = socket$kcm(0x10, 0x2, 0x10)
recvmsg$kcm(r2, &(0x7f00000039c0)={0x0, 0x0, &(0x7f00000038c0)=[{&(0x7f0000000240)=""/146, 0x92}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f00000028c0)=""/4096, 0x1000}], 0x3}, 0x2002)
sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r1, <r3=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000000c0)='%-010d \x00'}, 0x20)
socket$kcm(0xa, 0x5, 0x0)
socket$kcm(0xa, 0x5, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010000fb3ede2a15b33dfa0f8c81ded0b25", 0x15}], 0x1}, 0x20000880)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfe33)
ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f00000001c0))
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
close(r5)
openat$tun(0xffffffffffffff9c, 0x0, 0x424802, 0x0)
r6 = socket$kcm(0x11, 0x200000000000002, 0x300)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r6, 0x107, 0xc, &(0x7f0000000100)=r7, 0x4)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r1, r1}, 0x4)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x10, &(0x7f0000000e00)=ANY=[@ANYBLOB="18000000bfffffff0000000000000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000100000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0xccee5849be245758, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="2e0000003e000511d25a80698c6394090224fc602f6e354008000180", 0x1c}], 0x1, 0x0, 0x0, 0x39c}, 0x0)
r9 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000080)="1800000068006b00", 0x8}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x48010)
write$cgroup_subtree(r9, &(0x7f0000000080)=ANY=[@ANYBLOB="1303000076"], 0xfe33)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0x0, 0xe, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e9900", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))

6m3.629982652s ago: executing program 0 (id=1700):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x30000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0xa}, 0x10b44b, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0)
r3 = socket$kcm(0xa, 0x2, 0x88)
setsockopt$sock_attach_bpf(r3, 0x1, 0x45, &(0x7f0000000040), 0x4)
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=0xffffffffffffffff, 0x4)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x78, 0xa, 0x1, 0x8000, 0xffffffffffffffff, 0x7, '\x00', 0x0, r7, 0x4, 0x2, 0x5, 0x3, @value=r7}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8, <r9=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$unix(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)}, 0x0)
sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0)
recvmsg$unix(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000002c0)=""/37, 0x25}], 0x1}, 0x0)
close(r9)
sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x44000)
openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x200, 0x0)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', r0}, 0x18)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f00000001c0)={r1})
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="2539000020000365f507f62aa6172f7881"], 0x33fe0)
r10 = socket$kcm(0x2, 0x1, 0x84)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000000000e80000ab619600000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x1c, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r12, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b8000005000000a0", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
setsockopt$sock_attach_bpf(r10, 0x84, 0x10, &(0x7f0000000000), 0xc)

5m52.123043916s ago: executing program 32 (id=1693):
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0x10c002, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32], 0x0}, 0x94)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f93b24fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x5452, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x3, 0x87, &(0x7f0000000140)=""/135}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x160, &(0x7f00000000c0)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x5, 0xff92, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26}, 0x48)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0)
close(r2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r1, &(0x7f0000000380)=ANY=[], 0x280)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0x801, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x840e}, 0x4000, 0x0, 0x0, 0x1, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socket$kcm(0x2, 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002, 0x0, 0x0, 0x2}]}, 0x94)
close(0x3)
r3 = socket$kcm(0x2, 0x1, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
recvmsg$unix(r4, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r6=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r3, 0x84, 0x64, &(0x7f0000000000)=r6, 0x10)
sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f00000005c0)="df", 0x1}], 0x1}, 0x0)

5m47.997703798s ago: executing program 33 (id=1700):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x30000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0xa}, 0x10b44b, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0)
r3 = socket$kcm(0xa, 0x2, 0x88)
setsockopt$sock_attach_bpf(r3, 0x1, 0x45, &(0x7f0000000040), 0x4)
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=0xffffffffffffffff, 0x4)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x78, 0xa, 0x1, 0x8000, 0xffffffffffffffff, 0x7, '\x00', 0x0, r7, 0x4, 0x2, 0x5, 0x3, @value=r7}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8, <r9=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$unix(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)}, 0x0)
sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0)
recvmsg$unix(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000002c0)=""/37, 0x25}], 0x1}, 0x0)
close(r9)
sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x44000)
openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x200, 0x0)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', r0}, 0x18)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f00000001c0)={r1})
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="2539000020000365f507f62aa6172f7881"], 0x33fe0)
r10 = socket$kcm(0x2, 0x1, 0x84)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000000000e80000ab619600000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x1c, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r12, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b8000005000000a0", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
setsockopt$sock_attach_bpf(r10, 0x84, 0x10, &(0x7f0000000000), 0xc)

4.174538625s ago: executing program 5 (id=3712):
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x208, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020031000b05d25a806f8c6394f90324fc602f0009000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

3.656182525s ago: executing program 5 (id=3717):
r0 = getpid()
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000040)}, 0x20)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xdf, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x2, @perf_config_ext={0x408003, 0x1}, 0x14105, 0x32, 0xfffffbff, 0x0, 0x6, 0x0, 0xffda, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00')
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0xe8}, 0x14002)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080))
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200})
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080))

3.57629544s ago: executing program 6 (id=3720):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x29, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0xa, 0x1, 0x0)
sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x30}}}, 0x80, 0x0}, 0x20000881)
sendmsg$kcm(r1, &(0x7f0000000640)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x1, @loopback, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x1c8}, 0x33c5c7fe60a346e6)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000070000000100", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r4 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r4, 0x29, 0x49, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000dc0)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0, 0x26, 0x0, 0x1, 0x0, 0x10000, @value=r3}, 0x28)
r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r7 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r7, 0x84, 0x10, &(0x7f0000000000), 0xc)
close(r6)
r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r9, @ANYRES32=r8, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r9}, &(0x7f0000000000), &(0x7f00000002c0)=r6}, 0x20)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0)

3.299626776s ago: executing program 5 (id=3721):
socket$kcm(0xa, 0x5, 0x0)
r0 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x6, 0x24, &(0x7f0000000200), 0x4)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x19fd, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000021c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'macsec0\x00', @local})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af00000000000000000021a688b2d7007fcc4b59f719afb0b3b7e0aee306ca70fe42bf4984a68f40e1fc043a03a17e4744359b87dc27c82d51cbeb64e52a28daeb6a78d6fe06181ecc840000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0xfffffffffffffeee)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_pressure(r4, &(0x7f0000000380)='io.pressure\x00', 0x2, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000001c0)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000001680)=[{&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000380)=""/67, 0x43}, {&(0x7f0000002240)=""/4096, 0x1000}, {&(0x7f0000000400)=""/126, 0x7e}, {0x0}], 0x6, &(0x7f00000005c0)=""/57, 0x39}, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1200000004000000080000000700000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000006cc60000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="feffffff00"/28], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x1, 0x99, &(0x7f0000000240)=""/153}, 0x94)
r5 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r5, 0x84, 0x49, 0x0, 0x0)
r6 = socket$kcm(0x10, 0x7, 0x0)
sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000001740)=ANY=[@ANYBLOB="9feb0100180000000000000040937124a228f33985000000000000000100000d0000000000ff0f0000000000000000000000000300000000020000000300000000000000000000000100000d0000000003000000000000000000cc796556b342c9658cff4547f56069f5eb9f32cf50a5c48303c680aa405a5f00cf48b6225fe20cc194ece5b2e61f23d55ab7ac8191199ab2c8f64cbb49c841f555de205e9ea5df399bc639d1361582d00d3b195f588ec7cefcaaa2857408e04e8b8e8d152af503c3530f470324120da85543bc13f576e0d2a72ad7426bb10c5ebf3bc5c6de721158"], &(0x7f0000000140)=""/237, 0x5a, 0xed, 0x1}, 0x28)
socket$kcm(0xa, 0x2, 0x3a)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000100b0000850000000800000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

3.298963856s ago: executing program 1 (id=3723):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local}) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
write$cgroup_subtree(r0, &(0x7f0000000240)=ANY=[@ANYRESOCT=r0], 0x66)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r2) (async)
r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00') (async)
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) (async)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00')
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r5, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) (async, rerun: 32)
socket$kcm(0x10, 0x3, 0x10) (async, rerun: 32)
socket$kcm(0x2, 0x200000000000001, 0x0) (async)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b0000000c000000040000004f0c000001"], 0x48)
socket$kcm(0xa, 0x5, 0x0)
socket$kcm(0x11, 0x3, 0x0) (async, rerun: 64)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 64)
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYRESHEX=r3, @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000001a40)="c1dfb080cd217b283fd3080986dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) (async)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

3.069001349s ago: executing program 1 (id=3725):
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x63, 0x11, 0x8}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x32}, 0x94)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[], 0x0, 0x26}, 0x28)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180))

2.931776757s ago: executing program 3 (id=3726):
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1b)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x11, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x5}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0xa7}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0x15, 0xf, 0x3, 0x7, 0x4, r0, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x4}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x2, 0x1e, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000009000000000000008000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000017043000fcffffff850000009d00000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b708000091f600007b8af8ff00000000bfa200000022b3ddd481cba52330ffffb703000008000000b70400000100000085000000820000002399300001000000852000000100000001888000fcffffff8520000001000000bf91000000000000b702000000010000000085000001b7000000000000009500000000000000"], &(0x7f0000000c00)='syzkaller\x00', 0xf9d, 0x69, &(0x7f0000000c40)=""/105, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000cc0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000d00)={0x0, 0x1, 0x10001, 0x400}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000000d40)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, r1], &(0x7f0000000d80)=[{0x4, 0x4, 0x2, 0x1}, {0x3, 0x5, 0x2, 0x7}, {0x2, 0x2, 0xf, 0x4}, {0x2, 0x1, 0x0, 0x8}], 0x10, 0xa}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ec0)={{r4}, &(0x7f0000000ac0), &(0x7f0000000e80)=r5}, 0x20)
r6 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x7, 0x22004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=[0x0], ""/16, <r7=>0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0], <r8=>0x0, 0x3f, &(0x7f0000000400)=[{}, {}], 0x10, 0x10, &(0x7f0000000440), &(0x7f0000000540), 0x8, 0xde, 0x8, 0x8, &(0x7f0000000580)}}, 0x10)
r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x80, 0x80, 0x5, [@typedef={0x7, 0x0, 0x0, 0x8, 0x1}, @enum={0xc, 0x5, 0x0, 0x6, 0x4, [{0x1}, {0xc, 0x5}, {0x1, 0x800}, {0xb}, {0xa, 0x9}]}, @type_tag={0x1, 0x0, 0x0, 0x12, 0x1}, @func={0xa, 0x0, 0x0, 0xc, 0x3}, @volatile={0x4, 0x0, 0x0, 0x9, 0x3}, @type_tag={0x8, 0x0, 0x0, 0x12, 0x4}, @int={0xb, 0x0, 0x0, 0x1, 0x0, 0x30, 0x0, 0x2a}]}, {0x0, [0x0, 0x61, 0x9b08b5c1dd54b717]}}, &(0x7f0000000940)=""/219, 0x9d, 0xdb, 0x1, 0x4, 0x10000, @value=r1}, 0x28)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0x10, &(0x7f0000000900)=ANY=[@ANYRESOCT=r1, @ANYRESDEC=r7, @ANYRES16=0x0], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0a000000030000000700000006"], 0x50)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r12}, 0x25)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r14 = gettid()
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0xc2, 0x8, 0x4, 0x0, 0x6, 0x42805, 0x18, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_config_ext={0x10000, 0x6c2}, 0x10008, 0xd, 0x3, 0x9, 0x2, 0xfffffffe, 0x44, 0x0, 0xb5e, 0x0, 0x81}, r14, 0xc, r6, 0x2)
r15 = openat$cgroup_int(r13, &(0x7f0000000380)='cpuset.cpus\x00', 0x2, 0x0)
write$cgroup_subtree(r15, &(0x7f0000000300)=ANY=[@ANYBLOB='N-N:N/NN'], 0x6a)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x5452, &(0x7f0000000100))
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYRESHEX=r10], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10, 0x0}, 0x30048880)

2.863751962s ago: executing program 6 (id=3727):
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x208, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020031000b05d25a806f8c6394f90324fc602f0009000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

2.847637123s ago: executing program 4 (id=3728):
r0 = socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f00000011c0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="850000002e0000007620000000000000270000000000010095000000000000007b5eefc1a0eb570c3709ffc506a7a344caa1ab9579859a46450216d3def705449756939c6d6990e4d568bffd475ec06803d6624e3c0ce1b08a694c9bde7d04fa3968348e4d9e3c53f3eecd70006c4177e8a0d2665a0a5005d72ca4e2328616e50cc938ea6acbf645c7314a1e83eec7916c7b5ca3f68ca88ae42a8d31e69fd0f795"], &(0x7f0000000040)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffc62, 0x10, 0x0, 0xfffffffffffffed8}, 0x23)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x23, &(0x7f0000000000), 0x4)
sendmsg$inet(r2, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000e80)={&(0x7f0000000300)=@in6={0xa, 0x4e24, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000500)="db057ea036ccfc92c127194d2343380e800b8204e8042eaa1d2daace6a6470b1dbce13c5cfbeb24eb8d7c1ccfe763350e3d2408287c5434fa5b626c8af3ecf9935441c74b8d86982a7e913bdae849cf9b4ac6a9400e221f18604b3946111d41d396c272fbb5d28469ab65829e8b0d1d906a9623c0e0f26bf3defe08460e6f1e5570fc217ded379b94b8dc1cea1f80c4c0d4e4b01973dc26fe93f3251e5bd451db44806b28b9c6febbb3cd5cb54ab70592cb06afde28975fa9c105033b9df80777ea73e6fd2e7648ba932bdb88dedcb6edb73c3e30d254932ff512993cd1f494c", 0xe0}, {&(0x7f0000000600)="ebcd75082b1d5c6897494998610819f39f7514351cc3ca952de0c155a3282b55ec65a818b998cf47efa8a7b7d07583c716baba989c23180448ecb1a170f6c014fe357bcd4d903e5c48321c49a822e724e4d6ed670017f15c65bf3898a6a31890a337d91b4b09c731c367a85622609b69624a50841c912cf4336da2970042fc33f121942190e1376fa317dccd123e5f558d9690cdb0519635b82637a0866c2e8b081677866752e07c1a805b660abc823f573393402006ac3bc842a20a11ca8da6c5a97b12e775c5fe0faf095560d9efbf77c3025204fca1b900ca02c01e916da96e087f06", 0xe4}, {&(0x7f0000000380)="7ded0d380efd1f6c55e192f95f7f907f14c3598fb9d05fb4ee764cbe73684501a2728103ed97cd0855eeccdb4836ca79275d078bde84e7d3c3b614e8f4c5382948a34abddb4ab5dfcbcbc61b5562d765579f", 0x52}, {&(0x7f0000000840)="1c59b6d30df3272541b7f8fd2944411fd84fd80aca5dcfb8697d36d4d7845bc20c73cc7b2fddedc5fff680450b61c08b4b534d14361f13b6a9ce40999388f0893128de3ca02f46e34544ab7a1876a5b1180bc4001bf6503e3ebd8c06da08888ea8e15125254c48df86871263342f59878459acb013ce59c72c1d79a82b5950f49b4ed8f6f82f9d15", 0x88}, {&(0x7f0000000440)="6aea4cdf9cbebe3421a6a8cb6d98eb285a602083268fcc001e7b", 0x1a}, {&(0x7f0000000700)="ecbb55cba2b09bdbc7c8f3aab77d2f3e43653ad7ddd4ff1d650ce28334b40bb3ab0d514eb5bb66dcc71eabb685b40f2e5ca778528830c620a1dfd3bbe18b3bc703739f457c0878e50b", 0x49}, {&(0x7f0000000940)="a64089e291d5885c0183ca355af2f44f9db32aa6ff94951ee48c5c22638f1c99e1323d592592e08ccb498e8d52e233c4d74066fad5c6e6ce1e211cbccb25666bf143130989ca8cad26ccb764b376a93979de38cc4f781530423a40c0ffb4f0f5f75ac7e2075d49f467c91716a8d820c23696c49ecf7c19d438f65231b0900636fb12b449f677e478236dc7ff2b9cea4fe8edeaa5d0f34f3d0fd4b0735537b73b4048b4baa715fe4dd78de4e0debaf126433ac95b4ed05acc723ced9665ee218db50ba39c9a83f10ef1d9512247f553fcc0", 0xd1}, {&(0x7f0000000a40)="9024e15557393b09dae74c39b7c7f52cba5849199158c577a655c4716000c6f6a322a68702918526f9919f4b7ee3dd40c4a52d9f0f7ec9977679dec0d92546ff3be352766a3a91c754c648d5e19712aa377fa8587874462c82187e92e69fa5a59f2735530ece37255b5a372190b3889dc54fed43d6aa00a0a49fe81d80d937d842b21330f7e3a7021a9341740094349aa3b5d0b4c1f5", 0x96}, {&(0x7f0000000b00)="b588fde81f800899005b7339a8e9f06580e3ea20054f2d1b0551", 0x1a}, {&(0x7f0000000b40)="b95ea47c0c3514e8d8b43f77bdefd9e3f9125278b0206ffba49374118de2c5ff5ee29c3374586a862bf9fe538f16c37d3efdeba2bb0d1c93790818dad734d5facb9678b71446dafeea2a23ade7253d4a61d67cf4a667cb1af731b409cc0daea82dd758b2dd446955ddde35d4c2346670f48435db776b192b6e5fe1cc7c06a786b815f2f9b01b216b2dc9fb1970d050ab5a905f6a", 0x94}], 0xa, &(0x7f0000000d00)=[{0x68, 0x112, 0x2, "f6d4364a7c8aed4bbeb888ce5e13de500e4b2ece0346f5cd024c1779bd83d5efd8052f1618accc7b8c106594694b4f8f0cd6f6708f5e09bcc9adcb0e15b3c11801f40ee2df282a3b332f38d3b4411d1826ec364f69302578"}, {0xd0, 0x104, 0x4, "2a870025f401d46f12755185830be8fd7927f1617ecc25e3bb9048ad89fbb229ffa8c8f30c8941cf1c06c05d968c286cb3316833574748f6dfdb93e6d60c65f1a4e031488432af0f2b272b7b267eee0f598e47e1a108250a9205498c7266448e55b5c0c8240346dce25f1b830e10ed1d8d1d0f85f3342299c14b50d33e2701baa6e386bc2f3c98ee43951c1d0414876527c507c84dec2761aaa2cda285b367e4c6439ff3ae47cb1269857332de217002448019061602a25fb6d956"}, {0x38, 0x84, 0x8, "f29e7b4e09fce86aa57b94fc890c3f323e05a3e815e60685b5b74ab4a509f8ac0041794f"}], 0x170}, 0x40000)
recvmsg(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0xc2bb, 0x0, 0x4000000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0)
close(r3)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000180))
ioctl$SIOCSIFHWADDR(r3, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48)
r5 = socket$kcm(0x2, 0x2, 0x73)
setsockopt$sock_attach_bpf(r5, 0x0, 0x29, 0x0, 0x17)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000480)="b9fb0307683a0600000000378100", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.838120493s ago: executing program 5 (id=3729):
r0 = socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f00000011c0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="850000002e0000007620000000000000270000000000010095000000000000007b5eefc1a0eb570c3709ffc506a7a344caa1ab9579859a46450216d3def705449756939c6d6990e4d568bffd475ec06803d6624e3c0ce1b08a694c9bde7d04fa3968348e4d9e3c53f3eecd70006c4177e8a0d2665a0a5005d72ca4e2328616e50cc938ea6acbf645c7314a1e83eec7916c7b5ca3f68ca88ae42a8d31e69fd0f795"], &(0x7f0000000040)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffc62, 0x10, 0x0, 0xfffffffffffffed8}, 0x23)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x23, &(0x7f0000000000), 0x4)
sendmsg$inet(r2, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000e80)={&(0x7f0000000300)=@in6={0xa, 0x4e24, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000500)="db057ea036ccfc92c127194d2343380e800b8204e8042eaa1d2daace6a6470b1dbce13c5cfbeb24eb8d7c1ccfe763350e3d2408287c5434fa5b626c8af3ecf9935441c74b8d86982a7e913bdae849cf9b4ac6a9400e221f18604b3946111d41d396c272fbb5d28469ab65829e8b0d1d906a9623c0e0f26bf3defe08460e6f1e5570fc217ded379b94b8dc1cea1f80c4c0d4e4b01973dc26fe93f3251e5bd451db44806b28b9c6febbb3cd5cb54ab70592cb06afde28975fa9c105033b9df80777ea73e6fd2e7648ba932bdb88dedcb6edb73c3e30d254932ff512993cd1f494c", 0xe0}, {&(0x7f0000000600)="ebcd75082b1d5c6897494998610819f39f7514351cc3ca952de0c155a3282b55ec65a818b998cf47efa8a7b7d07583c716baba989c23180448ecb1a170f6c014fe357bcd4d903e5c48321c49a822e724e4d6ed670017f15c65bf3898a6a31890a337d91b4b09c731c367a85622609b69624a50841c912cf4336da2970042fc33f121942190e1376fa317dccd123e5f558d9690cdb0519635b82637a0866c2e8b081677866752e07c1a805b660abc823f573393402006ac3bc842a20a11ca8da6c5a97b12e775c5fe0faf095560d9efbf77c3025204fca1b900ca02c01e916da96e087f06", 0xe4}, {&(0x7f0000000380)="7ded0d380efd1f6c55e192f95f7f907f14c3598fb9d05fb4ee764cbe73684501a2728103ed97cd0855eeccdb4836ca79275d078bde84e7d3c3b614e8f4c5382948a34abddb4ab5dfcbcbc61b5562d765579f", 0x52}, {&(0x7f0000000840)="1c59b6d30df3272541b7f8fd2944411fd84fd80aca5dcfb8697d36d4d7845bc20c73cc7b2fddedc5fff680450b61c08b4b534d14361f13b6a9ce40999388f0893128de3ca02f46e34544ab7a1876a5b1180bc4001bf6503e3ebd8c06da08888ea8e15125254c48df86871263342f59878459acb013ce59c72c1d79a82b5950f49b4ed8f6f82f9d15", 0x88}, {&(0x7f0000000440)="6aea4cdf9cbebe3421a6a8cb6d98eb285a602083268fcc001e7b", 0x1a}, {&(0x7f0000000700)="ecbb55cba2b09bdbc7c8f3aab77d2f3e43653ad7ddd4ff1d650ce28334b40bb3ab0d514eb5bb66dcc71eabb685b40f2e5ca778528830c620a1dfd3bbe18b3bc703739f457c0878e50b", 0x49}, {&(0x7f0000000940)="a64089e291d5885c0183ca355af2f44f9db32aa6ff94951ee48c5c22638f1c99e1323d592592e08ccb498e8d52e233c4d74066fad5c6e6ce1e211cbccb25666bf143130989ca8cad26ccb764b376a93979de38cc4f781530423a40c0ffb4f0f5f75ac7e2075d49f467c91716a8d820c23696c49ecf7c19d438f65231b0900636fb12b449f677e478236dc7ff2b9cea4fe8edeaa5d0f34f3d0fd4b0735537b73b4048b4baa715fe4dd78de4e0debaf126433ac95b4ed05acc723ced9665ee218db50ba39c9a83f10ef1d9512247f553fcc0", 0xd1}, {&(0x7f0000000a40)="9024e15557393b09dae74c39b7c7f52cba5849199158c577a655c4716000c6f6a322a68702918526f9919f4b7ee3dd40c4a52d9f0f7ec9977679dec0d92546ff3be352766a3a91c754c648d5e19712aa377fa8587874462c82187e92e69fa5a59f2735530ece37255b5a372190b3889dc54fed43d6aa00a0a49fe81d80d937d842b21330f7e3a7021a9341740094349aa3b5d0b4c1f5", 0x96}, {&(0x7f0000000b00)="b588fde81f800899005b7339a8e9f06580e3ea20054f2d1b0551", 0x1a}, {&(0x7f0000000b40)="b95ea47c0c3514e8d8b43f77bdefd9e3f9125278b0206ffba49374118de2c5ff5ee29c3374586a862bf9fe538f16c37d3efdeba2bb0d1c93790818dad734d5facb9678b71446dafeea2a23ade7253d4a61d67cf4a667cb1af731b409cc0daea82dd758b2dd446955ddde35d4c2346670f48435db776b192b6e5fe1cc7c06a786b815f2f9b01b216b2dc9fb1970d050ab5a905f6a", 0x94}], 0xa, &(0x7f0000000d00)=[{0x68, 0x112, 0x2, "f6d4364a7c8aed4bbeb888ce5e13de500e4b2ece0346f5cd024c1779bd83d5efd8052f1618accc7b8c106594694b4f8f0cd6f6708f5e09bcc9adcb0e15b3c11801f40ee2df282a3b332f38d3b4411d1826ec364f69302578"}, {0xd0, 0x104, 0x4, "2a870025f401d46f12755185830be8fd7927f1617ecc25e3bb9048ad89fbb229ffa8c8f30c8941cf1c06c05d968c286cb3316833574748f6dfdb93e6d60c65f1a4e031488432af0f2b272b7b267eee0f598e47e1a108250a9205498c7266448e55b5c0c8240346dce25f1b830e10ed1d8d1d0f85f3342299c14b50d33e2701baa6e386bc2f3c98ee43951c1d0414876527c507c84dec2761aaa2cda285b367e4c6439ff3ae47cb1269857332de217002448019061602a25fb6d956"}, {0x38, 0x84, 0x8, "f29e7b4e09fce86aa57b94fc890c3f323e05a3e815e60685b5b74ab4a509f8ac0041794f"}], 0x170}, 0x40000)
recvmsg(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0xc2bb, 0x0, 0x4000000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0)
close(r3)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000180))
ioctl$SIOCSIFHWADDR(r3, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48)
r5 = socket$kcm(0x2, 0x2, 0x73)
setsockopt$sock_attach_bpf(r5, 0x0, 0x29, 0x0, 0x17)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000480)="b9fb0307683a0600000000378100", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.608008197s ago: executing program 3 (id=3730):
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1b)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x11, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x5}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0xa7}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0x15, 0xf, 0x3, 0x7, 0x4, r0, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x4}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x2, 0x1e, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000009000000000000008000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000017043000fcffffff850000009d00000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b708000091f600007b8af8ff00000000bfa200000022b3ddd481cba52330ffffb703000008000000b70400000100000085000000820000002399300001000000852000000100000001888000fcffffff8520000001000000bf91000000000000b702000000010000000085000001b7000000000000009500000000000000"], &(0x7f0000000c00)='syzkaller\x00', 0xf9d, 0x69, &(0x7f0000000c40)=""/105, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000cc0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000d00)={0x0, 0x1, 0x10001, 0x400}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000000d40)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, r1], &(0x7f0000000d80)=[{0x4, 0x4, 0x2, 0x1}, {0x3, 0x5, 0x2, 0x7}, {0x2, 0x2, 0xf, 0x4}, {0x2, 0x1, 0x0, 0x8}], 0x10, 0xa}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ec0)={{r4}, &(0x7f0000000ac0), &(0x7f0000000e80)=r5}, 0x20)
r6 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x7, 0x22004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=[0x0], ""/16, <r7=>0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0], <r8=>0x0, 0x3f, &(0x7f0000000400)=[{}, {}], 0x10, 0x10, &(0x7f0000000440), &(0x7f0000000540), 0x8, 0xde, 0x8, 0x8, &(0x7f0000000580)}}, 0x10)
r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x80, 0x80, 0x5, [@typedef={0x7, 0x0, 0x0, 0x8, 0x1}, @enum={0xc, 0x5, 0x0, 0x6, 0x4, [{0x1}, {0xc, 0x5}, {0x1, 0x800}, {0xb}, {0xa, 0x9}]}, @type_tag={0x1, 0x0, 0x0, 0x12, 0x1}, @func={0xa, 0x0, 0x0, 0xc, 0x3}, @volatile={0x4, 0x0, 0x0, 0x9, 0x3}, @type_tag={0x8, 0x0, 0x0, 0x12, 0x4}, @int={0xb, 0x0, 0x0, 0x1, 0x0, 0x30, 0x0, 0x2a}]}, {0x0, [0x0, 0x61, 0x9b08b5c1dd54b717]}}, &(0x7f0000000940)=""/219, 0x9d, 0xdb, 0x1, 0x4, 0x10000, @value=r1}, 0x28)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0x10, &(0x7f0000000900)=ANY=[@ANYRESOCT=r1, @ANYRESDEC=r7, @ANYRES16=0x0], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0a000000030000000700000006"], 0x50)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r12}, 0x25)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r14 = gettid()
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0xc2, 0x8, 0x4, 0x0, 0x6, 0x42805, 0x18, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_config_ext={0x10000, 0x6c2}, 0x10008, 0xd, 0x3, 0x9, 0x2, 0xfffffffe, 0x44, 0x0, 0xb5e, 0x0, 0x81}, r14, 0xc, r6, 0x2)
r15 = openat$cgroup_int(r13, &(0x7f0000000380)='cpuset.cpus\x00', 0x2, 0x0)
write$cgroup_subtree(r15, &(0x7f0000000300)=ANY=[@ANYBLOB='N-N:N/NN'], 0x6a)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x5452, &(0x7f0000000100))
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYRESHEX=r10], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10, 0x0}, 0x30048880)

2.506065543s ago: executing program 6 (id=3731):
r0 = getpid()
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000040)}, 0x20)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xdf, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x2, @perf_config_ext={0x408003, 0x1}, 0x14105, 0x32, 0xfffffbff, 0x0, 0x6, 0x0, 0xffda, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00')
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0xe8}, 0x14002)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080))
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080))

2.419676628s ago: executing program 1 (id=3732):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f00000006c0))
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0x25, 0x1, 0x0)
sendmsg$sock(r5, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x20000810)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x60a6, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050e72210283ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48)
bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f00000002c0)={r1, 0x0, 0xda, 0x0, &(0x7f0000000040)="4884e08c01110de1d701510b93f2c235856b9eee3b139ee367235427562fc80824d9bfb1cff11f4ec93f852e468f3883e5ba6d05fde5c8f51b163e24de2d0a291dbcbc88531ff605e183c65936fcbee76a1d1339d9101688dfc3b44afa95b97ab13049c34e70b1cf4e6fe1972b6bca4ae713ac1bd321504dabcae9988b1a96a08d02d91b3469d769e90adbdead24d054a282fbf8c17fc6318c79eab885fafcbbfd6887be90a75abce78334dd869ef44003549fdd41ae06a2380f6d946f42469d28e4df739af3780f1b29c0154aaf55f3c38c85a815027a287396", 0x0, 0x4, 0x0, 0xec, 0x0, &(0x7f00000001c0)="84198b2bfef3dbf995b88ce69ec309c96cc5d9aae63dd2597c27a26a82948ef7852f19fcdf5ce0cd36cff59f8354cb2ae8a7ea9ecae33bc962ff728c390888b50e1bab010dd5343768a3a51bb37640a6fac314751936c4bf17e83a04c90952a985eb3b1b515a21842fb6376f0633171b5c6f96e95e9f023c88b946b595fbb0460f85e4b43b72957de8cf80896065920ef5ffe8d51ffd084276124597cef440100371200ab0f914e9e8cadebd89f5700e60821943e626039f60dc58f11e5ea37645175332417390a84417cdbfbc968a156447cec30c6e2551bb95d2423b82fe197efea0063b58285bda864d87", 0x0, 0x2, 0x0, 0xf67}, 0x50)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="1c000000180081084e81f782db44b904021d080006067c09e8fe55a10a00", 0x1e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

2.186233512s ago: executing program 5 (id=3733):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x1400000000000000, &(0x7f0000000000)=ANY=[@ANYBLOB="0f00000004000000020000000000000001020000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 ', @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000ff"], 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="2b40000048009125745c7388641f9c0e0a"], 0xfe33)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc29a, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r2 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r2, 0x107, 0x2, 0x0, 0x300)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0)
r3 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r3, &(0x7f0000000d80)={&(0x7f0000000700)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000b40)=[{&(0x7f0000000740)="2c413edf40fd6d27bcb9ecdd48628c0d815fbe07ed3a088739c0044998833ac7c3de59cd910ac6ada899e0a264277a719d9888d241da13e233f7db9916de81172bcc3b47994b4ab9efb67f1036c0a650e3382519f564b9f4b3f9e0abbdfe6ca49c339f52ebebb99656bd6a29b5988640d29baa3e40cd493b8e8052d382b3a57c60229fe941ce31ed43e0222d950133cbdd460915db963f468ba2be916676dcc78567c5d3febb76692714f6b2f3", 0xad}, {&(0x7f0000000800)="3c59cae2ec5ab019f1e33a440df5d53cf02cdbed6a457d726cf2bb29ec85c427607a5a365d50e2d363ede57635685f3dbcedccb97278d95e4a49c03faec68fcd61b4d2104ee28dd0dcf0b421d5d17992ca64fb1bb154dd94d45dbd54", 0x5c}, {&(0x7f0000000880)="47b2412ba4047dfcf53a9864c46a9ea1790461dec86a4951140570975fceabc5f5ff0af57afcc9a8e3165b1e60f82240bc3b1e153140b03b686073af02ccbf48e8c6937462d1bc2cc87dfc5c3755d39985449e3937b537c24ae3ca29f711b5d486f7edd4bf6e348d62bf76c1bdb96fc48792", 0x72}, {&(0x7f0000000900)="9584420f975e7c734205c81f2e436aa0ec6e1c4c42311473cc6c24932f7f85c40664dd5faf75b210c43b7e07dfc0c0797eacbd30100db545d2f5eb69186e67bac554b21968c70cf6bd3578bfe9f594b9ec0ee28a2ce4aaec05d750b2837da39a3d74cd38c66b37becf52eb22eadd5e35e2502a3f12bb72e5c6a1b4310f9a99972a431424ea6703c3e566137d1c4238adf61cd7f27b6ae9fdbea87f7c1cedd73813c83a774cd98629fc5f224fdd9723b1792cc2624083f0c18bdfae68bed73497a4427217adee1e62c3a6a43c8acaec7427be30aad77f10b9", 0xd8}, {&(0x7f0000000a00)="752a0473b5603fe3e98269d9a599e2e01be502a62772bebefc0be713c27a4c7d976450bb65ca35e135fba01925e433e1611f1ad5eab2a866750772f89252c31df3eb6a8a04eb37270c02c1414b3473bc07cb54997a29bf5990588f20700e30df1a3a7f12ab64384313ee7a376a", 0x6d}, {&(0x7f0000000a80)="be05c3aca8880f90409aba9b8ea962b2d8e188dfd5871efc256b4e113fed38a22ef98c937f307cbb58da85fc9d35ab1a708ab0b05df1", 0x36}, {&(0x7f0000000ac0)="54096d65d3aafdf18ada7d85f1da5d060725ac11b9bba203a9f82fa2f3738e44e43694d58283d0dff677233588f69c9d64314fbc925b9cdf3daa51952a538a0cac01c29e881aad0f1d90e8827a31134f0861", 0x52}], 0x7, &(0x7f0000000bc0)=[@ip_retopts={{0xe8, 0x0, 0x7, {[@ssrr={0x89, 0x13, 0x80, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @local, @empty]}, @timestamp_addr={0x44, 0x4c, 0x9a, 0x1, 0xc, [{@multicast1, 0x4}, {@loopback, 0x1}, {@rand_addr=0x64010102, 0xffffffff}, {@empty, 0xfffffffb}, {@broadcast}, {@rand_addr=0x64010100, 0x5}, {@rand_addr=0x64010102, 0x3517}, {@local, 0xffffffff}, {@private=0xa010100, 0xa6d}]}, @lsrr={0x83, 0x1f, 0xda, [@private=0xa010102, @multicast2, @broadcast, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x24}, @remote]}, @timestamp={0x44, 0x2c, 0xb6, 0x0, 0x8, [0x3, 0xffffffff, 0x5, 0x9, 0x2, 0x6ff5930d, 0x10, 0x5, 0x0, 0x1]}, @timestamp_addr={0x44, 0x2c, 0xa7, 0x1, 0x3, [{@empty, 0x6}, {@rand_addr=0x64010101, 0x5}, {@multicast1, 0x1000}, {@private=0xa010101, 0x8}, {@private=0xa010102, 0x40}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_retopts={{0x54, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x2c, 0x3a, 0x3, 0x5, [{@local, 0xffffffff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xe289}, {@multicast2}, {@private=0xa010100, 0xfffffffe}, {@remote, 0x5}]}, @ssrr={0x89, 0xf, 0x2a, [@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}, @generic={0x88, 0x6, "1c23bb04"}]}}}, @ip_retopts={{0x34, 0x0, 0x7, {[@lsrr={0x83, 0xf, 0x6, [@broadcast, @empty, @initdev={0xac, 0x1e, 0x80, 0x0}]}, @ra={0x94, 0x4}, @generic={0x82, 0x11, "f1b9ceed7942f68d684cc177459775"}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xbd0}}], 0x1a8}, 0x800)
sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x2ee0}], 0x13, 0x0, 0x0, 0x10000000}, 0x12cd)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000dc0)={0x0, 0x0, 0x26, 0x0, 0x1}, 0x28)
r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="d8000000180081064e81f782db4cb904021d0800fd02fe02e8fe50a10a000400250000000c600e41b0000900ac0008032500000004000b000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1f, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000006a0c00000000000002000000cc44047a010000001839000019de545800000000000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0xfffffffd, 0xb7, &(0x7f0000000380)=""/183, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x37, r4, 0x8, &(0x7f0000000280)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x4, 0x0, 0x3, 0xc}, 0x10, 0x0, 0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000440)=[{0x4, 0x4, 0x4, 0x6}, {0x0, 0x3, 0x6, 0x3}, {0x3, 0x2, 0xe, 0xa}, {0x1, 0x1, 0xa, 0xc}], 0x10, 0xded5}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r1}, &(0x7f0000000100), &(0x7f0000000680)=r7}, 0x20)
r8 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r8, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0)

2.142478614s ago: executing program 3 (id=3734):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x1ff}, 0x100c, 0x7, 0x0, 0x2, 0x0, 0x7, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xf6103, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xae, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair(0x22, 0x0, 0x24, &(0x7f00000001c0))
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0x801, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0)
ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1)
socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x100000000000000, 0x0, 0x50)
r2 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0)
close(r4)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000180))
ioctl$SIOCSIFHWADDR(r4, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000b84e000000000000910c000018120000", @ANYRES32, @ANYBLOB="0000000000000016b703000000000000850000000c000000b7000000000f00"/40], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x77, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000002c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000480)={0x5, 0x7, 0x7fffffff, 0x8f}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x7, 0x1, 0x0, 0x0, 0x0, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x6040, 0x0, 0x200, 0x0, 0x10000000000000, 0xd, 0xfffc}, 0x0, 0xffffffffdfffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{}, &(0x7f0000000500), &(0x7f0000000540)='%pI4   \x00'}, 0x20)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @local})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080))
r5 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r5}, 0x38)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r5, &(0x7f0000000080), &(0x7f0000000180)=""/40}, 0x20)
socket$kcm(0x29, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x50)

2.030580801s ago: executing program 4 (id=3735):
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63fd}, [@call={0x85, 0x0, 0x0, 0x99}]}, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(r0)
bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x7, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000000000000000000800000851000000600000018000000", @ANYRES32, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x94)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r3)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x14869}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069"], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7f}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r2, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x14, &(0x7f0000000580)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xad}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x0, 0x0, &(0x7f0000000300)='syzkaller\x00'}, 0x94)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0)
close(r5)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
ioctl$SIOCSIFHWADDR(r5, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}})

1.791614614s ago: executing program 1 (id=3736):
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63fd}, [@call={0x85, 0x0, 0x0, 0x99}]}, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(r0)
bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x7, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000000000000000000800000851000000600000018000000", @ANYRES32], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x94)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r3)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x14869}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069"], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7f}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r2, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x14, &(0x7f0000000580)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xad}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x0, 0x0, &(0x7f0000000300)='syzkaller\x00'}, 0x94)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0)
close(r5)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
ioctl$SIOCSIFHWADDR(r5, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}})

1.775313195s ago: executing program 3 (id=3737):
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x208, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020031000b05d25a806f8c6394f90324fc602f0009000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

1.730629618s ago: executing program 4 (id=3738):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x29, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0xa, 0x1, 0x0)
sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x30}}}, 0x80, 0x0}, 0x20000881)
sendmsg$kcm(r1, &(0x7f0000000640)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x1, @loopback, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x1c8}, 0x33c5c7fe60a346e6)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000070000000100", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r4 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r4, 0x29, 0x49, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000dc0)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0, 0x26, 0x0, 0x1, 0x0, 0x10000, @value=r3}, 0x28)
r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r7 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r7, 0x84, 0x10, &(0x7f0000000000), 0xc)
close(r6)
r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r9, @ANYRES32=r8, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r9}, &(0x7f0000000000), &(0x7f00000002c0)=r6}, 0x20)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0)

1.639059074s ago: executing program 6 (id=3739):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000006110bd000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x1}, 0x10c0, 0x0, 0xc2bd, 0x7, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x11, 0x200000000000002, 0x300)
r1 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{0x0, 0x4a}], 0x1, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev, @loopback}}}], 0x20}, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x89f2, &(0x7f0000000900)={'ip6tnl0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = gettid()
r5 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21bef5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a835701bea8240399c56ce8f58df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23d467689a6669e4300d5acf12e4d0b35abf91569f605b2f6df0d861"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000680)={r4, r5, 0x0, 0x0, 0x0}, 0x30)
r7 = socket$kcm(0x2c, 0x3, 0x0)
recvmsg$kcm(r7, &(0x7f0000000980)={&(0x7f00000004c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000400)=""/40, 0x28}, {&(0x7f0000000540)=""/174, 0xae}, {0x0}], 0x3, &(0x7f00000009c0)=""/217, 0xd9}, 0x40010002)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2c, 0x3, 0x0, &(0x7f0000000740)={<r8=>0xffffffffffffffff})
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
ioctl$TUNGETVNETLE(r9, 0x800454dd, &(0x7f0000000ac0))
r10 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r10, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000430033d407277bac878b4ab50a", @ANYRES32, @ANYRES8=r10], 0xfe33)
ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000000b00)={r10})
close(r9)
sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a115000100ff11142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0)

1.378682629s ago: executing program 3 (id=3740):
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1b)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x11, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x5}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0xa7}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0x15, 0xf, 0x3, 0x7, 0x4, r0, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x4}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x2, 0x1e, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000009000000000000008000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000017043000fcffffff850000009d00000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b708000091f600007b8af8ff00000000bfa200000022b3ddd481cba52330ffffb703000008000000b70400000100000085000000820000002399300001000000852000000100000001888000fcffffff8520000001000000bf91000000000000b702000000010000000085000001b7000000000000009500000000000000"], &(0x7f0000000c00)='syzkaller\x00', 0xf9d, 0x69, &(0x7f0000000c40)=""/105, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000cc0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000d00)={0x0, 0x1, 0x10001, 0x400}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000000d40)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, r1], &(0x7f0000000d80)=[{0x4, 0x4, 0x2, 0x1}, {0x3, 0x5, 0x2, 0x7}, {0x2, 0x2, 0xf, 0x4}, {0x2, 0x1, 0x0, 0x8}], 0x10, 0xa}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ec0)={{r4}, &(0x7f0000000ac0), &(0x7f0000000e80)=r5}, 0x20)
r6 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x7, 0x22004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=[0x0], ""/16, <r7=>0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0], <r8=>0x0, 0x3f, &(0x7f0000000400)=[{}, {}], 0x10, 0x10, &(0x7f0000000440), &(0x7f0000000540), 0x8, 0xde, 0x8, 0x8, &(0x7f0000000580)}}, 0x10)
r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x80, 0x80, 0x5, [@typedef={0x7, 0x0, 0x0, 0x8, 0x1}, @enum={0xc, 0x5, 0x0, 0x6, 0x4, [{0x1}, {0xc, 0x5}, {0x1, 0x800}, {0xb}, {0xa, 0x9}]}, @type_tag={0x1, 0x0, 0x0, 0x12, 0x1}, @func={0xa, 0x0, 0x0, 0xc, 0x3}, @volatile={0x4, 0x0, 0x0, 0x9, 0x3}, @type_tag={0x8, 0x0, 0x0, 0x12, 0x4}, @int={0xb, 0x0, 0x0, 0x1, 0x0, 0x30, 0x0, 0x2a}]}, {0x0, [0x0, 0x61, 0x9b08b5c1dd54b717]}}, &(0x7f0000000940)=""/219, 0x9d, 0xdb, 0x1, 0x4, 0x10000, @value=r1}, 0x28)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0x10, &(0x7f0000000900)=ANY=[@ANYRESOCT=r1, @ANYRESDEC=r7, @ANYRES16=0x0], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0a000000030000000700000006"], 0x50)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r12}, 0x25)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r14 = gettid()
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0xc2, 0x8, 0x4, 0x0, 0x6, 0x42805, 0x18, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_config_ext={0x10000, 0x6c2}, 0x10008, 0xd, 0x3, 0x9, 0x2, 0xfffffffe, 0x44, 0x0, 0xb5e, 0x0, 0x81}, r14, 0xc, r6, 0x2)
r15 = openat$cgroup_int(r13, &(0x7f0000000380)='cpuset.cpus\x00', 0x2, 0x0)
write$cgroup_subtree(r15, &(0x7f0000000300)=ANY=[@ANYBLOB='N-N:N/NN'], 0x6a)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x5452, &(0x7f0000000100))
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYRESHEX=r10], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10, 0x0}, 0x30048880)

1.321862982s ago: executing program 1 (id=3741):
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x208, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020031000b05d25a806f8c6394f90324fc602f0009000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

1.124103554s ago: executing program 4 (id=3742):
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x63, 0x11, 0x8}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x32}, 0x94)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[], 0x0, 0x26}, 0x28)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180))

791.671873ms ago: executing program 5 (id=3743):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x29, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0xa, 0x1, 0x0)
sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x30}}}, 0x80, 0x0}, 0x20000881)
sendmsg$kcm(r1, &(0x7f0000000640)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x1, @loopback, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x1c8}, 0x33c5c7fe60a346e6)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000070000000100", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r4 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r4, 0x29, 0x49, &(0x7f0000000000)=r3, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000dc0)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0, 0x26, 0x0, 0x1, 0x0, 0x10000, @value=r3}, 0x28)
r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r7 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r7, 0x84, 0x10, &(0x7f0000000000), 0xc)
close(r6)
r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r9, @ANYRES32=r8, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r9}, &(0x7f0000000000), &(0x7f00000002c0)=r6}, 0x20)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0)

646.921152ms ago: executing program 1 (id=3744):
r0 = socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f00000011c0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="850000002e0000007620000000000000270000000000010095000000000000007b5eefc1a0eb570c3709ffc506a7a344caa1ab9579859a46450216d3def705449756939c6d6990e4d568bffd475ec06803d6624e3c0ce1b08a694c9bde7d04fa3968348e4d9e3c53f3eecd70006c4177e8a0d2665a0a5005d72ca4e2328616e50cc938ea6acbf645c7314a1e83eec7916c7b5ca3f68ca88ae42a8d31e69fd0f795"], &(0x7f0000000040)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffc62, 0x10, 0x0, 0xfffffffffffffed8}, 0x23)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x23, &(0x7f0000000000), 0x4)
sendmsg$inet(r2, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000e80)={&(0x7f0000000300)=@in6={0xa, 0x4e24, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000500)="db057ea036ccfc92c127194d2343380e800b8204e8042eaa1d2daace6a6470b1dbce13c5cfbeb24eb8d7c1ccfe763350e3d2408287c5434fa5b626c8af3ecf9935441c74b8d86982a7e913bdae849cf9b4ac6a9400e221f18604b3946111d41d396c272fbb5d28469ab65829e8b0d1d906a9623c0e0f26bf3defe08460e6f1e5570fc217ded379b94b8dc1cea1f80c4c0d4e4b01973dc26fe93f3251e5bd451db44806b28b9c6febbb3cd5cb54ab70592cb06afde28975fa9c105033b9df80777ea73e6fd2e7648ba932bdb88dedcb6edb73c3e30d254932ff512993cd1f494c", 0xe0}, {&(0x7f0000000600)="ebcd75082b1d5c6897494998610819f39f7514351cc3ca952de0c155a3282b55ec65a818b998cf47efa8a7b7d07583c716baba989c23180448ecb1a170f6c014fe357bcd4d903e5c48321c49a822e724e4d6ed670017f15c65bf3898a6a31890a337d91b4b09c731c367a85622609b69624a50841c912cf4336da2970042fc33f121942190e1376fa317dccd123e5f558d9690cdb0519635b82637a0866c2e8b081677866752e07c1a805b660abc823f573393402006ac3bc842a20a11ca8da6c5a97b12e775c5fe0faf095560d9efbf77c3025204fca1b900ca02c01e916da96e087f06", 0xe4}, {&(0x7f0000000380)="7ded0d380efd1f6c55e192f95f7f907f14c3598fb9d05fb4ee764cbe73684501a2728103ed97cd0855eeccdb4836ca79275d078bde84e7d3c3b614e8f4c5382948a34abddb4ab5dfcbcbc61b5562d765579f", 0x52}, {&(0x7f0000000840)="1c59b6d30df3272541b7f8fd2944411fd84fd80aca5dcfb8697d36d4d7845bc20c73cc7b2fddedc5fff680450b61c08b4b534d14361f13b6a9ce40999388f0893128de3ca02f46e34544ab7a1876a5b1180bc4001bf6503e3ebd8c06da08888ea8e15125254c48df86871263342f59878459acb013ce59c72c1d79a82b5950f49b4ed8f6f82f9d15", 0x88}, {&(0x7f0000000440)="6aea4cdf9cbebe3421a6a8cb6d98eb285a602083268fcc001e7b", 0x1a}, {&(0x7f0000000700)="ecbb55cba2b09bdbc7c8f3aab77d2f3e43653ad7ddd4ff1d650ce28334b40bb3ab0d514eb5bb66dcc71eabb685b40f2e5ca778528830c620a1dfd3bbe18b3bc703739f457c0878e50b", 0x49}, {&(0x7f0000000940)="a64089e291d5885c0183ca355af2f44f9db32aa6ff94951ee48c5c22638f1c99e1323d592592e08ccb498e8d52e233c4d74066fad5c6e6ce1e211cbccb25666bf143130989ca8cad26ccb764b376a93979de38cc4f781530423a40c0ffb4f0f5f75ac7e2075d49f467c91716a8d820c23696c49ecf7c19d438f65231b0900636fb12b449f677e478236dc7ff2b9cea4fe8edeaa5d0f34f3d0fd4b0735537b73b4048b4baa715fe4dd78de4e0debaf126433ac95b4ed05acc723ced9665ee218db50ba39c9a83f10ef1d9512247f553fcc0", 0xd1}, {&(0x7f0000000a40)="9024e15557393b09dae74c39b7c7f52cba5849199158c577a655c4716000c6f6a322a68702918526f9919f4b7ee3dd40c4a52d9f0f7ec9977679dec0d92546ff3be352766a3a91c754c648d5e19712aa377fa8587874462c82187e92e69fa5a59f2735530ece37255b5a372190b3889dc54fed43d6aa00a0a49fe81d80d937d842b21330f7e3a7021a9341740094349aa3b5d0b4c1f5", 0x96}, {&(0x7f0000000b00)="b588fde81f800899005b7339a8e9f06580e3ea20054f2d1b0551", 0x1a}, {&(0x7f0000000b40)="b95ea47c0c3514e8d8b43f77bdefd9e3f9125278b0206ffba49374118de2c5ff5ee29c3374586a862bf9fe538f16c37d3efdeba2bb0d1c93790818dad734d5facb9678b71446dafeea2a23ade7253d4a61d67cf4a667cb1af731b409cc0daea82dd758b2dd446955ddde35d4c2346670f48435db776b192b6e5fe1cc7c06a786b815f2f9b01b216b2dc9fb1970d050ab5a905f6a", 0x94}], 0xa, &(0x7f0000000d00)=[{0x68, 0x112, 0x2, "f6d4364a7c8aed4bbeb888ce5e13de500e4b2ece0346f5cd024c1779bd83d5efd8052f1618accc7b8c106594694b4f8f0cd6f6708f5e09bcc9adcb0e15b3c11801f40ee2df282a3b332f38d3b4411d1826ec364f69302578"}, {0xd0, 0x104, 0x4, "2a870025f401d46f12755185830be8fd7927f1617ecc25e3bb9048ad89fbb229ffa8c8f30c8941cf1c06c05d968c286cb3316833574748f6dfdb93e6d60c65f1a4e031488432af0f2b272b7b267eee0f598e47e1a108250a9205498c7266448e55b5c0c8240346dce25f1b830e10ed1d8d1d0f85f3342299c14b50d33e2701baa6e386bc2f3c98ee43951c1d0414876527c507c84dec2761aaa2cda285b367e4c6439ff3ae47cb1269857332de217002448019061602a25fb6d956"}, {0x38, 0x84, 0x8, "f29e7b4e09fce86aa57b94fc890c3f323e05a3e815e60685b5b74ab4a509f8ac0041794f"}], 0x170}, 0x40000)
recvmsg(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0xc2bb, 0x0, 0x4000000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0)
close(r3)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000180))
ioctl$SIOCSIFHWADDR(r3, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a876d839240d29c035055b67db3e6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7e8dc34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bb44b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334583239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bf4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc508afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd360000000000000000ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c97a088a22e8b15c3e233db00002e30d46a0024d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c29c5c0ed5bcdf510c3c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ced92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f68fa8d7c2dfb28e1f05e46b0933c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b19abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d588afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda6900002a070886df42b27098773b45198b4a34ac97febd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f0000000000f8e10238d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d63521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07afef12ef060cd4403a099f32468f658000b4082d43e12186195cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea209b53b230ef0f2ab85cbdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bd3339403004b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab900000000000000000000d71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdbf24a0c5441ce046078492b53467cfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89cb349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb15f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c00c57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137df47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b558982016b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8b49e3d0168bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85a3009a5d30f479e293a3302e11350ea857b37e76ca3f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c8ffe0d508dcee3070e8b42ac38545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f98117919472b61b20026d7e646174b55d251f7f8ca5ccc22a5efb33b217eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4444e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24000000000000000000000000000000000000cd3211b3842b68a4eddca2eae28529e97a98d7ec3fd902df1ba8fc2ad2377e72d4e7aeacbbccef5614cd965511558f40720025c022bc9c213e407f6bc4b673c55aa8e729299a37fd6339acd906ac861ba56c9fa9b8b12b5e68a3cdadb906355e1f1d336a243172affe50d0fb36c3718a7498eed3d398f405a34d494414e87ef1ce1845510d43d00171d6b4b762f89564c22d542a119878709cd6822c3a3eb47a849b0737929fe9e1eecd1bff5a2b9880e2a6d8a3b3b7e88a673c96cda4455eff1c530db0e6598a2686aa09aeaf0f1aed95aeb8b0a2cc5ca31c0f56285cc05f7090a0e0583cf540d18cd8817e685c7b4ff176178ac1234f23e54445ec20b2689832d78409897a0307e89ebcd5f4ba042a3d10237a5a8a9a6eda36d2f337dc54537b80e8433341b135b4c5bb0173ffde46ccd260e1d4f2c51e8b07bb256f1317912cb1fc9e491e0bb9109e475cc795c23ad9f4f0042c5e9c655a4d865bc4a266e6a1d3d2b7ee53be9efb33a98933b5ba74ee3ac8d34b6af8c1fdbffade3abc80842b74354162f5b994ab5254cb068bc5e2ae242a1d37d0d49947c9317fa1a46c9e259ce0e1f9db992c53f7830a5e8f4fac6b187eb9f15ba61f730f86d7d7b63bbc7a1d9ff37e87a90a14e0655304da069f9009b62717649b6c6af94fcba713f8ee6fcce25aef44d009966614b61be9369ffc589a79051b0a0000000000000003ebd34c41afe268c33c9322c3a783772aec998f51a6e70fb932a8019e72ef5ab127bb30c79ebfd867441083546305fb39449c40a166ea389a6b77b7c87f66e8bf5806726b8fc50b943627314803a12c33312dce0a10f852da3e000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48)
r5 = socket$kcm(0x2, 0x2, 0x73)
setsockopt$sock_attach_bpf(r5, 0x0, 0x29, 0x0, 0x17)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000480)="b9fb0307683a0600000000378100", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50)

511.765649ms ago: executing program 6 (id=3745):
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1b)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x11, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x5}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0xa7}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0x15, 0xf, 0x3, 0x7, 0x4, r0, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x4}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x2, 0x1e, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000009000000000000008000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000017043000fcffffff850000009d00000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b708000091f600007b8af8ff00000000bfa200000022b3ddd481cba52330ffffb703000008000000b70400000100000085000000820000002399300001000000852000000100000001888000fcffffff8520000001000000bf91000000000000b702000000010000000085000001b7000000000000009500000000000000"], &(0x7f0000000c00)='syzkaller\x00', 0xf9d, 0x69, &(0x7f0000000c40)=""/105, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000cc0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000d00)={0x0, 0x1, 0x10001, 0x400}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000000d40)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, r1], &(0x7f0000000d80)=[{0x4, 0x4, 0x2, 0x1}, {0x3, 0x5, 0x2, 0x7}, {0x2, 0x2, 0xf, 0x4}, {0x2, 0x1, 0x0, 0x8}], 0x10, 0xa}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ec0)={{r4}, &(0x7f0000000ac0), &(0x7f0000000e80)=r5}, 0x20)
r6 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x7, 0x22004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=[0x0], ""/16, <r7=>0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0], <r8=>0x0, 0x3f, &(0x7f0000000400)=[{}, {}], 0x10, 0x10, &(0x7f0000000440), &(0x7f0000000540), 0x8, 0xde, 0x8, 0x8, &(0x7f0000000580)}}, 0x10)
r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x80, 0x80, 0x5, [@typedef={0x7, 0x0, 0x0, 0x8, 0x1}, @enum={0xc, 0x5, 0x0, 0x6, 0x4, [{0x1}, {0xc, 0x5}, {0x1, 0x800}, {0xb}, {0xa, 0x9}]}, @type_tag={0x1, 0x0, 0x0, 0x12, 0x1}, @func={0xa, 0x0, 0x0, 0xc, 0x3}, @volatile={0x4, 0x0, 0x0, 0x9, 0x3}, @type_tag={0x8, 0x0, 0x0, 0x12, 0x4}, @int={0xb, 0x0, 0x0, 0x1, 0x0, 0x30, 0x0, 0x2a}]}, {0x0, [0x0, 0x61, 0x9b08b5c1dd54b717]}}, &(0x7f0000000940)=""/219, 0x9d, 0xdb, 0x1, 0x4, 0x10000, @value=r1}, 0x28)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0x10, &(0x7f0000000900)=ANY=[@ANYRESOCT=r1, @ANYRESDEC=r7, @ANYRES16=0x0], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0a000000030000000700000006"], 0x50)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r12}, 0x25)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r14 = gettid()
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0xc2, 0x8, 0x4, 0x0, 0x6, 0x42805, 0x18, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_config_ext={0x10000, 0x6c2}, 0x10008, 0xd, 0x3, 0x9, 0x2, 0xfffffffe, 0x44, 0x0, 0xb5e, 0x0, 0x81}, r14, 0xc, r6, 0x2)
r15 = openat$cgroup_int(r13, &(0x7f0000000380)='cpuset.cpus\x00', 0x2, 0x0)
write$cgroup_subtree(r15, &(0x7f0000000300)=ANY=[@ANYBLOB='N-N:N/NN'], 0x6a)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x5452, &(0x7f0000000100))
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYRESHEX=r10], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10, 0x0}, 0x30048880)

511.11007ms ago: executing program 3 (id=3746):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffff}, 0x101000, 0x0, 0x3, 0xd, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
unlink(0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x600300)
socket$kcm(0x2, 0x2, 0x73)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="05000000030000008400000010"], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)='%pB    \x00'}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x20000000000000fe, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x100, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f07df33c9f7b986", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={0x0}, 0x18)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, <r4=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0xa, 0xe, &(0x7f0000000a00)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @exit], &(0x7f0000000980)='GPL\x00', 0x8, 0x1c, &(0x7f0000000a80)=""/28, 0x41100, 0x10, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3, 0x1, &(0x7f0000000ac0)=[r4, r4, r4], &(0x7f0000000b00)=[{0x4, 0x4, 0x5, 0x4}], 0x10, 0x5}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c80)={{r4, <r6=>0xffffffffffffffff}, &(0x7f0000000c00), &(0x7f0000000c40)=r0}, 0x20)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000cc0)={r5, r6}, 0xc)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0xffffffffffffffff, <r7=>0xffffffffffffffff}, &(0x7f0000000100), &(0x7f00000001c0)=r3}, 0x20)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7f1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x4}, 0x50)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r9, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0], ""/16, <r10=>0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x77, &(0x7f0000000700), 0x0, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0xc0, 0x8, 0x8, &(0x7f0000000800)}}, 0x10)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d80)={0x6, 0x7, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_query]}, 0x0, 0x5, 0xb4, &(0x7f0000000540)=""/180, 0x41100, 0x34, '\x00', r10, 0x25, r11, 0x8, 0x0, 0x0, 0x10, &(0x7f00000009c0)={0x2, 0x10, 0xedd8, 0xfffffff7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000d00), 0x0, 0x10, 0x7}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0xe, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9f62, 0x0, 0x0, 0x0, 0xf}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @map_val={0x18, 0xb, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x80000000}]}, &(0x7f00000002c0)='syzkaller\x00', 0x401, 0xef, &(0x7f0000000540)=""/239, 0x40f00, 0x10, '\x00', r10, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0x9, 0x436, 0x5}, 0x10, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000640)=[{0x5, 0x4, 0x0, 0x9}, {0x5, 0x3, 0x7, 0xa}, {0x1, 0x4, 0x0, 0x1}, {0x1, 0x5, 0x9, 0xb}, {0x0, 0x2, 0xe, 0x9}, {0x5, 0x3, 0x10, 0x8}, {0x1, 0x5, 0x5}, {0x2, 0x1, 0x9, 0xc}, {0x0, 0x1, 0xa, 0x1}, {0x5, 0x1, 0x10, 0x4}], 0x10, 0x5}, 0x94)
r12 = socket$kcm(0x2, 0x2, 0x73)
sendmsg$inet(r12, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @empty}, 0x10, 0x0}, 0x900000000000000)
syz_clone(0x40000400, 0x0, 0x0, 0x0, 0x0, 0x0)

510.75645ms ago: executing program 4 (id=3747):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000020000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x1a, &(0x7f0000000180)=ANY=[@ANYBLOB="180000008f000000000000000b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000700008500000086000000be0900000000000055090100000000089500000000000000bd0a0600000000003500f4ff01000000dd90fcff0000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000008500000006000000bf91000000000000b702000003000000850000002a000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x1, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7f}, 0x23)

288.059333ms ago: executing program 4 (id=3748):
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63fd}, [@call={0x85, 0x0, 0x0, 0x99}]}, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(r0)
bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x7, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000000000000000000800000851000000600000018000000", @ANYRES32, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x94)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r3)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x14869}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069"], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7f}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r2, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x14, &(0x7f0000000580)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xad}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x0, 0x0, &(0x7f0000000300)='syzkaller\x00'}, 0x94)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0)
close(r5)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
ioctl$SIOCSIFHWADDR(r5, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}})

0s ago: executing program 6 (id=3749):
r0 = getpid()
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000040)}, 0x20)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xdf, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x2, @perf_config_ext={0x408003, 0x1}, 0x14105, 0x32, 0xfffffbff, 0x0, 0x6, 0x0, 0xffda, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00')
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0xe8}, 0x14002)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080))
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080))

kernel console output (not intermixed with test programs):

nfiguration, please check.
[  895.819698][T12956] RSP: 002b:00007fd103f32028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  895.819728][T12956] RAX: ffffffffffffffda RBX: 00007fd103215fa0 RCX: 00007fd102f9acb9
[  895.819744][T12956] RDX: 0000000000000028 RSI: 0000200000000100 RDI: 0000000000000012
[  895.819766][T12956] RBP: 00007fd103f32090 R08: 0000000000000000 R09: 0000000000000000
[  895.819779][T12956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  895.819792][T12956] R13: 00007fd103216038 R14: 00007fd103215fa0 R15: 00007ffd86fdad28
[  895.819825][T12956]  </TASK>
[  896.147595][T12974] FAULT_INJECTION: forcing a failure.
[  896.147595][T12974] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  896.220756][T12974] CPU: 1 PID: 12974 Comm: syz.4.2810 Not tainted syzkaller #0
[  896.228304][T12974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  896.238392][T12974] Call Trace:
[  896.241724][T12974]  <TASK>
[  896.244688][T12974]  dump_stack_lvl+0x188/0x24e
[  896.249418][T12974]  ? show_regs_print_info+0x12/0x12
[  896.254679][T12974]  ? load_image+0x400/0x400
[  896.259245][T12974]  ? __lock_acquire+0x7d10/0x7d10
[  896.264326][T12974]  should_fail_ex+0x399/0x4d0
[  896.269065][T12974]  _copy_from_user+0x2c/0x170
[  896.273784][T12974]  iovec_from_user+0x143/0x360
[  896.278589][T12974]  __import_iovec+0x6d/0x500
[  896.283223][T12974]  ? __might_fault+0xa6/0x120
[  896.287948][T12974]  import_iovec+0x6f/0xa0
[  896.292320][T12974]  ___sys_recvmsg+0x4b6/0x590
[  896.297060][T12974]  ? __sys_recvmsg+0x290/0x290
[  896.301882][T12974]  ? common_file_perm+0x171/0x1c0
[  896.306969][T12974]  ? __fget_files+0x43d/0x4b0
[  896.311741][T12974]  __x64_sys_recvmsg+0x205/0x2e0
[  896.316791][T12974]  ? ___sys_recvmsg+0x590/0x590
[  896.321740][T12974]  ? lockdep_hardirqs_on+0x94/0x140
[  896.327014][T12974]  do_syscall_64+0x4c/0xa0
[  896.331472][T12974]  ? clear_bhb_loop+0x60/0xb0
[  896.336200][T12974]  ? clear_bhb_loop+0x60/0xb0
[  896.340932][T12974]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  896.346877][T12974] RIP: 0033:0x7f279f19acb9
[  896.351339][T12974] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  896.371004][T12974] RSP: 002b:00007f27a0085028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  896.379474][T12974] RAX: ffffffffffffffda RBX: 00007f279f415fa0 RCX: 00007f279f19acb9
[  896.387490][T12974] RDX: 0000000000000000 RSI: 0000200000000a80 RDI: 0000000000000005
[  896.395530][T12974] RBP: 00007f27a0085090 R08: 0000000000000000 R09: 0000000000000000
[  896.403535][T12974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  896.411638][T12974] R13: 00007f279f416038 R14: 00007f279f415fa0 R15: 00007fffe8181a08
[  896.419694][T12974]  </TASK>
[  897.539517][ T4323] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  897.549282][ T4323] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  897.557642][ T4323] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  897.566295][ T4323] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  897.582604][ T4323] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  897.591168][ T4323] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  898.410098][T13002] chnl_net:caif_netlink_parms(): no params data found
[  898.595407][T13002] bridge0: port 1(bridge_slave_0) entered blocking state
[  898.685560][T13002] bridge0: port 1(bridge_slave_0) entered disabled state
[  898.737865][T13002] device bridge_slave_0 entered promiscuous mode
[  898.775893][T13002] bridge0: port 2(bridge_slave_1) entered blocking state
[  898.805345][T13002] bridge0: port 2(bridge_slave_1) entered disabled state
[  898.846823][T13002] device bridge_slave_1 entered promiscuous mode
[  898.887547][T13002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  898.899697][T13002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  898.999642][T13002] team0: Port device team_slave_0 added
[  899.010394][T13002] team0: Port device team_slave_1 added
[  899.059952][T13002] batman_adv: batadv0: Adding interface: batadv_slave_0
[  899.073832][T13002] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  899.101330][T13002] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  899.148687][T13039] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2832'.
[  899.186328][T13002] batman_adv: batadv0: Adding interface: batadv_slave_1
[  899.194678][T13002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  899.227084][T13002] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  899.637368][ T4324] Bluetooth: hci1: command 0x0409 tx timeout
[  899.719027][T13002] device hsr_slave_0 entered promiscuous mode
[  899.756999][T13002] device hsr_slave_1 entered promiscuous mode
[  899.765483][T13002] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  899.773479][T13002] Cannot create hsr debugfs directory
[  900.287927][T13002] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  900.432084][T13002] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  900.492872][T13002] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  900.595900][T13002] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  900.757257][T13077] netlink: 'syz.6.2845': attribute type 10 has an invalid length.
[  901.173933][T13088] FAULT_INJECTION: forcing a failure.
[  901.173933][T13088] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  901.192384][T13088] CPU: 0 PID: 13088 Comm: syz.4.2851 Not tainted syzkaller #0
[  901.199929][T13088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  901.210106][T13088] Call Trace:
[  901.213417][T13088]  <TASK>
[  901.216467][T13088]  dump_stack_lvl+0x188/0x24e
[  901.221202][T13088]  ? show_regs_print_info+0x12/0x12
[  901.226450][T13088]  ? load_image+0x400/0x400
[  901.230998][T13088]  ? __lock_acquire+0x7d10/0x7d10
[  901.236081][T13088]  ? snprintf+0xe5/0x140
[  901.240407][T13088]  should_fail_ex+0x399/0x4d0
[  901.245143][T13088]  _copy_to_user+0x2c/0x130
[  901.249693][T13088]  simple_read_from_buffer+0xe3/0x150
[  901.255119][T13088]  proc_fail_nth_read+0x1a6/0x220
[  901.260195][T13088]  ? proc_fault_inject_write+0x310/0x310
[  901.265868][T13088]  ? fsnotify_perm+0x248/0x550
[  901.270696][T13088]  ? proc_fault_inject_write+0x310/0x310
[  901.276475][T13088]  vfs_read+0x2de/0xa00
[  901.280689][T13088]  ? kernel_read+0x1e0/0x1e0
[  901.285330][T13088]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  901.291564][T13088]  ? lockdep_hardirqs_on+0x94/0x140
[  901.296902][T13088]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  901.303114][T13088]  ksys_read+0x14c/0x250
[  901.307413][T13088]  ? vfs_write+0xa30/0xa30
[  901.311879][T13088]  ? syscall_enter_from_user_mode+0x2a/0x80
[  901.317848][T13088]  do_syscall_64+0x4c/0xa0
[  901.322311][T13088]  ? clear_bhb_loop+0x60/0xb0
[  901.327024][T13088]  ? clear_bhb_loop+0x60/0xb0
[  901.331763][T13088]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  901.337954][T13088] RIP: 0033:0x7f279f15b58e
[  901.342402][T13088] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  901.362062][T13088] RSP: 002b:00007f27a0084fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  901.370528][T13088] RAX: ffffffffffffffda RBX: 00007f27a00856c0 RCX: 00007f279f15b58e
[  901.378544][T13088] RDX: 000000000000000f RSI: 00007f27a00850a0 RDI: 0000000000000009
[  901.386557][T13088] RBP: 00007f27a0085090 R08: 0000000000000000 R09: 0000000000000000
[  901.394570][T13088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  901.402712][T13088] R13: 00007f279f416038 R14: 00007f279f415fa0 R15: 00007fffe8181a08
[  901.410753][T13088]  </TASK>
[  901.726279][T13077] team0 (unregistering): Port device team_slave_0 removed
[  901.727631][ T4324] Bluetooth: hci1: command 0x041b tx timeout
[  901.761100][T13077] team0 (unregistering): Port device team_slave_1 removed
[  901.786062][T13077] team0 (unregistering): Port device wlan1 removed
[  901.814789][T13082] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2847'.
[  901.921503][T13002] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  901.932185][T13002] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  901.952077][T13002] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  901.962973][T13002] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  902.101829][T13002] 8021q: adding VLAN 0 to HW filter on device bond0
[  902.131929][T13002] 8021q: adding VLAN 0 to HW filter on device team0
[  902.150893][ T8754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  902.159771][ T8754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  902.172384][ T8754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  902.211765][ T8754] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  902.243464][ T8754] bridge0: port 1(bridge_slave_0) entered blocking state
[  902.250715][ T8754] bridge0: port 1(bridge_slave_0) entered forwarding state
[  902.262569][ T8754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  902.271794][ T8754] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  902.286148][ T8754] bridge0: port 2(bridge_slave_1) entered blocking state
[  902.293361][ T8754] bridge0: port 2(bridge_slave_1) entered forwarding state
[  902.322145][T13107] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2863'.
[  902.341624][ T8754] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  902.352691][ T8754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  902.373829][ T8754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  902.405037][ T8754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  902.418833][ T8754] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  902.433139][ T8754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  902.444459][ T8754] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  902.466916][ T8754] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  902.486231][ T8754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  902.524076][ T8754] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  902.573007][T13002] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  902.622197][T13002] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  902.655230][ T8754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  902.707531][ T8754] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  903.087822][T13139] netlink: 'syz.1.2864': attribute type 10 has an invalid length.
[  903.671122][T13139] bridge0: port 3(team0) entered disabled state
[  903.797471][ T4324] Bluetooth: hci1: command 0x040f tx timeout
[  903.951616][T13149] netlink: 'syz.6.2867': attribute type 29 has an invalid length.
[  903.984438][T13139] device team_slave_0 left promiscuous mode
[  903.993858][T13139] team0 (unregistering): Port device team_slave_0 removed
[  904.005151][T13139] device team_slave_1 left promiscuous mode
[  904.033370][T13139] team0 (unregistering): Port device team_slave_1 removed
[  904.041232][T13139] device geneve1 left promiscuous mode
[  904.059630][T13139] team0 (unregistering): Port device geneve1 removed
[  904.069847][T13139] device wlan1 left promiscuous mode
[  904.087417][T13139] team0 (unregistering): Port device wlan1 removed
[  904.117213][T13149] netlink: 'syz.6.2867': attribute type 29 has an invalid length.
[  904.133090][T13150] netlink: 'syz.6.2867': attribute type 29 has an invalid length.
[  904.147912][T13151] netlink: 'syz.6.2867': attribute type 29 has an invalid length.
[  904.164450][ T8754] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  904.179466][ T8754] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  904.205282][T13002] 8021q: adding VLAN 0 to HW filter on device batadv0
[  904.270987][ T8754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  904.284792][ T8754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  904.333583][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  904.355320][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  904.371433][T13002] device veth0_vlan entered promiscuous mode
[  904.381940][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  904.392442][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  904.411302][T13002] device veth1_vlan entered promiscuous mode
[  904.475722][T13002] device veth0_macvtap entered promiscuous mode
[  904.484200][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  904.505533][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  904.523086][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  904.533274][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  904.545655][T13002] device veth1_macvtap entered promiscuous mode
[  904.555958][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  904.566365][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  904.602463][T13002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  904.642194][T13002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  904.662649][T13002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  904.688559][T13002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  904.730647][T13002] batman_adv: batadv0: Interface activated: batadv_slave_0
[  904.752381][ T8754] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  904.764977][ T8754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  904.775568][T13163] netlink: 'syz.5.2871': attribute type 2 has an invalid length.
[  904.785986][T13163] netlink: 'syz.5.2871': attribute type 9 has an invalid length.
[  904.794946][T13163] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2871'.
[  904.817539][T13002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  904.848798][T13002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  904.864669][T13002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  904.876090][T13002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  904.890772][T13002] batman_adv: batadv0: Interface activated: batadv_slave_1
[  904.906653][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  904.932872][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  904.958785][T13002] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  904.968780][T13002] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  904.977559][T13002] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  904.986329][T13002] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  905.106442][   T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  905.154444][   T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  905.229507][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  905.294156][ T4410] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  905.315172][ T4410] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  905.353454][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  905.877480][ T4323] Bluetooth: hci1: command 0x0419 tx timeout
[  905.964209][T13181] netlink: 'syz.1.2878': attribute type 29 has an invalid length.
[  905.973747][T13181] netlink: 'syz.1.2878': attribute type 29 has an invalid length.
[  905.983486][T13181] netlink: 'syz.1.2878': attribute type 29 has an invalid length.
[  905.992433][T13181] netlink: 'syz.1.2878': attribute type 29 has an invalid length.
[  906.260331][T13192] netlink: 'syz.3.2883': attribute type 2 has an invalid length.
[  906.271502][T13192] netlink: 'syz.3.2883': attribute type 9 has an invalid length.
[  906.284844][T13192] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2883'.
[  906.968380][T13197] netlink: 'syz.4.2884': attribute type 10 has an invalid length.
[  907.192626][T13197] bridge0: port 4(dummy0) entered disabled state
[  907.200579][T13197] bridge0: port 2(bridge_slave_1) entered disabled state
[  907.208637][T13197] bridge0: port 1(bridge_slave_0) entered disabled state
[  907.284633][T13197] team0: Device bridge0 is already an upper device of the team interface
[  907.303855][T13221] netlink: 'syz.3.2892': attribute type 29 has an invalid length.
[  907.345853][T13221] netlink: 'syz.3.2892': attribute type 29 has an invalid length.
[  907.390952][T13222] netlink: 'syz.3.2892': attribute type 29 has an invalid length.
[  908.679415][ T4324] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  908.689031][ T4324] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  908.697337][ T4324] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  908.710669][ T4324] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  908.719838][ T4324] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  908.743075][ T4324] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  909.117101][T13247] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2905'.
[  909.222115][ T4327] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  909.316359][T13259] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2909'.
[  909.414236][ T4327] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  909.441410][T13263] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2908'.
[  909.494203][T13263] batman_adv: batadv0: Adding interface: hsr_slave_1
[  909.502888][T13263] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  909.532070][T13263] batman_adv: batadv0: Interface activated: hsr_slave_1
[  909.596958][T13261] delete_channel: no stack
[  909.611980][ T4327] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  909.766391][ T4327] device netdevsim0 left promiscuous mode
[  909.818065][ T4327] team0: Port device netdevsim0 removed
[  909.825752][ T4327] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  909.913185][T13277] FAULT_INJECTION: forcing a failure.
[  909.913185][T13277] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  910.001320][T13277] CPU: 0 PID: 13277 Comm: syz.5.2916 Not tainted syzkaller #0
[  910.008908][T13277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  910.019112][T13277] Call Trace:
[  910.022442][T13277]  <TASK>
[  910.025428][T13277]  dump_stack_lvl+0x188/0x24e
[  910.030189][T13277]  ? show_regs_print_info+0x12/0x12
[  910.035457][T13277]  ? load_image+0x400/0x400
[  910.040037][T13277]  ? __lock_acquire+0x7d10/0x7d10
[  910.045154][T13277]  ? snprintf+0xe5/0x140
[  910.049465][T13277]  should_fail_ex+0x399/0x4d0
[  910.054231][T13277]  _copy_to_user+0x2c/0x130
[  910.058804][T13277]  simple_read_from_buffer+0xe3/0x150
[  910.064258][T13277]  proc_fail_nth_read+0x1a6/0x220
[  910.069362][T13277]  ? proc_fault_inject_write+0x310/0x310
[  910.075069][T13277]  ? fsnotify_perm+0x248/0x550
[  910.079902][T13277]  ? proc_fault_inject_write+0x310/0x310
[  910.085637][T13277]  vfs_read+0x2de/0xa00
[  910.089882][T13277]  ? kernel_read+0x1e0/0x1e0
[  910.094547][T13277]  ? __fget_files+0x28/0x4b0
[  910.099210][T13277]  ? __fget_files+0x28/0x4b0
[  910.103882][T13277]  ? __fget_files+0x43d/0x4b0
[  910.108666][T13277]  ? __fdget_pos+0x2ae/0x360
[  910.113320][T13277]  ? ksys_read+0x71/0x250
[  910.117723][T13277]  ksys_read+0x14c/0x250
[  910.122064][T13277]  ? vfs_write+0xa30/0xa30
[  910.126666][T13277]  ? lockdep_hardirqs_on+0x94/0x140
[  910.131955][T13277]  do_syscall_64+0x4c/0xa0
[  910.136442][T13277]  ? clear_bhb_loop+0x60/0xb0
[  910.141172][T13277]  ? clear_bhb_loop+0x60/0xb0
[  910.145959][T13277]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  910.151909][T13277] RIP: 0033:0x7fd102f5b58e
[  910.156386][T13277] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  910.176053][T13277] RSP: 002b:00007fd103f31fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  910.184533][T13277] RAX: ffffffffffffffda RBX: 00007fd103f326c0 RCX: 00007fd102f5b58e
[  910.192599][T13277] RDX: 000000000000000f RSI: 00007fd103f320a0 RDI: 0000000000000006
[  910.200656][T13277] RBP: 00007fd103f32090 R08: 0000000000000000 R09: 0000000000000000
[  910.208680][T13277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  910.216699][T13277] R13: 00007fd103216038 R14: 00007fd103215fa0 R15: 00007ffd86fdad28
[  910.224769][T13277]  </TASK>
[  910.369584][T13256] chnl_net:caif_netlink_parms(): no params data found
[  910.585222][T13256] bridge0: port 1(bridge_slave_0) entered blocking state
[  910.592596][T13256] bridge0: port 1(bridge_slave_0) entered disabled state
[  910.601444][T13256] device bridge_slave_0 entered promiscuous mode
[  910.611348][T13256] bridge0: port 2(bridge_slave_1) entered blocking state
[  910.618628][T13256] bridge0: port 2(bridge_slave_1) entered disabled state
[  910.627289][T13256] device bridge_slave_1 entered promiscuous mode
[  910.662184][T13256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  910.677776][T13256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  910.769207][T13256] team0: Port device team_slave_0 added
[  910.788632][T13256] team0: Port device team_slave_1 added
[  910.837085][ T4323] Bluetooth: hci2: command 0x0409 tx timeout
[  911.035598][T13256] batman_adv: batadv0: Adding interface: batadv_slave_0
[  911.078728][T13256] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  911.079287][T13302] validate_nla: 6 callbacks suppressed
[  911.079326][T13302] netlink: 'syz.5.2921': attribute type 29 has an invalid length.
[  911.166598][T13256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  911.211925][T13301] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2920'.
[  911.224782][T13302] netlink: 'syz.5.2921': attribute type 29 has an invalid length.
[  911.246603][T13256] batman_adv: batadv0: Adding interface: batadv_slave_1
[  911.256856][T13256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  911.334949][T13256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  911.431508][T13308] netlink: 'syz.5.2921': attribute type 29 has an invalid length.
[  911.518674][T13312] netlink: 'syz.5.2921': attribute type 29 has an invalid length.
[  911.653061][T13325] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2925'.
[  911.811234][T13256] device hsr_slave_0 entered promiscuous mode
[  911.823207][T13256] device hsr_slave_1 entered promiscuous mode
[  911.838082][T13256] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  911.851928][T13256] Cannot create hsr debugfs directory
[  912.916769][ T4323] Bluetooth: hci2: command 0x041b tx timeout
[  913.866920][ T4327] device wlan1 left promiscuous mode
[  913.878877][ T4327] team0: Port device wlan1 removed
[  914.377275][ T4327] device hsr_slave_0 left promiscuous mode
[  914.388189][ T4327] device hsr_slave_1 left promiscuous mode
[  914.423990][ T4327] bridge0: port 4(dummy0) entered disabled state
[  914.447856][ T4327] bridge0: port 3(team0) entered disabled state
[  914.467715][ T4327] device bridge_slave_1 left promiscuous mode
[  914.473993][ T4327] bridge0: port 2(bridge_slave_1) entered disabled state
[  914.519054][ T4327] device bridge_slave_0 left promiscuous mode
[  914.525447][ T4327] bridge0: port 1(bridge_slave_0) entered disabled state
[  914.996686][ T4323] Bluetooth: hci2: command 0x040f tx timeout
[  915.419291][ T4327] device veth1_vlan left promiscuous mode
[  917.080461][ T4323] Bluetooth: hci2: command 0x0419 tx timeout
[  917.556874][ T4327] device geneve1 left promiscuous mode
[  917.563715][ T4327] team0 (unregistering): Port device geneve1 removed
[  917.875867][ T4327] device team_slave_1 left promiscuous mode
[  917.885137][ T4327] team0 (unregistering): Port device team_slave_1 removed
[  917.921705][ T4327] device team_slave_0 left promiscuous mode
[  917.928525][ T4327] team0 (unregistering): Port device team_slave_0 removed
[  917.973625][ T4327] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  918.014747][ T4327] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  918.279151][ T4327] bond0 (unregistering): Released all slaves
[  918.364699][T13396] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2946'.
[  918.375838][T13400] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2947'.
[  918.539591][T13256] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  918.570986][T13256] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  918.690170][T13256] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  918.789723][T13256] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  919.275486][T13447] netlink: 763 bytes leftover after parsing attributes in process `syz.1.2958'.
[  919.325525][T13256] 8021q: adding VLAN 0 to HW filter on device bond0
[  919.357956][T13447] FAULT_INJECTION: forcing a failure.
[  919.357956][T13447] name failslab, interval 1, probability 0, space 0, times 0
[  919.416089][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  919.425805][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  919.450716][T13447] CPU: 0 PID: 13447 Comm: syz.1.2958 Not tainted syzkaller #0
[  919.458256][T13447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  919.468378][T13447] Call Trace:
[  919.471747][T13447]  <TASK>
[  919.474742][T13447]  dump_stack_lvl+0x188/0x24e
[  919.479485][T13447]  ? show_regs_print_info+0x12/0x12
[  919.484739][T13447]  ? load_image+0x400/0x400
[  919.489293][T13447]  ? verify_lock_unused+0x140/0x140
[  919.494582][T13447]  should_fail_ex+0x399/0x4d0
[  919.499334][T13447]  should_failslab+0x5/0x20
[  919.503896][T13447]  slab_pre_alloc_hook+0x59/0x310
[  919.508999][T13447]  kmem_cache_alloc+0x56/0x2f0
[  919.513815][T13447]  ? skb_clone+0x1e7/0x370
[  919.518374][T13447]  skb_clone+0x1e7/0x370
[  919.522715][T13447]  __netlink_deliver_tap+0x3ed/0x800
[  919.528067][T13447]  ? netlink_deliver_tap+0x2e/0x1b0
[  919.533328][T13447]  netlink_deliver_tap+0x19c/0x1b0
[  919.538485][T13447]  netlink_unicast+0x728/0x8d0
[  919.543321][T13447]  netlink_sendmsg+0x8ad/0xbd0
[  919.548147][T13447]  ? netlink_getsockopt+0x550/0x550
[  919.553412][T13447]  ? aa_sock_msg_perm+0x94/0x150
[  919.558403][T13447]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  919.563730][T13447]  ? security_socket_sendmsg+0x7c/0xa0
[  919.569233][T13447]  ? netlink_getsockopt+0x550/0x550
[  919.574467][T13447]  ____sys_sendmsg+0x5be/0x970
[  919.579283][T13447]  ? __sys_sendmsg_sock+0x30/0x30
[  919.584355][T13447]  ? __import_iovec+0x315/0x500
[  919.589235][T13447]  ? import_iovec+0x6f/0xa0
[  919.593775][T13447]  ___sys_sendmsg+0x2a2/0x360
[  919.598500][T13447]  ? __sys_sendmsg+0x290/0x290
[  919.603317][T13447]  ? __lock_acquire+0x7d10/0x7d10
[  919.608391][T13447]  __se_sys_sendmsg+0x1bb/0x2a0
[  919.613312][T13447]  ? __x64_sys_sendmsg+0x80/0x80
[  919.618381][T13447]  ? lockdep_hardirqs_on+0x94/0x140
[  919.623637][T13447]  do_syscall_64+0x4c/0xa0
[  919.628348][T13447]  ? clear_bhb_loop+0x60/0xb0
[  919.633056][T13447]  ? clear_bhb_loop+0x60/0xb0
[  919.637765][T13447]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  919.643700][T13447] RIP: 0033:0x7f72c9f9acb9
[  919.648152][T13447] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  919.667783][T13447] RSP: 002b:00007f72cae99028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  919.676222][T13447] RAX: ffffffffffffffda RBX: 00007f72ca215fa0 RCX: 00007f72c9f9acb9
[  919.684227][T13447] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000008
[  919.692228][T13447] RBP: 00007f72cae99090 R08: 0000000000000000 R09: 0000000000000000
[  919.700233][T13447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  919.708232][T13447] R13: 00007f72ca216038 R14: 00007f72ca215fa0 R15: 00007fff590c9708
[  919.716232][T13447]  </TASK>
[  919.746303][T13256] 8021q: adding VLAN 0 to HW filter on device team0
[  919.764331][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  919.785235][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  919.796251][ T4392] bridge0: port 1(bridge_slave_0) entered blocking state
[  919.803483][ T4392] bridge0: port 1(bridge_slave_0) entered forwarding state
[  919.852356][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  919.881890][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  919.904256][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  919.931740][ T4392] bridge0: port 2(bridge_slave_1) entered blocking state
[  919.938969][ T4392] bridge0: port 2(bridge_slave_1) entered forwarding state
[  919.978334][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  920.077233][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  920.128617][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  920.152297][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  920.171767][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  920.197631][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  920.245987][T13256] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  920.288468][T13256] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  920.333047][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  920.347100][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  920.378726][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  920.417288][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  920.447381][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  920.477883][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  921.862667][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  921.907493][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  921.921236][T13256] 8021q: adding VLAN 0 to HW filter on device batadv0
[  922.151390][T13503] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2973'.
[  922.315915][T13522] FAULT_INJECTION: forcing a failure.
[  922.315915][T13522] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  922.437409][T13522] CPU: 0 PID: 13522 Comm: syz.1.2978 Not tainted syzkaller #0
[  922.445095][T13522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  922.455232][T13522] Call Trace:
[  922.458579][T13522]  <TASK>
[  922.461579][T13522]  dump_stack_lvl+0x188/0x24e
[  922.466365][T13522]  ? show_regs_print_info+0x12/0x12
[  922.471660][T13522]  ? load_image+0x400/0x400
[  922.476272][T13522]  ? __lock_acquire+0x7d10/0x7d10
[  922.481419][T13522]  should_fail_ex+0x399/0x4d0
[  922.486197][T13522]  _copy_from_user+0x2c/0x170
[  922.491057][T13522]  __sys_bpf+0x2ea/0x780
[  922.495394][T13522]  ? bpf_link_show_fdinfo+0x380/0x380
[  922.500899][T13522]  ? lock_chain_count+0x20/0x20
[  922.506117][T13522]  __x64_sys_bpf+0x78/0x90
[  922.510697][T13522]  do_syscall_64+0x4c/0xa0
[  922.515236][T13522]  ? clear_bhb_loop+0x60/0xb0
[  922.519996][T13522]  ? clear_bhb_loop+0x60/0xb0
[  922.524766][T13522]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  922.530730][T13522] RIP: 0033:0x7f72c9f9acb9
[  922.535259][T13522] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  922.555163][T13522] RSP: 002b:00007f72cae99028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  922.563665][T13522] RAX: ffffffffffffffda RBX: 00007f72ca215fa0 RCX: 00007f72c9f9acb9
[  922.571720][T13522] RDX: 0000000000000048 RSI: 00002000000000c0 RDI: 8001000000000000
[  922.579865][T13522] RBP: 00007f72cae99090 R08: 0000000000000000 R09: 0000000000000000
[  922.587908][T13522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  922.595948][T13522] R13: 00007f72ca216038 R14: 00007f72ca215fa0 R15: 00007fff590c9708
[  922.604051][T13522]  </TASK>
[  923.048030][T13530] netlink: 63503 bytes leftover after parsing attributes in process `syz.6.2979'.
[  923.134225][T13531] netlink: 63503 bytes leftover after parsing attributes in process `syz.6.2979'.
[  924.171475][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  924.232908][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  924.391790][ T8754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  924.413196][ T8754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  924.488828][ T8754] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  924.516366][ T8754] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  924.544870][T13256] device veth0_vlan entered promiscuous mode
[  924.575728][T13256] device veth1_vlan entered promiscuous mode
[  924.638559][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  924.658303][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  924.694215][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  924.708547][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  924.735274][T13256] device veth0_macvtap entered promiscuous mode
[  924.755318][T13256] device veth1_macvtap entered promiscuous mode
[  924.874006][T13256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  924.913482][T13256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  924.952783][T13256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  924.970626][T13256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  924.982051][T13256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  924.998789][T13256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  925.014205][T13256] batman_adv: batadv0: Interface activated: batadv_slave_0
[  925.035251][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  925.049572][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  925.089030][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  925.138390][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  925.224198][T13256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  925.266532][T13256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  925.276420][T13256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  925.336523][T13256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  925.381366][T13256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  925.420271][T13256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  925.471539][T13256] batman_adv: batadv0: Interface activated: batadv_slave_1
[  925.513204][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  925.530797][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  925.605581][T13571] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2991'.
[  925.664848][T13256] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  925.715616][T13256] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  925.735494][T13256] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  925.746168][T13256] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  926.011120][ T4392] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  926.045710][ T4392] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  926.093785][ T8754] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  926.138831][ T8754] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  926.163637][ T8754] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  926.188776][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  926.489175][T13604] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3007'.
[  927.168396][T13629] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3001'.
[  927.290562][T13629] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3001'.
[  927.405970][T13633] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3001'.
[  927.656990][T13637] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3001'.
[  927.954537][   T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  928.143067][ T4324] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  928.185231][ T4324] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  928.201597][ T4324] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  928.204936][   T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  928.225113][ T4324] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  928.233297][ T4324] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  928.241307][ T4324] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  928.420915][T13655] netlink: 14 bytes leftover after parsing attributes in process `syz.6.3013'.
[  928.706178][   T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  929.124879][   T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  929.759512][T13652] chnl_net:caif_netlink_parms(): no params data found
[  930.277113][ T4316] Bluetooth: hci0: command 0x0409 tx timeout
[  930.444215][T13702] netlink: 126588 bytes leftover after parsing attributes in process `syz.5.3022'.
[  931.329943][ T1270] ieee802154 phy0 wpan0: encryption failed: -22
[  931.336360][ T1270] ieee802154 phy1 wpan1: encryption failed: -22
[  932.366729][ T4316] Bluetooth: hci0: command 0x041b tx timeout
[  932.817205][T13700] netlink: 'syz.3.3023': attribute type 21 has an invalid length.
[  932.825270][T13700] IPv6: NLM_F_CREATE should be specified when creating new route
[  932.834041][T13700] IPv6: Can't replace route, no match found
[  932.869323][T13718] netlink: 14 bytes leftover after parsing attributes in process `syz.6.3026'.
[  932.987200][T13734] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.3027'.
[  933.040465][T13652] bridge0: port 1(bridge_slave_0) entered blocking state
[  933.058703][T13652] bridge0: port 1(bridge_slave_0) entered disabled state
[  933.067481][T13652] device bridge_slave_0 entered promiscuous mode
[  933.175421][T13652] bridge0: port 2(bridge_slave_1) entered blocking state
[  933.186645][T13652] bridge0: port 2(bridge_slave_1) entered disabled state
[  933.201836][T13652] device bridge_slave_1 entered promiscuous mode
[  933.480733][T13744] IPv6: NLM_F_REPLACE set, but no existing node found!
[  933.678749][T13652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  933.713021][T13652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  934.160999][T13652] team0: Port device team_slave_0 added
[  934.189122][T13652] team0: Port device team_slave_1 added
[  934.205878][T13765] netlink: 'syz.3.3036': attribute type 6 has an invalid length.
[  934.225622][T13765] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3036'.
[  934.436751][ T4316] Bluetooth: hci0: command 0x040f tx timeout
[  934.499037][T13652] batman_adv: batadv0: Adding interface: batadv_slave_0
[  934.508438][T13652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  934.561990][T13652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  934.648917][T13775] netlink: 14 bytes leftover after parsing attributes in process `syz.6.3039'.
[  934.688453][T13652] batman_adv: batadv0: Adding interface: batadv_slave_1
[  934.695449][T13652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  934.829948][T13652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  934.918914][T13782] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3041'.
[  935.392261][T13652] device hsr_slave_0 entered promiscuous mode
[  935.412776][T13652] device hsr_slave_1 entered promiscuous mode
[  935.424494][T13652] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  935.469791][T13652] Cannot create hsr debugfs directory
[  935.804129][   T11] device hsr_slave_0 left promiscuous mode
[  935.840217][   T11] device hsr_slave_1 left promiscuous mode
[  935.856362][   T11] bridge0: port 4(bond0) entered disabled state
[  935.880027][   T11] device bridge_slave_1 left promiscuous mode
[  935.886378][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  935.895377][   T11] device bridge_slave_0 left promiscuous mode
[  935.902769][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  936.026357][   T11] device veth1_macvtap left promiscuous mode
[  936.034639][   T11] device veth1_vlan left promiscuous mode
[  936.050366][   T11] device veth0_vlan left promiscuous mode
[  936.526605][ T4323] Bluetooth: hci0: command 0x0419 tx timeout
[  938.463903][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  938.473341][   T11] device bond_slave_1 left promiscuous mode
[  938.513350][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  938.522708][   T11] device bond_slave_0 left promiscuous mode
[  938.752756][   T11] bond0 (unregistering): Released all slaves
[  938.867445][T13819] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3053'.
[  940.139161][T13869] netlink: 122896 bytes leftover after parsing attributes in process `syz.5.3064'.
[  940.219383][T13869] debugfs: Directory '!!
' with parent 'ieee80211' already present!
[  940.614202][T13652] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  940.637045][T13886] netlink: 14 bytes leftover after parsing attributes in process `syz.6.3069'.
[  940.652420][T13652] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  940.687703][T13652] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  940.747354][T13652] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  941.180376][T13905] netlink: 'syz.6.3073': attribute type 10 has an invalid length.
[  941.240668][T13905] bridge0: port 3(dummy0) entered disabled state
[  941.308335][T13905] device dummy0 left promiscuous mode
[  941.314578][T13905] bridge0: port 3(dummy0) entered disabled state
[  941.423290][T13906] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3071'.
[  941.582693][T13652] 8021q: adding VLAN 0 to HW filter on device bond0
[  941.612007][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  941.624567][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  941.638304][T13652] 8021q: adding VLAN 0 to HW filter on device team0
[  941.738927][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  941.764295][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  941.835284][   T75] bridge0: port 1(bridge_slave_0) entered blocking state
[  941.842483][   T75] bridge0: port 1(bridge_slave_0) entered forwarding state
[  941.893954][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  941.927980][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  941.943888][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  941.963756][ T4392] bridge0: port 2(bridge_slave_1) entered blocking state
[  941.970965][ T4392] bridge0: port 2(bridge_slave_1) entered forwarding state
[  942.004482][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  942.026378][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  942.043997][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  942.070039][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  942.079689][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  942.126211][T13934] netlink: 'syz.6.3081': attribute type 1 has an invalid length.
[  942.199119][T13934] netlink: 116376 bytes leftover after parsing attributes in process `syz.6.3081'.
[  942.247364][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  942.288225][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  942.313158][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  942.332155][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  942.346612][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  942.355326][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  942.367661][T13652] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  942.414509][T13936] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3082'.
[  942.737447][T13949] netlink: 'syz.6.3084': attribute type 21 has an invalid length.
[  943.633430][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  943.682468][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  943.817457][T13652] 8021q: adding VLAN 0 to HW filter on device batadv0
[  943.918873][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  943.958558][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  944.020224][T13972] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3088'.
[  944.099493][T13652] device veth0_vlan entered promiscuous mode
[  944.106679][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  944.123880][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  944.195545][T13652] device veth1_vlan entered promiscuous mode
[  944.226391][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  944.242103][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  944.308501][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  944.342228][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  944.389372][T13652] device veth0_macvtap entered promiscuous mode
[  944.431127][T13652] device veth1_macvtap entered promiscuous mode
[  944.557988][T13652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  944.585546][T13652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  944.630120][T13652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  944.643894][T13652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  944.660910][T13652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  944.672474][T13652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  944.683137][T13652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  944.693805][T13652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  944.717991][T13652] batman_adv: batadv0: Interface activated: batadv_slave_0
[  944.769254][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  944.787996][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  944.847612][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  944.900171][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  944.945454][T13652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  944.979998][T13652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  945.021474][T13652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  945.056636][T13652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  945.076942][T13652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  945.108297][T13652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  945.118532][T13652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  945.129374][T13652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  945.141501][T13652] batman_adv: batadv0: Interface activated: batadv_slave_1
[  945.177153][T13995] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3095'.
[  945.192619][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  945.227158][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  945.279715][T13652] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  945.305270][T13652] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  945.356408][T13652] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  945.365460][T13652] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  945.461200][T14005] netlink: 180900 bytes leftover after parsing attributes in process `syz.5.3097'.
[  945.494873][T14005] openvswitch: netlink: Flow actions attr not present in new flow.
[  945.534473][T14006] netlink: 'syz.4.3098': attribute type 10 has an invalid length.
[  945.802435][   T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  945.844815][   T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  945.889592][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  945.923787][   T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  945.944233][   T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  945.957628][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  946.540671][T14027] netlink: 'syz.1.3000': attribute type 4 has an invalid length.
[  946.657122][T14027] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3000'.
[  947.411791][T14050] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3108'.
[  949.343564][T14102] netlink: 14 bytes leftover after parsing attributes in process `syz.6.3124'.
[  949.740138][T14122] netlink: 156 bytes leftover after parsing attributes in process `syz.5.3131'.
[  949.795542][T14128] FAULT_INJECTION: forcing a failure.
[  949.795542][T14128] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  949.896197][T14124] netlink: 'syz.4.3130': attribute type 4 has an invalid length.
[  949.904242][T14128] CPU: 0 PID: 14128 Comm: syz.5.3131 Not tainted syzkaller #0
[  949.912040][T14128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  949.922133][T14128] Call Trace:
[  949.925458][T14128]  <TASK>
[  949.928467][T14128]  dump_stack_lvl+0x188/0x24e
[  949.933202][T14128]  ? show_regs_print_info+0x12/0x12
[  949.938452][T14128]  ? load_image+0x400/0x400
[  949.943002][T14128]  ? __lock_acquire+0x7d10/0x7d10
[  949.948080][T14128]  ? snprintf+0xe5/0x140
[  949.952439][T14128]  should_fail_ex+0x399/0x4d0
[  949.957174][T14128]  _copy_to_user+0x2c/0x130
[  949.961720][T14128]  simple_read_from_buffer+0xe3/0x150
[  949.967154][T14128]  proc_fail_nth_read+0x1a6/0x220
[  949.972225][T14128]  ? proc_fault_inject_write+0x310/0x310
[  949.977906][T14128]  ? fsnotify_perm+0x248/0x550
[  949.982737][T14128]  ? proc_fault_inject_write+0x310/0x310
[  949.988417][T14128]  vfs_read+0x2de/0xa00
[  949.992629][T14128]  ? kernel_read+0x1e0/0x1e0
[  949.997267][T14128]  ? __fget_files+0x28/0x4b0
[  950.001909][T14128]  ? __fget_files+0x28/0x4b0
[  950.006563][T14128]  ? __fget_files+0x43d/0x4b0
[  950.011316][T14128]  ? __fdget_pos+0x2ae/0x360
[  950.015961][T14128]  ? ksys_read+0x71/0x250
[  950.020347][T14128]  ksys_read+0x14c/0x250
[  950.024638][T14128]  ? vfs_write+0xa30/0xa30
[  950.029111][T14128]  ? lockdep_hardirqs_on+0x94/0x140
[  950.034375][T14128]  do_syscall_64+0x4c/0xa0
[  950.038854][T14128]  ? clear_bhb_loop+0x60/0xb0
[  950.043602][T14128]  ? clear_bhb_loop+0x60/0xb0
[  950.048335][T14128]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  950.054273][T14128] RIP: 0033:0x7fd102f5b58e
[  950.058742][T14128] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  950.062460][T14124] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3130'.
[  950.078379][T14128] RSP: 002b:00007fd103f10fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  950.078451][T14128] RAX: ffffffffffffffda RBX: 00007fd103f116c0 RCX: 00007fd102f5b58e
[  950.078469][T14128] RDX: 000000000000000f RSI: 00007fd103f110a0 RDI: 0000000000000009
[  950.078484][T14128] RBP: 00007fd103f11090 R08: 0000000000000000 R09: 0000000000000000
[  950.120011][T14128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  950.128022][T14128] R13: 00007fd103216128 R14: 00007fd103216090 R15: 00007ffd86fdad28
[  950.136069][T14128]  </TASK>
[  952.664841][T14139] device veth1_macvtap left promiscuous mode
[  952.746757][T14144] netlink: 'syz.3.3135': attribute type 10 has an invalid length.
[  953.154409][T14184] netlink: 198580 bytes leftover after parsing attributes in process `syz.3.3143'.
[  955.576697][T14187] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3144'.
[  955.604628][T14202] netlink: 14 bytes leftover after parsing attributes in process `syz.6.3149'.
[  956.434517][T14232] netlink: 'syz.5.3158': attribute type 10 has an invalid length.
[  956.456839][T14232] netlink: 55 bytes leftover after parsing attributes in process `syz.5.3158'.
[  957.140307][T14256] FAULT_INJECTION: forcing a failure.
[  957.140307][T14256] name failslab, interval 1, probability 0, space 0, times 0
[  957.200489][T14256] CPU: 1 PID: 14256 Comm: syz.1.3164 Not tainted syzkaller #0
[  957.208019][T14256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  957.218112][T14256] Call Trace:
[  957.221426][T14256]  <TASK>
[  957.224388][T14256]  dump_stack_lvl+0x188/0x24e
[  957.229118][T14256]  ? show_regs_print_info+0x12/0x12
[  957.234354][T14256]  ? load_image+0x400/0x400
[  957.238908][T14256]  ? __might_sleep+0xd0/0xd0
[  957.243516][T14256]  ? __lock_acquire+0x7d10/0x7d10
[  957.248576][T14256]  should_fail_ex+0x399/0x4d0
[  957.253282][T14256]  should_failslab+0x5/0x20
[  957.257814][T14256]  slab_pre_alloc_hook+0x59/0x310
[  957.262875][T14256]  kmem_cache_alloc_node+0x5a/0x320
[  957.268100][T14256]  ? __alloc_skb+0xfc/0x7e0
[  957.272630][T14256]  __alloc_skb+0xfc/0x7e0
[  957.276981][T14256]  ? netlink_autobind+0xda/0x300
[  957.281946][T14256]  netlink_sendmsg+0x654/0xbd0
[  957.286748][T14256]  ? netlink_getsockopt+0x550/0x550
[  957.291978][T14256]  ? aa_sock_msg_perm+0x94/0x150
[  957.296940][T14256]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  957.302247][T14256]  ? security_socket_sendmsg+0x7c/0xa0
[  957.307728][T14256]  ? netlink_getsockopt+0x550/0x550
[  957.312951][T14256]  ____sys_sendmsg+0x5be/0x970
[  957.317745][T14256]  ? __sys_sendmsg_sock+0x30/0x30
[  957.322795][T14256]  ? __import_iovec+0x315/0x500
[  957.327672][T14256]  ? import_iovec+0x6f/0xa0
[  957.332202][T14256]  ___sys_sendmsg+0x2a2/0x360
[  957.336911][T14256]  ? __sys_sendmsg+0x290/0x290
[  957.341719][T14256]  ? __lock_acquire+0x7d10/0x7d10
[  957.346816][T14256]  __se_sys_sendmsg+0x1bb/0x2a0
[  957.351705][T14256]  ? __x64_sys_sendmsg+0x80/0x80
[  957.356682][T14256]  ? lockdep_hardirqs_on+0x94/0x140
[  957.362000][T14256]  do_syscall_64+0x4c/0xa0
[  957.366520][T14256]  ? clear_bhb_loop+0x60/0xb0
[  957.371224][T14256]  ? clear_bhb_loop+0x60/0xb0
[  957.375920][T14256]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  957.381842][T14256] RIP: 0033:0x7f350439acb9
[  957.386281][T14256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  957.405913][T14256] RSP: 002b:00007f35051f1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  957.414351][T14256] RAX: ffffffffffffffda RBX: 00007f3504615fa0 RCX: 00007f350439acb9
[  957.422346][T14256] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  957.430347][T14256] RBP: 00007f35051f1090 R08: 0000000000000000 R09: 0000000000000000
[  957.438355][T14256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  957.446348][T14256] R13: 00007f3504616038 R14: 00007f3504615fa0 R15: 00007fffa0b6d178
[  957.454349][T14256]  </TASK>
[  957.577397][T14246] syzkaller1: tun_chr_ioctl cmd 1074025677
[  957.594098][T14246] syzkaller1: linktype set to 780
[  957.629494][T14252] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3163'.
[  957.658019][T14258] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3165'.
[  960.024445][T14306] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3182'.
[  960.257599][T14318] FAULT_INJECTION: forcing a failure.
[  960.257599][T14318] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  960.313316][T14318] CPU: 0 PID: 14318 Comm: syz.6.3186 Not tainted syzkaller #0
[  960.321041][T14318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  960.331142][T14318] Call Trace:
[  960.334456][T14318]  <TASK>
[  960.337430][T14318]  dump_stack_lvl+0x188/0x24e
[  960.342229][T14318]  ? show_regs_print_info+0x12/0x12
[  960.347586][T14318]  ? load_image+0x400/0x400
[  960.352156][T14318]  ? __lock_acquire+0x7d10/0x7d10
[  960.357241][T14318]  should_fail_ex+0x399/0x4d0
[  960.361976][T14318]  _copy_from_user+0x2c/0x170
[  960.366688][T14318]  ___sys_sendmsg+0x1c3/0x360
[  960.371399][T14318]  ? __sys_sendmsg+0x290/0x290
[  960.376205][T14318]  ? __lock_acquire+0x7d10/0x7d10
[  960.381274][T14318]  __se_sys_sendmsg+0x1bb/0x2a0
[  960.386261][T14318]  ? ct_nmi_exit+0x145/0x1c0
[  960.390889][T14318]  ? __x64_sys_sendmsg+0x80/0x80
[  960.395878][T14318]  ? lockdep_hardirqs_on+0x94/0x140
[  960.401114][T14318]  do_syscall_64+0x4c/0xa0
[  960.405561][T14318]  ? clear_bhb_loop+0x60/0xb0
[  960.410267][T14318]  ? clear_bhb_loop+0x60/0xb0
[  960.414963][T14318]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  960.420884][T14318] RIP: 0033:0x7f627cb9acb9
[  960.425317][T14318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  960.444963][T14318] RSP: 002b:00007f627db3e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  960.453421][T14318] RAX: ffffffffffffffda RBX: 00007f627ce15fa0 RCX: 00007f627cb9acb9
[  960.461426][T14318] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003
[  960.469444][T14318] RBP: 00007f627db3e090 R08: 0000000000000000 R09: 0000000000000000
[  960.477427][T14318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  960.485464][T14318] R13: 00007f627ce16038 R14: 00007f627ce15fa0 R15: 00007fffde7a6e58
[  960.493478][T14318]  </TASK>
[  960.580552][T14326] FAULT_INJECTION: forcing a failure.
[  960.580552][T14326] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  960.646389][T14326] CPU: 1 PID: 14326 Comm: syz.4.3189 Not tainted syzkaller #0
[  960.653951][T14326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  960.664070][T14326] Call Trace:
[  960.667416][T14326]  <TASK>
[  960.670407][T14326]  dump_stack_lvl+0x188/0x24e
[  960.675159][T14326]  ? show_regs_print_info+0x12/0x12
[  960.680604][T14326]  ? load_image+0x400/0x400
[  960.685275][T14326]  ? __lock_acquire+0x7d10/0x7d10
[  960.690389][T14326]  ? __virt_addr_valid+0x188/0x540
[  960.695584][T14326]  should_fail_ex+0x399/0x4d0
[  960.700352][T14326]  _copy_from_user+0x2c/0x170
[  960.705106][T14326]  vmemdup_user+0xa8/0x1d0
[  960.709607][T14326]  map_lookup_and_delete_elem+0x3c5/0x840
[  960.715430][T14326]  __sys_bpf+0x5cc/0x780
[  960.719850][T14326]  ? bpf_link_show_fdinfo+0x380/0x380
[  960.725360][T14326]  ? lock_chain_count+0x20/0x20
[  960.730337][T14326]  __x64_sys_bpf+0x78/0x90
[  960.734828][T14326]  do_syscall_64+0x4c/0xa0
[  960.739303][T14326]  ? clear_bhb_loop+0x60/0xb0
[  960.744067][T14326]  ? clear_bhb_loop+0x60/0xb0
[  960.748817][T14326]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  960.754773][T14326] RIP: 0033:0x7f5b9999acb9
[  960.759262][T14326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  960.778927][T14326] RSP: 002b:00007f5b9a84e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  960.787404][T14326] RAX: ffffffffffffffda RBX: 00007f5b99c15fa0 RCX: 00007f5b9999acb9
[  960.795434][T14326] RDX: 0000000000000020 RSI: 0000200000000bc0 RDI: 0000000000000015
[  960.803467][T14326] RBP: 00007f5b9a84e090 R08: 0000000000000000 R09: 0000000000000000
[  960.811523][T14326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  960.819546][T14326] R13: 00007f5b99c16038 R14: 00007f5b99c15fa0 R15: 00007fffc9dad818
[  960.827618][T14326]  </TASK>
[  961.066797][T14332] netlink: 14556 bytes leftover after parsing attributes in process `syz.6.3191'.
[  961.694937][T14345] netlink: 'syz.4.3196': attribute type 41 has an invalid length.
[  961.711474][T14345] netlink: 'syz.4.3196': attribute type 41 has an invalid length.
[  962.053110][ T4323] Bluetooth: hci0: unexpected event 0x04 length: 15 > 10
[  962.269254][T14368] netlink: 'syz.6.3204': attribute type 41 has an invalid length.
[  962.650250][T14368] netlink: 'syz.6.3204': attribute type 41 has an invalid length.
[  964.061667][T14402] netlink: 'syz.1.3217': attribute type 10 has an invalid length.
[  964.087504][T14402] netlink: 55 bytes leftover after parsing attributes in process `syz.1.3217'.
[  964.117457][ T4316] Bluetooth: hci0: command 0x0409 tx timeout
[  965.569656][T14443] FAULT_INJECTION: forcing a failure.
[  965.569656][T14443] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  965.593168][T14443] CPU: 0 PID: 14443 Comm: syz.3.3230 Not tainted syzkaller #0
[  965.600814][T14443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  965.610915][T14443] Call Trace:
[  965.614246][T14443]  <TASK>
[  965.617227][T14443]  dump_stack_lvl+0x188/0x24e
[  965.621957][T14443]  ? show_regs_print_info+0x12/0x12
[  965.627221][T14443]  ? load_image+0x400/0x400
[  965.631767][T14443]  ? __lock_acquire+0x7d10/0x7d10
[  965.636943][T14443]  ? snprintf+0xe5/0x140
[  965.641221][T14443]  should_fail_ex+0x399/0x4d0
[  965.645957][T14443]  _copy_to_user+0x2c/0x130
[  965.650498][T14443]  simple_read_from_buffer+0xe3/0x150
[  965.655906][T14443]  proc_fail_nth_read+0x1a6/0x220
[  965.660957][T14443]  ? proc_fault_inject_write+0x310/0x310
[  965.666619][T14443]  ? fsnotify_perm+0x248/0x550
[  965.671413][T14443]  ? proc_fault_inject_write+0x310/0x310
[  965.677078][T14443]  vfs_read+0x2de/0xa00
[  965.681258][T14443]  ? kernel_read+0x1e0/0x1e0
[  965.685874][T14443]  ? __fget_files+0x28/0x4b0
[  965.690491][T14443]  ? __fget_files+0x28/0x4b0
[  965.695104][T14443]  ? __fget_files+0x43d/0x4b0
[  965.699813][T14443]  ? __fdget_pos+0x2ae/0x360
[  965.704424][T14443]  ? ksys_read+0x71/0x250
[  965.708780][T14443]  ksys_read+0x14c/0x250
[  965.713048][T14443]  ? vfs_write+0xa30/0xa30
[  965.717505][T14443]  ? lockdep_hardirqs_on+0x94/0x140
[  965.722729][T14443]  do_syscall_64+0x4c/0xa0
[  965.727172][T14443]  ? clear_bhb_loop+0x60/0xb0
[  965.731878][T14443]  ? clear_bhb_loop+0x60/0xb0
[  965.736590][T14443]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  965.742518][T14443] RIP: 0033:0x7ff4ca35b58e
[  965.746955][T14443] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  965.766857][T14443] RSP: 002b:00007ff4cb1cdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  965.775390][T14443] RAX: ffffffffffffffda RBX: 00007ff4cb1ce6c0 RCX: 00007ff4ca35b58e
[  965.783471][T14443] RDX: 000000000000000f RSI: 00007ff4cb1ce0a0 RDI: 0000000000000005
[  965.791468][T14443] RBP: 00007ff4cb1ce090 R08: 0000000000000000 R09: 0000000000000000
[  965.799465][T14443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  965.807455][T14443] R13: 00007ff4ca616038 R14: 00007ff4ca615fa0 R15: 00007ffc040c1ed8
[  965.815463][T14443]  </TASK>
[  965.885459][T14437] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3228'.
[  966.251494][ T4410] device hsr_slave_0 left promiscuous mode
[  966.259366][ T4410] device hsr_slave_1 left promiscuous mode
[  966.271860][ T4410] device bridge_slave_1 left promiscuous mode
[  966.285797][ T4410] bridge0: port 2(bridge_slave_1) entered disabled state
[  966.302082][ T4410] device bridge_slave_0 left promiscuous mode
[  966.312555][ T4410] bridge0: port 1(bridge_slave_0) entered disabled state
[  966.349540][ T4410] device veth1_macvtap left promiscuous mode
[  966.360730][ T4410] device veth1_vlan left promiscuous mode
[  967.692320][ T4410] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface
[  967.768999][ T4410] team0 (unregistering): Port device team_slave_1 removed
[  967.829052][ T4410] team0 (unregistering): Port device team_slave_0 removed
[  967.869111][ T4410] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  967.918041][ T4410] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  968.183224][ T4410] bond0 (unregistering): (slave team0): Releasing backup interface
[  968.218370][ T4410] bond0 (unregistering): Released all slaves
[  968.319880][T14489] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3248'.
[  968.335493][T14498] netlink: 65027 bytes leftover after parsing attributes in process `syz.3.3251'.
[  968.347862][T14501] netlink: 'syz.6.3250': attribute type 25 has an invalid length.
[  968.362814][T14501] netlink: 'syz.6.3250': attribute type 1 has an invalid length.
[  968.386570][T14501] bridge0: port 1(bridge_slave_0) entered learning state
[  968.732442][T14510] netlink: 'syz.4.3253': attribute type 1 has an invalid length.
[  968.773492][T14510] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.3253'.
[  969.361614][T14524] netlink: 194236 bytes leftover after parsing attributes in process `syz.1.3260'.
[  969.377132][T14524] netlink: zone id is out of range
[  969.392758][T14524] netlink: zone id is out of range
[  969.406906][T14524] netlink: zone id is out of range
[  969.412516][T14524] netlink: zone id is out of range
[  969.439012][T14524] netlink: zone id is out of range
[  969.464911][T14524] netlink: zone id is out of range
[  969.494716][T14524] netlink: zone id is out of range
[  969.513462][T14524] netlink: zone id is out of range
[  969.527333][T14531] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3262'.
[  969.541151][T14524] netlink: zone id is out of range
[  969.551297][T14524] netlink: zone id is out of range
[  970.002279][T14538] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3264'.
[  970.140496][T14548] netlink: 830 bytes leftover after parsing attributes in process `syz.5.3267'.
[  970.600833][T14557] netlink: 'syz.6.3271': attribute type 28 has an invalid length.
[  970.659710][T14557] netlink: 'syz.6.3271': attribute type 29 has an invalid length.
[  970.668221][T14557] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3271'.
[  971.000413][T14569] netlink: 'syz.4.3279': attribute type 10 has an invalid length.
[  971.066653][T14569] team0: Device hsr0 is up. Set it down before adding it as a team port
[  971.187333][T14571] netlink: 'syz.3.3278': attribute type 1 has an invalid length.
[  971.274076][T14571] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.3278'.
[  971.486710][T14576] netlink: 14 bytes leftover after parsing attributes in process `syz.6.3276'.
[  973.313499][T14616] netlink: 'syz.3.3291': attribute type 1 has an invalid length.
[  973.505355][T14616] __nla_validate_parse: 3 callbacks suppressed
[  973.505390][T14616] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.3291'.
[  974.198501][T14625] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3294'.
[  974.921905][T14657] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  974.929301][T14657] IPv6: NLM_F_CREATE should be set when creating new route
[  974.936643][T14657] IPv6: NLM_F_CREATE should be set when creating new route
[  974.943909][T14657] IPv6: NLM_F_CREATE should be set when creating new route
[  976.239557][T14668] netlink: 'syz.4.3306': attribute type 3 has an invalid length.
[  976.266530][T14668] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3306'.
[  976.578771][T14680] netlink: 'syz.4.3310': attribute type 10 has an invalid length.
[  976.599424][T14680] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3310'.
[  976.656735][T14680] device team0 entered promiscuous mode
[  976.683052][T14680] device team_slave_0 entered promiscuous mode
[  976.707326][T14680] device team_slave_1 entered promiscuous mode
[  976.734307][T14680] bridge0: port 3(team0) entered blocking state
[  976.760573][T14680] bridge0: port 3(team0) entered disabled state
[  976.791185][T14680] bridge0: port 3(team0) entered blocking state
[  976.797852][T14680] bridge0: port 3(team0) entered forwarding state
[  976.828672][T14687] netlink: 'syz.1.3314': attribute type 9 has an invalid length.
[  976.846730][T14687] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3314'.
[  976.902610][T14689] netlink: 'syz.5.3313': attribute type 4 has an invalid length.
[  976.973959][T14689] netlink: 128124 bytes leftover after parsing attributes in process `syz.5.3313'.
[  976.995283][T14694] FAULT_INJECTION: forcing a failure.
[  976.995283][T14694] name failslab, interval 1, probability 0, space 0, times 0
[  977.040150][T14691] netlink: 'syz.5.3313': attribute type 4 has an invalid length.
[  977.044115][T14694] CPU: 0 PID: 14694 Comm: syz.6.3315 Not tainted syzkaller #0
[  977.055426][T14694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  977.065519][T14694] Call Trace:
[  977.068830][T14694]  <TASK>
[  977.071819][T14694]  dump_stack_lvl+0x188/0x24e
[  977.076557][T14694]  ? show_regs_print_info+0x12/0x12
[  977.081809][T14694]  ? load_image+0x400/0x400
[  977.086474][T14694]  ? __lock_acquire+0x7d10/0x7d10
[  977.091575][T14694]  should_fail_ex+0x399/0x4d0
[  977.096348][T14694]  should_failslab+0x5/0x20
[  977.100904][T14694]  slab_pre_alloc_hook+0x59/0x310
[  977.105975][T14694]  ? br_get_link_af_size_filtered+0xb2a/0xc20
[  977.112101][T14694]  kmem_cache_alloc_node+0x5a/0x320
[  977.117344][T14694]  ? __alloc_skb+0xfc/0x7e0
[  977.121900][T14694]  __alloc_skb+0xfc/0x7e0
[  977.126258][T14694]  br_info_notify+0x101/0x240
[  977.130959][T14694]  br_setlink+0x391/0x880
[  977.135317][T14694]  ? br_vlan_info+0x460/0x460
[  977.140036][T14694]  ? rtnetlink_rcv_msg+0x824/0xfc0
[  977.145181][T14694]  ? rcu_read_unlock+0x8c/0xa0
[  977.149972][T14694]  ? mutex_lock_nested+0x10/0x10
[  977.154969][T14694]  ? nla_find+0x12d/0x150
[  977.159318][T14694]  rtnl_bridge_setlink+0x58f/0x720
[  977.164452][T14694]  ? rtnetlink_rcv_msg+0x226/0xfc0
[  977.169587][T14694]  ? rtnl_bridge_dellink+0x680/0x680
[  977.174895][T14694]  rtnetlink_rcv_msg+0x87c/0xfc0
[  977.179870][T14694]  ? rtnetlink_bind+0x80/0x80
[  977.184566][T14694]  ? __local_bh_enable_ip+0x136/0x1c0
[  977.189954][T14694]  ? lockdep_hardirqs_on+0x94/0x140
[  977.195216][T14694]  ? __local_bh_enable_ip+0x136/0x1c0
[  977.200628][T14694]  ? _local_bh_enable+0xa0/0xa0
[  977.205499][T14694]  ? __dev_queue_xmit+0x26b/0x37f0
[  977.210646][T14694]  ? __dev_queue_xmit+0x26b/0x37f0
[  977.215779][T14694]  ? __dev_queue_xmit+0x1c61/0x37f0
[  977.221012][T14694]  ? __dev_queue_xmit+0x26b/0x37f0
[  977.226151][T14694]  ? ref_tracker_free+0x68c/0x840
[  977.231205][T14694]  ? __copy_skb_header+0x3ba/0x4f0
[  977.236346][T14694]  ? refcount_inc+0x70/0x70
[  977.240868][T14694]  ? memcpy+0x3c/0x60
[  977.244873][T14694]  ? __copy_skb_header+0x3ba/0x4f0
[  977.250013][T14694]  ? __skb_clone+0x480/0x790
[  977.254630][T14694]  netlink_rcv_skb+0x1fb/0x450
[  977.259413][T14694]  ? rtnetlink_bind+0x80/0x80
[  977.264126][T14694]  ? netlink_ack+0x1170/0x1170
[  977.268931][T14694]  ? netlink_deliver_tap+0x2e/0x1b0
[  977.274178][T14694]  netlink_unicast+0x74d/0x8d0
[  977.278978][T14694]  netlink_sendmsg+0x8ad/0xbd0
[  977.283782][T14694]  ? netlink_getsockopt+0x550/0x550
[  977.289006][T14694]  ? aa_sock_msg_perm+0x94/0x150
[  977.293965][T14694]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  977.299267][T14694]  ? security_socket_sendmsg+0x7c/0xa0
[  977.304749][T14694]  ? netlink_getsockopt+0x550/0x550
[  977.309983][T14694]  ____sys_sendmsg+0x5be/0x970
[  977.314791][T14694]  ? __sys_sendmsg_sock+0x30/0x30
[  977.319840][T14694]  ? __import_iovec+0x315/0x500
[  977.324740][T14694]  ? import_iovec+0x6f/0xa0
[  977.329281][T14694]  ___sys_sendmsg+0x2a2/0x360
[  977.333991][T14694]  ? __sys_sendmsg+0x290/0x290
[  977.338809][T14694]  ? __lock_acquire+0x7d10/0x7d10
[  977.343887][T14694]  __se_sys_sendmsg+0x1bb/0x2a0
[  977.348780][T14694]  ? __x64_sys_sendmsg+0x80/0x80
[  977.353764][T14694]  ? lockdep_hardirqs_on+0x94/0x140
[  977.359014][T14694]  do_syscall_64+0x4c/0xa0
[  977.363467][T14694]  ? clear_bhb_loop+0x60/0xb0
[  977.368173][T14694]  ? clear_bhb_loop+0x60/0xb0
[  977.372876][T14694]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  977.378789][T14694] RIP: 0033:0x7f627cb9acb9
[  977.383233][T14694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  977.402866][T14694] RSP: 002b:00007f627db3e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  977.411300][T14694] RAX: ffffffffffffffda RBX: 00007f627ce15fa0 RCX: 00007f627cb9acb9
[  977.419297][T14694] RDX: 000000002000c090 RSI: 0000200000000040 RDI: 0000000000000003
[  977.427292][T14694] RBP: 00007f627db3e090 R08: 0000000000000000 R09: 0000000000000000
[  977.435287][T14694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  977.443283][T14694] R13: 00007f627ce16038 R14: 00007f627ce15fa0 R15: 00007fffde7a6e58
[  977.451302][T14694]  </TASK>
[  977.474571][T14691] netlink: 128124 bytes leftover after parsing attributes in process `syz.5.3313'.
[  978.456090][T14717] netlink: 'syz.5.3325': attribute type 9 has an invalid length.
[  978.520722][T14717] netlink: 126588 bytes leftover after parsing attributes in process `syz.5.3325'.
[  978.698591][T14725] netlink: 'syz.6.3328': attribute type 9 has an invalid length.
[  978.716508][T14725] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3328'.
[  979.780044][T14732] FAULT_INJECTION: forcing a failure.
[  979.780044][T14732] name failslab, interval 1, probability 0, space 0, times 0
[  979.993029][T14732] CPU: 0 PID: 14732 Comm: syz.6.3330 Not tainted syzkaller #0
[  980.000572][T14732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  980.010701][T14732] Call Trace:
[  980.014023][T14732]  <TASK>
[  980.016983][T14732]  dump_stack_lvl+0x188/0x24e
[  980.021693][T14732]  ? show_regs_print_info+0x12/0x12
[  980.026936][T14732]  ? load_image+0x400/0x400
[  980.031469][T14732]  ? __might_sleep+0xd0/0xd0
[  980.036076][T14732]  ? __lock_acquire+0x7d10/0x7d10
[  980.041133][T14732]  should_fail_ex+0x399/0x4d0
[  980.045847][T14732]  should_failslab+0x5/0x20
[  980.050377][T14732]  slab_pre_alloc_hook+0x59/0x310
[  980.055437][T14732]  kmem_cache_alloc_node+0x5a/0x320
[  980.060662][T14732]  ? __alloc_skb+0x29/0x7e0
[  980.065192][T14732]  ? __alloc_skb+0xfc/0x7e0
[  980.069725][T14732]  __alloc_skb+0xfc/0x7e0
[  980.074087][T14732]  ? netlink_autobind+0xda/0x300
[  980.079055][T14732]  netlink_sendmsg+0x654/0xbd0
[  980.083855][T14732]  ? lockdep_hardirqs_on+0x94/0x140
[  980.089110][T14732]  ? netlink_getsockopt+0x550/0x550
[  980.094339][T14732]  ? security_socket_sendmsg+0x41/0xa0
[  980.099899][T14732]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  980.105233][T14732]  ? security_socket_sendmsg+0x7c/0xa0
[  980.110761][T14732]  ? netlink_getsockopt+0x550/0x550
[  980.115995][T14732]  ____sys_sendmsg+0x5be/0x970
[  980.120800][T14732]  ? __sys_sendmsg_sock+0x30/0x30
[  980.125852][T14732]  ? __import_iovec+0x315/0x500
[  980.130736][T14732]  ? import_iovec+0x6f/0xa0
[  980.135267][T14732]  ___sys_sendmsg+0x2a2/0x360
[  980.139984][T14732]  ? __sys_sendmsg+0x290/0x290
[  980.144833][T14732]  __se_sys_sendmsg+0x1bb/0x2a0
[  980.149734][T14732]  ? __x64_sys_sendmsg+0x80/0x80
[  980.154716][T14732]  do_syscall_64+0x4c/0xa0
[  980.159178][T14732]  ? clear_bhb_loop+0x60/0xb0
[  980.163898][T14732]  ? clear_bhb_loop+0x60/0xb0
[  980.168612][T14732]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  980.174537][T14732] RIP: 0033:0x7f627cb9acb9
[  980.178990][T14732] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  980.199170][T14732] RSP: 002b:00007f627db3e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  980.207618][T14732] RAX: ffffffffffffffda RBX: 00007f627ce15fa0 RCX: 00007f627cb9acb9
[  980.215607][T14732] RDX: 0000000004000014 RSI: 0000200000000180 RDI: 0000000000000005
[  980.223616][T14732] RBP: 00007f627db3e090 R08: 0000000000000000 R09: 0000000000000000
[  980.231613][T14732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  980.239612][T14732] R13: 00007f627ce16038 R14: 00007f627ce15fa0 R15: 00007fffde7a6e58
[  980.247623][T14732]  </TASK>
[  981.285380][T14748] delete_channel: no stack
[  981.471034][T14770] netlink: 'syz.3.3340': attribute type 9 has an invalid length.
[  981.504471][T14770] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3340'.
[  981.778565][T14771] netlink: 14 bytes leftover after parsing attributes in process `syz.6.3351'.
[  982.447592][T14792] netlink: 'syz.5.3348': attribute type 1 has an invalid length.
[  982.479291][T14794] netlink: 'syz.1.3352': attribute type 15 has an invalid length.
[  982.502714][T14794] netlink: 'syz.1.3352': attribute type 5 has an invalid length.
[  982.523682][T14794] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3352'.
[  982.588396][T14794] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.3352'.
[  983.099261][T14805] netlink: 'syz.1.3355': attribute type 4 has an invalid length.
[  984.594068][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  984.984450][T14844] netlink: 'syz.1.3369': attribute type 9 has an invalid length.
[  985.034478][T14844] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.3369'.
[  985.753764][T14866] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3378'.
[  986.045142][T14872] netlink: 'syz.3.3381': attribute type 29 has an invalid length.
[  986.306220][T14879] netlink: 'syz.1.3383': attribute type 9 has an invalid length.
[  986.332167][T14879] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.3383'.
[  987.484349][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  987.820852][T14915] netlink: 'syz.6.3396': attribute type 9 has an invalid length.
[  987.846954][T14915] netlink: 126588 bytes leftover after parsing attributes in process `syz.6.3396'.
[  992.761250][ T1270] ieee802154 phy0 wpan0: encryption failed: -22
[  992.768058][ T1270] ieee802154 phy1 wpan1: encryption failed: -22
[  994.223861][T14997] 
: renamed from veth0_vlan
[  994.512685][T15008] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.3430'.
[  994.578571][   T11] tipc: Subscription rejected, illegal request
[  994.595300][T15011] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3430'.
[  994.652475][T15011] net_ratelimit: 39 callbacks suppressed
[  994.652490][T15011] openvswitch: netlink: Message has 6 unknown bytes.
[  994.771347][T15014] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.3431'.
[  994.891865][T15014] sysfs: cannot create duplicate filename '/class/ieee80211/.!
'
[  994.957454][T15014] CPU: 1 PID: 15014 Comm: syz.1.3431 Not tainted syzkaller #0
[  994.965007][T15014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  994.975101][T15014] Call Trace:
[  994.978424][T15014]  <TASK>
[  994.981378][T15014]  dump_stack_lvl+0x188/0x24e
[  994.986102][T15014]  ? show_regs_print_info+0x12/0x12
[  994.991333][T15014]  ? load_image+0x400/0x400
[  994.995877][T15014]  sysfs_warn_dup+0x8a/0xa0
[  995.000413][T15014]  sysfs_do_create_link_sd+0xc0/0x110
[  995.005811][T15014]  device_add+0x7ed/0xfb0
[  995.010185][T15014]  wiphy_register+0x1d9f/0x2ac0
[  995.015082][T15014]  ? cfg80211_event_work+0x40/0x40
[  995.020243][T15014]  ? minstrel_ht_alloc+0x894/0xa20
[  995.025395][T15014]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[  995.031505][T15014]  ieee80211_register_hw+0x2d00/0x39f0
[  995.037008][T15014]  ? ieee80211_register_hw+0xea1/0x39f0
[  995.042603][T15014]  ? ieee80211_register_hw+0xea1/0x39f0
[  995.048196][T15014]  ? ieee80211_tasklet_handler+0x20/0x20
[  995.053871][T15014]  ? memset+0x1e/0x40
[  995.057886][T15014]  ? __hrtimer_init+0x186/0x270
[  995.062776][T15014]  mac80211_hwsim_new_radio+0x28c2/0x4c40
[  995.068551][T15014]  hwsim_new_radio_nl+0xafa/0xce0
[  995.073623][T15014]  genl_family_rcv_msg_doit+0x22a/0x330
[  995.079204][T15014]  ? end_current_label_crit_section+0x170/0x170
[  995.085475][T15014]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[  995.091416][T15014]  ? bpf_lsm_capable+0x5/0x10
[  995.096180][T15014]  ? security_capable+0x85/0xb0
[  995.101069][T15014]  genl_rcv_msg+0x604/0x790
[  995.105617][T15014]  ? genl_bind+0x360/0x360
[  995.110076][T15014]  ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0
[  995.116458][T15014]  netlink_rcv_skb+0x1fb/0x450
[  995.121265][T15014]  ? genl_bind+0x360/0x360
[  995.125722][T15014]  ? netlink_ack+0x1170/0x1170
[  995.130531][T15014]  ? down_read+0x1a8/0x2d0
[  995.134982][T15014]  genl_rcv+0x24/0x40
[  995.138998][T15014]  netlink_unicast+0x74d/0x8d0
[  995.143796][T15014]  netlink_sendmsg+0x8ad/0xbd0
[  995.148589][T15014]  ? netlink_getsockopt+0x550/0x550
[  995.153839][T15014]  ? aa_sock_msg_perm+0x94/0x150
[  995.158821][T15014]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  995.164132][T15014]  ? security_socket_sendmsg+0x7c/0xa0
[  995.169622][T15014]  ? netlink_getsockopt+0x550/0x550
[  995.174850][T15014]  ____sys_sendmsg+0x5be/0x970
[  995.179649][T15014]  ? __sys_sendmsg_sock+0x30/0x30
[  995.184699][T15014]  ? __import_iovec+0x315/0x500
[  995.189583][T15014]  ? import_iovec+0x6f/0xa0
[  995.194113][T15014]  ___sys_sendmsg+0x2a2/0x360
[  995.198816][T15014]  ? try_to_wake_up+0x6ae/0x1080
[  995.203796][T15014]  ? __sys_sendmsg+0x290/0x290
[  995.208637][T15014]  __se_sys_sendmsg+0x1bb/0x2a0
[  995.213520][T15014]  ? __x64_sys_sendmsg+0x80/0x80
[  995.218503][T15014]  ? lockdep_hardirqs_on+0x94/0x140
[  995.223736][T15014]  do_syscall_64+0x4c/0xa0
[  995.228174][T15014]  ? clear_bhb_loop+0x60/0xb0
[  995.232882][T15014]  ? clear_bhb_loop+0x60/0xb0
[  995.237592][T15014]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  995.243500][T15014] RIP: 0033:0x7f350439acb9
[  995.247987][T15014] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  995.267634][T15014] RSP: 002b:00007f35051d0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  995.276062][T15014] RAX: ffffffffffffffda RBX: 00007f3504616090 RCX: 00007f350439acb9
[  995.284050][T15014] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b
[  995.292040][T15014] RBP: 00007f3504408bf7 R08: 0000000000000000 R09: 0000000000000000
[  995.300033][T15014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  995.308030][T15014] R13: 00007f3504616128 R14: 00007f3504616090 R15: 00007fffa0b6d178
[  995.316041][T15014]  </TASK>
[  996.491552][T15055] netlink: 'syz.1.3444': attribute type 10 has an invalid length.
[  996.516705][T15055] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.3444'.
[  997.071906][T15067] netlink: 'syz.1.3448': attribute type 3 has an invalid length.
[  997.094191][T15067] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3448'.
[  997.441860][T15078] netlink: 'syz.3.3451': attribute type 9 has an invalid length.
[  997.504056][T15078] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.3451'.
[  997.756998][T15082] netpci0: tun_chr_ioctl cmd 1074025681
[  998.194682][T15088] netlink: 'syz.5.3455': attribute type 21 has an invalid length.
[  998.757891][T15103] 
: renamed from veth0_vlan
[  999.151997][T15128] netlink: 122896 bytes leftover after parsing attributes in process `syz.6.3466'.
[  999.190228][T15128] debugfs: Directory '.!
' with parent 'ieee80211' already present!
[  999.581531][T15137] team0: Port device team_slave_0 removed
[  999.590260][T15137] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  999.938888][T15153] FAULT_INJECTION: forcing a failure.
[  999.938888][T15153] name failslab, interval 1, probability 0, space 0, times 0
[  999.959058][T15153] CPU: 0 PID: 15153 Comm: syz.3.3476 Not tainted syzkaller #0
[  999.966592][T15153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  999.976742][T15153] Call Trace:
[  999.980074][T15153]  <TASK>
[  999.983052][T15153]  dump_stack_lvl+0x188/0x24e
[  999.987791][T15153]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  999.994001][T15153]  ? show_regs_print_info+0x12/0x12
[  999.999267][T15153]  ? load_image+0x400/0x400
[ 1000.003824][T15153]  should_fail_ex+0x399/0x4d0
[ 1000.008600][T15153]  should_failslab+0x5/0x20
[ 1000.013137][T15153]  slab_pre_alloc_hook+0x59/0x310
[ 1000.018193][T15153]  ? __get_vm_area_node+0x122/0x330
[ 1000.023447][T15153]  __kmem_cache_alloc_node+0x4f/0x260
[ 1000.028855][T15153]  ? __get_vm_area_node+0x122/0x330
[ 1000.034087][T15153]  kmalloc_node_trace+0x22/0xe0
[ 1000.039082][T15153]  __get_vm_area_node+0x122/0x330
[ 1000.044157][T15153]  __vmalloc_node_range+0x357/0x13b0
[ 1000.049467][T15153]  ? bpf_prog_alloc_no_stats+0x3a/0x3a0
[ 1000.055073][T15153]  ? free_vm_area+0x50/0x50
[ 1000.059600][T15153]  ? end_current_label_crit_section+0x170/0x170
[ 1000.065865][T15153]  ? __lock_acquire+0x7d10/0x7d10
[ 1000.070923][T15153]  ? bpf_prog_alloc_no_stats+0x3a/0x3a0
[ 1000.076512][T15153]  __vmalloc+0x76/0x80
[ 1000.080632][T15153]  ? bpf_prog_alloc_no_stats+0x3a/0x3a0
[ 1000.086246][T15153]  bpf_prog_alloc_no_stats+0x3a/0x3a0
[ 1000.091660][T15153]  ? bpf_lsm_capable+0x5/0x10
[ 1000.096397][T15153]  bpf_prog_alloc+0x1c/0x1b0
[ 1000.101082][T15153]  bpf_prog_load+0x7c9/0x1560
[ 1000.105824][T15153]  ? map_freeze+0x390/0x390
[ 1000.110368][T15153]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1000.116571][T15153]  ? lockdep_hardirqs_on+0x94/0x140
[ 1000.121830][T15153]  ? audit_tree_destroy_watch+0x20/0x20
[ 1000.127405][T15153]  ? security_bpf+0x7a/0xa0
[ 1000.131934][T15153]  __sys_bpf+0x5b8/0x780
[ 1000.136212][T15153]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1000.141621][T15153]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1000.147818][T15153]  __x64_sys_bpf+0x78/0x90
[ 1000.152262][T15153]  do_syscall_64+0x4c/0xa0
[ 1000.156707][T15153]  ? clear_bhb_loop+0x60/0xb0
[ 1000.161420][T15153]  ? clear_bhb_loop+0x60/0xb0
[ 1000.166142][T15153]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1000.172064][T15153] RIP: 0033:0x7ff4ca39acb9
[ 1000.176515][T15153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1000.196169][T15153] RSP: 002b:00007ff4cb1ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1000.204616][T15153] RAX: ffffffffffffffda RBX: 00007ff4ca615fa0 RCX: 00007ff4ca39acb9
[ 1000.212614][T15153] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005
[ 1000.220623][T15153] RBP: 00007ff4cb1ce090 R08: 0000000000000000 R09: 0000000000000000
[ 1000.228658][T15153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1000.236666][T15153] R13: 00007ff4ca616038 R14: 00007ff4ca615fa0 R15: 00007ffc040c1ed8
[ 1000.244692][T15153]  </TASK>
[ 1000.316234][T15153] syz.3.3476: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz3,mems_allowed=0-1
[ 1000.335262][T15153] CPU: 0 PID: 15153 Comm: syz.3.3476 Not tainted syzkaller #0
[ 1000.342785][T15153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1000.352882][T15153] Call Trace:
[ 1000.356196][T15153]  <TASK>
[ 1000.359166][T15153]  dump_stack_lvl+0x188/0x24e
[ 1000.363900][T15153]  ? cpuset_print_current_mems_allowed+0x1b/0x360
[ 1000.370368][T15153]  ? show_regs_print_info+0x12/0x12
[ 1000.375623][T15153]  ? load_image+0x400/0x400
[ 1000.380179][T15153]  ? __rcu_read_unlock+0x78/0xd0
[ 1000.385177][T15153]  ? cpuset_print_current_mems_allowed+0x1b/0x360
[ 1000.391674][T15153]  ? cpuset_print_current_mems_allowed+0x2e3/0x360
[ 1000.398268][T15153]  warn_alloc+0x242/0x330
[ 1000.402676][T15153]  ? __get_vm_area_node+0x122/0x330
[ 1000.407969][T15153]  ? zone_watermark_ok_safe+0x270/0x270
[ 1000.413593][T15153]  ? rcu_is_watching+0x11/0xa0
[ 1000.418455][T15153]  ? __get_vm_area_node+0x318/0x330
[ 1000.423771][T15153]  __vmalloc_node_range+0x37c/0x13b0
[ 1000.429239][T15153]  ? free_vm_area+0x50/0x50
[ 1000.433925][T15153]  ? end_current_label_crit_section+0x170/0x170
[ 1000.440243][T15153]  ? __lock_acquire+0x7d10/0x7d10
[ 1000.440873][T15158] netlink: 'syz.5.3479': attribute type 9 has an invalid length.
[ 1000.445330][T15153]  ? bpf_prog_alloc_no_stats+0x3a/0x3a0
[ 1000.445372][T15153]  __vmalloc+0x76/0x80
[ 1000.445409][T15153]  ? bpf_prog_alloc_no_stats+0x3a/0x3a0
[ 1000.468549][T15153]  bpf_prog_alloc_no_stats+0x3a/0x3a0
[ 1000.473999][T15153]  ? bpf_lsm_capable+0x5/0x10
[ 1000.478761][T15153]  bpf_prog_alloc+0x1c/0x1b0
[ 1000.483449][T15153]  bpf_prog_load+0x7c9/0x1560
[ 1000.487892][T15158] netlink: 126588 bytes leftover after parsing attributes in process `syz.5.3479'.
[ 1000.488299][T15153]  ? map_freeze+0x390/0x390
[ 1000.502089][T15153]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1000.508319][T15153]  ? lockdep_hardirqs_on+0x94/0x140
[ 1000.513646][T15153]  ? audit_tree_destroy_watch+0x20/0x20
[ 1000.519311][T15153]  ? security_bpf+0x7a/0xa0
[ 1000.523896][T15153]  __sys_bpf+0x5b8/0x780
[ 1000.528232][T15153]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1000.533727][T15153]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1000.540004][T15153]  __x64_sys_bpf+0x78/0x90
[ 1000.544495][T15153]  do_syscall_64+0x4c/0xa0
[ 1000.549030][T15153]  ? clear_bhb_loop+0x60/0xb0
[ 1000.553862][T15153]  ? clear_bhb_loop+0x60/0xb0
[ 1000.558601][T15153]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1000.564549][T15153] RIP: 0033:0x7ff4ca39acb9
[ 1000.569013][T15153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1000.588666][T15153] RSP: 002b:00007ff4cb1ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1000.597138][T15153] RAX: ffffffffffffffda RBX: 00007ff4ca615fa0 RCX: 00007ff4ca39acb9
[ 1000.605164][T15153] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005
[ 1000.613186][T15153] RBP: 00007ff4cb1ce090 R08: 0000000000000000 R09: 0000000000000000
[ 1000.621224][T15153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1000.629249][T15153] R13: 00007ff4ca616038 R14: 00007ff4ca615fa0 R15: 00007ffc040c1ed8
[ 1000.637287][T15153]  </TASK>
[ 1000.683810][T15153] Mem-Info:
[ 1000.688294][T15153] active_anon:6941 inactive_anon:0 isolated_anon:0
[ 1000.688294][T15153]  active_file:20824 inactive_file:40199 isolated_file:0
[ 1000.688294][T15153]  unevictable:768 dirty:275 writeback:0
[ 1000.688294][T15153]  slab_reclaimable:21304 slab_unreclaimable:97551
[ 1000.688294][T15153]  mapped:29839 shmem:1385 pagetables:788
[ 1000.688294][T15153]  sec_pagetables:0 bounce:0
[ 1000.688294][T15153]  kernel_misc_reclaimable:0
[ 1000.688294][T15153]  free:1312752 free_pcp:10303 free_cma:0
[ 1000.790563][T15153] Node 0 active_anon:27664kB inactive_anon:0kB active_file:83296kB inactive_file:160592kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119256kB dirty:1100kB writeback:0kB shmem:4004kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11460kB pagetables:3052kB sec_pagetables:0kB all_unreclaimable? no
[ 1000.843483][T15160] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.3481'.
[ 1000.858549][T15153] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[ 1000.953782][T15153] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1000.955865][T15164] netlink: 'syz.1.3481': attribute type 28 has an invalid length.
[ 1000.981990][T15153] lowmem_reserve[]: 0 2527 2528 2528 2528
[ 1000.982055][T15153] Node 0 DMA32 free:1354156kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:27564kB inactive_anon:0kB active_file:83296kB inactive_file:160592kB unevictable:1536kB writepending:1100kB present:3129332kB managed:2592980kB mlocked:0kB bounce:0kB free_pcp:9572kB local_pcp:8264kB free_cma:0kB
[ 1000.982123][T15153] lowmem_reserve[]: 0 0 1 1 1
[ 1000.982177][T15153] Node 0 Normal free:16kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:12kB free_cma:0kB
[ 1000.982242][T15153] lowmem_reserve[]: 0 0 0 0 0
[ 1000.982297][T15153] Node 1 Normal free:3890328kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:22132kB local_pcp:13696kB free_cma:0kB
[ 1000.982365][T15153] lowmem_reserve[]: 0 0 0 0 0
[ 1000.982426][T15153] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 1000.982598][T15153] Node 0 DMA32: 1857*4kB (UME) 1751*8kB (UME) 1565*16kB (UME) 1217*32kB (UME) 456*64kB (UME) 154*128kB (UME) 81*256kB (UME) 34*512kB (UME) 8*1024kB (UM) 9*2048kB (UME) 282*4096kB (M) = 1354156kB
[ 1000.982841][T15153] Node 0 Normal: 4*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB
[ 1000.982995][T15153] Node 1 Normal: 278*4kB (UME) 16*8kB (UME) 30*16kB (UME) 33*32kB (UME) 21*64kB (UME) 11*128kB (UME) 3*256kB (UE) 2*512kB (UM) 2*1024kB (UE) 1*2048kB (E) 947*4096kB (M) = 3890328kB
[ 1000.983233][T15153] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1000.983254][T15153] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1000.983273][T15153] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1000.983291][T15153] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1000.983310][T15153] 62408 total pagecache pages
[ 1000.983320][T15153] 0 pages in swap cache
[ 1000.983330][T15153] Free swap  = 124996kB
[ 1000.983340][T15153] Total swap = 124996kB
[ 1000.983349][T15153] 2097051 pages RAM
[ 1000.983359][T15153] 0 pages HighMem/MovableOnly
[ 1000.983368][T15153] 415205 pages reserved
[ 1000.983376][T15153] 0 pages cma reserved
[ 1001.274637][T15164] netlink: 'syz.1.3481': attribute type 3 has an invalid length.
[ 1001.285798][T15164] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3481'.
[ 1002.111081][T15191] netlink: 'syz.4.3491': attribute type 3 has an invalid length.
[ 1002.132429][T15191] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3491'.
[ 1002.328787][T15200] netlink: 'syz.5.3493': attribute type 9 has an invalid length.
[ 1002.375770][T15200] netlink: 126588 bytes leftover after parsing attributes in process `syz.5.3493'.
[ 1002.662213][T15206] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3497'.
[ 1002.687131][T15206] FAULT_INJECTION: forcing a failure.
[ 1002.687131][T15206] name failslab, interval 1, probability 0, space 0, times 0
[ 1002.767186][T15206] CPU: 1 PID: 15206 Comm: syz.1.3497 Not tainted syzkaller #0
[ 1002.774769][T15206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1002.784979][T15206] Call Trace:
[ 1002.788333][T15206]  <TASK>
[ 1002.791341][T15206]  dump_stack_lvl+0x188/0x24e
[ 1002.796141][T15206]  ? show_regs_print_info+0x12/0x12
[ 1002.801478][T15206]  ? load_image+0x400/0x400
[ 1002.806073][T15206]  ? __might_sleep+0xd0/0xd0
[ 1002.810732][T15206]  ? __lock_acquire+0x7d10/0x7d10
[ 1002.815829][T15206]  ? trace_event_raw_event_lock+0x250/0x250
[ 1002.821828][T15206]  should_fail_ex+0x399/0x4d0
[ 1002.826598][T15206]  should_failslab+0x5/0x20
[ 1002.831162][T15206]  slab_pre_alloc_hook+0x59/0x310
[ 1002.836274][T15206]  ? netdevice_event+0x325/0x900
[ 1002.841293][T15206]  __kmem_cache_alloc_node+0x4f/0x260
[ 1002.846768][T15206]  ? netdevice_event+0x325/0x900
[ 1002.851775][T15206]  kmalloc_trace+0x26/0xe0
[ 1002.856261][T15206]  netdevice_event+0x325/0x900
[ 1002.861099][T15206]  ? netdev_upper_walk+0x210/0x210
[ 1002.866261][T15206]  ? add_default_gids+0xe0/0xe0
[ 1002.871162][T15206]  ? is_ndev_for_default_gid_filter+0x2e0/0x2e0
[ 1002.877451][T15206]  ? enum_all_gids_of_dev_cb+0x260/0x260
[ 1002.883139][T15206]  ? netdevice_event+0x900/0x900
[ 1002.888143][T15206]  ? add_default_gids+0xe0/0xe0
[ 1002.893061][T15206]  ? netlbl_unlhsh_netdev_handler+0x187/0x260
[ 1002.899222][T15206]  raw_notifier_call_chain+0xcb/0x160
[ 1002.904696][T15206]  call_netdevice_notifiers+0x8d/0xd0
[ 1002.910156][T15206]  ? netdev_adjacent_rename_links+0x4f0/0x4f0
[ 1002.916351][T15206]  do_setlink+0xa78/0x3e60
[ 1002.920884][T15206]  ? _printk+0xda/0x130
[ 1002.925144][T15206]  ? nlmsg_parse_deprecated_strict+0x110/0x110
[ 1002.931389][T15206]  ? load_image+0x400/0x400
[ 1002.936001][T15206]  ? rcu_is_watching+0x11/0xa0
[ 1002.940851][T15206]  ? do_trace_netlink_extack+0x9c/0x220
[ 1002.946477][T15206]  ? __nla_validate_parse+0x20f9/0x2a40
[ 1002.952073][T15206]  ? __lock_acquire+0x7d10/0x7d10
[ 1002.957245][T15206]  ? trace_call_bpf+0xbf/0x6b0
[ 1002.962099][T15206]  ? __nla_validate+0x50/0x50
[ 1002.966899][T15206]  ? __lock_acquire+0x7d10/0x7d10
[ 1002.972036][T15206]  ? __nla_parse+0x3c/0x50
[ 1002.976548][T15206]  rtnl_setlink+0x37e/0x510
[ 1002.981124][T15206]  ? rtnl_dump_ifinfo+0x1480/0x1480
[ 1002.986615][T15206]  ? rtnetlink_rcv_msg+0x226/0xfc0
[ 1002.992075][T15206]  ? rtnetlink_rcv_msg+0x226/0xfc0
[ 1002.997265][T15206]  ? rtnl_dump_ifinfo+0x1480/0x1480
[ 1003.002542][T15206]  rtnetlink_rcv_msg+0x87c/0xfc0
[ 1003.007592][T15206]  ? rtnetlink_bind+0x80/0x80
[ 1003.012343][T15206]  ? __local_bh_enable_ip+0x136/0x1c0
[ 1003.017801][T15206]  ? lockdep_hardirqs_on+0x94/0x140
[ 1003.023081][T15206]  ? __local_bh_enable_ip+0x136/0x1c0
[ 1003.028528][T15206]  ? _local_bh_enable+0xa0/0xa0
[ 1003.033466][T15206]  ? __dev_queue_xmit+0x26b/0x37f0
[ 1003.038641][T15206]  ? __dev_queue_xmit+0x26b/0x37f0
[ 1003.043820][T15206]  ? __dev_queue_xmit+0x1c61/0x37f0
[ 1003.049127][T15206]  ? __dev_queue_xmit+0x26b/0x37f0
[ 1003.054331][T15206]  ? perf_trace_lock+0xf8/0x390
[ 1003.059242][T15206]  ? __copy_skb_header+0x3ba/0x4f0
[ 1003.064455][T15206]  ? trace_event_raw_event_lock+0x250/0x250
[ 1003.070442][T15206]  ? __skb_clone+0x480/0x790
[ 1003.075132][T15206]  netlink_rcv_skb+0x1fb/0x450
[ 1003.079991][T15206]  ? rtnetlink_bind+0x80/0x80
[ 1003.084749][T15206]  ? netlink_ack+0x1170/0x1170
[ 1003.089630][T15206]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1003.094905][T15206]  netlink_unicast+0x74d/0x8d0
[ 1003.099763][T15206]  netlink_sendmsg+0x8ad/0xbd0
[ 1003.104624][T15206]  ? netlink_getsockopt+0x550/0x550
[ 1003.109890][T15206]  ? aa_sock_msg_perm+0x94/0x150
[ 1003.114941][T15206]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1003.120305][T15206]  ? security_socket_sendmsg+0x7c/0xa0
[ 1003.125898][T15206]  ? netlink_getsockopt+0x550/0x550
[ 1003.131272][T15206]  ____sys_sendmsg+0x5be/0x970
[ 1003.136219][T15206]  ? __sys_sendmsg_sock+0x30/0x30
[ 1003.141352][T15206]  ? __import_iovec+0x315/0x500
[ 1003.146340][T15206]  ? import_iovec+0x6f/0xa0
[ 1003.150941][T15206]  ___sys_sendmsg+0x2a2/0x360
[ 1003.155724][T15206]  ? __sys_sendmsg+0x290/0x290
[ 1003.160673][T15206]  ? __lock_acquire+0x7d10/0x7d10
[ 1003.165912][T15206]  __se_sys_sendmsg+0x1bb/0x2a0
[ 1003.170885][T15206]  ? __x64_sys_sendmsg+0x80/0x80
[ 1003.175955][T15206]  ? lockdep_hardirqs_on+0x94/0x140
[ 1003.181260][T15206]  do_syscall_64+0x4c/0xa0
[ 1003.185756][T15206]  ? clear_bhb_loop+0x60/0xb0
[ 1003.190501][T15206]  ? clear_bhb_loop+0x60/0xb0
[ 1003.195253][T15206]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1003.201214][T15206] RIP: 0033:0x7f350439acb9
[ 1003.205697][T15206] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1003.225371][T15206] RSP: 002b:00007f35051f1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1003.233866][T15206] RAX: ffffffffffffffda RBX: 00007f3504615fa0 RCX: 00007f350439acb9
[ 1003.241894][T15206] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[ 1003.249909][T15206] RBP: 00007f35051f1090 R08: 0000000000000000 R09: 0000000000000000
[ 1003.257940][T15206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1003.265980][T15206] R13: 00007f3504616038 R14: 00007f3504615fa0 R15: 00007fffa0b6d178
[ 1003.274076][T15206]  </TASK>
[ 1004.143728][T15230] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3506'.
[ 1004.563044][T15240] netlink: 763 bytes leftover after parsing attributes in process `syz.5.3509'.
[ 1004.610376][T15241] netlink: 'syz.4.3510': attribute type 9 has an invalid length.
[ 1004.629240][T15241] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.3510'.
[ 1006.845399][T15308] FAULT_INJECTION: forcing a failure.
[ 1006.845399][T15308] name failslab, interval 1, probability 0, space 0, times 0
[ 1006.912111][T15308] CPU: 1 PID: 15308 Comm: syz.4.3533 Not tainted syzkaller #0
[ 1006.919656][T15308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1006.929754][T15308] Call Trace:
[ 1006.933074][T15308]  <TASK>
[ 1006.936037][T15308]  dump_stack_lvl+0x188/0x24e
[ 1006.940771][T15308]  ? show_regs_print_info+0x12/0x12
[ 1006.946021][T15308]  ? load_image+0x400/0x400
[ 1006.950573][T15308]  ? __might_sleep+0xd0/0xd0
[ 1006.955237][T15308]  ? __lock_acquire+0x7d10/0x7d10
[ 1006.960409][T15308]  should_fail_ex+0x399/0x4d0
[ 1006.965142][T15308]  should_failslab+0x5/0x20
[ 1006.969700][T15308]  slab_pre_alloc_hook+0x59/0x310
[ 1006.974779][T15308]  kmem_cache_alloc_node+0x5a/0x320
[ 1006.980016][T15308]  ? __alloc_skb+0xfc/0x7e0
[ 1006.984582][T15308]  __alloc_skb+0xfc/0x7e0
[ 1006.988974][T15308]  br_vlan_notify+0x260/0x750
[ 1006.993712][T15308]  br_process_vlan_info+0x2e0/0x7f0
[ 1006.998961][T15308]  br_afspec+0x1fd/0x5d0
[ 1007.003234][T15308]  ? verify_lock_unused+0x140/0x140
[ 1007.008500][T15308]  ? br_setport+0x1110/0x1110
[ 1007.013209][T15308]  br_setlink+0x2d5/0x880
[ 1007.017558][T15308]  ? br_vlan_info+0x460/0x460
[ 1007.022272][T15308]  ? rtnetlink_rcv_msg+0x824/0xfc0
[ 1007.027406][T15308]  ? rcu_read_unlock+0x8c/0xa0
[ 1007.032196][T15308]  ? mutex_lock_nested+0x10/0x10
[ 1007.037158][T15308]  ? mutex_is_locked+0xe/0x40
[ 1007.041866][T15308]  rtnl_bridge_setlink+0x4ba/0x720
[ 1007.047006][T15308]  ? rtnetlink_rcv_msg+0x226/0xfc0
[ 1007.052149][T15308]  ? rtnl_bridge_dellink+0x680/0x680
[ 1007.057459][T15308]  rtnetlink_rcv_msg+0x87c/0xfc0
[ 1007.062448][T15308]  ? rtnetlink_bind+0x80/0x80
[ 1007.067149][T15308]  ? __local_bh_enable_ip+0x136/0x1c0
[ 1007.072546][T15308]  ? lockdep_hardirqs_on+0x94/0x140
[ 1007.077778][T15308]  ? __local_bh_enable_ip+0x136/0x1c0
[ 1007.083167][T15308]  ? _local_bh_enable+0xa0/0xa0
[ 1007.088048][T15308]  ? __dev_queue_xmit+0x26b/0x37f0
[ 1007.093176][T15308]  ? __dev_queue_xmit+0x26b/0x37f0
[ 1007.098306][T15308]  ? __dev_queue_xmit+0x1c61/0x37f0
[ 1007.103524][T15308]  ? __dev_queue_xmit+0x26b/0x37f0
[ 1007.108656][T15308]  ? ref_tracker_free+0x68c/0x840
[ 1007.113723][T15308]  ? __copy_skb_header+0x3ba/0x4f0
[ 1007.118917][T15308]  ? refcount_inc+0x70/0x70
[ 1007.123455][T15308]  ? memcpy+0x3c/0x60
[ 1007.127465][T15308]  ? __copy_skb_header+0x3ba/0x4f0
[ 1007.132626][T15308]  ? __skb_clone+0x480/0x790
[ 1007.137254][T15308]  netlink_rcv_skb+0x1fb/0x450
[ 1007.142051][T15308]  ? rtnetlink_bind+0x80/0x80
[ 1007.146783][T15308]  ? netlink_ack+0x1170/0x1170
[ 1007.151605][T15308]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1007.156854][T15308]  netlink_unicast+0x74d/0x8d0
[ 1007.161657][T15308]  netlink_sendmsg+0x8ad/0xbd0
[ 1007.166504][T15308]  ? netlink_getsockopt+0x550/0x550
[ 1007.171751][T15308]  ? aa_sock_msg_perm+0x94/0x150
[ 1007.176746][T15308]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1007.182062][T15308]  ? security_socket_sendmsg+0x7c/0xa0
[ 1007.187563][T15308]  ? netlink_getsockopt+0x550/0x550
[ 1007.192793][T15308]  ____sys_sendmsg+0x5be/0x970
[ 1007.197594][T15308]  ? __sys_sendmsg_sock+0x30/0x30
[ 1007.202643][T15308]  ? __import_iovec+0x315/0x500
[ 1007.207513][T15308]  ? import_iovec+0x6f/0xa0
[ 1007.212036][T15308]  ___sys_sendmsg+0x2a2/0x360
[ 1007.216827][T15308]  ? __sys_sendmsg+0x290/0x290
[ 1007.221634][T15308]  ? __lock_acquire+0x7d10/0x7d10
[ 1007.226743][T15308]  __se_sys_sendmsg+0x1bb/0x2a0
[ 1007.231626][T15308]  ? __x64_sys_sendmsg+0x80/0x80
[ 1007.236605][T15308]  ? lockdep_hardirqs_on+0x94/0x140
[ 1007.241852][T15308]  do_syscall_64+0x4c/0xa0
[ 1007.246372][T15308]  ? clear_bhb_loop+0x60/0xb0
[ 1007.251073][T15308]  ? clear_bhb_loop+0x60/0xb0
[ 1007.255775][T15308]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1007.261694][T15308] RIP: 0033:0x7f5b9999acb9
[ 1007.266192][T15308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1007.285809][T15308] RSP: 002b:00007f5b9a84e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1007.294243][T15308] RAX: ffffffffffffffda RBX: 00007f5b99c15fa0 RCX: 00007f5b9999acb9
[ 1007.302250][T15308] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[ 1007.310247][T15308] RBP: 00007f5b9a84e090 R08: 0000000000000000 R09: 0000000000000000
[ 1007.318233][T15308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1007.326224][T15308] R13: 00007f5b99c16038 R14: 00007f5b99c15fa0 R15: 00007fffc9dad818
[ 1007.334229][T15308]  </TASK>
[ 1007.370107][T15313] FAULT_INJECTION: forcing a failure.
[ 1007.370107][T15313] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1007.385283][T15313] CPU: 0 PID: 15313 Comm: syz.1.3535 Not tainted syzkaller #0
[ 1007.392818][T15313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1007.402930][T15313] Call Trace:
[ 1007.406245][T15313]  <TASK>
[ 1007.409215][T15313]  dump_stack_lvl+0x188/0x24e
[ 1007.413960][T15313]  ? show_regs_print_info+0x12/0x12
[ 1007.419217][T15313]  ? load_image+0x400/0x400
[ 1007.423801][T15313]  ? __lock_acquire+0x7d10/0x7d10
[ 1007.428895][T15313]  ? snprintf+0xe5/0x140
[ 1007.433188][T15313]  should_fail_ex+0x399/0x4d0
[ 1007.437945][T15313]  _copy_to_user+0x2c/0x130
[ 1007.442509][T15313]  simple_read_from_buffer+0xe3/0x150
[ 1007.447953][T15313]  proc_fail_nth_read+0x1a6/0x220
[ 1007.453056][T15313]  ? proc_fault_inject_write+0x310/0x310
[ 1007.458792][T15313]  ? fsnotify_perm+0x248/0x550
[ 1007.463594][T15313]  ? proc_fault_inject_write+0x310/0x310
[ 1007.469291][T15313]  vfs_read+0x2de/0xa00
[ 1007.473493][T15313]  ? kernel_read+0x1e0/0x1e0
[ 1007.478118][T15313]  ? __fget_files+0x28/0x4b0
[ 1007.482757][T15313]  ? __fget_files+0x28/0x4b0
[ 1007.487381][T15313]  ? __fget_files+0x43d/0x4b0
[ 1007.492112][T15313]  ? __fdget_pos+0x2ae/0x360
[ 1007.496732][T15313]  ? ksys_read+0x71/0x250
[ 1007.501104][T15313]  ksys_read+0x14c/0x250
[ 1007.505386][T15313]  ? vfs_write+0xa30/0xa30
[ 1007.509846][T15313]  ? lockdep_hardirqs_on+0x94/0x140
[ 1007.515109][T15313]  do_syscall_64+0x4c/0xa0
[ 1007.519553][T15313]  ? clear_bhb_loop+0x60/0xb0
[ 1007.524293][T15313]  ? clear_bhb_loop+0x60/0xb0
[ 1007.529002][T15313]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1007.534923][T15313] RIP: 0033:0x7f350435b58e
[ 1007.539368][T15313] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1007.559007][T15313] RSP: 002b:00007f35051f0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1007.567450][T15313] RAX: ffffffffffffffda RBX: 00007f35051f16c0 RCX: 00007f350435b58e
[ 1007.575444][T15313] RDX: 000000000000000f RSI: 00007f35051f10a0 RDI: 0000000000000006
[ 1007.583434][T15313] RBP: 00007f35051f1090 R08: 0000000000000000 R09: 0000000000000000
[ 1007.591428][T15313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1007.599434][T15313] R13: 00007f3504616038 R14: 00007f3504615fa0 R15: 00007fffa0b6d178
[ 1007.607456][T15313]  </TASK>
[ 1008.973127][T15342] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3546'.
[ 1009.418489][T15356] netlink: 'syz.3.3550': attribute type 9 has an invalid length.
[ 1009.445933][T15356] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.3550'.
[ 1010.824375][T15391] netlink: 'syz.4.3565': attribute type 9 has an invalid length.
[ 1010.879419][T15391] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.3565'.
[ 1011.961365][T15423] netlink: 'syz.6.3573': attribute type 21 has an invalid length.
[ 1011.969542][T15423] netlink: 128 bytes leftover after parsing attributes in process `syz.6.3573'.
[ 1013.925615][T15436] netlink: 'syz.4.3578': attribute type 9 has an invalid length.
[ 1013.936065][T15436] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.3578'.
[ 1015.492417][T15470] netlink: 'syz.5.3591': attribute type 29 has an invalid length.
[ 1015.519885][T15470] netlink: 'syz.5.3591': attribute type 29 has an invalid length.
[ 1015.550401][T15472] netlink: 'syz.5.3591': attribute type 29 has an invalid length.
[ 1015.624383][T15470] netlink: 'syz.5.3591': attribute type 29 has an invalid length.
[ 1015.657472][T15470] netlink: 'syz.5.3591': attribute type 29 has an invalid length.
[ 1015.698652][T15476] netlink: 'syz.3.3593': attribute type 9 has an invalid length.
[ 1015.717161][T15476] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.3593'.
[ 1015.754141][T15463] netlink: 'syz.4.3588': attribute type 21 has an invalid length.
[ 1015.769058][T15463] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3588'.
[ 1015.783874][T15463] netlink: 'syz.4.3588': attribute type 4 has an invalid length.
[ 1015.799021][T15463] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3588'.
[ 1016.541608][T15515] netlink: 'syz.3.3605': attribute type 29 has an invalid length.
[ 1016.584021][T15515] netlink: 'syz.3.3605': attribute type 29 has an invalid length.
[ 1016.679450][T15520] netlink: 126588 bytes leftover after parsing attributes in process `syz.5.3607'.
[ 1017.323389][T15531] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3612'.
[ 1017.360538][T15531] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3612'.
[ 1017.410763][T15543] FAULT_INJECTION: forcing a failure.
[ 1017.410763][T15543] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1017.445632][T15543] CPU: 0 PID: 15543 Comm: syz.6.3616 Not tainted syzkaller #0
[ 1017.453152][T15543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1017.463246][T15543] Call Trace:
[ 1017.466562][T15543]  <TASK>
[ 1017.469531][T15543]  dump_stack_lvl+0x188/0x24e
[ 1017.474274][T15543]  ? show_regs_print_info+0x12/0x12
[ 1017.479525][T15543]  ? load_image+0x400/0x400
[ 1017.484085][T15543]  ? __lock_acquire+0x7d10/0x7d10
[ 1017.489159][T15543]  ? __rcu_read_unlock+0x78/0xd0
[ 1017.494152][T15543]  should_fail_ex+0x399/0x4d0
[ 1017.498880][T15543]  _copy_to_user+0x2c/0x130
[ 1017.503437][T15543]  bpf_test_finish+0x266/0x600
[ 1017.508251][T15543]  ? convert___skb_to_skb+0x580/0x580
[ 1017.513667][T15543]  ? convert_skb_to___skb+0x420/0x420
[ 1017.519082][T15543]  ? __build_skb+0x257/0x3c0
[ 1017.523719][T15543]  bpf_prog_test_run_skb+0xc99/0x12a0
[ 1017.529153][T15543]  ? cpu_online+0xa0/0xa0
[ 1017.533517][T15543]  bpf_prog_test_run+0x31e/0x390
[ 1017.538504][T15543]  __sys_bpf+0x62b/0x780
[ 1017.542797][T15543]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1017.548233][T15543]  ? lock_chain_count+0x20/0x20
[ 1017.553148][T15543]  __x64_sys_bpf+0x78/0x90
[ 1017.557634][T15543]  do_syscall_64+0x4c/0xa0
[ 1017.562097][T15543]  ? clear_bhb_loop+0x60/0xb0
[ 1017.566806][T15543]  ? clear_bhb_loop+0x60/0xb0
[ 1017.571524][T15543]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1017.577459][T15543] RIP: 0033:0x7f627cb9acb9
[ 1017.581905][T15543] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1017.601552][T15543] RSP: 002b:00007f627db3e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1017.610016][T15543] RAX: ffffffffffffffda RBX: 00007f627ce15fa0 RCX: 00007f627cb9acb9
[ 1017.618027][T15543] RDX: 0000000000000050 RSI: 0000200000000140 RDI: 000000000000000a
[ 1017.626064][T15543] RBP: 00007f627db3e090 R08: 0000000000000000 R09: 0000000000000000
[ 1017.634076][T15543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1017.642088][T15543] R13: 00007f627ce16038 R14: 00007f627ce15fa0 R15: 00007fffde7a6e58
[ 1017.650111][T15543]  </TASK>
[ 1017.999142][T15553] netlink: 126588 bytes leftover after parsing attributes in process `syz.5.3621'.
[ 1018.481675][T15574] netlink: 172 bytes leftover after parsing attributes in process `syz.4.3627'.
[ 1019.369226][T15584] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3631'.
[ 1019.407125][T15584] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3631'.
[ 1020.436840][ T4323] Bluetooth: hci1: command 0x0406 tx timeout
[ 1020.801671][T15631] FAULT_INJECTION: forcing a failure.
[ 1020.801671][T15631] name failslab, interval 1, probability 0, space 0, times 0
[ 1020.917314][T15631] CPU: 0 PID: 15631 Comm: syz.6.3645 Not tainted syzkaller #0
[ 1020.924868][T15631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1020.935042][T15631] Call Trace:
[ 1020.938373][T15631]  <TASK>
[ 1020.941336][T15631]  dump_stack_lvl+0x188/0x24e
[ 1020.946073][T15631]  ? show_regs_print_info+0x12/0x12
[ 1020.951326][T15631]  ? load_image+0x400/0x400
[ 1020.955886][T15631]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[ 1020.961929][T15631]  should_fail_ex+0x399/0x4d0
[ 1020.966673][T15631]  should_failslab+0x5/0x20
[ 1020.971218][T15631]  slab_pre_alloc_hook+0x59/0x310
[ 1020.976276][T15631]  kmem_cache_alloc+0x56/0x2f0
[ 1020.981059][T15631]  ? __build_skb+0x2a/0x3c0
[ 1020.985594][T15631]  __build_skb+0x2a/0x3c0
[ 1020.989951][T15631]  build_skb+0x1e/0x230
[ 1020.994136][T15631]  bpf_prog_test_run_skb+0x37e/0x12a0
[ 1020.999532][T15631]  ? __fget_files+0x28/0x4b0
[ 1021.004375][T15631]  ? __fget_files+0x43d/0x4b0
[ 1021.009087][T15631]  ? cpu_online+0xa0/0xa0
[ 1021.013442][T15631]  bpf_prog_test_run+0x31e/0x390
[ 1021.018417][T15631]  __sys_bpf+0x62b/0x780
[ 1021.022692][T15631]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1021.028098][T15631]  ? lock_chain_count+0x20/0x20
[ 1021.032991][T15631]  __x64_sys_bpf+0x78/0x90
[ 1021.037436][T15631]  do_syscall_64+0x4c/0xa0
[ 1021.041895][T15631]  ? clear_bhb_loop+0x60/0xb0
[ 1021.046597][T15631]  ? clear_bhb_loop+0x60/0xb0
[ 1021.051299][T15631]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1021.057225][T15631] RIP: 0033:0x7f627cb9acb9
[ 1021.061673][T15631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1021.081394][T15631] RSP: 002b:00007f627db3e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1021.089826][T15631] RAX: ffffffffffffffda RBX: 00007f627ce15fa0 RCX: 00007f627cb9acb9
[ 1021.097814][T15631] RDX: 0000000000000050 RSI: 0000200000000780 RDI: 000000000000000a
[ 1021.105812][T15631] RBP: 00007f627db3e090 R08: 0000000000000000 R09: 0000000000000000
[ 1021.113810][T15631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1021.121810][T15631] R13: 00007f627ce16038 R14: 00007f627ce15fa0 R15: 00007fffde7a6e58
[ 1021.129823][T15631]  </TASK>
[ 1022.110356][T15659] validate_nla: 21 callbacks suppressed
[ 1022.110373][T15659] netlink: 'syz.5.3655': attribute type 9 has an invalid length.
[ 1022.158861][T15659] __nla_validate_parse: 1 callbacks suppressed
[ 1022.158876][T15659] netlink: 126588 bytes leftover after parsing attributes in process `syz.5.3655'.
[ 1025.228467][T15680] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.3661'.
[ 1025.248293][T15680] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[ 1025.361160][T15684] netlink: 'syz.4.3658': attribute type 10 has an invalid length.
[ 1025.444214][T15684] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3658'.
[ 1025.571911][T15684] device bond0 entered promiscuous mode
[ 1025.658642][T15684] device bond_slave_0 entered promiscuous mode
[ 1025.750481][T15684] device bond_slave_1 entered promiscuous mode
[ 1025.815305][T15684] bridge0: port 4(bond0) entered blocking state
[ 1025.901019][T15684] bridge0: port 4(bond0) entered disabled state
[ 1026.028231][T15684] bridge0: port 4(bond0) entered blocking state
[ 1026.034651][T15684] bridge0: port 4(bond0) entered forwarding state
[ 1026.089038][T15682] netlink: 'syz.1.3662': attribute type 19 has an invalid length.
[ 1026.123607][T15682] netlink: 172 bytes leftover after parsing attributes in process `syz.1.3662'.
[ 1026.446629][T15696] netlink: 'syz.6.3666': attribute type 9 has an invalid length.
[ 1026.454443][T15696] netlink: 126588 bytes leftover after parsing attributes in process `syz.6.3666'.
[ 1028.002188][T15734] netlink: 'syz.6.3680': attribute type 9 has an invalid length.
[ 1028.044815][T15734] netlink: 126588 bytes leftover after parsing attributes in process `syz.6.3680'.
[ 1029.213027][T15776] netlink: 'syz.1.3691': attribute type 29 has an invalid length.
[ 1029.277516][T15776] netlink: 'syz.1.3691': attribute type 29 has an invalid length.
[ 1029.314124][T15779] netlink: 'syz.1.3691': attribute type 29 has an invalid length.
[ 1029.358475][T15776] netlink: 'syz.1.3691': attribute type 29 has an invalid length.
[ 1029.394822][T15776] netlink: 'syz.1.3691': attribute type 29 has an invalid length.
[ 1029.503446][T15783] netlink: 'syz.4.3694': attribute type 1 has an invalid length.
[ 1029.537595][T15783] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.3694'.
[ 1029.633731][T15787] netlink: 'syz.1.3696': attribute type 9 has an invalid length.
[ 1029.671914][T15787] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.3696'.
[ 1030.216137][T15808] netlink: 'syz.4.3706': attribute type 29 has an invalid length.
[ 1030.255892][T15808] netlink: 'syz.4.3706': attribute type 29 has an invalid length.
[ 1030.288007][T15814] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.3703'.
[ 1030.643721][T15825] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3710'.
[ 1030.846208][T15829] netlink: 126588 bytes leftover after parsing attributes in process `syz.5.3712'.
[ 1030.995155][T15835] FAULT_INJECTION: forcing a failure.
[ 1030.995155][T15835] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1031.031051][T15835] CPU: 1 PID: 15835 Comm: syz.1.3715 Not tainted syzkaller #0
[ 1031.038603][T15835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1031.048726][T15835] Call Trace:
[ 1031.052039][T15835]  <TASK>
[ 1031.055009][T15835]  dump_stack_lvl+0x188/0x24e
[ 1031.059739][T15835]  ? show_regs_print_info+0x12/0x12
[ 1031.064976][T15835]  ? load_image+0x400/0x400
[ 1031.069515][T15835]  ? __lock_acquire+0x7d10/0x7d10
[ 1031.074581][T15835]  ? snprintf+0xe5/0x140
[ 1031.078862][T15835]  should_fail_ex+0x399/0x4d0
[ 1031.083603][T15835]  _copy_to_user+0x2c/0x130
[ 1031.088155][T15835]  simple_read_from_buffer+0xe3/0x150
[ 1031.093582][T15835]  proc_fail_nth_read+0x1a6/0x220
[ 1031.098657][T15835]  ? proc_fault_inject_write+0x310/0x310
[ 1031.104346][T15835]  ? fsnotify_perm+0x248/0x550
[ 1031.109164][T15835]  ? proc_fault_inject_write+0x310/0x310
[ 1031.114832][T15835]  vfs_read+0x2de/0xa00
[ 1031.119035][T15835]  ? kernel_read+0x1e0/0x1e0
[ 1031.123674][T15835]  ? __fget_files+0x28/0x4b0
[ 1031.128379][T15835]  ? __fget_files+0x28/0x4b0
[ 1031.133054][T15835]  ? __fget_files+0x43d/0x4b0
[ 1031.137782][T15835]  ? __fdget_pos+0x2ae/0x360
[ 1031.142427][T15835]  ? ksys_read+0x71/0x250
[ 1031.146798][T15835]  ksys_read+0x14c/0x250
[ 1031.151085][T15835]  ? vfs_write+0xa30/0xa30
[ 1031.155565][T15835]  ? lockdep_hardirqs_on+0x94/0x140
[ 1031.160824][T15835]  do_syscall_64+0x4c/0xa0
[ 1031.165313][T15835]  ? clear_bhb_loop+0x60/0xb0
[ 1031.170063][T15835]  ? clear_bhb_loop+0x60/0xb0
[ 1031.174823][T15835]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1031.180752][T15835] RIP: 0033:0x7f350435b58e
[ 1031.185205][T15835] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1031.204856][T15835] RSP: 002b:00007f35051f0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1031.213313][T15835] RAX: ffffffffffffffda RBX: 00007f35051f16c0 RCX: 00007f350435b58e
[ 1031.221321][T15835] RDX: 000000000000000f RSI: 00007f35051f10a0 RDI: 0000000000000007
[ 1031.229342][T15835] RBP: 00007f35051f1090 R08: 0000000000000000 R09: 0000000000000000
[ 1031.237361][T15835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1031.245405][T15835] R13: 00007f3504616038 R14: 00007f3504615fa0 R15: 00007fffa0b6d178
[ 1031.253436][T15835]  </TASK>
[ 1032.116370][T15867] netlink: 126588 bytes leftover after parsing attributes in process `syz.6.3727'.
[ 1032.790226][T15882] netlink: 9275 bytes leftover after parsing attributes in process `syz.5.3733'.
[ 1033.237276][T15892] validate_nla: 14 callbacks suppressed
[ 1033.237294][T15892] netlink: 'syz.3.3737': attribute type 9 has an invalid length.
[ 1033.263137][T15892] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.3737'.
[ 1033.407656][T15897] netlink: 12927 bytes leftover after parsing attributes in process `syz.6.3739'.
[ 1033.465035][T15897] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1033.492132][T15897] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1033.519845][T15898] netlink: 'syz.6.3739': attribute type 3 has an invalid length.
[ 1033.554213][T15898] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3739'.
[ 1033.620655][T15897] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1033.649937][T15897] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1033.949469][T15902] netlink: 'syz.1.3741': attribute type 9 has an invalid length.
[ 1033.977199][T15902] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.3741'.
[ 1034.801128][   T75] ------------[ cut here ]------------
[ 1034.807261][   T75] intf 08:02:11:00:00:01 [link=0]: bad STA 06:00:00:00:00:37 bandwidth 20 MHz (0) > channel config 1 MHz (8)
[ 1034.894524][   T75] WARNING: CPU: 1 PID: 75 at drivers/net/wireless/mac80211_hwsim.c:2438 mac80211_hwsim_sta_rc_update+0x541/0x6e0
[ 1034.906738][   T75] Modules linked in:
[ 1034.910695][   T75] CPU: 1 PID: 75 Comm: kworker/u4:4 Not tainted syzkaller #0
[ 1034.918180][   T75] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1034.928378][   T75] Workqueue: phy26 ieee80211_iface_work
[ 1034.933999][   T75] RIP: 0010:mac80211_hwsim_sta_rc_update+0x541/0x6e0
[ 1034.940826][   T75] Code: e8 c4 0c 00 00 48 c7 c7 80 00 28 8b 48 8b 74 24 28 89 ea 48 8b 4c 24 10 41 89 d8 45 89 e1 41 57 50 e8 f3 1c 52 fb 48 83 c4 10 <0f> 0b e9 8b fe ff ff e8 93 aa 86 fb 0f 0b e9 7f fe ff ff e8 87 aa
[ 1034.960692][   T75] RSP: 0018:ffffc900015b77f8 EFLAGS: 00010282
[ 1034.966887][   T75] RAX: 062467f0c69f3e00 RBX: 0000000000000014 RCX: ffff8880185c1dc0
[ 1034.974918][   T75] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
[ 1034.982997][   T75] RBP: 0000000000000000 R08: ffffc900015b7467 R09: 1ffff920002b6e8c
[ 1034.991154][   T75] R10: dffffc0000000000 R11: fffff520002b6e8d R12: 0000000000000000
[ 1034.999260][   T75] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000008
[ 1035.007315][   T75] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[ 1035.016295][   T75] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1035.022988][   T75] CR2: 00007f627d9456b8 CR3: 0000000024952000 CR4: 00000000003506e0
[ 1035.031054][   T75] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000000000000000
[ 1035.039116][   T75] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[ 1035.047196][   T75] Call Trace:
[ 1035.050529][   T75]  <TASK>
[ 1035.053508][   T75]  ? mac80211_hwsim_sta_rc_update+0x53/0x6e0
[ 1035.059615][   T75]  mac80211_hwsim_sta_add+0x92/0x280
[ 1035.064959][   T75]  ? mac80211_hwsim_sw_scan_complete+0xd0/0xd0
[ 1035.071212][   T75]  drv_sta_state+0x62a/0x1280
[ 1035.075970][   T75]  sta_info_insert_rcu+0xc1e/0x1550
[ 1035.081296][   T75]  ? sta_info_insert_rcu+0x1b0/0x1550
[ 1035.086799][   T75]  ieee80211_ibss_finish_sta+0x286/0x360
[ 1035.092494][   T75]  ? ieee80211_ibss_work+0x10f0/0x10f0
[ 1035.098085][   T75]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[ 1035.104142][   T75]  ieee80211_ibss_work+0x23c/0x10f0
[ 1035.109451][   T75]  ? lockdep_hardirqs_on+0x94/0x140
[ 1035.114716][   T75]  ? kcov_remote_stop+0x174/0x6e0
[ 1035.119849][   T75]  ? ieee80211_ibss_rx_queued_mgmt+0x2cd0/0x2cd0
[ 1035.126261][   T75]  ? skb_dequeue+0x120/0x150
[ 1035.130978][   T75]  ? ieee80211_iface_work+0x97c/0xc80
[ 1035.136444][   T75]  ? ieee80211_iface_work+0xb98/0xc80
[ 1035.141870][   T75]  ? _raw_spin_unlock_irq+0x1f/0x40
[ 1035.147169][   T75]  ? process_one_work+0x7b0/0x1160
[ 1035.152337][   T75]  process_one_work+0x8a2/0x1160
[ 1035.157565][   T75]  ? worker_detach_from_pool+0x240/0x240
[ 1035.163251][   T75]  ? _raw_spin_lock_irq+0x86/0xf0
[ 1035.168414][   T75]  ? _raw_spin_lock_irq+0xb7/0xf0
[ 1035.173496][   T75]  ? _raw_spin_lock_irqsave+0x100/0x100
[ 1035.179161][   T75]  ? kthread_data+0x4b/0xc0
[ 1035.183735][   T75]  worker_thread+0xaa2/0x1270
[ 1035.188531][   T75]  ? __kthread_parkme+0x162/0x1c0
[ 1035.193658][   T75]  kthread+0x29d/0x330
[ 1035.197868][   T75]  ? worker_clr_flags+0x1a0/0x1a0
[ 1035.202950][   T75]  ? kthread_blkcg+0xd0/0xd0
[ 1035.207648][   T75]  ret_from_fork+0x1f/0x30
[ 1035.212167][   T75]  </TASK>
[ 1035.215244][   T75] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1035.223242][   T75] CPU: 1 PID: 75 Comm: kworker/u4:4 Not tainted syzkaller #0
[ 1035.230659][   T75] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1035.240753][   T75] Workqueue: phy26 ieee80211_iface_work
[ 1035.246365][   T75] Call Trace:
[ 1035.249681][   T75]  <TASK>
[ 1035.252644][   T75]  dump_stack_lvl+0x188/0x24e
[ 1035.257363][   T75]  ? memcpy+0x3c/0x60
[ 1035.261382][   T75]  ? show_regs_print_info+0x12/0x12
[ 1035.266627][   T75]  ? load_image+0x400/0x400
[ 1035.271198][   T75]  panic+0x2e5/0x730
[ 1035.275136][   T75]  ? bpf_jit_dump+0xd0/0xd0
[ 1035.279694][   T75]  ? ret_from_fork+0x1f/0x30
[ 1035.284318][   T75]  __warn+0x2f8/0x4f0
[ 1035.288344][   T75]  ? mac80211_hwsim_sta_rc_update+0x541/0x6e0
[ 1035.294443][   T75]  ? mac80211_hwsim_sta_rc_update+0x541/0x6e0
[ 1035.300534][   T75]  report_bug+0x2ba/0x4f0
[ 1035.304901][   T75]  ? mac80211_hwsim_sta_rc_update+0x541/0x6e0
[ 1035.311103][   T75]  handle_bug+0x3a/0x70
[ 1035.315301][   T75]  exc_invalid_op+0x16/0x40
[ 1035.319921][   T75]  asm_exc_invalid_op+0x16/0x20
[ 1035.324883][   T75] RIP: 0010:mac80211_hwsim_sta_rc_update+0x541/0x6e0
[ 1035.331587][   T75] Code: e8 c4 0c 00 00 48 c7 c7 80 00 28 8b 48 8b 74 24 28 89 ea 48 8b 4c 24 10 41 89 d8 45 89 e1 41 57 50 e8 f3 1c 52 fb 48 83 c4 10 <0f> 0b e9 8b fe ff ff e8 93 aa 86 fb 0f 0b e9 7f fe ff ff e8 87 aa
[ 1035.351304][   T75] RSP: 0018:ffffc900015b77f8 EFLAGS: 00010282
[ 1035.357406][   T75] RAX: 062467f0c69f3e00 RBX: 0000000000000014 RCX: ffff8880185c1dc0
[ 1035.365399][   T75] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
[ 1035.373389][   T75] RBP: 0000000000000000 R08: ffffc900015b7467 R09: 1ffff920002b6e8c
[ 1035.381396][   T75] R10: dffffc0000000000 R11: fffff520002b6e8d R12: 0000000000000000
[ 1035.389384][   T75] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000008
[ 1035.397392][   T75]  ? mac80211_hwsim_sta_rc_update+0x53/0x6e0
[ 1035.403410][   T75]  mac80211_hwsim_sta_add+0x92/0x280
[ 1035.408743][   T75]  ? mac80211_hwsim_sw_scan_complete+0xd0/0xd0
[ 1035.414945][   T75]  drv_sta_state+0x62a/0x1280
[ 1035.419662][   T75]  sta_info_insert_rcu+0xc1e/0x1550
[ 1035.424891][   T75]  ? sta_info_insert_rcu+0x1b0/0x1550
[ 1035.430297][   T75]  ieee80211_ibss_finish_sta+0x286/0x360
[ 1035.435961][   T75]  ? ieee80211_ibss_work+0x10f0/0x10f0
[ 1035.441440][   T75]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[ 1035.447457][   T75]  ieee80211_ibss_work+0x23c/0x10f0
[ 1035.452684][   T75]  ? lockdep_hardirqs_on+0x94/0x140
[ 1035.457917][   T75]  ? kcov_remote_stop+0x174/0x6e0
[ 1035.462978][   T75]  ? ieee80211_ibss_rx_queued_mgmt+0x2cd0/0x2cd0
[ 1035.469337][   T75]  ? skb_dequeue+0x120/0x150
[ 1035.473953][   T75]  ? ieee80211_iface_work+0x97c/0xc80
[ 1035.479373][   T75]  ? ieee80211_iface_work+0xb98/0xc80
[ 1035.484776][   T75]  ? _raw_spin_unlock_irq+0x1f/0x40
[ 1035.490011][   T75]  ? process_one_work+0x7b0/0x1160
[ 1035.495146][   T75]  process_one_work+0x8a2/0x1160
[ 1035.500120][   T75]  ? worker_detach_from_pool+0x240/0x240
[ 1035.505777][   T75]  ? _raw_spin_lock_irq+0x86/0xf0
[ 1035.510839][   T75]  ? _raw_spin_lock_irq+0xb7/0xf0
[ 1035.515896][   T75]  ? _raw_spin_lock_irqsave+0x100/0x100
[ 1035.521477][   T75]  ? kthread_data+0x4b/0xc0
[ 1035.526014][   T75]  worker_thread+0xaa2/0x1270
[ 1035.530728][   T75]  ? __kthread_parkme+0x162/0x1c0
[ 1035.535787][   T75]  kthread+0x29d/0x330
[ 1035.539886][   T75]  ? worker_clr_flags+0x1a0/0x1a0
[ 1035.544960][   T75]  ? kthread_blkcg+0xd0/0xd0
[ 1035.549591][   T75]  ret_from_fork+0x1f/0x30
[ 1035.554050][   T75]  </TASK>
[ 1035.557687][   T75] Kernel Offset: disabled
[ 1035.562129][   T75] Rebooting in 86400 seconds..