last executing test programs:

17m48.996485805s ago: executing program 0 (id=45):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x2, 0x0, 0x10001, 0x4855c, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x2, 0x9}, 0x50)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB='\v\x00'], 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001780)={r1, 0xe0, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, &(0x7f00000015c0), ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001600)=[0x0], &(0x7f0000001640), 0x0, 0xa7, 0x0, 0x0, 0x10, &(0x7f00000016c0), &(0x7f0000001700), 0x8, 0xe6, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001ac0)={0x6, 0x1c, &(0x7f0000001380)=@framed={{0x18, 0x0, 0x0, 0x0, 0xadef, 0x0, 0x0, 0x0, 0x3ff}, [@printk={@i}, @tail_call, @call={0x85, 0x0, 0x0, 0xd2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe74}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x5}]}, &(0x7f0000001480)='syzkaller\x00', 0xe, 0xd7, &(0x7f00000014c0)=""/215, 0x41100, 0x3, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000019c0)={0x2, 0x2, 0x10000, 0x4}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000001a00), &(0x7f0000001a40)=[{0x4, 0x5, 0xb, 0x9}, {0x4, 0x3, 0x2, 0xb}], 0x10, 0x6}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x8, 0xffffffff, 0x81, 0x2404, r0, 0x3ff, '\x00', r3, 0xffffffffffffffff, 0x1, 0x3, 0x3, 0x1}, 0x27)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r4}, &(0x7f00000002c0), &(0x7f0000000300)=r5}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@ifindex=r3, 0x3, 0x0, 0x10001, &(0x7f0000000080)=[0x0], 0x1, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0]}, 0x40)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x0, 0x8, 0x9b, 0x0, 0x0, 0x8, 0x4}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x86, 0xcb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1c, 0x0, 0x40000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17m47.437731882s ago: executing program 0 (id=49):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x5, r0}, 0x38)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101})
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x14}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xc0aa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r2)
r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r7}, 0x10)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
openat$tun(0xffffffffffffff9c, 0x0, 0x8081, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000080))
write$cgroup_devices(r1, &(0x7f0000000100)=ANY=[], 0xffdd)

17m39.94527635s ago: executing program 0 (id=64):
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x676001, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x68001, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1})
ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x5)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000001a00000a8500000007000000c50000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x10, 0x0, 0x6}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2, 0x2, 0x1, &(0x7f0000002c40)={<r4=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
close(0xffffffffffffffff)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYRES16=r4], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
syz_clone(0xd024100, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10)
sendmsg$unix(r1, &(0x7f0000000640)={&(0x7f00000005c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0}, 0x4000040)

17m35.63592196s ago: executing program 0 (id=68):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000003"], 0x48)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000640)={&(0x7f0000000180)="bd76cb6f8b", 0x0, 0x0, 0x0, 0x6, r0}, 0x38)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140))
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000fff07006706000002000000070600000ee60000bf150000000000003d650000000000006507000002000000070700004c0000001f750000000000006154000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0))
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0f00001c040008000400"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="050000000100000036e2e2857e08000000010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x83, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x8, 0x0, 0x4, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20)

17m35.184826087s ago: executing program 0 (id=71):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x3, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xd, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f008", 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
close(r3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0))
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x30)

17m32.18344024s ago: executing program 0 (id=73):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x0, 0x401}, 0x48)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r4=>0x0, <r5=>0x0})
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r3)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x18)
setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000000)=r7, 0x4)
close(r4)
setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
close(r5)
perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0xc8, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0)

17m16.661693831s ago: executing program 32 (id=73):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x0, 0x401}, 0x48)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r4=>0x0, <r5=>0x0})
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r3)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x18)
setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000000)=r7, 0x4)
close(r4)
setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
close(r5)
perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0xc8, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0)

16m29.296546908s ago: executing program 1 (id=274):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
mkdir(0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYRES32], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_clone(0x43001000, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1200000004000000080000000280"], 0x50)
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r1, 0x0, 0x0}, 0x20)

16m29.279566239s ago: executing program 3 (id=275):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRESOCT=r0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="460a00000000000063113400000000006037090003fe2c38e00000000000"], &(0x7f00000003c0)='syzkaller\x00', 0x100000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x98040, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x1000, 0x0, &(0x7f0000000680)=""/4096, 0x6, 0x0, 0x0, 0xe9, &(0x7f0000000140), &(0x7f0000001680)="e01b20124e874aa6b60879e40d28511fc74e7ca215424c97793fcef77fe7fc59fe55f1c7c0f9db55d3132b4a4f2c52daaa8607d0a8f8aa2b25fd3c03238008c3310290f9dcf52c0e6bb61f388f7bca369f263d1f5eebd92407a0faedf3e41b52475ef854d0ecfb3933b51b26a4adb8c0e40d522d091366d568885e3b1b83fbaaec47cd672b64cb0ef94902ed3ed259872af7c50fd8876221ef203b0c058c95b9ddd555f3a7f045894f33ff643e34a417bb2cbfa8d8299661af396ca698066f6996383bbc6c217a964d87757f1a9b45e282b77f55f3d271f9d106740555c9cabe2b77fc01c080503945", 0x4, 0x0, 0x80000001}, 0x50)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000}, 0x0, 0x0, 0x2, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_subtree(r3, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="2b6370752047714f2845c87fb0e60b74e6a66cbe20bb7c9807d2f0907bd122f6aa3547725cf71d2296bac6ee1ef5cc88b8be8a7ff396ae13646ba7842d24e7bea557a581386b6664d62248666dfbabc019b5a77f7d7c79f9466fc3de34e665b2643c6e8a7eb2"], 0x5)
write$cgroup_subtree(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="2d63707520cff4f40300167eeb70331599c5223e7529f8e0bae5a26ad4300194808a04a1be5e4614"], 0x5)
r5 = openat$cgroup_type(r2, &(0x7f0000000300), 0x2, 0x0)
write$cgroup_type(r5, &(0x7f0000000080), 0x9)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000280)={'wg2\x00'})
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f00000002c0)={'wg2\x00', @multicast})

16m28.713798485s ago: executing program 3 (id=278):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940))
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400"], 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local})

16m28.428664919s ago: executing program 1 (id=279):
socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$tipc(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r3}, 0x10)
close(r0)

16m28.187242118s ago: executing program 1 (id=280):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b0000000500000005"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880), 0x10}, 0x94)
close(0xffffffffffffffff)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000e000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000000ffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r4}, 0x10)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/mnt\x00')
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000640)={0x2, <r6=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1b, 0x4, &(0x7f00000003c0)=@raw=[@btf_id={0x18, 0xa, 0x3, 0x0, 0x2}, @map_val={0x18, 0x7, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x96}], &(0x7f0000000400)='syzkaller\x00', 0x8000, 0x1000, &(0x7f0000001d40)=""/4096, 0x41000, 0x25, '\x00', 0x0, @fallback=0x7f, r5, 0x8, &(0x7f00000005c0)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x1, 0x7f, 0x3}, 0x10, r6, r3, 0x0, &(0x7f0000000680)=[r0], 0x0, 0x10, 0x2}, 0x94)
unlink(0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socketpair(0x1a, 0x3, 0x5, &(0x7f0000000180))
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000380)=@o_path={&(0x7f00000001c0)='./file0\x00', r1, 0x4000, r5}, 0x18)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x40047459, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000040)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

16m27.880739363s ago: executing program 1 (id=281):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$cgroup_pid(r0, &(0x7f0000000000), 0x2a979d)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10)
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)

16m27.880409763s ago: executing program 3 (id=282):
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="14000000000000000100"], 0x18}, 0x8810)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48)
close(r0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000200000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
close(r1)

16m27.696095938s ago: executing program 3 (id=284):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18)
bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=ANY=[], 0x48)
r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003480)={0x11, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="17010000a4fc0a000500feff"], &(0x7f0000000000)='GPL\x00', 0x6, 0xf4240, &(0x7f0000003300)=""/137, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0x1000000}, 0x80)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r3, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600), &(0x7f0000000440), 0x0, 0xe1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x8, 0xc0, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair(0x0, 0x0, 0x0, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f00000007c0), 0x8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080))
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)

16m26.5651727s ago: executing program 3 (id=287):
close(0xffffffffffffffff)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x40047451, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, 0x0, &(0x7f0000000040)}, 0x20)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080))
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0)
close(r4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0))
ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'})
ioctl$SIOCSIFHWADDR(r4, 0x8943, 0x0)

16m26.401073583s ago: executing program 1 (id=290):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x17)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, @perf_config_ext, 0x0, 0x4}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0x2}], 0x1}, 0x20000801)
recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b00)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000000180)=""/89, 0x0, 0x59, 0x0, 0x2}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

16m23.787718825s ago: executing program 3 (id=292):
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}, 0x801}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.throttle.io_serviced\x00', 0x26e1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_clone(0x40b04000, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000410000005000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
mkdir(0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48)
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
write$cgroup_int(r0, &(0x7f0000000180)=0x6, 0x12)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x50)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r4}, 0x10)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'lo\x00'})
socketpair(0x1, 0x1, 0x1, &(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x12, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@alu={0x4, 0x1, 0x9, 0xa, 0x8, 0x0, 0x4}, @map_fd={0x18, 0x1, 0x1, 0x0, r3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='syzkaller\x00', 0x7, 0x23, &(0x7f0000000580)=""/35, 0x41000, 0x7, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a40)={0x2, 0x1, 0x1, 0x371e}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8922, &(0x7f0000000080))

16m23.786487165s ago: executing program 1 (id=293):
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x600000000000000, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
sendmsg$inet(r1, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x0)
close(r1)
sendmsg$inet(r2, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0), 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
syz_clone(0x44044000, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/13], 0x48)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000180)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r6 = openat$cgroup_int(r5, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0)
write$cgroup_int(r6, &(0x7f0000000400)=0x3, 0x12)

16m8.662491884s ago: executing program 33 (id=293):
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x600000000000000, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
sendmsg$inet(r1, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x0)
close(r1)
sendmsg$inet(r2, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0), 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
syz_clone(0x44044000, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/13], 0x48)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000180)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r6 = openat$cgroup_int(r5, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0)
write$cgroup_int(r6, &(0x7f0000000400)=0x3, 0x12)

16m8.607893038s ago: executing program 34 (id=292):
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}, 0x801}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.throttle.io_serviced\x00', 0x26e1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_clone(0x40b04000, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000410000005000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
mkdir(0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48)
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
write$cgroup_int(r0, &(0x7f0000000180)=0x6, 0x12)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x50)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r4}, 0x10)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'lo\x00'})
socketpair(0x1, 0x1, 0x1, &(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x12, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@alu={0x4, 0x1, 0x9, 0xa, 0x8, 0x0, 0x4}, @map_fd={0x18, 0x1, 0x1, 0x0, r3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='syzkaller\x00', 0x7, 0x23, &(0x7f0000000580)=""/35, 0x41000, 0x7, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a40)={0x2, 0x1, 0x1, 0x371e}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8922, &(0x7f0000000080))

12m35.009013303s ago: executing program 4 (id=1686):
r0 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)="1c0000006d0081044e81f782db1f4cb9041c1d08", 0x14}, {&(0x7f0000000180)="37052b9fcfb03a", 0x7}], 0x2}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0xd}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000080)="27050200160014000600002f86dd", 0x5ea}], 0x1}, 0x0)

12m34.380605874s ago: executing program 4 (id=1687):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r3, 0x29, 0x4c, &(0x7f00000000c0), 0x4)

12m33.998287405s ago: executing program 4 (id=1695):
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90024, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x6}, 0x8224, 0x2, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x400b, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000940)={{}, 0x0, 0x0}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0x1a, 0x9, 0x0, 0x0, 0x2000, 0xffffffffffffffff, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x50)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
gettid()
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

12m33.723929207s ago: executing program 4 (id=1700):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}, 0x0)
ioctl$TUNGETVNETLE(r0, 0x4008744b, &(0x7f0000000180))

12m33.511048815s ago: executing program 4 (id=1703):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000000001000000000000", 0x20}], 0x1}, 0x40000)

12m33.307230181s ago: executing program 4 (id=1706):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x1, 0x0, 0xd66}, 0x0)
sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="fd6239", 0x3}], 0x1, 0x0, 0x0, 0x20000000}, 0x80)
close(0x4)
bpf$ITER_CREATE(0xb, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
syz_open_procfs$namespace(0x0, &(0x7f0000001000)='ns/pid\x00')
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000020300"/20, @ANYRES32=0x0, @ANYBLOB], 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000180000000000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB='\x00'/17], 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r2}, 0x38)

12m27.65818055s ago: executing program 5 (id=1778):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0xb, &(0x7f0000000380)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0xc, 0xe4, &(0x7f00000000c0)=""/228, 0x40f00, 0x23, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x55}, 0x23)

12m27.514631722s ago: executing program 5 (id=1779):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r2)
r3 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004081)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20)

12m27.013888952s ago: executing program 5 (id=1781):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x88e}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0x15, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000140)={r2})

12m26.708391957s ago: executing program 5 (id=1783):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000002c0)="140000001d000b63d25a80648c25", 0xe}, {&(0x7f0000000580)="3f192725e7", 0x5}], 0x2}, 0x0)

12m26.474458586s ago: executing program 5 (id=1785):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b9040a1d080006007c09e8fe55a10a0015400100142603600e1208001e00000004010400", 0x32}], 0x1}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33)

12m25.801976081s ago: executing program 5 (id=1791):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={0x0, 0xf}, 0x1000, 0x4, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff)
close(r1)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x27, 0x3, 0x0, &(0x7f0000000180)="000500", 0x0, 0x405, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)
recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0}, 0x1c0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYRES8=r1], 0x9a)

12m25.380218935s ago: executing program 35 (id=1791):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={0x0, 0xf}, 0x1000, 0x4, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff)
close(r1)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x27, 0x3, 0x0, &(0x7f0000000180)="000500", 0x0, 0x405, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)
recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0}, 0x1c0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYRES8=r1], 0x9a)

12m18.235145755s ago: executing program 36 (id=1706):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x1, 0x0, 0xd66}, 0x0)
sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="fd6239", 0x3}], 0x1, 0x0, 0x0, 0x20000000}, 0x80)
close(0x4)
bpf$ITER_CREATE(0xb, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
syz_open_procfs$namespace(0x0, &(0x7f0000001000)='ns/pid\x00')
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000020300"/20, @ANYRES32=0x0, @ANYBLOB], 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000180000000000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB='\x00'/17], 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r2}, 0x38)

9m8.100962147s ago: executing program 8 (id=3161):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14fd88a8", 0x0, 0x800, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50)

9m7.764191024s ago: executing program 8 (id=3164):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000003"], 0x48)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000640)={&(0x7f0000000180)="bd76cb6f8b", 0x0, 0x0, 0x0, 0x6, r0}, 0x38)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000fff07006706000002000000070600000ee60000bf150000000000003d650000000000006507000002000000070700004c0000001f750000000000006154000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0f00001c040008000400"/20, @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="050000000100000036e2e2857e08000000010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x83, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x8, 0x0, 0x4, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
r11 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r12}, &(0x7f0000000180), &(0x7f00000001c0)=r11}, 0x20)
r13 = bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r13}, 0x10)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
recvmsg(r9, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x152610}], 0x1, 0x0, 0x64}, 0x1f00)
sendmsg$tipc(r10, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r5, 0x5}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4, <r14=>0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20)
r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x10, 0x1a, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, [@generic={0x8e, 0xc, 0xe, 0x800, 0x9}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80}}, @ldst={0x2, 0x2, 0x6, 0x5, 0x0, 0x1, 0xfffffffffffffffc}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x101}}, @ldst={0x3, 0x0, 0x7, 0xb, 0x9, 0x1, 0x4}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000a00)=""/4096, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x3, 0xf, 0x6, 0x9239}, 0x10, 0xffffffffffffffff, r7, 0x2, &(0x7f0000000580)=[r6, r14, r0], &(0x7f00000005c0)=[{0x1, 0x4, 0xc}, {0x5, 0x3, 0x10, 0x2}], 0x10, 0x7}, 0x94)
setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000680)=r15, 0x4)
sendmsg$inet(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4040086)
sendmsg$tipc(r1, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x10}, 0x50)

9m6.70230008s ago: executing program 8 (id=3169):
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x16, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_bp={0x0, 0x6}, 0x100000, 0xca, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000001000)='ns/pid_for_children\x00')
syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/uts\x00')
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85feff0fc9"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x1}, 0x94)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r3], 0x12)

9m5.550863184s ago: executing program 8 (id=3177):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002e80)=[{&(0x7f0000002f80)="02db60dafc000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70300000004000085"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r1}, 0x18)
r2 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f00000005c0)=r2, 0x12)
syz_open_procfs$namespace(r2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400), 0x620401, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[@ANYRES8=r4], 0x12)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0f0000000600000003000000ffffff7f002c0200", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="05000000030000000000000000000000000000002000000000000000"], 0x50)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000840)=[{0xfdc0, 0x0, 0x3, 0xff7ff038}, {0x2, 0x0, 0x0, 0x8}]})
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8941, &(0x7f0000000080))
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000fff07006706000002000000270600000ee60000bf2500000000000073350000000000006507000002001000070700004c0000001f75000000000000bf54000000000000070400004400f9f0ad32010000000000950000000000000005000000000000009500000000000000debfa255e44e4cc39f211fb04d7f202e6a53bd86bde99b679b4e6d24b8125690361eec3b181dcfd7c2fb2d1f8975b579a085bee32d414c1f3ab987a9de6385ae8021f4ca33b9b35fe817e98beb9cefe7f40fd6f0ea3affbdaaa897c70fb01d270a7b00d36fb5ab8fa92ac014a106e3e4decc68652503ca54fcef437d96c8a05d59ddcc8abf09cd77e93e940207b03189c5d4661e43df6f1f036c8d85a2ad7615a021f8cbe507ef94fb9f33315366e9ae080000001b532226b63b460d68808a67529637bf7f6731ad0cf1718bae3c8b9d2f89050cb496fe791381af6fab290900000000000000d640a5fde1f7d5eaa97cd25523fbd77300000000000000d67559b0c848aa3e7091f33e2dfc351e903ce85488fb25691249545bcf877011847df184bae6d3f5d0c016ec7d581d5b2fcb494d8c2df1929398ec5c3675ed16c27fff46a695eed7f50c531a612d5677b5e949ee4f16d10e41074702c4e89ee401ec2ec65f38f64189f1fa2cc0a42add3119025764759de2f093c26fe51d2f7635bb06bdf0b97d4a96cb0813e084232421c6026629fbf4c81954d11e154659b54fcf3468577295c700000000000000000000000000000000fe31e1e02dd54ac3c7af2b3d76a63b79ca6f9a20b26761254aee1352ad08118a58802cc8f107852b8f5382f0871255ce5c0b31e39637850330f520d03ed2aa076efa8401613537585d45bd27454beccdc32645cfe67921df3f2bbf88cacc83f82e916f0ee19ad20cdf5ce3b2ee147f78c1caf8b8024bac9809015b2210d7c2471dfd73f6eb"], &(0x7f0000000100)='GPL\x00'}, 0x48)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x5, 0xc, &(0x7f0000000a40)=ANY=[@ANYRESDEC, @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700004400000c00000018220000fc2fd175a9e9eb9dc2491e4aff8b664fe77257313c316226c540d6eec019f635c5f4d02f38c332d8efb558b649a908858419db47c403780139139aa63b5151157325ee1a978eed8ceb7d817ab60d6309b376e9eab8648939ca1bbd3d1f0fef057f706a4fc0fa5543f3b9c52d99afc5521a3e80fce91ed27d007d9174a9f02ba39a7d0472b98809e7b19d12a2", @ANYRES32=r7, @ANYBLOB="0000000007000000183100000500"/24], &(0x7f0000000900)='GPL\x00', 0x7, 0x54, &(0x7f0000000880)=""/84, 0x41000, 0x7e, '\x00', 0x0, @fallback=0x36, r3, 0x8, &(0x7f0000000800)={0x8, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000d40)=[r5, r7, 0xffffffffffffffff, r7, r3, r3], 0x0, 0x10, 0xe}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmsg$inet(r9, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r8, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600), 0x3e}, 0x100)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x6d)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200})

9m4.553313535s ago: executing program 8 (id=3183):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006", 0x15}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b904020000", 0x13}], 0x1}, 0x0)
r0 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x10001, 0x0, 0xfffffffc, 0x5}, {0x2}]}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, &(0x7f0000000000)=r3, 0x20)
socket$kcm(0x2, 0x5, 0x84)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x6, 0xe, 0x0, 0x0, 0x4, 0x8400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x33fe0)
r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0xfffffffffffffeb8, &(0x7f0000000000)=[{&(0x7f0000000140)="d8000000200081044e81f782db44b904021d080207000000810000a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x40000)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}]}, 0x90)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
close(r9)
recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r10=>0xffffffffffffffff]}}], 0x18}, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
setsockopt$sock_attach_bpf(r7, 0x84, 0x6e, &(0x7f0000000000)=r10, 0x10)
socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
close(r11)

9m3.070956415s ago: executing program 8 (id=3188):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x8, 0x92, 0x3, 0x9, 0x0, 0x80000001, 0x73b81, 0xa, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x1, 0x5}, 0x802, 0x1, 0x5, 0x9, 0x3, 0x8, 0x6, 0x0, 0x807f, 0x0, 0x7}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x9)
r0 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socketpair(0x1e, 0x1, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
syz_clone(0x40089000, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4)
sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000)
r6 = socket$kcm(0xa, 0x2, 0x88)
setsockopt$sock_attach_bpf(r6, 0x1, 0x41, &(0x7f0000000040), 0x4)
sendmsg$kcm(r6, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x4000080)
recvmsg$kcm(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x40002000)
r7 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8)
socket$kcm(0x2, 0x5, 0x84)

8m47.773043828s ago: executing program 37 (id=3188):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x8, 0x92, 0x3, 0x9, 0x0, 0x80000001, 0x73b81, 0xa, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x1, 0x5}, 0x802, 0x1, 0x5, 0x9, 0x3, 0x8, 0x6, 0x0, 0x807f, 0x0, 0x7}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x9)
r0 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socketpair(0x1e, 0x1, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
syz_clone(0x40089000, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4)
sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000)
r6 = socket$kcm(0xa, 0x2, 0x88)
setsockopt$sock_attach_bpf(r6, 0x1, 0x41, &(0x7f0000000040), 0x4)
sendmsg$kcm(r6, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x4000080)
recvmsg$kcm(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x40002000)
r7 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8)
socket$kcm(0x2, 0x5, 0x84)

24.060056997s ago: executing program 6 (id=5314):
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x2ee0}], 0x13, 0x0, 0x0, 0x10000000}, 0x12cd)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000540)="c6", 0xffffff39}], 0x1}, 0x0)
r3 = socket$kcm(0x2, 0x3, 0x84)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2105, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x828, 0x0, 0x0, 0x6, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x891c, &(0x7f0000000100))
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1e03d3ffbc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd)
close(0x3)

22.393744113s ago: executing program 6 (id=5323):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000002200)=""/266, 0x10a}, {&(0x7f0000005300)=""/4047, 0xfcf}, {&(0x7f0000000f40)=""/209, 0xd1}, {&(0x7f00000006c0)=""/196, 0xc4}, {&(0x7f0000000240)=""/208, 0xd0}, {&(0x7f0000000440)=""/205, 0xcd}, {&(0x7f0000000a40)=""/190, 0xbe}, {&(0x7f0000000bc0)=""/117, 0x75}], 0x8}, 0x40012100)

22.207646159s ago: executing program 6 (id=5326):
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x2ee0}], 0x13, 0x0, 0x0, 0x10000000}, 0x12cd)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000540)="c6", 0xffffff39}], 0x1}, 0x0)
r4 = socket$kcm(0x2, 0x3, 0x84)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2105, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x828, 0x0, 0x0, 0x6, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x891c, &(0x7f0000000100))
sendmsg$inet(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="ab09", 0x2}], 0x1}, 0x40805)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000080))
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$TUNSETSTEERINGEBPF(r7, 0x800454e0, &(0x7f00000001c0)=r8)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
write$cgroup_devices(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="1e03d3ffbc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd)

21.183700762s ago: executing program 7 (id=5332):
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x82, 0x0, 0x0, 0xfc, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0xc8, 0xffff, 0x1, 0x1, 0x0, 0x2, 0x0, 0xffffffff, 0x0, 0x9}, 0x0, 0x2004, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="0763707573751400000000000009"], 0x17)

20.991143578s ago: executing program 7 (id=5333):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000180)={<r1=>r0})
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r2, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x40}, 0x94)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x3, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x10)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(r3, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x0, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020030000b02d25a806f8c2d94f90524fc602f1a04000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x5, 0x4000}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000002200)=""/266, 0x10a}, {&(0x7f0000005300)=""/4047, 0xfcf}, {&(0x7f0000000f40)=""/209, 0xd1}, {&(0x7f00000006c0)=""/196, 0xc4}, {&(0x7f0000000240)=""/208, 0xd0}, {&(0x7f0000000440)=""/205, 0xcd}, {&(0x7f0000000a40)=""/190, 0xbe}, {&(0x7f0000000bc0)=""/117, 0x75}], 0x8}, 0x40012100)

20.440083313s ago: executing program 9 (id=5335):
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x14, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) (fail_nth: 8)

20.061189814s ago: executing program 9 (id=5336):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x10}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff160760030002b89e08f074dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x301)

18.173562487s ago: executing program 7 (id=5337):
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x16, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_bp={0x0, 0x6}, 0x100000, 0xca, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"/3002], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x3f)
syz_open_procfs$namespace(0x0, &(0x7f0000001000)='ns/pid_for_children\x00')
syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/uts\x00')
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x80, 0x0, 0x0, 0x0, 0x1}, 0x94)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r3], 0x12)

18.116673472s ago: executing program 6 (id=5338):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd0900008400000005010000", @ANYRES32, @ANYBLOB="00000000000000000200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r0}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r0, &(0x7f0000003700)="05", &(0x7f00000004c0)=""/223}, 0x20)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x108000, 0x0, 0x2, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0, 0x60}}, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000a000000000000000000000000f14a1a54c12e5b417cf1aefa2dca73fd4e3ca93836a56c7285b8b7b81cca6fd073e5b0"], &(0x7f0000000000)='GPL\x00', 0x8}, 0x94)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_bp={0x0, 0x8}, 0x10000, 0xc8, 0xfff, 0x0, 0x0, 0x0, 0x400}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$kcm(0xa, 0x2, 0x88)
r4 = perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffd, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1})
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$inet(r3, &(0x7f0000001600)={&(0x7f0000001340)={0x2, 0x2, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @loopback, @local}}}], 0x20}, 0x8000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0)
r8 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r8, 0x84, 0x6b, &(0x7f0000000000), 0x10)
close(r7)
write$cgroup_type(r7, &(0x7f0000000080), 0x11ffffce1)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x9, '\x00', r6, r7, 0x1, 0x0, 0x2}, 0x50)
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r9=>0xffffffffffffffff]}}], 0x18}, 0x40)
write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0x15)
r10 = socket$kcm(0x2, 0x1, 0x84)
sendmsg$inet(r10, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc)
recvmsg$kcm(r10, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x40000100)

17.975680134s ago: executing program 2 (id=5339):
r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x804, 0x14c9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, @perf_config_ext={0x1}, 0xa0, 0x58, 0x0, 0x4, 0x2, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f0000000240)='cpuset.mems\x00', 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0x31)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000001340)=@hci={0x1f, 0x300, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000100)}], 0x1}, 0x0)
r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_bp={0x0, 0xa}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x2000000000000}, 0x0, 0x0, 0x400, 0x0, 0x0, 0x20000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000180)='*:%(\x00')
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="8dffffff0600"})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0xac97}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)}, 0x20000000)
bpf$OBJ_PIN_MAP(0x9, &(0x7f0000000040)=@generic={0x0}, 0x18)

17.875909232s ago: executing program 9 (id=5340):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x4}, 0x104101, 0x4, 0x2000000, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@cgroup, 0x36, 0x0, 0xa815, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)}, 0x40)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94)
close(0x3)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00', 0x800})
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0xe, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000071106f"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
recvmsg$unix(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
write$cgroup_subtree(r3, &(0x7f0000000180)=ANY=[@ANYRES8, @ANYBLOB="3ee901"], 0x9a)
close(r3)
ioctl$SIOCSIFHWADDR(r2, 0x8b26, &(0x7f0000000280)={'wlan1\x00', @random="6a50bae0b3e5"})
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080))

17.555151648s ago: executing program 7 (id=5341):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x8, 0x650b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x2}, 0x2402, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="0a000000060000006d05000007"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r0, 0x8100000}, 0x38)

17.53318497s ago: executing program 9 (id=5342):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000003"], 0x48)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000640)={&(0x7f0000000180)="bd76cb6f8b", 0x0, 0x0, 0x0, 0x6, r0}, 0x38)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000fff07006706000002000000070600000ee60000bf150000000000003d650000000000006507000002000000070700004c0000001f750000000000006154000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0f00001c040008000400"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="050000000100000036e2e2857e08000000010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x83, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x8, 0x0, 0x4, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
r11 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r12}, &(0x7f0000000180), &(0x7f00000001c0)=r11}, 0x20)
r13 = bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r13}, 0x10)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
recvmsg(r9, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x152610}], 0x1, 0x0, 0x64}, 0x1f00)
sendmsg$tipc(r10, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r5, 0x5}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4, <r14=>0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20)
r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x10, 0x1a, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, [@generic={0x8e, 0xc, 0xe, 0x800, 0x9}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80}}, @ldst={0x2, 0x2, 0x6, 0x5, 0x0, 0x1, 0xfffffffffffffffc}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x101}}, @ldst={0x3, 0x0, 0x7, 0xb, 0x9, 0x1, 0x4}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000a00)=""/4096, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x3, 0xf, 0x6, 0x9239}, 0x10, 0xffffffffffffffff, r7, 0x2, &(0x7f0000000580)=[r6, r14, r0], &(0x7f00000005c0)=[{0x1, 0x4, 0xc}, {0x5, 0x3, 0x10, 0x2}], 0x10, 0x7}, 0x94)
setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000680)=r15, 0x4)
sendmsg$inet(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4040086)
sendmsg$tipc(r1, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x10}, 0x50)

17.462470666s ago: executing program 2 (id=5343):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x30f6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x2, 0x0, 0x1, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x4}, 0x50)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r3, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0}}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x2, '\x00', r4, r2, 0x0, 0x3, 0x3}, 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={0x1, 0x58, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r5=>0x0}}, 0x10)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@float={0x3, 0x0, 0x0, 0x10, 0x8}]}, {0x0, [0x5f]}}, &(0x7f0000000780)=""/4096, 0x27, 0x1000, 0x0, 0xaf}, 0x28)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=@base={0x1d, 0x200, 0x2, 0x0, 0x4000, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x3}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000001980)={0x5, 0x16, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x22c}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_fd={0x18, 0xb, 0x1, 0x0, r2}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x62, '\x00', r5, @fallback=0x1a, r6, 0x8, &(0x7f00000006c0)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000700)={0x5, 0x2, 0xf163, 0x8}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, &(0x7f0000001800)=[r7, r0], &(0x7f0000001840)=[{0x1, 0x4, 0xf, 0x9}, {0x4, 0x5, 0xd}, {0x4, 0x3, 0x7, 0x1}, {0x2, 0x5, 0xf, 0x6}, {0x5, 0x5, 0xa, 0x7}], 0x10, 0x5}, 0x94)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x83508, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0xec1, 0x200, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x800, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000080)={0x0, &(0x7f00000000c0)})
socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x17, 0x0, 0x0, 0x859, 0x3079, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r10}, 0x10)
bpf$LINK_DETACH(0x22, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8940, &(0x7f0000000080))

17.331826486s ago: executing program 7 (id=5344):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000ca00000095"], &(0x7f0000000640)='syzkaller\x00', 0x8, 0x8d, &(0x7f0000000680)=""/141}, 0x23)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x6a)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d000c6c7ea60864160af365040041000a001d002b7f6f4c9ee517d34460bc060000f0a705651e6182949a3651f60a84f709d182c5bb5b64f69853362a65a113827e4b4237268a9a", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x9, 0x8000000000000000}, 0x1000, 0x4, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@l2={0x21, 0xfff4, @any, 0x5, 0x2}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x18}, 0xfc00)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r7}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$TUNSETOFFLOAD(r8, 0x4004743d, 0x110e22fff6)
r9 = socket$kcm(0x10, 0xd69d3353517dab7b, 0x10)
sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000000c0)="1400000035000b63d25a80648c2594f90324fc60", 0x38}], 0x1}, 0x0)

17.260448692s ago: executing program 2 (id=5345):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r0, 0x0, 0x0}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRES32], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\n\x00\x00'], 0x48)
ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"})
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x80, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x200, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000040)=""/155, 0x1000000, 0x9b, 0x1}, 0x20)

17.083110477s ago: executing program 6 (id=5346):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="8510000004000000950080000000000018000000000000000000000000000002950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x200000000000014f, 0xfffffffffffffc9e, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, 0x0, 0x19, 0x10, 0x8, 0x2, 0x0}}, 0x10)

17.003888063s ago: executing program 7 (id=5347):
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x2ee0}], 0x13, 0x0, 0x0, 0x10000000}, 0x12cd)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000540)="c6", 0xffffff39}], 0x1}, 0x0)
r3 = socket$kcm(0x2, 0x3, 0x84)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2105, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x828, 0x0, 0x0, 0x6, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x891c, &(0x7f0000000100))
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000080))
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$TUNSETSTEERINGEBPF(r7, 0x800454e0, &(0x7f00000001c0)=r8)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
write$cgroup_devices(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="1e03d3ffbc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd)

16.695245058s ago: executing program 6 (id=5348):
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x2ee0}], 0x13, 0x0, 0x0, 0x10000000}, 0x12cd)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000540)="c6", 0xffffff39}], 0x1}, 0x0)
r3 = socket$kcm(0x2, 0x3, 0x84)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2105, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x828, 0x0, 0x0, 0x6, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x891c, &(0x7f0000000100))
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1e03d3ffbc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd)
close(0x3)

16.473123177s ago: executing program 9 (id=5349):
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x16, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_bp={0x0, 0x6}, 0x100000, 0xca, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff1100000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000000000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd844a954b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b4090a79507df79f298129da487130d5f24b46001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad379e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4b9535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024a0041b1df65b3e1b9bf115646d14ce53d13d0ccacda1efc5f9094fa737c28b994a8512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4fdc4b4861004eefbc17f54f82a804d4a69bf9bc5fa77ee293fbd165a5a68488a010030166565a097b103b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f940b6f0e8c7db4bf23242a18159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c2d7962b0d22772c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac2bba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f407000000000000006d294d366501753a7ac7fedb8d34f5bc381604fcd46105c457e7dd13cab669ab377e4c2422a47e9ffe2d4a2d32f7528751313694bf57704400b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c9585638c2153a6eee01738b0c10671f4f559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670100be05e7de0940313c5870786554df26236ebced9390cb6940b8375d936a7d2120eca291963eb2d537d8ee4de5c183c160119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d30902208d300e4d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d0000002000000001c8000000000000003a48cea769470424d28804c024ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef40662d7836d252c566f5ee934c679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c031578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada209bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6155e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2f085185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bcdb7c89739f5d81e750d50517a59a3ad09e8802e8f4f000000000facd5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f296115d4a31838eeb20c20bb82aa31771cd379ec83554cea5b473332f2011e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d3fcd116bce9c764c714c9402c21d181aae59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755367fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc05000000000000006c25b96174327d82761c26e329555f9290af4100000000000000749e1338636555009edf66be445d6975d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab0043ebf7c79a953e023f74afad591821610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c1960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000000000027c9a4619a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd5c17d5486b0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dff7aa46e820a74f9530bdcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fdca4e9eda0072f6df342f3e7071e28ef6806b90cc39c49b91c76b0d3958f7f05b47d3e519f1634e8fbd8d3133319e069f9648a2ff93060ff073b3a113e47e447c030931651dd315003b7a6a47c912853826c4c65433a2bb560ae99ec4b227eda2e63a1cb1a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7194d1eb3de6a5f99f301f89c2ee627e949cdd22000026a9960503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640000cd9e5f2e236ef5f1e3a94b108eb9750b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a2050000c375c705c798e0e208e4a5259d0bda526b462af45a6e9a84aebe025c8a7f65819f397574db7ab01bd2b3e3cd28c5aec90f8edfe39a00bafd688a7eea04efdeed96f67012bc3f795edb68b5dec80ad31a858eb756c815e7695d00000000000000000000000000000000000000000000000000007ccf0ce549d97510f7f8765408bb702f0000006d4754c68b7064cf31a681421994e1f307f0ab4ff2e33d3c88fea5d218a276b77adfee7c8fb145783ee1f8adbd2c2604eab3a62a28611da1dae5ce60003111ce5c96a1d6e45ee144ffa3dcca32a33f8f0ce2995b7b7aa0bce228cbf37412cbbdebae06edb51a134301d2627d4927287daf9dcae6720334862d3a18094f1edd9e350337cbb804004d1755cfe7d7fa01872fb99815dcfbbc8141f6e1bbb0901ae91357677fd9d2bb00d4f17fb441c2dfa2b424bf46ae299d68ac27792cdac2b63a6038ab5546ba1e5ad6a329f2c627100e0442f865fc6c179ad3edcb6b000000000000000b0000000000000000ac192d48d76e2a8cae83ae850f73fdfbaca81b6b7b1a0d7b517f41fbd46aa24b0f4b8e0202e3a580947f1925ba4de097e8dcb6bd7f686322b45d4a544ca1e83b592d4a6d46d0a0dc39634550bc77d4cabba01b283082e66778de7c61a1a36838d36c2f8e58cef603770ee3d6a9625be0bc21d2be2da69ac9e9c5e88278d39239501b465102ad16d651ea8bb8cee35527c1ad42ac6a565e449929ccb4469bdd6824b64e13579b7188566e735200000000000000000094e05bcda1e96e4c33ccf6d74046e45bafe9d512c43a3e485dedad9a38b34f7fcd00fafcc25dc36716f0e21e0632425b7a1c1a6bc15c3fc07d914c88103411d8d2b77b72a796fd3aaa7ea493c7bc43e63b2b0d05ad5682121682096b224933fa20255d58a680cc2ec200"/3002], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x3f)
syz_open_procfs$namespace(0x0, &(0x7f0000001000)='ns/pid_for_children\x00')
syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/uts\x00')
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85feff"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x1}, 0x94)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r3], 0x12)

16.391957023s ago: executing program 2 (id=5350):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x4}, 0x104101, 0x4, 0x2000000, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@cgroup, 0x36, 0x0, 0xa815, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)}, 0x40)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94)
close(0x3)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00', 0x800})
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0xe, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000071106f000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
recvmsg$unix(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
write$cgroup_subtree(r3, &(0x7f0000000180)=ANY=[@ANYRES8, @ANYBLOB="3ee901"], 0x9a)
close(r3)
ioctl$SIOCSIFHWADDR(r2, 0x8b26, &(0x7f0000000280)={'wlan1\x00', @random="6a50bae0b3e5"})
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080))

16.202787548s ago: executing program 2 (id=5351):
r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x804, 0x14c9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, @perf_config_ext={0x1}, 0xa0, 0x58, 0x0, 0x4, 0x2, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f0000000240)='cpuset.mems\x00', 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0x31)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000001340)=@hci={0x1f, 0x300, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000100)}], 0x1}, 0x0)
r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_bp={0x0, 0xa}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x2000000000000}, 0x0, 0x0, 0x400, 0x0, 0x0, 0x20000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000180)='*:%(\x00')
ioctl$SIOCSIFHWADDR(r7, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="8dffffff0600"})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0xac97}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)}, 0x20000000)
bpf$OBJ_PIN_MAP(0x9, &(0x7f0000000040)=@generic={0x0}, 0x18)

15.93761352s ago: executing program 9 (id=5352):
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$sock(r0, &(0x7f0000000b80)={&(0x7f0000000900)=@llc={0x1a, 0x118, 0x52, 0xff, 0x2e, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000a80)="ec5eeb410211866433c856ffec1d6708a74f3707009392c8eb5c728a4b92e93b60779c6890443a8950d42c2d319d598689e25a0c478eafe40a725829ed12cf47a9575a303b5b569781c6", 0x4a}], 0x1, &(0x7f0000000b40)=[@mark={{0x14, 0x1, 0x24, 0xfffffff7}}], 0x18}, 0x40000)
recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000001b00)=""/4067, 0xfe3}, {0x0}, {&(0x7f00000047c0)=""/4069, 0xfe5}, {0x0}, {&(0x7f0000000c00)=""/142, 0x8e}], 0x5}, 0x40000000)
sendmsg$inet(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f00000016c0)="4c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3658f60a84c9f4d4938037e70e4509c5bb", 0x4c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000)
recvmsg$kcm(r1, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x40000002)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r2 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x48)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000030000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000d50000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000a61a7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r5}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x33}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000003"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, &(0x7f0000000080)='syzkaller\x00', 0x2}, 0x90)
sendmsg$inet(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)='#!', 0x2}], 0x1}, 0x40488c4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r6, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000300)=[0x0, 0x0], ""/16, <r8=>0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f00000003c0)=[0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x17, &(0x7f0000000540)=[{}], 0x8, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x44, 0x8, 0x8, &(0x7f0000000600)}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x7ff}, [@func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3b}}]}, &(0x7f0000000200)='syzkaller\x00', 0x6ce3, 0x16, &(0x7f0000000240)=""/22, 0x40f00, 0x30, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x5, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000007c0)=[r3, r3, r3, r3, r6, r7], &(0x7f0000000800)=[{0x1, 0x1, 0x7, 0x9}, {0x1, 0x4, 0x2, 0x6}, {0x5, 0x2, 0x9, 0x8}, {0x1, 0x4, 0x4}], 0x10, 0x7ff}, 0x94)

15.865528046s ago: executing program 2 (id=5353):
socket$kcm(0x10, 0x2, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
perf_event_open(&(0x7f0000002100)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa0100, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x6}, 0x10, 0x0, 0x80000003, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_int(r0, &(0x7f0000000800)='cpuset.mems\x00', 0x2, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90124fc603406034002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0)
syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000e00)=ANY=[@ANYRES32, @ANYBLOB="2200000002"], 0x20)
socket$kcm(0x2, 0x3, 0x2)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x104000, 0x2, 0xfffffffe, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000480)={0x1, &(0x7f00000011c0), &(0x7f0000000380)=""/7, 0x4}, 0x20)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000001480)=@o_path={0x0, 0x0, 0x4008, r2}, 0x18)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
r3 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff)
r4 = socket$kcm(0x2, 0x1, 0x0)
r5 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x8983, &(0x7f0000000040)={r4})
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0)

1.808252053s ago: executing program 38 (id=5347):
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x2ee0}], 0x13, 0x0, 0x0, 0x10000000}, 0x12cd)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000540)="c6", 0xffffff39}], 0x1}, 0x0)
r3 = socket$kcm(0x2, 0x3, 0x84)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2105, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x828, 0x0, 0x0, 0x6, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x891c, &(0x7f0000000100))
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000080))
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$TUNSETSTEERINGEBPF(r7, 0x800454e0, &(0x7f00000001c0)=r8)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
write$cgroup_devices(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="1e03d3ffbc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd)

680.430894ms ago: executing program 39 (id=5352):
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$sock(r0, &(0x7f0000000b80)={&(0x7f0000000900)=@llc={0x1a, 0x118, 0x52, 0xff, 0x2e, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000a80)="ec5eeb410211866433c856ffec1d6708a74f3707009392c8eb5c728a4b92e93b60779c6890443a8950d42c2d319d598689e25a0c478eafe40a725829ed12cf47a9575a303b5b569781c6", 0x4a}], 0x1, &(0x7f0000000b40)=[@mark={{0x14, 0x1, 0x24, 0xfffffff7}}], 0x18}, 0x40000)
recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000001b00)=""/4067, 0xfe3}, {0x0}, {&(0x7f00000047c0)=""/4069, 0xfe5}, {0x0}, {&(0x7f0000000c00)=""/142, 0x8e}], 0x5}, 0x40000000)
sendmsg$inet(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f00000016c0)="4c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3658f60a84c9f4d4938037e70e4509c5bb", 0x4c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000)
recvmsg$kcm(r1, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x40000002)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r2 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x48)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000030000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000d50000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000a61a7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r5}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x33}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000003"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, &(0x7f0000000080)='syzkaller\x00', 0x2}, 0x90)
sendmsg$inet(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)='#!', 0x2}], 0x1}, 0x40488c4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r6, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000300)=[0x0, 0x0], ""/16, <r8=>0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f00000003c0)=[0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x17, &(0x7f0000000540)=[{}], 0x8, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x44, 0x8, 0x8, &(0x7f0000000600)}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x7ff}, [@func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3b}}]}, &(0x7f0000000200)='syzkaller\x00', 0x6ce3, 0x16, &(0x7f0000000240)=""/22, 0x40f00, 0x30, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x5, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000007c0)=[r3, r3, r3, r3, r6, r7], &(0x7f0000000800)=[{0x1, 0x1, 0x7, 0x9}, {0x1, 0x4, 0x2, 0x6}, {0x5, 0x2, 0x9, 0x8}, {0x1, 0x4, 0x4}], 0x10, 0x7ff}, 0x94)

615.46553ms ago: executing program 40 (id=5353):
socket$kcm(0x10, 0x2, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
perf_event_open(&(0x7f0000002100)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa0100, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x6}, 0x10, 0x0, 0x80000003, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_int(r0, &(0x7f0000000800)='cpuset.mems\x00', 0x2, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90124fc603406034002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0)
syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000e00)=ANY=[@ANYRES32, @ANYBLOB="2200000002"], 0x20)
socket$kcm(0x2, 0x3, 0x2)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x104000, 0x2, 0xfffffffe, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000480)={0x1, &(0x7f00000011c0), &(0x7f0000000380)=""/7, 0x4}, 0x20)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000001480)=@o_path={0x0, 0x0, 0x4008, r2}, 0x18)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
r3 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff)
r4 = socket$kcm(0x2, 0x1, 0x0)
r5 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x8983, &(0x7f0000000040)={r4})
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0)

0s ago: executing program 41 (id=5348):
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x2ee0}], 0x13, 0x0, 0x0, 0x10000000}, 0x12cd)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000540)="c6", 0xffffff39}], 0x1}, 0x0)
r3 = socket$kcm(0x2, 0x3, 0x84)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2105, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x828, 0x0, 0x0, 0x6, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x891c, &(0x7f0000000100))
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1e03d3ffbc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd)
close(0x3)

kernel console output (not intermixed with test programs):

allmulticast mode
[  820.564417][T17279] bridge_slave_0: entered promiscuous mode
[  820.580821][T17279] bridge0: port 2(bridge_slave_1) entered blocking state
[  820.588586][T17279] bridge0: port 2(bridge_slave_1) entered disabled state
[  820.596045][T17279] bridge_slave_1: entered allmulticast mode
[  820.603571][T17279] bridge_slave_1: entered promiscuous mode
[  820.697010][T17279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  820.721944][T12071] bridge0: port 3(ip6gretap0) entered disabled state
[  820.779382][ T5796] Bluetooth: hci0: command tx timeout
[  820.815212][T12071] ip6gretap0 (unregistering): left allmulticast mode
[  820.824071][T12071] ip6gretap0 (unregistering): left promiscuous mode
[  820.830993][T12071] bridge0: port 3(ip6gretap0) entered disabled state
[  820.854069][T17279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  821.167781][T17279] team0: Port device team_slave_0 added
[  821.207805][T17279] team0: Port device team_slave_1 added
[  821.307175][T17279] batman_adv: batadv0: Adding interface: batadv_slave_0
[  821.324561][T17279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  821.463377][T17279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  821.464120][T17333] netlink: 'syz.6.4106': attribute type 3 has an invalid length.
[  821.489508][T17333] netlink: 130984 bytes leftover after parsing attributes in process `syz.6.4106'.
[  821.731158][T17331] netlink: 'syz.2.4105': attribute type 21 has an invalid length.
[  821.739234][T17331] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4105'.
[  821.750559][T17279] batman_adv: batadv0: Adding interface: batadv_slave_1
[  821.758092][T17279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  821.785288][T17279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  821.954955][T17279] hsr_slave_0: entered promiscuous mode
[  821.980414][T17279] hsr_slave_1: entered promiscuous mode
[  822.008883][T17279] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  822.023332][T17279] Cannot create hsr debugfs directory
[  822.872311][ T5796] Bluetooth: hci0: command tx timeout
[  823.355668][ T5796] Bluetooth: hci4: unexpected event 0x12 length: 15 > 8
[  823.606287][T17363] netlink: 'syz.9.4116': attribute type 3 has an invalid length.
[  823.634175][T17363] netlink: 130984 bytes leftover after parsing attributes in process `syz.9.4116'.
[  823.649395][T17361] netlink: 'syz.6.4115': attribute type 21 has an invalid length.
[  823.668644][T17361] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4115'.
[  824.020784][T12071] hsr_slave_0: left promiscuous mode
[  824.054879][T12071] hsr_slave_1: left promiscuous mode
[  824.077759][T12071] batman_adv: batadv0: Removing interface: team0
[  824.087620][T12071] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  824.106589][T12071] batman_adv: batadv0: Removing interface: batadv_slave_0
[  824.121759][T12071] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  824.129769][T12071] batman_adv: batadv0: Removing interface: batadv_slave_1
[  824.144123][T12071] bridge_slave_1: left allmulticast mode
[  824.150487][T12071] bridge_slave_1: left promiscuous mode
[  824.156867][T12071] bridge0: port 2(bridge_slave_1) entered disabled state
[  824.192875][T12071] bridge_slave_0: left allmulticast mode
[  824.213353][T12071] bridge_slave_0: left promiscuous mode
[  824.233749][T12071] bridge0: port 1(bridge_slave_0) entered disabled state
[  824.726714][T12071] veth1_macvtap: left promiscuous mode
[  824.732672][T12071] veth0_macvtap: left promiscuous mode
[  824.744286][T12071] veth1_vlan: left promiscuous mode
[  824.750600][T12071] veth0_vlan: left promiscuous mode
[  824.880552][T17386] FAULT_INJECTION: forcing a failure.
[  824.880552][T17386] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  824.901704][T17386] CPU: 1 PID: 17386 Comm: syz.9.4123 Not tainted 6.6.102-syzkaller #0
[  824.909933][T17386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  824.920026][T17386] Call Trace:
[  824.923360][T17386]  <TASK>
[  824.926325][T17386]  dump_stack_lvl+0x16c/0x230
[  824.931048][T17386]  ? show_regs_print_info+0x20/0x20
[  824.936287][T17386]  ? load_image+0x3b0/0x3b0
[  824.940845][T17386]  ? __might_fault+0xaa/0x120
[  824.945571][T17386]  ? __lock_acquire+0x7c80/0x7c80
[  824.950635][T17386]  should_fail_ex+0x39d/0x4d0
[  824.955382][T17386]  _copy_from_user+0x2f/0xe0
[  824.960023][T17386]  perf_event_query_prog_array+0xfd/0x3b0
[  824.965765][T17386]  ? perf_event_ctx_lock_nested+0xb4/0x460
[  824.971586][T17386]  ? perf_event_detach_bpf_prog+0x310/0x310
[  824.977496][T17386]  ? perf_event_update_sibling_time+0x4c0/0x4c0
[  824.983839][T17386]  ? slab_free_freelist_hook+0x130/0x1b0
[  824.989494][T17386]  ? tomoyo_path_number_perm+0x477/0x590
[  824.995151][T17386]  perf_ioctl+0x5ab/0x2440
[  824.999585][T17386]  ? tomoyo_path_number_perm+0x1ba/0x590
[  825.005241][T17386]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  825.010717][T17386]  ? perf_poll+0x1b0/0x1b0
[  825.015177][T17386]  ? __fget_files+0x28/0x4d0
[  825.019789][T17386]  ? bpf_lsm_file_ioctl+0x9/0x10
[  825.024731][T17386]  ? security_file_ioctl+0x80/0xa0
[  825.029855][T17386]  ? perf_poll+0x1b0/0x1b0
[  825.034282][T17386]  __se_sys_ioctl+0xfd/0x170
[  825.038885][T17386]  do_syscall_64+0x55/0xb0
[  825.043310][T17386]  ? clear_bhb_loop+0x40/0x90
[  825.047998][T17386]  ? clear_bhb_loop+0x40/0x90
[  825.052688][T17386]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  825.058599][T17386] RIP: 0033:0x7f452db8ebe9
[  825.063023][T17386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  825.082640][T17386] RSP: 002b:00007f452ea2f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  825.091069][T17386] RAX: ffffffffffffffda RBX: 00007f452ddb5fa0 RCX: 00007f452db8ebe9
[  825.099050][T17386] RDX: 00002000000002c0 RSI: 00000000c008240a RDI: 0000000000000003
[  825.107032][T17386] RBP: 00007f452ea2f090 R08: 0000000000000000 R09: 0000000000000000
[  825.115021][T17386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  825.123021][T17386] R13: 00007f452ddb6038 R14: 00007f452ddb5fa0 R15: 00007ffc8be65b48
[  825.131043][T17386]  </TASK>
[  825.134748][ T5796] Bluetooth: hci0: command tx timeout
[  825.302887][T12071] team0 (unregistering): Port device geneve1 removed
[  825.901156][T12071] team0 (unregistering): Port device team_slave_1 removed
[  825.959759][T12071] team0 (unregistering): Port device team_slave_0 removed
[  826.009391][T12071] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  826.063562][T12071] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  826.580057][T12071] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  826.591029][T12071] bond0 (unregistering): Released all slaves
[  826.677632][T17395] netlink: 'syz.6.4127': attribute type 21 has an invalid length.
[  826.685938][T17395] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4127'.
[  826.888935][T17404] netlink: 'syz.2.4129': attribute type 3 has an invalid length.
[  826.919010][T17404] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.4129'.
[  827.160963][T17279] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  827.186005][T17279] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  827.195518][ T5796] Bluetooth: hci0: command tx timeout
[  827.227397][T17279] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  827.280381][ T5796] Bluetooth: hci4: unexpected event 0x12 length: 15 > 8
[  827.284800][T17279] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  827.688175][T17279] 8021q: adding VLAN 0 to HW filter on device bond0
[  827.821782][T17279] 8021q: adding VLAN 0 to HW filter on device team0
[  827.889207][T17402] bridge0: port 1(bridge_slave_0) entered blocking state
[  827.896510][T17402] bridge0: port 1(bridge_slave_0) entered forwarding state
[  827.917949][T17402] bridge0: port 2(bridge_slave_1) entered blocking state
[  827.925208][T17402] bridge0: port 2(bridge_slave_1) entered forwarding state
[  828.152245][T17279] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  828.162873][T17279] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  828.296703][T17433] netlink: 'syz.9.4137': attribute type 21 has an invalid length.
[  828.317110][T17433] netlink: 132 bytes leftover after parsing attributes in process `syz.9.4137'.
[  828.384279][T17440] netlink: 'syz.6.4139': attribute type 3 has an invalid length.
[  828.392432][T17440] netlink: 130984 bytes leftover after parsing attributes in process `syz.6.4139'.
[  828.862994][T17279] 8021q: adding VLAN 0 to HW filter on device batadv0
[  830.100872][T17473] netlink: 'syz.9.4148': attribute type 3 has an invalid length.
[  830.109171][T17473] netlink: 130984 bytes leftover after parsing attributes in process `syz.9.4148'.
[  830.197552][T17279] veth0_vlan: entered promiscuous mode
[  830.232610][T17279] veth1_vlan: entered promiscuous mode
[  830.317504][T17475] netlink: 'syz.6.4149': attribute type 21 has an invalid length.
[  830.325815][T17475] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4149'.
[  830.342082][T17279] veth0_macvtap: entered promiscuous mode
[  830.370025][T17279] veth1_macvtap: entered promiscuous mode
[  830.427035][T17279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  830.441154][T17279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  830.501380][T17279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  830.535154][T17279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  830.555390][T17279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  830.580711][T17279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  830.608693][T17279] batman_adv: batadv0: Interface activated: batadv_slave_0
[  830.620589][T17279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  830.632457][T17279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  830.642598][T17279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  830.653615][T17279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  830.663743][T17279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  830.675058][T17279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  830.688515][ T5796] Bluetooth: hci4: unexpected event 0x12 length: 15 > 8
[  830.690529][T17279] batman_adv: batadv0: Interface activated: batadv_slave_1
[  830.713095][T17279] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  830.722657][T17279] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  830.731552][T17279] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  830.741194][T17279] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  830.970955][T17402] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  831.004260][T17402] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  831.162467][T12060] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  831.172134][T12060] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  832.196301][T17518] netlink: 'syz.7.4160': attribute type 21 has an invalid length.
[  832.204388][T17518] netlink: 132 bytes leftover after parsing attributes in process `syz.7.4160'.
[  832.329307][T17524] netlink: 'syz.2.4163': attribute type 3 has an invalid length.
[  832.338928][T17524] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.4163'.
[  832.551573][T17530] netlink: 63503 bytes leftover after parsing attributes in process `syz.6.4166'.
[  832.572313][T17530] netlink: 'syz.6.4166': attribute type 10 has an invalid length.
[  832.656231][T17530] macvlan0: entered promiscuous mode
[  832.718102][T17530] macvlan0: entered allmulticast mode
[  833.183163][ T5796] Bluetooth: hci0: unexpected event 0x12 length: 15 > 8
[  833.778132][T17530] veth1_vlan: entered allmulticast mode
[  833.895133][T17530] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  834.262447][T17550] netlink: 'syz.2.4174': attribute type 21 has an invalid length.
[  834.315709][T17550] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4174'.
[  834.380822][T17559] netlink: 'syz.9.4176': attribute type 3 has an invalid length.
[  834.416405][T17559] netlink: 130984 bytes leftover after parsing attributes in process `syz.9.4176'.
[  835.908053][T17593] netlink: 'syz.7.4189': attribute type 3 has an invalid length.
[  836.186635][T17593] netlink: 130984 bytes leftover after parsing attributes in process `syz.7.4189'.
[  836.324224][T17592] netlink: 'syz.9.4188': attribute type 21 has an invalid length.
[  836.334261][T17592] netlink: 132 bytes leftover after parsing attributes in process `syz.9.4188'.
[  836.782738][T17616] netlink: 130984 bytes leftover after parsing attributes in process `syz.9.4197'.
[  837.286884][T17628] netlink: 'syz.6.4200': attribute type 21 has an invalid length.
[  837.313512][T17628] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4200'.
[  837.433539][T17634] netlink: 'syz.9.4202': attribute type 3 has an invalid length.
[  837.465689][T17634] netlink: 130984 bytes leftover after parsing attributes in process `syz.9.4202'.
[  838.987044][T17670] netlink: 'syz.6.4212': attribute type 21 has an invalid length.
[  838.995088][T17670] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4212'.
[  839.027079][T17672] netlink: 'syz.7.4213': attribute type 3 has an invalid length.
[  839.034901][T17672] netlink: 130984 bytes leftover after parsing attributes in process `syz.7.4213'.
[  840.986956][T17706] netlink: 'syz.9.4225': attribute type 21 has an invalid length.
[  841.011826][T17706] netlink: 132 bytes leftover after parsing attributes in process `syz.9.4225'.
[  841.523129][T17703] FAULT_INJECTION: forcing a failure.
[  841.523129][T17703] name failslab, interval 1, probability 0, space 0, times 0
[  841.539350][T17703] CPU: 1 PID: 17703 Comm: syz.2.4224 Not tainted 6.6.102-syzkaller #0
[  841.547595][T17703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  841.557731][T17703] Call Trace:
[  841.561075][T17703]  <TASK>
[  841.564053][T17703]  dump_stack_lvl+0x16c/0x230
[  841.568785][T17703]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  841.574997][T17703]  ? show_regs_print_info+0x20/0x20
[  841.580243][T17703]  ? load_image+0x3b0/0x3b0
[  841.584856][T17703]  should_fail_ex+0x39d/0x4d0
[  841.589608][T17703]  should_failslab+0x9/0x20
[  841.594155][T17703]  slab_pre_alloc_hook+0x59/0x310
[  841.599257][T17703]  kmem_cache_alloc+0x5a/0x2e0
[  841.604064][T17703]  ? skb_clone+0x1eb/0x370
[  841.608554][T17703]  skb_clone+0x1eb/0x370
[  841.612861][T17703]  __netlink_deliver_tap+0x41c/0x830
[  841.618238][T17703]  ? netlink_deliver_tap+0x2e/0x1b0
[  841.623492][T17703]  netlink_deliver_tap+0x19c/0x1b0
[  841.628656][T17703]  netlink_unicast+0x72c/0x8d0
[  841.633516][T17703]  netlink_sendmsg+0x8c1/0xbe0
[  841.638379][T17703]  ? lockdep_hardirqs_on+0x98/0x150
[  841.643653][T17703]  ? netlink_getsockopt+0x580/0x580
[  841.648954][T17703]  ? netlink_getsockopt+0x580/0x580
[  841.654197][T17703]  ____sys_sendmsg+0x5bf/0x950
[  841.659050][T17703]  ? __asan_memset+0x22/0x40
[  841.663687][T17703]  ? __sys_sendmsg_sock+0x30/0x30
[  841.668754][T17703]  ? __import_iovec+0x5f2/0x860
[  841.673692][T17703]  ? import_iovec+0x73/0xa0
[  841.678266][T17703]  ___sys_sendmsg+0x220/0x290
[  841.683004][T17703]  ? __sys_sendmsg+0x270/0x270
[  841.688035][T17703]  __se_sys_sendmsg+0x1a5/0x270
[  841.692980][T17703]  ? __x64_sys_sendmsg+0x80/0x80
[  841.698073][T17703]  ? syscall_enter_from_user_mode+0x2e/0x80
[  841.704058][T17703]  do_syscall_64+0x55/0xb0
[  841.708656][T17703]  ? clear_bhb_loop+0x40/0x90
[  841.713399][T17703]  ? clear_bhb_loop+0x40/0x90
[  841.718145][T17703]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  841.724091][T17703] RIP: 0033:0x7f73fdd8ebe9
[  841.728554][T17703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  841.748209][T17703] RSP: 002b:00007f73fbff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  841.756717][T17703] RAX: ffffffffffffffda RBX: 00007f73fdfb5fa0 RCX: 00007f73fdd8ebe9
[  841.764753][T17703] RDX: 0000000020004080 RSI: 0000200000000040 RDI: 0000000000000003
[  841.772780][T17703] RBP: 00007f73fbff6090 R08: 0000000000000000 R09: 0000000000000000
[  841.780793][T17703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  841.788805][T17703] R13: 00007f73fdfb6038 R14: 00007f73fdfb5fa0 R15: 00007fff138d7d98
[  841.796885][T17703]  </TASK>
[  841.826538][T17719] netlink: 'syz.6.4230': attribute type 3 has an invalid length.
[  841.834377][T17719] netlink: 130984 bytes leftover after parsing attributes in process `syz.6.4230'.
[  842.854798][T17741] netlink: 'syz.7.4237': attribute type 21 has an invalid length.
[  842.870127][T17741] netlink: 132 bytes leftover after parsing attributes in process `syz.7.4237'.
[  843.170219][T17757] netlink: 'syz.7.4243': attribute type 3 has an invalid length.
[  843.194560][T17757] netlink: 130984 bytes leftover after parsing attributes in process `syz.7.4243'.
[  844.040218][ T5796] Bluetooth: hci0: unexpected event 0x12 length: 15 > 8
[  844.058408][ T5796] Bluetooth: hci4: unexpected event 0x12 length: 15 > 8
[  844.184232][T17777] netlink: 6387 bytes leftover after parsing attributes in process `syz.2.4250'.
[  844.437172][T17781] netlink: 'syz.6.4252': attribute type 21 has an invalid length.
[  844.445151][T17781] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4252'.
[  844.562107][T17790] netlink: 'syz.9.4255': attribute type 3 has an invalid length.
[  844.608642][T17790] netlink: 130984 bytes leftover after parsing attributes in process `syz.9.4255'.
[  845.463480][ T5796] Bluetooth: hci4: unexpected event 0x12 length: 15 > 8
[  846.171065][T17824] netlink: 'syz.2.4266': attribute type 21 has an invalid length.
[  846.193011][T17824] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4266'.
[  846.518320][T17840] netlink: 'syz.2.4270': attribute type 3 has an invalid length.
[  846.548853][T17840] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.4270'.
[  846.844115][ T5796] Bluetooth: hci0: unexpected event 0x12 length: 15 > 8
[  847.433964][T17861] netlink: 'syz.9.4279': attribute type 21 has an invalid length.
[  847.475197][T17861] netlink: 132 bytes leftover after parsing attributes in process `syz.9.4279'.
[  847.906779][T17874] netlink: 'syz.9.4284': attribute type 3 has an invalid length.
[  847.932911][T17874] netlink: 130984 bytes leftover after parsing attributes in process `syz.9.4284'.
[  848.113419][T17884] netlink: 'syz.9.4288': attribute type 10 has an invalid length.
[  848.141711][T17884] netlink: 168 bytes leftover after parsing attributes in process `syz.9.4288'.
[  848.183636][T17885] netlink: 6 bytes leftover after parsing attributes in process `syz.9.4288'.
[  848.219521][T17885] openvswitch: netlink: Flow key attr not present in new flow.
[  848.356019][ T5796] Bluetooth: hci0: unexpected event 0x12 length: 15 > 8
[  848.803035][T17900] netlink: 'syz.9.4292': attribute type 21 has an invalid length.
[  848.853367][T17900] netlink: 132 bytes leftover after parsing attributes in process `syz.9.4292'.
[  848.872127][T17904] FAULT_INJECTION: forcing a failure.
[  848.872127][T17904] name failslab, interval 1, probability 0, space 0, times 0
[  848.889957][T17904] CPU: 1 PID: 17904 Comm: syz.6.4294 Not tainted 6.6.102-syzkaller #0
[  848.898166][T17904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  848.908255][T17904] Call Trace:
[  848.911565][T17904]  <TASK>
[  848.914526][T17904]  dump_stack_lvl+0x16c/0x230
[  848.919245][T17904]  ? show_regs_print_info+0x20/0x20
[  848.924487][T17904]  ? load_image+0x3b0/0x3b0
[  848.929044][T17904]  ? __lock_acquire+0x7c80/0x7c80
[  848.934135][T17904]  should_fail_ex+0x39d/0x4d0
[  848.938873][T17904]  should_failslab+0x9/0x20
[  848.943430][T17904]  slab_pre_alloc_hook+0x59/0x310
[  848.948501][T17904]  ? sock_write_iter+0x2bb/0x3f0
[  848.953480][T17904]  ? vfs_write+0x43b/0x940
[  848.957935][T17904]  ? ksys_write+0x147/0x250
[  848.962488][T17904]  kmem_cache_alloc_node+0x60/0x330
[  848.967728][T17904]  ? alloc_vmap_area+0x1c4/0x1c70
[  848.972794][T17904]  alloc_vmap_area+0x1c4/0x1c70
[  848.977712][T17904]  ? vm_map_ram+0xcb0/0xcb0
[  848.982259][T17904]  ? rcu_is_watching+0x15/0xb0
[  848.987146][T17904]  __get_vm_area_node+0x162/0x370
[  848.992235][T17904]  __vmalloc_node_range+0x36e/0x1320
[  848.997571][T17904]  ? netlink_sendmsg+0x5f3/0xbe0
[  849.002545][T17904]  ? netlink_insert+0x106a/0x1370
[  849.007619][T17904]  ? netlink_insert+0x2b3/0x1370
[  849.012596][T17904]  ? netlink_data_ready+0x10/0x10
[  849.017671][T17904]  ? free_vm_area+0x50/0x50
[  849.022222][T17904]  ? netlink_sendmsg+0x5f3/0xbe0
[  849.027196][T17904]  vmalloc+0x79/0x90
[  849.031136][T17904]  ? netlink_sendmsg+0x5f3/0xbe0
[  849.036106][T17904]  netlink_sendmsg+0x5f3/0xbe0
[  849.040926][T17904]  ? netlink_getsockopt+0x580/0x580
[  849.046167][T17904]  ? aa_sock_msg_perm+0x94/0x150
[  849.051154][T17904]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  849.056474][T17904]  ? security_socket_sendmsg+0x80/0xa0
[  849.062069][T17904]  sock_write_iter+0x2bb/0x3f0
[  849.066880][T17904]  ? sock_read_iter+0x3b0/0x3b0
[  849.071778][T17904]  ? common_file_perm+0x198/0x1f0
[  849.076845][T17904]  vfs_write+0x43b/0x940
[  849.081130][T17904]  ? file_end_write+0x250/0x250
[  849.086021][T17904]  ? __fget_files+0x44a/0x4d0
[  849.090759][T17904]  ? __fdget_pos+0x1d8/0x330
[  849.095387][T17904]  ? ksys_write+0x75/0x250
[  849.099848][T17904]  ksys_write+0x147/0x250
[  849.104216][T17904]  ? __ia32_sys_read+0x90/0x90
[  849.109017][T17904]  ? lockdep_hardirqs_on+0x98/0x150
[  849.114311][T17904]  do_syscall_64+0x55/0xb0
[  849.118760][T17904]  ? clear_bhb_loop+0x40/0x90
[  849.123471][T17904]  ? clear_bhb_loop+0x40/0x90
[  849.128260][T17904]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  849.134191][T17904] RIP: 0033:0x7f73f298ebe9
[  849.138635][T17904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  849.158284][T17904] RSP: 002b:00007f73f3748038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  849.166743][T17904] RAX: ffffffffffffffda RBX: 00007f73f2bb5fa0 RCX: 00007f73f298ebe9
[  849.174756][T17904] RDX: 000000000000fe33 RSI: 0000200000000040 RDI: 0000000000000003
[  849.182756][T17904] RBP: 00007f73f3748090 R08: 0000000000000000 R09: 0000000000000000
[  849.190757][T17904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  849.198790][T17904] R13: 00007f73f2bb6038 R14: 00007f73f2bb5fa0 R15: 00007ffc06486b98
[  849.206811][T17904]  </TASK>
[  849.293905][T17904] syz.6.4294: vmalloc error: size 65408, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz6,mems_allowed=0-1
[  849.364444][T17904] CPU: 1 PID: 17904 Comm: syz.6.4294 Not tainted 6.6.102-syzkaller #0
[  849.372671][T17904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  849.382759][T17904] Call Trace:
[  849.386090][T17904]  <TASK>
[  849.389048][T17904]  dump_stack_lvl+0x16c/0x230
[  849.393771][T17904]  ? show_regs_print_info+0x20/0x20
[  849.399000][T17904]  ? load_image+0x3b0/0x3b0
[  849.403555][T17904]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  849.410000][T17904]  ? cpuset_print_current_mems_allowed+0x2e3/0x360
[  849.416543][T17904]  warn_alloc+0x210/0x300
[  849.420925][T17904]  ? slab_free_freelist_hook+0x130/0x1b0
[  849.426598][T17904]  ? zone_watermark_ok_safe+0x230/0x230
[  849.432181][T17904]  ? __get_vm_area_node+0x17b/0x370
[  849.437420][T17904]  ? __get_vm_area_node+0x17b/0x370
[  849.442659][T17904]  __vmalloc_node_range+0x393/0x1320
[  849.447981][T17904]  ? netlink_insert+0x106a/0x1370
[  849.453061][T17904]  ? netlink_insert+0x2b3/0x1370
[  849.458043][T17904]  ? netlink_data_ready+0x10/0x10
[  849.463113][T17904]  ? free_vm_area+0x50/0x50
[  849.467669][T17904]  ? netlink_sendmsg+0x5f3/0xbe0
[  849.472635][T17904]  vmalloc+0x79/0x90
[  849.476563][T17904]  ? netlink_sendmsg+0x5f3/0xbe0
[  849.481533][T17904]  netlink_sendmsg+0x5f3/0xbe0
[  849.486344][T17904]  ? netlink_getsockopt+0x580/0x580
[  849.491578][T17904]  ? aa_sock_msg_perm+0x94/0x150
[  849.496548][T17904]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  849.501863][T17904]  ? security_socket_sendmsg+0x80/0xa0
[  849.507359][T17904]  sock_write_iter+0x2bb/0x3f0
[  849.512161][T17904]  ? sock_read_iter+0x3b0/0x3b0
[  849.517069][T17904]  ? common_file_perm+0x198/0x1f0
[  849.522142][T17904]  vfs_write+0x43b/0x940
[  849.526435][T17904]  ? file_end_write+0x250/0x250
[  849.531341][T17904]  ? __fget_files+0x44a/0x4d0
[  849.536080][T17904]  ? __fdget_pos+0x1d8/0x330
[  849.540712][T17904]  ? ksys_write+0x75/0x250
[  849.545168][T17904]  ksys_write+0x147/0x250
[  849.549538][T17904]  ? __ia32_sys_read+0x90/0x90
[  849.554341][T17904]  ? lockdep_hardirqs_on+0x98/0x150
[  849.559576][T17904]  do_syscall_64+0x55/0xb0
[  849.564019][T17904]  ? clear_bhb_loop+0x40/0x90
[  849.568727][T17904]  ? clear_bhb_loop+0x40/0x90
[  849.573430][T17904]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  849.579360][T17904] RIP: 0033:0x7f73f298ebe9
[  849.583895][T17904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  849.603543][T17904] RSP: 002b:00007f73f3748038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  849.612012][T17904] RAX: ffffffffffffffda RBX: 00007f73f2bb5fa0 RCX: 00007f73f298ebe9
[  849.620037][T17904] RDX: 000000000000fe33 RSI: 0000200000000040 RDI: 0000000000000003
[  849.628064][T17904] RBP: 00007f73f3748090 R08: 0000000000000000 R09: 0000000000000000
[  849.636085][T17904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  849.644105][T17904] R13: 00007f73f2bb6038 R14: 00007f73f2bb5fa0 R15: 00007ffc06486b98
[  849.652137][T17904]  </TASK>
[  849.776117][T17904] Mem-Info:
[  849.779311][T17904] active_anon:13456 inactive_anon:0 isolated_anon:0
[  849.779311][T17904]  active_file:19358 inactive_file:40140 isolated_file:0
[  849.779311][T17904]  unevictable:768 dirty:339 writeback:0
[  849.779311][T17904]  slab_reclaimable:11367 slab_unreclaimable:96853
[  849.779311][T17904]  mapped:28037 shmem:6977 pagetables:450
[  849.779311][T17904]  sec_pagetables:0 bounce:0
[  849.779311][T17904]  kernel_misc_reclaimable:0
[  849.779311][T17904]  free:1330898 free_pcp:12292 free_cma:0
[  849.835522][T17904] Node 0 active_anon:54124kB inactive_anon:0kB active_file:77432kB inactive_file:160356kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:112348kB dirty:1356kB writeback:0kB shmem:26572kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10220kB pagetables:1800kB sec_pagetables:0kB all_unreclaimable? no
[  849.891246][T17904] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  849.952332][T17914] netlink: 'syz.7.4297': attribute type 3 has an invalid length.
[  849.960506][T17904] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  849.996325][T17914] netlink: 130984 bytes leftover after parsing attributes in process `syz.7.4297'.
[  850.035399][T17904] lowmem_reserve[]: 0 2525 2526 2526 2526
[  850.041329][T17904] Node 0 DMA32 free:1416760kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:60176kB inactive_anon:0kB active_file:77432kB inactive_file:159032kB unevictable:1536kB writepending:1352kB present:3129332kB managed:2589596kB mlocked:0kB bounce:0kB free_pcp:24536kB local_pcp:15528kB free_cma:0kB
[  850.092392][T17904] lowmem_reserve[]: 0 0 1 1 1
[  850.105411][T17904] Node 0 Normal free:4kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1324kB unevictable:0kB writepending:4kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB
[  850.195532][T17904] lowmem_reserve[]: 0 0 0 0 0
[  850.200345][T17904] Node 1 Normal free:3884440kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:24240kB local_pcp:11344kB free_cma:0kB
[  850.245643][T17904] lowmem_reserve[]: 0 0 0 0 0
[  850.250768][T17904] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  850.273694][T17904] Node 0 DMA32: 660*4kB (UME) 8*8kB (UME) 372*16kB (UME) 356*32kB (UE) 480*64kB (UM) 119*128kB (UME) 104*256kB (UM) 65*512kB (UME) 33*1024kB (UM) 9*2048kB (UME) 301*4096kB (UM) = 1411024kB
[  850.298222][T17919] netlink: 132 bytes leftover after parsing attributes in process `syz.7.4300'.
[  850.320330][T17904] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB
[  850.340079][T17904] Node 1 Normal: 258*4kB (UE) 64*8kB (UME) 43*16kB (UME) 59*32kB (UME) 14*64kB (UE) 4*128kB (UME) 0*256kB 2*512kB (UM) 1*1024kB (E) 1*2048kB (E) 946*4096kB (M) = 3884440kB
[  850.377611][T17919] netlink: 'syz.7.4300': attribute type 2 has an invalid length.
[  850.394077][T17904] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  850.403801][T17919] netlink: 132 bytes leftover after parsing attributes in process `syz.7.4300'.
[  850.413169][T17904] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  850.435597][T17904] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  850.450791][T17904] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  850.480614][T17904] 70223 total pagecache pages
[  850.490880][T17904] 0 pages in swap cache
[  850.495071][T17904] Free swap  = 124996kB
[  850.525583][T17904] Total swap = 124996kB
[  850.529799][T17904] 2097051 pages RAM
[  850.533623][T17904] 0 pages HighMem/MovableOnly
[  850.575598][T17904] 416138 pages reserved
[  850.583674][T17904] 0 pages cma reserved
[  851.191925][T17935] netlink: 'syz.2.4305': attribute type 21 has an invalid length.
[  851.211607][T17935] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4305'.
[  852.066774][T17954] netlink: 'syz.2.4310': attribute type 3 has an invalid length.
[  852.075123][T17954] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.4310'.
[  852.104395][T17956] netlink: 'syz.6.4311': attribute type 3 has an invalid length.
[  852.129129][T17956] netlink: 13435 bytes leftover after parsing attributes in process `syz.6.4311'.
[  852.309017][T17963] FAULT_INJECTION: forcing a failure.
[  852.309017][T17963] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  852.334226][T17963] CPU: 0 PID: 17963 Comm: syz.2.4315 Not tainted 6.6.102-syzkaller #0
[  852.342449][T17963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  852.352554][T17963] Call Trace:
[  852.355863][T17963]  <TASK>
[  852.358825][T17963]  dump_stack_lvl+0x16c/0x230
[  852.363550][T17963]  ? show_regs_print_info+0x20/0x20
[  852.368787][T17963]  ? load_image+0x3b0/0x3b0
[  852.373336][T17963]  ? __lock_acquire+0x7c80/0x7c80
[  852.378388][T17963]  ? __local_bh_enable_ip+0x12e/0x1c0
[  852.383776][T17963]  should_fail_ex+0x39d/0x4d0
[  852.388468][T17963]  _copy_from_user+0x2f/0xe0
[  852.393074][T17963]  copy_from_sockptr+0x69/0x80
[  852.397856][T17963]  do_ipv6_setsockopt+0xd37/0x3c30
[  852.402990][T17963]  ? sk_dst_reset+0xa0/0xa0
[  852.407502][T17963]  ? mark_lock+0x94/0x320
[  852.411840][T17963]  ? __lock_acquire+0x1260/0x7c80
[  852.416897][T17963]  ? verify_lock_unused+0x140/0x140
[  852.422115][T17963]  ? mark_lock+0x94/0x320
[  852.426458][T17963]  ? __lock_acquire+0x1260/0x7c80
[  852.431511][T17963]  ? aa_label_sk_perm+0x3ec/0x500
[  852.436547][T17963]  ? get_pid_task+0x20/0x1e0
[  852.441152][T17963]  ? aa_sk_perm+0x930/0x930
[  852.445684][T17963]  ? __might_sleep+0xe0/0xe0
[  852.450299][T17963]  ipv6_setsockopt+0x59/0x190
[  852.454993][T17963]  dccp_setsockopt+0x160/0x830
[  852.459767][T17963]  ? aa_af_perm+0x2b0/0x2b0
[  852.464283][T17963]  ? dccp_ioctl+0x200/0x200
[  852.468794][T17963]  ? __fget_files+0x28/0x4d0
[  852.473394][T17963]  ? aa_sock_opt_perm+0x74/0x100
[  852.478345][T17963]  ? sock_common_setsockopt+0x36/0xc0
[  852.483752][T17963]  ? sock_common_recvmsg+0x1b0/0x1b0
[  852.489068][T17963]  do_sock_setsockopt+0x175/0x1a0
[  852.494135][T17963]  ? __fdget+0x180/0x210
[  852.498398][T17963]  __x64_sys_setsockopt+0x184/0x200
[  852.503614][T17963]  do_syscall_64+0x55/0xb0
[  852.508048][T17963]  ? clear_bhb_loop+0x40/0x90
[  852.512731][T17963]  ? clear_bhb_loop+0x40/0x90
[  852.517418][T17963]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  852.523325][T17963] RIP: 0033:0x7f73fdd8ebe9
[  852.527752][T17963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  852.547369][T17963] RSP: 002b:00007f73fbff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  852.555970][T17963] RAX: ffffffffffffffda RBX: 00007f73fdfb5fa0 RCX: 00007f73fdd8ebe9
[  852.563954][T17963] RDX: 000000000000001b RSI: 0000000000000029 RDI: 0000000000000003
[  852.571932][T17963] RBP: 00007f73fbff6090 R08: 0000000000000120 R09: 0000000000000000
[  852.579911][T17963] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001
[  852.587890][T17963] R13: 00007f73fdfb6038 R14: 00007f73fdfb5fa0 R15: 00007fff138d7d98
[  852.595886][T17963]  </TASK>
[  852.912630][ T5796] Bluetooth: hci0: unexpected event 0x20 length: 15 > 7
[  853.018158][T17972] netlink: 'syz.6.4318': attribute type 21 has an invalid length.
[  853.096673][T17972] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4318'.
[  853.337886][T17987] netlink: 'syz.6.4323': attribute type 3 has an invalid length.
[  853.372248][T17987] netlink: 13435 bytes leftover after parsing attributes in process `syz.6.4323'.
[  853.424417][T17991] netlink: 'syz.2.4325': attribute type 3 has an invalid length.
[  853.463242][T17991] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.4325'.
[  853.787124][ T5796] Bluetooth: hci0: unexpected event 0x12 length: 15 > 8
[  854.164584][T18007] netlink: 'syz.6.4332': attribute type 21 has an invalid length.
[  854.167956][T18010] netlink: 'syz.7.4331': attribute type 10 has an invalid length.
[  854.206848][T18007] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4332'.
[  854.228565][T18010] netlink: 3819 bytes leftover after parsing attributes in process `syz.7.4331'.
[  854.360970][T18013] netlink: 'syz.7.4331': attribute type 9 has an invalid length.
[  854.416139][T18013] netlink: 126588 bytes leftover after parsing attributes in process `syz.7.4331'.
[  854.911737][T18024] netlink: 'syz.2.4337': attribute type 3 has an invalid length.
[  854.951785][T18024] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.4337'.
[  855.320221][T18035] syzkaller0: entered promiscuous mode
[  855.344181][T18035] syzkaller0: entered allmulticast mode
[  855.393673][T18035] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487
[  855.462749][T18039] netlink: 'syz.2.4341': attribute type 10 has an invalid length.
[  855.497481][T18039] netlink: 'syz.2.4341': attribute type 10 has an invalid length.
[  855.726404][T18041] netlink: 'syz.9.4343': attribute type 21 has an invalid length.
[  855.734341][T18041] netlink: 132 bytes leftover after parsing attributes in process `syz.9.4343'.
[  856.819618][T18065] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.4351'.
[  857.208389][T18075] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4355'.
[  857.472094][ T5796] Bluetooth: hci0: unexpected event 0x12 length: 15 > 8
[  858.480126][T18096] validate_nla: 2 callbacks suppressed
[  858.480145][T18096] netlink: 'syz.7.4363': attribute type 3 has an invalid length.
[  858.531725][T18096] netlink: 130984 bytes leftover after parsing attributes in process `syz.7.4363'.
[  858.676517][T18100] netlink: 'syz.2.4365': attribute type 21 has an invalid length.
[  858.684452][T18100] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4365'.
[  859.245031][T18119] FAULT_INJECTION: forcing a failure.
[  859.245031][T18119] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  859.293274][T18119] CPU: 0 PID: 18119 Comm: syz.7.4371 Not tainted 6.6.102-syzkaller #0
[  859.301509][T18119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  859.311612][T18119] Call Trace:
[  859.314920][T18119]  <TASK>
[  859.317877][T18119]  dump_stack_lvl+0x16c/0x230
[  859.322598][T18119]  ? show_regs_print_info+0x20/0x20
[  859.327853][T18119]  ? load_image+0x3b0/0x3b0
[  859.332414][T18119]  ? __lock_acquire+0x7c80/0x7c80
[  859.337484][T18119]  ? snprintf+0xdb/0x120
[  859.341770][T18119]  should_fail_ex+0x39d/0x4d0
[  859.346500][T18119]  _copy_to_user+0x2f/0xa0
[  859.350945][T18119]  simple_read_from_buffer+0xe7/0x150
[  859.356351][T18119]  proc_fail_nth_read+0x1e3/0x250
[  859.361400][T18119]  ? proc_fault_inject_write+0x340/0x340
[  859.367056][T18119]  ? fsnotify_perm+0x271/0x5e0
[  859.371836][T18119]  ? proc_fault_inject_write+0x340/0x340
[  859.377482][T18119]  vfs_read+0x27e/0x920
[  859.381680][T18119]  ? kernel_read+0x1e0/0x1e0
[  859.386284][T18119]  ? __fget_files+0x28/0x4d0
[  859.390893][T18119]  ? __fget_files+0x44a/0x4d0
[  859.395592][T18119]  ? __fdget_pos+0x2a3/0x330
[  859.400193][T18119]  ? ksys_read+0x75/0x250
[  859.404554][T18119]  ksys_read+0x147/0x250
[  859.408815][T18119]  ? vfs_write+0x940/0x940
[  859.413248][T18119]  ? lockdep_hardirqs_on+0x98/0x150
[  859.418461][T18119]  do_syscall_64+0x55/0xb0
[  859.422887][T18119]  ? clear_bhb_loop+0x40/0x90
[  859.427571][T18119]  ? clear_bhb_loop+0x40/0x90
[  859.432258][T18119]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  859.438167][T18119] RIP: 0033:0x7fdeef58d5fc
[  859.442598][T18119] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  859.462217][T18119] RSP: 002b:00007fdef03b8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  859.470640][T18119] RAX: ffffffffffffffda RBX: 00007fdeef7b5fa0 RCX: 00007fdeef58d5fc
[  859.478617][T18119] RDX: 000000000000000f RSI: 00007fdef03b80a0 RDI: 0000000000000003
[  859.486593][T18119] RBP: 00007fdef03b8090 R08: 0000000000000000 R09: 0000000000000000
[  859.494572][T18119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  859.502550][T18119] R13: 00007fdeef7b6038 R14: 00007fdeef7b5fa0 R15: 00007ffe9a4c0048
[  859.510544][T18119]  </TASK>
[  859.786220][T18130] netlink: 'syz.2.4376': attribute type 21 has an invalid length.
[  859.799270][T18128] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4375'.
[  859.804601][T18134] netlink: 'syz.6.4377': attribute type 3 has an invalid length.
[  859.814328][T18130] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4376'.
[  859.825455][T18134] netlink: 130984 bytes leftover after parsing attributes in process `syz.6.4377'.
[  859.834265][T18128] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4375'.
[  859.921227][T18131] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4375'.
[  860.027028][T18136] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4375'.
[  861.909735][T18166] netlink: 'syz.2.4387': attribute type 3 has an invalid length.
[  861.936565][T18166] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.4387'.
[  862.050708][T18168] netlink: 'syz.9.4388': attribute type 21 has an invalid length.
[  862.058826][T18168] netlink: 132 bytes leftover after parsing attributes in process `syz.9.4388'.
[  862.400998][ T5796] Bluetooth: hci4: unexpected event 0x0f length: 15 > 4
[  862.401042][ T5796] Bluetooth: hci4: unexpected event for opcode 0x0000
[  863.004619][T18201] hsr_slave_0: left promiscuous mode
[  863.020638][T18201] hsr_slave_1: left promiscuous mode
[  863.034331][T18203] netlink: 'syz.2.4400': attribute type 3 has an invalid length.
[  863.192578][T18209] FAULT_INJECTION: forcing a failure.
[  863.192578][T18209] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  863.223297][T18209] CPU: 0 PID: 18209 Comm: syz.2.4402 Not tainted 6.6.102-syzkaller #0
[  863.231531][T18209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  863.241624][T18209] Call Trace:
[  863.244945][T18209]  <TASK>
[  863.247907][T18209]  dump_stack_lvl+0x16c/0x230
[  863.250050][T18211] netlink: 'syz.9.4403': attribute type 21 has an invalid length.
[  863.252609][T18209]  ? show_regs_print_info+0x20/0x20
[  863.252641][T18209]  ? load_image+0x3b0/0x3b0
[  863.270219][T18209]  ? __might_fault+0xaa/0x120
[  863.274928][T18209]  ? __lock_acquire+0x7c80/0x7c80
[  863.279976][T18209]  should_fail_ex+0x39d/0x4d0
[  863.284685][T18209]  _copy_from_user+0x2f/0xe0
[  863.289297][T18209]  __sys_bpf+0x1e9/0x800
[  863.293555][T18209]  ? bpf_link_show_fdinfo+0x350/0x350
[  863.298948][T18209]  ? lock_chain_count+0x20/0x20
[  863.303814][T18209]  __x64_sys_bpf+0x7c/0x90
[  863.308243][T18209]  do_syscall_64+0x55/0xb0
[  863.312670][T18209]  ? clear_bhb_loop+0x40/0x90
[  863.317353][T18209]  ? clear_bhb_loop+0x40/0x90
[  863.322039][T18209]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  863.327950][T18209] RIP: 0033:0x7f73fdd8ebe9
[  863.332381][T18209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  863.352000][T18209] RSP: 002b:00007f73fbff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  863.360446][T18209] RAX: ffffffffffffffda RBX: 00007f73fdfb5fa0 RCX: 00007f73fdd8ebe9
[  863.368423][T18209] RDX: 0000000000000094 RSI: 00002000000002c0 RDI: 0000000000000005
[  863.376404][T18209] RBP: 00007f73fbff6090 R08: 0000000000000000 R09: 0000000000000000
[  863.384382][T18209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  863.392360][T18209] R13: 00007f73fdfb6038 R14: 00007f73fdfb5fa0 R15: 00007fff138d7d98
[  863.400359][T18209]  </TASK>
[  863.699715][T18223] __nla_validate_parse: 3 callbacks suppressed
[  863.699737][T18223] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4407'.
[  863.845820][ T5796] Bluetooth: hci0: unexpected event 0x12 length: 15 > 8
[  863.873233][ T5796] Bluetooth: hci4: unexpected event 0x10 length: 15 > 1
[  863.883438][ T5796] Bluetooth: hci4: hardware error 0x0f
[  864.081946][T18229] netlink: 'syz.6.4409': attribute type 41 has an invalid length.
[  864.113388][T18229] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.4409'.
[  864.280027][T18234] netlink: 'syz.7.4411': attribute type 3 has an invalid length.
[  864.311836][T18234] netlink: 130984 bytes leftover after parsing attributes in process `syz.7.4411'.
[  864.617483][T18245] netlink: 'syz.7.4415': attribute type 21 has an invalid length.
[  864.653561][T18245] netlink: 132 bytes leftover after parsing attributes in process `syz.7.4415'.
[  865.520214][ T5798] Bluetooth: hci4: unexpected event 0x12 length: 15 > 8
[  865.848765][T18273] netlink: 'syz.2.4424': attribute type 3 has an invalid length.
[  865.875506][T18273] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.4424'.
[  865.982548][ T5796] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  866.665163][T18278] netlink: 'syz.9.4425': attribute type 3 has an invalid length.
[  866.695531][T18278] netlink: 130984 bytes leftover after parsing attributes in process `syz.9.4425'.
[  866.798737][T18286] netlink: 'syz.2.4429': attribute type 21 has an invalid length.
[  866.815543][T18286] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4429'.
[  867.709409][T18309] netlink: 'syz.6.4437': attribute type 3 has an invalid length.
[  867.718677][T18309] netlink: 130984 bytes leftover after parsing attributes in process `syz.6.4437'.
[  867.861162][T18317] FAULT_INJECTION: forcing a failure.
[  867.861162][T18317] name failslab, interval 1, probability 0, space 0, times 0
[  867.875465][T18317] CPU: 1 PID: 18317 Comm: syz.6.4439 Not tainted 6.6.102-syzkaller #0
[  867.884104][T18317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  867.894199][T18317] Call Trace:
[  867.897520][T18317]  <TASK>
[  867.900479][T18317]  dump_stack_lvl+0x16c/0x230
[  867.905208][T18317]  ? show_regs_print_info+0x20/0x20
[  867.910445][T18317]  ? load_image+0x3b0/0x3b0
[  867.915007][T18317]  ? __might_sleep+0xe0/0xe0
[  867.919642][T18317]  ? __lock_acquire+0x7c80/0x7c80
[  867.924721][T18317]  should_fail_ex+0x39d/0x4d0
[  867.929460][T18317]  should_failslab+0x9/0x20
[  867.934027][T18317]  slab_pre_alloc_hook+0x59/0x310
[  867.939140][T18317]  ? __inet_diag_dump_start+0x8b/0x9e0
[  867.944662][T18317]  __kmem_cache_alloc_node+0x53/0x260
[  867.950109][T18317]  ? __inet_diag_dump_start+0x8b/0x9e0
[  867.955628][T18317]  kmalloc_trace+0x2a/0xe0
[  867.959797][T18319] netlink: 'syz.7.4440': attribute type 21 has an invalid length.
[  867.960074][T18317]  __inet_diag_dump_start+0x8b/0x9e0
[  867.971441][T18319] netlink: 132 bytes leftover after parsing attributes in process `syz.7.4440'.
[  867.973190][T18317]  ? netlink_lookup+0x30/0x200
[  867.987056][T18317]  ? netlink_lookup+0x30/0x200
[  867.991870][T18317]  __netlink_dump_start+0x4a9/0x810
[  867.997138][T18317]  inet_diag_handler_cmd+0x1c0/0x290
[  868.002489][T18317]  ? inet_diag_unregister+0xb0/0xb0
[  868.007736][T18317]  ? inet_diag_handler_get_info+0x770/0x770
[  868.013670][T18317]  ? inet_diag_dump_start+0x20/0x20
[  868.018908][T18317]  ? inet_diag_dump+0x50/0x50
[  868.023624][T18317]  ? sock_diag_lock_handler+0x19/0x280
[  868.029107][T18317]  ? sock_diag_lock_handler+0x19/0x280
[  868.034587][T18317]  ? inet_diag_unregister+0xb0/0xb0
[  868.039810][T18317]  sock_diag_rcv_msg+0x3d8/0x600
[  868.044780][T18317]  netlink_rcv_skb+0x216/0x480
[  868.049563][T18317]  ? sock_diag_bind+0xb0/0xb0
[  868.054274][T18317]  ? netlink_ack+0x1110/0x1110
[  868.059063][T18317]  ? __lock_acquire+0x7c80/0x7c80
[  868.064106][T18317]  ? netlink_deliver_tap+0x2e/0x1b0
[  868.069317][T18317]  sock_diag_rcv+0x2a/0x40
[  868.073744][T18317]  netlink_unicast+0x751/0x8d0
[  868.078528][T18317]  netlink_sendmsg+0x8c1/0xbe0
[  868.083312][T18317]  ? netlink_getsockopt+0x580/0x580
[  868.088528][T18317]  ? aa_sock_msg_perm+0x94/0x150
[  868.093480][T18317]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  868.098778][T18317]  ? security_socket_sendmsg+0x80/0xa0
[  868.104246][T18317]  ? netlink_getsockopt+0x580/0x580
[  868.109458][T18317]  ____sys_sendmsg+0x5bf/0x950
[  868.114263][T18317]  ? __asan_memset+0x22/0x40
[  868.118868][T18317]  ? __sys_sendmsg_sock+0x30/0x30
[  868.123937][T18317]  ? __import_iovec+0x5f2/0x860
[  868.128810][T18317]  ? import_iovec+0x73/0xa0
[  868.133328][T18317]  ___sys_sendmsg+0x220/0x290
[  868.138021][T18317]  ? __sys_sendmsg+0x270/0x270
[  868.142814][T18317]  ? __lock_acquire+0x7c80/0x7c80
[  868.147869][T18317]  __se_sys_sendmsg+0x1a5/0x270
[  868.152732][T18317]  ? __x64_sys_sendmsg+0x80/0x80
[  868.157694][T18317]  ? lockdep_hardirqs_on+0x98/0x150
[  868.162911][T18317]  do_syscall_64+0x55/0xb0
[  868.167338][T18317]  ? clear_bhb_loop+0x40/0x90
[  868.172025][T18317]  ? clear_bhb_loop+0x40/0x90
[  868.176719][T18317]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  868.182629][T18317] RIP: 0033:0x7f73f298ebe9
[  868.187058][T18317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  868.206687][T18317] RSP: 002b:00007f73f3748038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  868.215113][T18317] RAX: ffffffffffffffda RBX: 00007f73f2bb5fa0 RCX: 00007f73f298ebe9
[  868.223097][T18317] RDX: 0000000000000000 RSI: 0000200000000640 RDI: 0000000000000004
[  868.231079][T18317] RBP: 00007f73f3748090 R08: 0000000000000000 R09: 0000000000000000
[  868.239145][T18317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  868.247139][T18317] R13: 00007f73f2bb6038 R14: 00007f73f2bb5fa0 R15: 00007ffc06486b98
[  868.255138][T18317]  </TASK>
[  869.413405][T18346] netlink: 'syz.9.4449': attribute type 3 has an invalid length.
[  869.431057][T18346] netlink: 130984 bytes leftover after parsing attributes in process `syz.9.4449'.
[  869.604265][T18351] netlink: 'syz.6.4451': attribute type 21 has an invalid length.
[  869.616529][T18351] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4451'.
[  869.888157][T18364] netlink: 188 bytes leftover after parsing attributes in process `syz.6.4454'.
[  870.540956][ T1284] ieee802154 phy0 wpan0: encryption failed: -22
[  870.547373][ T1284] ieee802154 phy1 wpan1: encryption failed: -22
[  871.199416][T18383] netlink: 188 bytes leftover after parsing attributes in process `syz.2.4461'.
[  871.244614][T18385] netlink: 'syz.9.4462': attribute type 21 has an invalid length.
[  871.271234][T18385] netlink: 132 bytes leftover after parsing attributes in process `syz.9.4462'.
[  871.308517][T18391] netlink: 'syz.6.4463': attribute type 3 has an invalid length.
[  871.316714][T18391] netlink: 130984 bytes leftover after parsing attributes in process `syz.6.4463'.
[  872.339235][T18418] FAULT_INJECTION: forcing a failure.
[  872.339235][T18418] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  872.352999][T18418] CPU: 1 PID: 18418 Comm: syz.9.4473 Not tainted 6.6.102-syzkaller #0
[  872.361171][T18418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  872.371231][T18418] Call Trace:
[  872.374517][T18418]  <TASK>
[  872.377475][T18418]  dump_stack_lvl+0x16c/0x230
[  872.382160][T18418]  ? show_regs_print_info+0x20/0x20
[  872.387379][T18418]  ? load_image+0x3b0/0x3b0
[  872.391899][T18418]  ? __lock_acquire+0x7c80/0x7c80
[  872.396957][T18418]  should_fail_ex+0x39d/0x4d0
[  872.401684][T18418]  _copy_from_user+0x2f/0xe0
[  872.406320][T18418]  __copy_msghdr+0x3bb/0x580
[  872.410966][T18418]  ___sys_sendmsg+0x1a6/0x290
[  872.415663][T18418]  ? __sys_sendmsg+0x270/0x270
[  872.420459][T18418]  ? __lock_acquire+0x7c80/0x7c80
[  872.425517][T18418]  __se_sys_sendmsg+0x1a5/0x270
[  872.430386][T18418]  ? __x64_sys_sendmsg+0x80/0x80
[  872.435350][T18418]  ? lockdep_hardirqs_on+0x98/0x150
[  872.440568][T18418]  do_syscall_64+0x55/0xb0
[  872.444992][T18418]  ? clear_bhb_loop+0x40/0x90
[  872.449679][T18418]  ? clear_bhb_loop+0x40/0x90
[  872.454361][T18418]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  872.460300][T18418] RIP: 0033:0x7f452db8ebe9
[  872.464732][T18418] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  872.484437][T18418] RSP: 002b:00007f452ea2f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  872.492862][T18418] RAX: ffffffffffffffda RBX: 00007f452ddb5fa0 RCX: 00007f452db8ebe9
[  872.500842][T18418] RDX: 0000000020040010 RSI: 00002000000019c0 RDI: 0000000000000003
[  872.508824][T18418] RBP: 00007f452ea2f090 R08: 0000000000000000 R09: 0000000000000000
[  872.516803][T18418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  872.524782][T18418] R13: 00007f452ddb6038 R14: 00007f452ddb5fa0 R15: 00007ffc8be65b48
[  872.532780][T18418]  </TASK>
[  872.614492][T18421] netlink: 'syz.2.4474': attribute type 1 has an invalid length.
[  872.647468][T18421] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.4474'.
[  872.763364][T18424] netlink: 'syz.9.4475': attribute type 21 has an invalid length.
[  872.776090][T18429] netlink: 'syz.7.4477': attribute type 3 has an invalid length.
[  872.785718][T18424] netlink: 132 bytes leftover after parsing attributes in process `syz.9.4475'.
[  872.803453][T18429] netlink: 130984 bytes leftover after parsing attributes in process `syz.7.4477'.
[  873.508838][ T5796] Bluetooth: hci0: unexpected event 0x12 length: 15 > 8
[  873.739277][T18460] netlink: 'syz.2.4488': attribute type 21 has an invalid length.
[  873.755068][T18460] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4488'.
[  874.052855][T18472] netlink: 'syz.7.4493': attribute type 3 has an invalid length.
[  874.352214][T18483] netlink: 'syz.2.4498': attribute type 21 has an invalid length.
[  874.858005][T18499] netlink: 'syz.9.4503': attribute type 10 has an invalid length.
[  874.939673][T18505] netlink: 'syz.2.4505': attribute type 3 has an invalid length.
[  874.956691][T18505] __nla_validate_parse: 2 callbacks suppressed
[  874.956713][T18505] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.4505'.
[  875.534298][T18518] netlink: 'syz.7.4508': attribute type 39 has an invalid length.
[  875.914071][T18527] netlink: 'syz.2.4511': attribute type 21 has an invalid length.
[  875.923982][T18527] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4511'.
[  876.240999][T18539] netlink: 'syz.2.4516': attribute type 3 has an invalid length.
[  876.252149][T18539] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.4516'.
[  877.306720][T18556] netlink: 'syz.7.4522': attribute type 21 has an invalid length.
[  877.320634][T18556] netlink: 132 bytes leftover after parsing attributes in process `syz.7.4522'.
[  878.087678][T18569] netlink: 'syz.7.4533': attribute type 21 has an invalid length.
[  878.109672][T18572] netlink: 'syz.2.4525': attribute type 3 has an invalid length.
[  878.144551][T18569] netlink: 132 bytes leftover after parsing attributes in process `syz.7.4533'.
[  878.144644][T18572] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.4525'.
[  878.484037][T18583] netlink: 'syz.6.4528': attribute type 3 has an invalid length.
[  878.515502][T18583] netlink: 130984 bytes leftover after parsing attributes in process `syz.6.4528'.
[  879.824714][ T5796] Bluetooth: hci0: unexpected event 0x12 length: 15 > 8
[  880.048913][T18606] netlink: 'syz.9.4537': attribute type 21 has an invalid length.
[  880.094947][T18606] netlink: 132 bytes leftover after parsing attributes in process `syz.9.4537'.
[  880.591132][T18621] netlink: 'syz.9.4540': attribute type 3 has an invalid length.
[  880.605511][T18621] netlink: 130984 bytes leftover after parsing attributes in process `syz.9.4540'.
[  881.262970][T18630] netlink: 'syz.9.4543': attribute type 3 has an invalid length.
[  881.308032][T18630] netlink: 130984 bytes leftover after parsing attributes in process `syz.9.4543'.
[  881.404852][T18629] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4544'.
[  881.931138][T18641] netlink: 'syz.2.4548': attribute type 21 has an invalid length.
[  881.959039][T18641] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4548'.
[  883.683025][T18670] netlink: 'syz.6.4556': attribute type 3 has an invalid length.
[  883.731621][T18670] netlink: 130984 bytes leftover after parsing attributes in process `syz.6.4556'.
[  884.339427][T18679] netlink: 'syz.7.4558': attribute type 21 has an invalid length.
[  884.375560][T18679] netlink: 132 bytes leftover after parsing attributes in process `syz.7.4558'.
[  884.482488][T18681] netlink: 'syz.6.4559': attribute type 3 has an invalid length.
[  884.495539][T18681] netlink: 130984 bytes leftover after parsing attributes in process `syz.6.4559'.
[  886.726699][T18714] netlink: 'syz.2.4570': attribute type 21 has an invalid length.
[  886.734645][T18714] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4570'.
[  887.688072][T18724] syzkaller0: entered promiscuous mode
[  887.693629][T18724] syzkaller0: entered allmulticast mode
[  888.810615][ T5798] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  888.840285][ T5798] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  888.851071][ T5798] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  888.879511][ T5798] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  888.890682][ T5798] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  888.912137][ T5798] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  891.032173][ T5798] Bluetooth: hci2: command tx timeout
[  891.364558][T18748] chnl_net:caif_netlink_parms(): no params data found
[  891.432772][T18748] bridge0: port 1(bridge_slave_0) entered blocking state
[  891.440146][T18748] bridge0: port 1(bridge_slave_0) entered disabled state
[  891.449524][T18748] bridge_slave_0: entered allmulticast mode
[  891.457107][T18748] bridge_slave_0: entered promiscuous mode
[  891.464839][T18748] bridge0: port 2(bridge_slave_1) entered blocking state
[  891.472387][T18748] bridge0: port 2(bridge_slave_1) entered disabled state
[  891.479830][T18748] bridge_slave_1: entered allmulticast mode
[  891.487366][T18748] bridge_slave_1: entered promiscuous mode
[  891.519141][T18748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  891.531160][T18748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  891.566367][T18748] team0: Port device team_slave_0 added
[  891.576298][T18748] team0: Port device team_slave_1 added
[  891.603368][T18748] batman_adv: batadv0: Adding interface: batadv_slave_0
[  891.611546][T18748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  891.637795][T18748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  891.651164][T18748] batman_adv: batadv0: Adding interface: batadv_slave_1
[  891.662428][T18748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  891.690668][T18748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  891.734056][T18748] hsr_slave_0: entered promiscuous mode
[  891.742230][T18748] hsr_slave_1: entered promiscuous mode
[  891.866998][T18748] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  891.961503][T18748] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  892.043083][T18748] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  892.134584][T18748] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  892.269726][T18748] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  892.279336][T18748] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  892.290856][T18748] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  892.301903][T18748] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  892.380803][T18748] 8021q: adding VLAN 0 to HW filter on device bond0
[  892.403052][T18748] 8021q: adding VLAN 0 to HW filter on device team0
[  892.416445][T12071] bridge0: port 1(bridge_slave_0) entered blocking state
[  892.423586][T12071] bridge0: port 1(bridge_slave_0) entered forwarding state
[  892.441634][ T1108] bridge0: port 2(bridge_slave_1) entered blocking state
[  892.448821][ T1108] bridge0: port 2(bridge_slave_1) entered forwarding state
[  892.638446][T18748] 8021q: adding VLAN 0 to HW filter on device batadv0
[  892.683727][T18748] veth0_vlan: entered promiscuous mode
[  892.700995][T18748] veth1_vlan: entered promiscuous mode
[  892.732859][T18748] veth0_macvtap: entered promiscuous mode
[  892.742440][T18748] veth1_macvtap: entered promiscuous mode
[  892.761950][T18748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  892.772888][T18748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  892.782815][T18748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  892.793482][T18748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  892.803380][T18748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  892.813817][T18748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  892.823852][T18748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  892.834590][T18748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  892.847393][T18748] batman_adv: batadv0: Interface activated: batadv_slave_0
[  892.861487][T18748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  892.873836][T18748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  892.883928][T18748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  892.894412][T18748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  892.905490][T18748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  892.916093][T18748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  892.926067][T18748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  892.938136][T18748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  892.950343][T18748] batman_adv: batadv0: Interface activated: batadv_slave_1
[  892.962860][T18748] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  892.971695][T18748] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  892.980539][T18748] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  892.989368][T18748] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  893.078282][ T1108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  893.094570][ T1108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  893.102148][ T5798] Bluetooth: hci2: command tx timeout
[  893.131595][T12071] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  893.139767][T12071] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  893.260461][T18773] netlink: 'syz.2.4573': attribute type 3 has an invalid length.
[  893.305632][T18773] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.4573'.
[  893.681337][T18786] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4580'.
[  894.764687][T18795] netlink: 'syz.9.4582': attribute type 21 has an invalid length.
[  894.794095][T18795] netlink: 132 bytes leftover after parsing attributes in process `syz.9.4582'.
[  895.177870][ T5798] Bluetooth: hci2: command tx timeout
[  895.265272][ T5798] Bluetooth: hci0: unexpected event 0x12 length: 15 > 8
[  896.164742][T18819] netlink: 'syz.9.4594': attribute type 3 has an invalid length.
[  896.281045][T18819] netlink: 130984 bytes leftover after parsing attributes in process `syz.9.4594'.
[  896.658173][T18826] netlink: 60 bytes leftover after parsing attributes in process `syz.7.4597'.
[  896.693333][T18826] caif0: entered promiscuous mode
[  896.702924][T18826] caif0: entered allmulticast mode
[  896.726006][T18829] netlink: 'syz.2.4598': attribute type 21 has an invalid length.
[  896.756079][T18829] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4598'.
[  897.255656][ T5798] Bluetooth: hci2: command tx timeout
[  898.986726][T18858] netlink: 'syz.2.4605': attribute type 3 has an invalid length.
[  898.994553][T18858] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.4605'.
[  899.249902][T18866] netlink: 'syz.7.4608': attribute type 21 has an invalid length.
[  899.269067][T18866] netlink: 132 bytes leftover after parsing attributes in process `syz.7.4608'.
[  899.294128][T18869] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4610'.
[  899.612161][ T5798] Bluetooth: hci2: unexpected event 0x12 length: 15 > 8
[  900.703837][T18893] syzkaller0: entered promiscuous mode
[  900.729661][T18901] netlink: 'syz.9.4619': attribute type 3 has an invalid length.
[  900.742267][T18893] syzkaller0: entered allmulticast mode
[  900.751540][T18901] netlink: 130984 bytes leftover after parsing attributes in process `syz.9.4619'.
[  900.845926][T18904] netlink: 'syz.6.4620': attribute type 21 has an invalid length.
[  900.869267][T18904] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4620'.
[  901.832971][ T5798] Bluetooth: hci2: unexpected event 0x12 length: 15 > 8
[  906.354329][T18943] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4630'.
[  906.527051][T18943] caif0: entered promiscuous mode
[  906.538923][T18943] caif0: entered allmulticast mode
[  906.794407][T18950] netlink: 'syz.6.4632': attribute type 3 has an invalid length.
[  906.810761][T18950] netlink: 130984 bytes leftover after parsing attributes in process `syz.6.4632'.
[  906.834155][T18949] netlink: 'syz.7.4631': attribute type 21 has an invalid length.
[  906.849780][T18949] netlink: 132 bytes leftover after parsing attributes in process `syz.7.4631'.
[  907.785818][ T5798] Bluetooth: hci2: unexpected event 0x12 length: 15 > 8
[  908.580419][T18975] netlink: 'syz.2.4641': attribute type 4 has an invalid length.
[  908.597609][T18975] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4641'.
[  909.454655][T18986] netlink: 'syz.6.4644': attribute type 21 has an invalid length.
[  909.464193][T18986] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4644'.
[  910.111219][ T5798] Bluetooth: hci0: unexpected event 0x12 length: 15 > 8
[  910.313838][T18989] syzkaller0: entered promiscuous mode
[  910.338721][T18989] syzkaller0: entered allmulticast mode
[  910.558102][T19001] netlink: 'syz.7.4646': attribute type 3 has an invalid length.
[  910.633463][T19001] netlink: 130984 bytes leftover after parsing attributes in process `syz.7.4646'.
[  914.383213][T19011] netlink: 60 bytes leftover after parsing attributes in process `syz.9.4649'.
[  914.749844][T19024] netlink: 'syz.6.4655': attribute type 21 has an invalid length.
[  914.758324][T19024] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4655'.
[  914.933570][ T5798] Bluetooth: hci2: unexpected event 0x1c length: 15 > 5
[  915.466633][ T5798] Bluetooth: hci0: unexpected event 0x12 length: 15 > 8
[  915.932202][T19053] netlink: 'syz.9.4664': attribute type 3 has an invalid length.
[  916.061528][T19053] netlink: 130984 bytes leftover after parsing attributes in process `syz.9.4664'.
[  916.257787][T19057] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4665'.
[  916.324017][T19050] syzkaller0: entered promiscuous mode
[  916.354750][T19054] netlink: 'syz.7.4662': attribute type 4 has an invalid length.
[  916.372577][T19050] syzkaller0: entered allmulticast mode
[  916.485492][T19054] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.4662'.
[  917.994213][T19082] netlink: 'syz.9.4669': attribute type 21 has an invalid length.
[  918.016629][T19082] netlink: 132 bytes leftover after parsing attributes in process `syz.9.4669'.
[  918.608659][T19098] netlink: 'syz.7.4675': attribute type 3 has an invalid length.
[  918.622801][T19098] netlink: 130984 bytes leftover after parsing attributes in process `syz.7.4675'.
[  920.157197][T19118] netlink: 'syz.9.4680': attribute type 21 has an invalid length.
[  920.165126][T19118] netlink: 132 bytes leftover after parsing attributes in process `syz.9.4680'.
[  920.547259][ T5798] Bluetooth: hci0: unexpected event 0x20 length: 15 > 7
[  921.642558][T19142] syzkaller0: entered promiscuous mode
[  921.663980][T19142] syzkaller0: entered allmulticast mode
[  921.853768][T19151] netlink: 'syz.7.4688': attribute type 3 has an invalid length.
[  921.876562][T19151] netlink: 130984 bytes leftover after parsing attributes in process `syz.7.4688'.
[  924.998770][T19193] netlink: 'syz.9.4697': attribute type 4 has an invalid length.
[  925.021421][T19193] netlink: 199836 bytes leftover after parsing attributes in process `syz.9.4697'.
[  926.726254][T19160] netlink: 'syz.7.4692': attribute type 21 has an invalid length.
[  926.734327][T19160] netlink: 132 bytes leftover after parsing attributes in process `syz.7.4692'.
[  926.879880][T19200] netlink: 'syz.7.4700': attribute type 3 has an invalid length.
[  927.299273][T19200] netlink: 130984 bytes leftover after parsing attributes in process `syz.7.4700'.
[  928.014127][ T5798] Bluetooth: hci2: unexpected event 0x12 length: 15 > 8
[  928.508276][ T5798] Bluetooth: hci0: unexpected event 0x20 length: 15 > 7
[  928.633648][T19223] netlink: 'syz.2.4708': attribute type 21 has an invalid length.
[  928.651238][T19223] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4708'.
[  929.003992][T19233] netlink: 'syz.7.4717': attribute type 21 has an invalid length.
[  929.027889][T19233] netlink: 132 bytes leftover after parsing attributes in process `syz.7.4717'.
[  929.712945][T19250] netlink: 'syz.7.4714': attribute type 3 has an invalid length.
[  929.801175][T19250] netlink: 130984 bytes leftover after parsing attributes in process `syz.7.4714'.
[  930.154237][T19254] syzkaller0: entered promiscuous mode
[  930.162139][T19254] syzkaller0: entered allmulticast mode
[  930.178910][T19261] netlink: 'syz.6.4713': attribute type 4 has an invalid length.
[  930.227137][T19261] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.4713'.
[  930.330716][ T5798] Bluetooth: hci2: unexpected event 0x12 length: 15 > 8
[  932.363529][ T1284] ieee802154 phy0 wpan0: encryption failed: -22
[  932.379177][ T1284] ieee802154 phy1 wpan1: encryption failed: -22
[  934.424937][T19274] netlink: 'syz.6.4720': attribute type 21 has an invalid length.
[  934.433054][T19274] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4720'.
[  934.596484][T19292] netlink: 'syz.2.4725': attribute type 3 has an invalid length.
[  934.604512][T19292] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.4725'.
[  936.780191][T19322] netlink: 'syz.2.4732': attribute type 21 has an invalid length.
[  936.811330][T19322] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4732'.
[  937.083587][T19336] netlink: 'syz.2.4736': attribute type 3 has an invalid length.
[  937.141817][T19336] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.4736'.
[  937.848994][T19332] syzkaller0: entered promiscuous mode
[  937.898600][T19332] syzkaller0: entered allmulticast mode
[  942.685354][T19367] netlink: 'syz.6.4745': attribute type 21 has an invalid length.
[  942.693324][T19367] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4745'.
[  942.902060][T19375] netlink: 'syz.6.4748': attribute type 3 has an invalid length.
[  942.930042][T19375] netlink: 130984 bytes leftover after parsing attributes in process `syz.6.4748'.
[  943.370710][ T5796] Bluetooth: hci0: unexpected event 0x10 length: 15 > 1
[  944.307538][ T5796] Bluetooth: hci0: command 0x0406 tx timeout
[  944.376299][ T5798] Bluetooth: hci0: hardware error 0x0f
[  946.210990][ T5796] Bluetooth: hci0: unexpected event 0x0f length: 15 > 4
[  946.211052][ T5796] Bluetooth: hci0: unexpected event for opcode 0x0000
[  946.297242][T19418] netlink: 'syz.6.4756': attribute type 21 has an invalid length.
[  946.317922][T19418] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4756'.
[  946.455917][ T5798] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  946.520235][T19425] netlink: 'syz.7.4758': attribute type 3 has an invalid length.
[  946.528546][T19425] netlink: 130984 bytes leftover after parsing attributes in process `syz.7.4758'.
[  947.759925][T19444] syzkaller0: entered promiscuous mode
[  947.766108][T19444] syzkaller0: entered allmulticast mode
[  948.007277][T19442] syzkaller0: entered promiscuous mode
[  948.025024][T19442] syzkaller0: entered allmulticast mode
[  951.660743][T19467] netlink: 'syz.6.4770': attribute type 21 has an invalid length.
[  951.672974][T19467] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4770'.
[  954.545598][T19494] netlink: 'syz.6.4776': attribute type 3 has an invalid length.
[  954.565142][T19494] netlink: 130984 bytes leftover after parsing attributes in process `syz.6.4776'.
[  958.120879][T19511] netlink: 'syz.6.4780': attribute type 21 has an invalid length.
[  958.155533][T19511] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4780'.
[  960.819850][ T5798] Bluetooth: hci2: unexpected event 0x0f length: 15 > 4
[  961.032455][T19553] netlink: 'syz.9.4790': attribute type 3 has an invalid length.
[  961.055895][T19553] netlink: 130984 bytes leftover after parsing attributes in process `syz.9.4790'.
[  961.481543][T19559] netlink: 'syz.9.4793': attribute type 21 has an invalid length.
[  961.543159][T19559] netlink: 132 bytes leftover after parsing attributes in process `syz.9.4793'.
[  962.208659][T19568] syzkaller0: entered promiscuous mode
[  962.256327][T19568] syzkaller0: entered allmulticast mode
[  962.611905][T19583] syzkaller0: entered promiscuous mode
[  962.624017][T19583] syzkaller0: entered allmulticast mode
[  968.231242][T12062] hsr_slave_0: left promiscuous mode
[  968.294179][T12062] hsr_slave_1: left promiscuous mode
[  968.356856][T12062] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  968.364336][T12062] batman_adv: batadv0: Removing interface: batadv_slave_0
[  968.410058][T12062] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  968.423740][T12062] batman_adv: batadv0: Removing interface: batadv_slave_1
[  968.431948][T12062] team0: left allmulticast mode
[  968.442718][T12062] team_slave_0: left allmulticast mode
[  968.448897][T12062] team_slave_1: left allmulticast mode
[  968.454553][T12062] team0: left promiscuous mode
[  968.462300][T12062] team_slave_0: left promiscuous mode
[  968.526474][T12062] team_slave_1: left promiscuous mode
[  968.539386][T12062] bridge0: port 3(team0) entered disabled state
[  968.555900][T12062] bridge_slave_1: left allmulticast mode
[  968.568084][T12062] bridge_slave_1: left promiscuous mode
[  968.574055][T12062] bridge0: port 2(bridge_slave_1) entered disabled state
[  968.606939][T12062] bridge_slave_0: left allmulticast mode
[  968.612668][T12062] bridge_slave_0: left promiscuous mode
[  968.642316][T12062] bridge0: port 1(bridge_slave_0) entered disabled state
[  968.734466][T12062] veth1_macvtap: left promiscuous mode
[  968.744157][T12062] veth0_macvtap: left promiscuous mode
[  968.753439][T12062] veth1_vlan: left promiscuous mode
[  968.761949][T12062] veth0_vlan: left promiscuous mode
[  969.341067][T19618] netlink: 'syz.7.4803': attribute type 3 has an invalid length.
[  969.362491][T19618] netlink: 130984 bytes leftover after parsing attributes in process `syz.7.4803'.
[  970.491807][T12062] team0 (unregistering): Port device team_slave_1 removed
[  970.568861][T12062] team0 (unregistering): Port device team_slave_0 removed
[  970.620117][T12062] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  970.675774][T12062] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  971.371529][T12062] bond0 (unregistering): Released all slaves
[  971.453320][T19625] netlink: 'syz.2.4805': attribute type 21 has an invalid length.
[  971.475571][T19625] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4805'.
[  974.138746][T19685] netlink: 'syz.9.4819': attribute type 21 has an invalid length.
[  974.159742][T19685] netlink: 132 bytes leftover after parsing attributes in process `syz.9.4819'.
[  974.912766][T19701] syzkaller0: entered promiscuous mode
[  975.015966][T19701] syzkaller0: entered allmulticast mode
[  978.807816][T19710] syzkaller0: entered promiscuous mode
[  978.813324][T19710] syzkaller0: entered allmulticast mode
[  981.533677][T19733] netlink: 'syz.9.4830': attribute type 21 has an invalid length.
[  981.557640][T19733] netlink: 132 bytes leftover after parsing attributes in process `syz.9.4830'.
[  983.849590][T19773] netlink: 'syz.7.4841': attribute type 21 has an invalid length.
[  983.857796][T19773] netlink: 132 bytes leftover after parsing attributes in process `syz.7.4841'.
[  984.394700][T19787] syzkaller0: entered promiscuous mode
[  984.481037][T19787] syzkaller0: entered allmulticast mode
[  988.382430][T19825] FAULT_INJECTION: forcing a failure.
[  988.382430][T19825] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  988.401087][T19825] CPU: 0 PID: 19825 Comm: syz.2.4854 Not tainted 6.6.102-syzkaller #0
[  988.409310][T19825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  988.419416][T19825] Call Trace:
[  988.422717][T19825]  <TASK>
[  988.425668][T19825]  dump_stack_lvl+0x16c/0x230
[  988.430403][T19825]  ? show_regs_print_info+0x20/0x20
[  988.435618][T19825]  ? load_image+0x3b0/0x3b0
[  988.440159][T19825]  ? __might_fault+0xaa/0x120
[  988.444853][T19825]  ? __lock_acquire+0x7c80/0x7c80
[  988.449898][T19825]  ? __might_fault+0x52/0x120
[  988.454601][T19825]  should_fail_ex+0x39d/0x4d0
[  988.459304][T19825]  _copy_from_iter+0x1d3/0x1290
[  988.464176][T19825]  ? __virt_addr_valid+0x18c/0x540
[  988.469330][T19825]  ? __lock_acquire+0x7c80/0x7c80
[  988.474382][T19825]  ? copyout_mc+0x70/0x70
[  988.478756][T19825]  ? __virt_addr_valid+0x18c/0x540
[  988.483890][T19825]  ? __virt_addr_valid+0x18c/0x540
[  988.489026][T19825]  ? __virt_addr_valid+0x469/0x540
[  988.494159][T19825]  ? __check_object_size+0x506/0xa30
[  988.499475][T19825]  netlink_sendmsg+0x75c/0xbe0
[  988.504275][T19825]  ? lockdep_hardirqs_on+0x98/0x150
[  988.509501][T19825]  ? netlink_getsockopt+0x580/0x580
[  988.514734][T19825]  ? netlink_getsockopt+0x580/0x580
[  988.519955][T19825]  ____sys_sendmsg+0x5bf/0x950
[  988.524944][T19825]  ? __asan_memset+0x22/0x40
[  988.529561][T19825]  ? __sys_sendmsg_sock+0x30/0x30
[  988.534606][T19825]  ? __import_iovec+0x5f2/0x860
[  988.539490][T19825]  ? import_iovec+0x73/0xa0
[  988.544020][T19825]  ___sys_sendmsg+0x220/0x290
[  988.548720][T19825]  ? __sys_sendmsg+0x270/0x270
[  988.553532][T19825]  ? perf_trace_run_bpf_submit+0xf4/0x1c0
[  988.559302][T19825]  __se_sys_sendmsg+0x1a5/0x270
[  988.564175][T19825]  ? __x64_sys_sendmsg+0x80/0x80
[  988.569133][T19825]  ? lockdep_hardirqs_on+0x98/0x150
[  988.574371][T19825]  ? __x64_sys_sendmsg+0x53/0x80
[  988.579334][T19825]  do_syscall_64+0x55/0xb0
[  988.583763][T19825]  ? clear_bhb_loop+0x40/0x90
[  988.588456][T19825]  ? clear_bhb_loop+0x40/0x90
[  988.593150][T19825]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  988.599064][T19825] RIP: 0033:0x7f506158ebe9
[  988.603497][T19825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  988.623134][T19825] RSP: 002b:00007f5062368038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  988.631566][T19825] RAX: ffffffffffffffda RBX: 00007f50617b5fa0 RCX: 00007f506158ebe9
[  988.639550][T19825] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000005
[  988.647537][T19825] RBP: 00007f5062368090 R08: 0000000000000000 R09: 0000000000000000
[  988.655522][T19825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  988.663508][T19825] R13: 00007f50617b6038 R14: 00007f50617b5fa0 R15: 00007ffd47de9738
[  988.671524][T19825]  </TASK>
[  991.873244][T19828] netlink: 'syz.7.4855': attribute type 21 has an invalid length.
[  991.881268][T19828] netlink: 132 bytes leftover after parsing attributes in process `syz.7.4855'.
[  992.275225][T19859] syzkaller0: entered promiscuous mode
[  992.293269][T19859] syzkaller0: entered allmulticast mode
[  993.448177][ T1284] ieee802154 phy0 wpan0: encryption failed: -22
[  993.454564][ T1284] ieee802154 phy1 wpan1: encryption failed: -22
[  995.868253][T19873] syzkaller0: entered promiscuous mode
[  995.873762][T19873] syzkaller0: entered allmulticast mode
[  998.266230][T19884] netlink: 'syz.6.4869': attribute type 21 has an invalid length.
[  998.274140][T19884] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4869'.
[  999.827482][T19921] syzkaller0: entered promiscuous mode
[  999.833152][T19921] syzkaller0: entered allmulticast mode
[ 1003.832721][T19941] netlink: 'syz.9.4883': attribute type 21 has an invalid length.
[ 1003.846560][T19941] netlink: 132 bytes leftover after parsing attributes in process `syz.9.4883'.
[ 1004.033185][T19946] syzkaller0: entered promiscuous mode
[ 1004.055416][T19946] syzkaller0: entered allmulticast mode
[ 1009.031859][T19998] syzkaller0: entered promiscuous mode
[ 1009.161862][T19998] syzkaller0: entered allmulticast mode
[ 1012.813210][T20005] syzkaller0: entered promiscuous mode
[ 1012.819043][T20005] syzkaller0: entered allmulticast mode
[ 1012.829023][T20025] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4903'.
[ 1015.977179][ T5796] Bluetooth: hci2: command 0x0406 tx timeout
[ 1017.586257][ T5798] Bluetooth: hci2: unexpected event 0x10 length: 15 > 1
[ 1017.587565][ T5798] Bluetooth: hci2: hardware error 0x0f
[ 1018.352725][T20061] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4914'.
[ 1019.440732][T20072] syzkaller0: entered promiscuous mode
[ 1019.467954][T20072] syzkaller0: entered allmulticast mode
[ 1019.735548][ T5798] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[ 1025.923858][T20108] syzkaller0: entered promiscuous mode
[ 1025.930727][T20108] syzkaller0: entered allmulticast mode
[ 1030.870005][T20153] syzkaller0: entered promiscuous mode
[ 1030.885469][T20153] syzkaller0: entered allmulticast mode
[ 1036.259534][T20219] syzkaller0: entered promiscuous mode
[ 1036.287895][T20219] syzkaller0: entered allmulticast mode
[ 1036.423419][T20228] syzkaller0: entered promiscuous mode
[ 1036.435346][T20228] syzkaller0: entered allmulticast mode
[ 1047.855214][T20323] syzkaller0: entered promiscuous mode
[ 1047.861207][T20323] syzkaller0: entered allmulticast mode
[ 1048.256522][T20332] syzkaller0: entered promiscuous mode
[ 1048.262372][T20332] syzkaller0: entered allmulticast mode
[ 1054.992263][ T1284] ieee802154 phy0 wpan0: encryption failed: -22
[ 1055.001411][ T1284] ieee802154 phy1 wpan1: encryption failed: -22
[ 1060.069772][T20431] syzkaller0: entered promiscuous mode
[ 1060.133125][T20431] syzkaller0: entered allmulticast mode
[ 1060.302067][T20447] syzkaller0: entered promiscuous mode
[ 1060.308187][T20447] syzkaller0: entered allmulticast mode
[ 1073.571291][T20565] syzkaller0: entered promiscuous mode
[ 1073.703004][T20565] syzkaller0: entered allmulticast mode
[ 1078.222225][T20606] syzkaller0: entered promiscuous mode
[ 1078.228072][T20606] syzkaller0: entered allmulticast mode
[ 1079.273899][ T5796] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1079.295314][ T5796] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1079.310046][ T5796] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1079.319594][ T5796] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1079.338607][ T5796] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1079.351954][ T5796] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1081.434407][ T5796] Bluetooth: hci3: command tx timeout
[ 1082.530892][T17402] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1082.883298][T17402] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1083.211198][T20644] syzkaller0: entered promiscuous mode
[ 1083.265332][T20644] syzkaller0: entered allmulticast mode
[ 1083.496188][ T5796] Bluetooth: hci3: command tx timeout
[ 1083.638203][T17402] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1085.583023][ T5798] Bluetooth: hci3: command tx timeout
[ 1087.361765][T17402] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1087.391885][T20619] chnl_net:caif_netlink_parms(): no params data found
[ 1087.594406][T20619] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1087.601796][T20619] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1087.611007][T20619] bridge_slave_0: entered allmulticast mode
[ 1087.618728][T20619] bridge_slave_0: entered promiscuous mode
[ 1087.631804][T20619] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1087.639294][T20619] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1087.646687][T20619] bridge_slave_1: entered allmulticast mode
[ 1087.654287][T20619] bridge_slave_1: entered promiscuous mode
[ 1087.660505][ T5798] Bluetooth: hci3: command tx timeout
[ 1087.809303][T20682] syzkaller0: entered promiscuous mode
[ 1087.814863][T20682] syzkaller0: entered allmulticast mode
[ 1087.825106][T20619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1087.884755][T20619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1087.944804][T20619] team0: Port device team_slave_0 added
[ 1087.966849][T20619] team0: Port device team_slave_1 added
[ 1088.034474][T20619] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1088.042233][T20619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1088.068393][T20619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1088.085540][T20619] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1088.092555][T20619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1088.119433][T20619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1088.180302][T20619] hsr_slave_0: entered promiscuous mode
[ 1088.186882][T20619] hsr_slave_1: entered promiscuous mode
[ 1088.193004][T20619] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1088.200810][T20619] Cannot create hsr debugfs directory
[ 1091.134735][T20619] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1091.155181][T20619] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1091.166029][T20619] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1091.177265][T20619] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1091.339008][T20619] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1091.359871][T20619] 8021q: adding VLAN 0 to HW filter on device team0
[ 1091.372218][T12071] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1091.379378][T12071] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1091.395174][ T1108] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1091.402393][ T1108] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1091.432001][T17402] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1091.443357][T17402] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1091.454170][T17402] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1091.461819][T17402] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1091.469662][T17402] bridge_slave_1: left allmulticast mode
[ 1091.476072][T17402] bridge_slave_1: left promiscuous mode
[ 1091.481767][T17402] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1091.490370][T17402] bridge_slave_0: left allmulticast mode
[ 1091.496635][T17402] bridge_slave_0: left promiscuous mode
[ 1091.502403][T17402] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1091.527794][T17402] veth1_macvtap: left promiscuous mode
[ 1091.533333][T17402] veth0_macvtap: left promiscuous mode
[ 1091.540420][T17402] veth1_vlan: left allmulticast mode
[ 1091.546155][T17402] veth1_vlan: left promiscuous mode
[ 1091.551458][T17402] veth0_vlan: left promiscuous mode
[ 1091.667463][T17402] team0 (unregistering): Port device geneve1 removed
[ 1091.814551][T17402] bond0 (unregistering): (slave macvlan0): Releasing backup interface
[ 1092.178784][T17402] team0 (unregistering): Port device team_slave_1 removed
[ 1092.237765][T17402] team0 (unregistering): Port device team_slave_0 removed
[ 1092.292250][T17402] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1092.348510][T17402] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1092.900012][T17402] bond0 (unregistering): Released all slaves
[ 1093.221945][T20619] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1093.477784][T20619] veth0_vlan: entered promiscuous mode
[ 1093.490635][T20619] veth1_vlan: entered promiscuous mode
[ 1093.520252][T20619] veth0_macvtap: entered promiscuous mode
[ 1093.531283][T20619] veth1_macvtap: entered promiscuous mode
[ 1093.551124][T20619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1093.562162][T20619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1093.572483][T20619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1093.583091][T20619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1093.593312][T20619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1093.603769][T20619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1093.615076][T20619] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1093.631377][T20619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1093.642326][T20619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1093.652726][T20619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1093.663461][T20619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1093.673725][T20619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1093.684511][T20619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1093.696637][T20619] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1093.710076][T20619] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1093.719123][T20619] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1093.728176][T20619] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1093.737623][T20619] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1093.817546][  T149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1093.831218][  T149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1093.858686][T19804] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1093.866991][T19804] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1094.306037][ T5798] Bluetooth: hci3: unexpected event 0x12 length: 15 > 8
[ 1094.352568][T20716] syzkaller0: entered promiscuous mode
[ 1094.368185][T20716] syzkaller0: entered allmulticast mode
[ 1101.796079][T20779] syzkaller0: entered promiscuous mode
[ 1101.810578][T20779] syzkaller0: entered allmulticast mode
[ 1108.409056][T20843] netlink: 763 bytes leftover after parsing attributes in process `syz.7.5108'.
[ 1113.280751][T20938] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5133'.
[ 1113.290184][T20938] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5133'.
[ 1113.301167][T20932] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5133'.
[ 1113.335401][T20938] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5133'.
[ 1114.569551][T20956] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1114.977732][T20960] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1115.453882][T20970] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1116.301527][ T1284] ieee802154 phy0 wpan0: encryption failed: -22
[ 1116.308051][ T1284] ieee802154 phy1 wpan1: encryption failed: -22
[ 1116.700665][T21002] FAULT_INJECTION: forcing a failure.
[ 1116.700665][T21002] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1116.714230][T21002] CPU: 1 PID: 21002 Comm: syz.6.5152 Not tainted 6.6.102-syzkaller #0
[ 1116.722441][T21002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1116.732536][T21002] Call Trace:
[ 1116.735854][T21002]  <TASK>
[ 1116.738825][T21002]  dump_stack_lvl+0x16c/0x230
[ 1116.743562][T21002]  ? show_regs_print_info+0x20/0x20
[ 1116.748797][T21002]  ? load_image+0x3b0/0x3b0
[ 1116.753314][T21002]  ? __might_fault+0xaa/0x120
[ 1116.758011][T21002]  ? __lock_acquire+0x7c80/0x7c80
[ 1116.763088][T21002]  should_fail_ex+0x39d/0x4d0
[ 1116.767791][T21002]  _copy_from_iter+0x1d3/0x1290
[ 1116.772663][T21002]  ? slab_post_alloc_hook+0x8a/0x4d0
[ 1116.777997][T21002]  ? __virt_addr_valid+0x18c/0x540
[ 1116.783165][T21002]  ? __lock_acquire+0x7c80/0x7c80
[ 1116.788235][T21002]  ? rcu_is_watching+0x15/0xb0
[ 1116.793051][T21002]  ? copyout_mc+0x70/0x70
[ 1116.797421][T21002]  ? __virt_addr_valid+0x18c/0x540
[ 1116.802574][T21002]  ? __virt_addr_valid+0x18c/0x540
[ 1116.807722][T21002]  ? __virt_addr_valid+0x469/0x540
[ 1116.812763][T21006] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5154'.
[ 1116.812851][T21002]  ? __check_object_size+0x506/0xa30
[ 1116.826480][T21006] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5154'.
[ 1116.827077][T21002]  netlink_sendmsg+0x75c/0xbe0
[ 1116.840016][T21004] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5154'.
[ 1116.840767][T21002]  ? netlink_getsockopt+0x580/0x580
[ 1116.851928][T21006] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5154'.
[ 1116.854902][T21002]  ? aa_sock_msg_perm+0x94/0x150
[ 1116.854933][T21002]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 1116.874178][T21002]  ? security_socket_sendmsg+0x80/0xa0
[ 1116.879679][T21002]  ? netlink_getsockopt+0x580/0x580
[ 1116.884918][T21002]  ____sys_sendmsg+0x5bf/0x950
[ 1116.889732][T21002]  ? __asan_memset+0x22/0x40
[ 1116.894367][T21002]  ? __sys_sendmsg_sock+0x30/0x30
[ 1116.899431][T21002]  ? __import_iovec+0x5f2/0x860
[ 1116.904338][T21002]  ? import_iovec+0x73/0xa0
[ 1116.908887][T21002]  ___sys_sendmsg+0x220/0x290
[ 1116.913608][T21002]  ? __sys_sendmsg+0x270/0x270
[ 1116.918435][T21002]  ? __lock_acquire+0x7c80/0x7c80
[ 1116.923522][T21002]  __se_sys_sendmsg+0x1a5/0x270
[ 1116.928420][T21002]  ? __x64_sys_sendmsg+0x80/0x80
[ 1116.933412][T21002]  ? lockdep_hardirqs_on+0x98/0x150
[ 1116.938659][T21002]  do_syscall_64+0x55/0xb0
[ 1116.943116][T21002]  ? clear_bhb_loop+0x40/0x90
[ 1116.947822][T21002]  ? clear_bhb_loop+0x40/0x90
[ 1116.952528][T21002]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1116.958479][T21002] RIP: 0033:0x7f215a58ebe9
[ 1116.962943][T21002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1116.983024][T21002] RSP: 002b:00007f215b4cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1116.991479][T21002] RAX: ffffffffffffffda RBX: 00007f215a7b5fa0 RCX: 00007f215a58ebe9
[ 1116.999598][T21002] RDX: 0000000000004080 RSI: 0000200000000140 RDI: 0000000000000003
[ 1117.008401][T21002] RBP: 00007f215b4cf090 R08: 0000000000000000 R09: 0000000000000000
[ 1117.016390][T21002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1117.024461][T21002] R13: 00007f215a7b6038 R14: 00007f215a7b5fa0 R15: 00007fffe65b2eb8
[ 1117.032459][T21002]  </TASK>
[ 1117.116838][T21012] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5156'.
[ 1117.130929][T21012] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5156'.
[ 1117.143529][T21010] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5156'.
[ 1117.169844][T21010] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5156'.
[ 1118.262533][T21044] FAULT_INJECTION: forcing a failure.
[ 1118.262533][T21044] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1118.275899][T21044] CPU: 1 PID: 21044 Comm: syz.9.5165 Not tainted 6.6.102-syzkaller #0
[ 1118.284097][T21044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1118.294186][T21044] Call Trace:
[ 1118.297507][T21044]  <TASK>
[ 1118.300466][T21044]  dump_stack_lvl+0x16c/0x230
[ 1118.305189][T21044]  ? show_regs_print_info+0x20/0x20
[ 1118.310420][T21044]  ? load_image+0x3b0/0x3b0
[ 1118.314972][T21044]  ? __lock_acquire+0x7c80/0x7c80
[ 1118.320038][T21044]  ? snprintf+0xdb/0x120
[ 1118.324373][T21044]  should_fail_ex+0x39d/0x4d0
[ 1118.329094][T21044]  _copy_to_user+0x2f/0xa0
[ 1118.333539][T21044]  simple_read_from_buffer+0xe7/0x150
[ 1118.338957][T21044]  proc_fail_nth_read+0x1e3/0x250
[ 1118.344025][T21044]  ? proc_fault_inject_write+0x340/0x340
[ 1118.349702][T21044]  ? fsnotify_perm+0x271/0x5e0
[ 1118.354506][T21044]  ? proc_fault_inject_write+0x340/0x340
[ 1118.360180][T21044]  vfs_read+0x27e/0x920
[ 1118.364387][T21044]  ? kernel_read+0x1e0/0x1e0
[ 1118.369020][T21044]  ? __fget_files+0x28/0x4d0
[ 1118.373649][T21044]  ? __fget_files+0x44a/0x4d0
[ 1118.378641][T21044]  ? __fdget_pos+0x2a3/0x330
[ 1118.383271][T21044]  ? ksys_read+0x75/0x250
[ 1118.387651][T21044]  ksys_read+0x147/0x250
[ 1118.391933][T21044]  ? vfs_write+0x940/0x940
[ 1118.396394][T21044]  ? lockdep_hardirqs_on+0x98/0x150
[ 1118.401631][T21044]  do_syscall_64+0x55/0xb0
[ 1118.406075][T21044]  ? clear_bhb_loop+0x40/0x90
[ 1118.411303][T21044]  ? clear_bhb_loop+0x40/0x90
[ 1118.416015][T21044]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1118.421953][T21044] RIP: 0033:0x7f452db8d5fc
[ 1118.426402][T21044] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 1118.446044][T21044] RSP: 002b:00007f452ea2f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1118.454495][T21044] RAX: ffffffffffffffda RBX: 00007f452ddb5fa0 RCX: 00007f452db8d5fc
[ 1118.462496][T21044] RDX: 000000000000000f RSI: 00007f452ea2f0a0 RDI: 0000000000000004
[ 1118.470512][T21044] RBP: 00007f452ea2f090 R08: 0000000000000000 R09: 0000000000000000
[ 1118.478521][T21044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1118.486532][T21044] R13: 00007f452ddb6038 R14: 00007f452ddb5fa0 R15: 00007ffc8be65b48
[ 1118.494564][T21044]  </TASK>
[ 1122.705942][T21114] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5185'.
[ 1122.745075][T21114] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5185'.
[ 1122.771809][T21113] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5185'.
[ 1122.793512][T21117] netlink: 'syz.7.5186': attribute type 1 has an invalid length.
[ 1122.820812][T21115] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5185'.
[ 1122.824540][T21117] netlink: 193500 bytes leftover after parsing attributes in process `syz.7.5186'.
[ 1123.396793][T21134] netlink: 60 bytes leftover after parsing attributes in process `syz.9.5190'.
[ 1123.446641][T21134] netlink: 60 bytes leftover after parsing attributes in process `syz.9.5190'.
[ 1123.474126][T21129] netlink: 60 bytes leftover after parsing attributes in process `syz.9.5190'.
[ 1123.492510][T21138] netlink: 60 bytes leftover after parsing attributes in process `syz.9.5190'.
[ 1124.862594][T21159] FAULT_INJECTION: forcing a failure.
[ 1124.862594][T21159] name failslab, interval 1, probability 0, space 0, times 0
[ 1124.890004][T21159] CPU: 1 PID: 21159 Comm: syz.6.5196 Not tainted 6.6.102-syzkaller #0
[ 1124.898242][T21159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1124.908435][T21159] Call Trace:
[ 1124.911759][T21159]  <TASK>
[ 1124.914734][T21159]  dump_stack_lvl+0x16c/0x230
[ 1124.919470][T21159]  ? show_regs_print_info+0x20/0x20
[ 1124.924714][T21159]  ? load_image+0x3b0/0x3b0
[ 1124.929304][T21159]  should_fail_ex+0x39d/0x4d0
[ 1124.934013][T21159]  should_failslab+0x9/0x20
[ 1124.938540][T21159]  slab_pre_alloc_hook+0x59/0x310
[ 1124.943589][T21159]  ? find_exception+0x17a/0xa00
[ 1124.948466][T21159]  kmem_cache_alloc+0x5a/0x2e0
[ 1124.953244][T21159]  ? dst_alloc+0x105/0x170
[ 1124.957680][T21159]  dst_alloc+0x105/0x170
[ 1124.961935][T21159]  ip_route_output_key_hash_rcu+0x1413/0x2320
[ 1124.968028][T21159]  ? ip_route_output_key_hash+0x12f/0x340
[ 1124.973760][T21159]  ip_route_output_key_hash+0x20b/0x340
[ 1124.979338][T21159]  ? ip_route_input_rcu+0x3010/0x3010
[ 1124.984727][T21159]  ? __lock_acquire+0x7c80/0x7c80
[ 1124.989861][T21159]  ip_route_output_flow+0x2a/0x150
[ 1124.994983][T21159]  ? security_sk_classify_flow+0x7b/0x90
[ 1125.000634][T21159]  raw_sendmsg+0x1093/0x1950
[ 1125.005275][T21159]  ? compat_raw_ioctl+0x70/0x70
[ 1125.010169][T21159]  ? aa_sk_perm+0x7fc/0x930
[ 1125.014692][T21159]  ? tomoyo_socket_sendmsg_permission+0x216/0x2f0
[ 1125.021148][T21159]  ? sock_rps_record_flow+0x19/0x400
[ 1125.026464][T21159]  ? inet_send_prepare+0x260/0x260
[ 1125.031606][T21159]  ? inet_sendmsg+0x7c/0x2f0
[ 1125.036215][T21159]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 1125.041524][T21159]  ? security_socket_sendmsg+0x80/0xa0
[ 1125.046997][T21159]  ? inet_send_prepare+0x260/0x260
[ 1125.052119][T21159]  ____sys_sendmsg+0x5bf/0x950
[ 1125.056908][T21159]  ? __sys_sendmsg_sock+0x30/0x30
[ 1125.061948][T21159]  ? __import_iovec+0x3fa/0x860
[ 1125.066833][T21159]  ? import_iovec+0x73/0xa0
[ 1125.071358][T21159]  ___sys_sendmsg+0x220/0x290
[ 1125.076056][T21159]  ? __sys_sendmsg+0x270/0x270
[ 1125.080861][T21159]  ? __lock_acquire+0x7c80/0x7c80
[ 1125.085949][T21159]  __se_sys_sendmsg+0x1a5/0x270
[ 1125.090842][T21159]  ? __x64_sys_sendmsg+0x80/0x80
[ 1125.095827][T21159]  ? lockdep_hardirqs_on+0x98/0x150
[ 1125.101055][T21159]  do_syscall_64+0x55/0xb0
[ 1125.105483][T21159]  ? clear_bhb_loop+0x40/0x90
[ 1125.110175][T21159]  ? clear_bhb_loop+0x40/0x90
[ 1125.114862][T21159]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1125.120771][T21159] RIP: 0033:0x7f215a58ebe9
[ 1125.125210][T21159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1125.144841][T21159] RSP: 002b:00007f215b4cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1125.153275][T21159] RAX: ffffffffffffffda RBX: 00007f215a7b5fa0 RCX: 00007f215a58ebe9
[ 1125.161257][T21159] RDX: 0000000000000040 RSI: 0000200000000440 RDI: 0000000000000003
[ 1125.169247][T21159] RBP: 00007f215b4cf090 R08: 0000000000000000 R09: 0000000000000000
[ 1125.177243][T21159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1125.185232][T21159] R13: 00007f215a7b6038 R14: 00007f215a7b5fa0 R15: 00007fffe65b2eb8
[ 1125.193237][T21159]  </TASK>
[ 1125.221030][T21161] netlink: 'syz.2.5197': attribute type 3 has an invalid length.
[ 1125.249553][T21161] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.5197'.
[ 1130.047642][T21250] syzkaller0: entered promiscuous mode
[ 1130.082294][T21250] syzkaller0: entered allmulticast mode
[ 1134.189989][T21273] netlink: 'syz.7.5223': attribute type 21 has an invalid length.
[ 1134.198207][T21273] netlink: 'syz.7.5223': attribute type 11 has an invalid length.
[ 1134.389210][T21306] netlink: 'syz.2.5233': attribute type 6 has an invalid length.
[ 1140.204596][T21456] syzkaller0: entered promiscuous mode
[ 1140.349628][T21456] syzkaller0: entered allmulticast mode
[ 1140.773683][T21472] FAULT_INJECTION: forcing a failure.
[ 1140.773683][T21472] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1140.796624][T21472] CPU: 1 PID: 21472 Comm: syz.7.5269 Not tainted 6.6.102-syzkaller #0
[ 1140.804847][T21472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1140.814932][T21472] Call Trace:
[ 1140.818257][T21472]  <TASK>
[ 1140.821215][T21472]  dump_stack_lvl+0x16c/0x230
[ 1140.825940][T21472]  ? show_regs_print_info+0x20/0x20
[ 1140.831187][T21472]  ? load_image+0x3b0/0x3b0
[ 1140.835794][T21472]  ? __lock_acquire+0x7c80/0x7c80
[ 1140.840870][T21472]  should_fail_ex+0x39d/0x4d0
[ 1140.845590][T21472]  prepare_alloc_pages+0x1e2/0x5f0
[ 1140.850758][T21472]  __alloc_pages+0x127/0x460
[ 1140.855402][T21472]  ? zone_statistics+0x170/0x170
[ 1140.860378][T21472]  ? rcuref_put_slowpath+0x141/0x150
[ 1140.865724][T21472]  bpf_prog_test_run_xdp+0xb64/0xfa0
[ 1140.871066][T21472]  ? dev_put+0x80/0x80
[ 1140.875187][T21472]  ? dev_put+0x80/0x80
[ 1140.879304][T21472]  bpf_prog_test_run+0x321/0x390
[ 1140.884274][T21472]  __sys_bpf+0x440/0x800
[ 1140.888553][T21472]  ? bpf_link_show_fdinfo+0x350/0x350
[ 1140.894021][T21472]  ? lock_chain_count+0x20/0x20
[ 1140.898912][T21472]  __x64_sys_bpf+0x7c/0x90
[ 1140.903356][T21472]  do_syscall_64+0x55/0xb0
[ 1140.907804][T21472]  ? clear_bhb_loop+0x40/0x90
[ 1140.912507][T21472]  ? clear_bhb_loop+0x40/0x90
[ 1140.917218][T21472]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1140.923153][T21472] RIP: 0033:0x7fdeef58ebe9
[ 1140.927597][T21472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1140.947246][T21472] RSP: 002b:00007fdef03b8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1140.955711][T21472] RAX: ffffffffffffffda RBX: 00007fdeef7b5fa0 RCX: 00007fdeef58ebe9
[ 1140.963722][T21472] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a
[ 1140.971728][T21472] RBP: 00007fdef03b8090 R08: 0000000000000000 R09: 0000000000000000
[ 1140.979731][T21472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1140.987748][T21472] R13: 00007fdeef7b6038 R14: 00007fdeef7b5fa0 R15: 00007ffe9a4c0048
[ 1140.995790][T21472]  </TASK>
[ 1144.189591][T21510] FAULT_INJECTION: forcing a failure.
[ 1144.189591][T21510] name failslab, interval 1, probability 0, space 0, times 0
[ 1144.209867][T21510] CPU: 0 PID: 21510 Comm: syz.7.5280 Not tainted 6.6.102-syzkaller #0
[ 1144.218086][T21510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1144.228177][T21510] Call Trace:
[ 1144.231466][T21510]  <TASK>
[ 1144.234404][T21510]  dump_stack_lvl+0x16c/0x230
[ 1144.239118][T21510]  ? show_regs_print_info+0x20/0x20
[ 1144.244337][T21510]  ? load_image+0x3b0/0x3b0
[ 1144.248854][T21510]  ? __lock_acquire+0x7c80/0x7c80
[ 1144.253895][T21510]  should_fail_ex+0x39d/0x4d0
[ 1144.258587][T21510]  should_failslab+0x9/0x20
[ 1144.263123][T21510]  slab_pre_alloc_hook+0x59/0x310
[ 1144.268198][T21510]  ? __lock_acquire+0x7c80/0x7c80
[ 1144.273292][T21510]  kmem_cache_alloc+0x5a/0x2e0
[ 1144.278082][T21510]  ? security_file_alloc+0x34/0x120
[ 1144.283314][T21510]  security_file_alloc+0x34/0x120
[ 1144.288369][T21510]  init_file+0x94/0x1f0
[ 1144.292557][T21510]  alloc_empty_file+0xb7/0x1d0
[ 1144.297351][T21510]  alloc_file+0x5c/0x600
[ 1144.301631][T21510]  alloc_file_pseudo+0x17e/0x200
[ 1144.306634][T21510]  ? alloc_empty_backing_file+0xe0/0xe0
[ 1144.312230][T21510]  anon_inode_getfile+0xc5/0x1a0
[ 1144.317207][T21510]  __se_sys_perf_event_open+0xeb5/0x1c20
[ 1144.322887][T21510]  ? __x64_sys_perf_event_open+0xc0/0xc0
[ 1144.328564][T21510]  ? lock_chain_count+0x20/0x20
[ 1144.333450][T21510]  ? lockdep_hardirqs_on+0x98/0x150
[ 1144.338672][T21510]  ? __x64_sys_perf_event_open+0x20/0xc0
[ 1144.344328][T21510]  do_syscall_64+0x55/0xb0
[ 1144.348761][T21510]  ? clear_bhb_loop+0x40/0x90
[ 1144.353450][T21510]  ? clear_bhb_loop+0x40/0x90
[ 1144.358144][T21510]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1144.364065][T21510] RIP: 0033:0x7fdeef58ebe9
[ 1144.368500][T21510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1144.388127][T21510] RSP: 002b:00007fdef03b8038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[ 1144.396563][T21510] RAX: ffffffffffffffda RBX: 00007fdeef7b5fa0 RCX: 00007fdeef58ebe9
[ 1144.404552][T21510] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000040
[ 1144.412542][T21510] RBP: 00007fdef03b8090 R08: 0000000000000000 R09: 0000000000000000
[ 1144.420533][T21510] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001
[ 1144.428521][T21510] R13: 00007fdeef7b6038 R14: 00007fdeef7b5fa0 R15: 00007ffe9a4c0048
[ 1144.436540][T21510]  </TASK>
[ 1145.045820][T21513] __nla_validate_parse: 4 callbacks suppressed
[ 1145.045840][T21513] netlink: 48 bytes leftover after parsing attributes in process `syz.7.5281'.
[ 1145.164609][T21519] netlink: 'syz.6.5282': attribute type 3 has an invalid length.
[ 1145.173320][T21519] netlink: 130984 bytes leftover after parsing attributes in process `syz.6.5282'.
[ 1146.119572][T21541] netlink: 'syz.9.5289': attribute type 1 has an invalid length.
[ 1146.240088][T21541] netlink: 154788 bytes leftover after parsing attributes in process `syz.9.5289'.
[ 1147.143852][T21553] syzkaller0: entered promiscuous mode
[ 1147.266900][T21553] syzkaller0: entered allmulticast mode
[ 1147.645680][T21572] netlink: 'syz.6.5298': attribute type 10 has an invalid length.
[ 1147.654072][T21572] netlink: 3819 bytes leftover after parsing attributes in process `syz.6.5298'.
[ 1147.825521][T21573] netlink: 'syz.6.5298': attribute type 9 has an invalid length.
[ 1147.833368][T21573] netlink: 126588 bytes leftover after parsing attributes in process `syz.6.5298'.
[ 1152.681319][T21612] pimreg: tun_chr_ioctl cmd 1074025677
[ 1152.690730][T21612] pimreg: linktype set to 780
[ 1156.244694][T21653] netlink: 132 bytes leftover after parsing attributes in process `syz.7.5316'.
[ 1156.351230][T21655] netlink: 209844 bytes leftover after parsing attributes in process `syz.7.5316'.
[ 1156.395548][T21656] pimreg: tun_chr_ioctl cmd 1074025677
[ 1156.414831][T21656] pimreg: linktype set to 780
[ 1156.440389][T21656] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1156.447816][T21656] IPv6: NLM_F_CREATE should be set when creating new route
[ 1156.455090][T21656] IPv6: NLM_F_CREATE should be set when creating new route
[ 1156.625725][T21662] pimreg: tun_chr_ioctl cmd 1074025677
[ 1156.632615][T21662] pimreg: linktype set to 780
[ 1156.646462][T21662] FAULT_INJECTION: forcing a failure.
[ 1156.646462][T21662] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1156.671177][T21662] CPU: 1 PID: 21662 Comm: syz.2.5320 Not tainted 6.6.102-syzkaller #0
[ 1156.679408][T21662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1156.689509][T21662] Call Trace:
[ 1156.692815][T21662]  <TASK>
[ 1156.695767][T21662]  dump_stack_lvl+0x16c/0x230
[ 1156.700514][T21662]  ? show_regs_print_info+0x20/0x20
[ 1156.705758][T21662]  ? load_image+0x3b0/0x3b0
[ 1156.710279][T21662]  ? __might_fault+0xaa/0x120
[ 1156.714964][T21662]  ? __lock_acquire+0x7c80/0x7c80
[ 1156.720022][T21662]  should_fail_ex+0x39d/0x4d0
[ 1156.724720][T21662]  _copy_from_user+0x2f/0xe0
[ 1156.729316][T21662]  ___sys_sendmsg+0x159/0x290
[ 1156.733997][T21662]  ? __sys_sendmsg+0x270/0x270
[ 1156.738799][T21662]  ? __lock_acquire+0x7c80/0x7c80
[ 1156.743926][T21662]  __se_sys_sendmsg+0x1a5/0x270
[ 1156.748798][T21662]  ? __x64_sys_sendmsg+0x80/0x80
[ 1156.753754][T21662]  ? lockdep_hardirqs_on+0x98/0x150
[ 1156.758956][T21662]  do_syscall_64+0x55/0xb0
[ 1156.763380][T21662]  ? clear_bhb_loop+0x40/0x90
[ 1156.768076][T21662]  ? clear_bhb_loop+0x40/0x90
[ 1156.772792][T21662]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1156.778702][T21662] RIP: 0033:0x7f506158ebe9
[ 1156.783123][T21662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1156.802756][T21662] RSP: 002b:00007f5062368038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1156.811225][T21662] RAX: ffffffffffffffda RBX: 00007f50617b5fa0 RCX: 00007f506158ebe9
[ 1156.819243][T21662] RDX: 00000000040400c0 RSI: 0000200000001600 RDI: 0000000000000003
[ 1156.827257][T21662] RBP: 00007f5062368090 R08: 0000000000000000 R09: 0000000000000000
[ 1156.835268][T21662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1156.843277][T21662] R13: 00007f50617b6038 R14: 00007f50617b5fa0 R15: 00007ffd47de9738
[ 1156.851302][T21662]  </TASK>
[ 1157.002059][T21672] netlink: 'syz.6.5323': attribute type 29 has an invalid length.
[ 1157.012538][T21672] netlink: 'syz.6.5323': attribute type 29 has an invalid length.
[ 1157.042587][T21672] netlink: 'syz.6.5323': attribute type 29 has an invalid length.
[ 1157.127667][T21676] netlink: 'syz.7.5325': attribute type 29 has an invalid length.
[ 1157.145777][T21676] netlink: 'syz.7.5325': attribute type 29 has an invalid length.
[ 1157.170270][T21676] FAULT_INJECTION: forcing a failure.
[ 1157.170270][T21676] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1157.189384][T21676] CPU: 0 PID: 21676 Comm: syz.7.5325 Not tainted 6.6.102-syzkaller #0
[ 1157.197601][T21676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1157.207691][T21676] Call Trace:
[ 1157.211001][T21676]  <TASK>
[ 1157.213982][T21676]  dump_stack_lvl+0x16c/0x230
[ 1157.218705][T21676]  ? show_regs_print_info+0x20/0x20
[ 1157.223941][T21676]  ? load_image+0x3b0/0x3b0
[ 1157.228493][T21676]  ? __might_fault+0xaa/0x120
[ 1157.233211][T21676]  should_fail_ex+0x39d/0x4d0
[ 1157.237922][T21676]  copyout+0x1a/0x90
[ 1157.241862][T21676]  _copy_to_iter+0x432/0x10d0
[ 1157.246581][T21676]  ? iov_iter_init+0x1e0/0x1e0
[ 1157.251372][T21676]  ? __virt_addr_valid+0x18c/0x540
[ 1157.256514][T21676]  ? __virt_addr_valid+0x469/0x540
[ 1157.261641][T21676]  ? __phys_addr_symbol+0x2f/0x70
[ 1157.266706][T21676]  __skb_datagram_iter+0xdb/0x780
[ 1157.271765][T21676]  ? skb_copy_datagram_iter+0x200/0x200
[ 1157.277340][T21676]  skb_copy_datagram_iter+0xb1/0x200
[ 1157.282655][T21676]  netlink_recvmsg+0x2c5/0xdf0
[ 1157.287474][T21676]  ? netlink_sendmsg+0xbe0/0xbe0
[ 1157.292458][T21676]  ? aa_sk_perm+0x7fc/0x930
[ 1157.297000][T21676]  ? aa_af_perm+0x2b0/0x2b0
[ 1157.301536][T21676]  ? __lock_acquire+0x1260/0x7c80
[ 1157.306597][T21676]  ? verify_lock_unused+0x140/0x140
[ 1157.311839][T21676]  ? bpf_lsm_socket_recvmsg+0x9/0x10
[ 1157.317162][T21676]  ? security_socket_recvmsg+0x89/0xb0
[ 1157.322641][T21676]  ? netlink_sendmsg+0xbe0/0xbe0
[ 1157.327607][T21676]  ____sys_recvmsg+0x29e/0x5b0
[ 1157.332418][T21676]  ? __sys_recvmsg_sock+0x50/0x50
[ 1157.337478][T21676]  ? import_iovec+0x73/0xa0
[ 1157.342012][T21676]  ___sys_recvmsg+0x1b6/0x510
[ 1157.346716][T21676]  ? __sys_recvmsg+0x270/0x270
[ 1157.351593][T21676]  ? ksys_write+0x1c1/0x250
[ 1157.356138][T21676]  ? __fget_files+0x44a/0x4d0
[ 1157.360900][T21676]  __x64_sys_recvmsg+0x1f2/0x2c0
[ 1157.365868][T21676]  ? ___sys_recvmsg+0x510/0x510
[ 1157.370762][T21676]  ? lockdep_hardirqs_on+0x98/0x150
[ 1157.375982][T21676]  do_syscall_64+0x55/0xb0
[ 1157.380425][T21676]  ? clear_bhb_loop+0x40/0x90
[ 1157.385117][T21676]  ? clear_bhb_loop+0x40/0x90
[ 1157.389821][T21676]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1157.395748][T21676] RIP: 0033:0x7fdeef58ebe9
[ 1157.400185][T21676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1157.419811][T21676] RSP: 002b:00007fdef03b8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[ 1157.428250][T21676] RAX: ffffffffffffffda RBX: 00007fdeef7b5fa0 RCX: 00007fdeef58ebe9
[ 1157.436241][T21676] RDX: 0000000040012100 RSI: 0000200000000640 RDI: 0000000000000003
[ 1157.444234][T21676] RBP: 00007fdef03b8090 R08: 0000000000000000 R09: 0000000000000000
[ 1157.452227][T21676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1157.460220][T21676] R13: 00007fdeef7b6038 R14: 00007fdeef7b5fa0 R15: 00007ffe9a4c0048
[ 1157.468322][T21676]  </TASK>
[ 1157.476314][T21676] netlink: 'syz.7.5325': attribute type 29 has an invalid length.
[ 1158.174671][T21686] syzkaller0: entered promiscuous mode
[ 1158.185158][T21686] syzkaller0: entered allmulticast mode
[ 1158.383821][T21707] netlink: 'syz.7.5333': attribute type 29 has an invalid length.
[ 1158.392748][T21707] netlink: 'syz.7.5333': attribute type 29 has an invalid length.
[ 1158.904395][T21713] FAULT_INJECTION: forcing a failure.
[ 1158.904395][T21713] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1158.923381][T21713] CPU: 1 PID: 21713 Comm: syz.9.5335 Not tainted 6.6.102-syzkaller #0
[ 1158.931601][T21713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1158.941678][T21713] Call Trace:
[ 1158.944979][T21713]  <TASK>
[ 1158.947971][T21713]  dump_stack_lvl+0x16c/0x230
[ 1158.952694][T21713]  ? show_regs_print_info+0x20/0x20
[ 1158.957918][T21713]  ? load_image+0x3b0/0x3b0
[ 1158.962458][T21713]  ? __lock_acquire+0x7c80/0x7c80
[ 1158.967591][T21713]  should_fail_ex+0x39d/0x4d0
[ 1158.972319][T21713]  prepare_alloc_pages+0x1e2/0x5f0
[ 1158.977470][T21713]  __alloc_pages+0x127/0x460
[ 1158.982079][T21713]  ? zone_statistics+0x170/0x170
[ 1158.987049][T21713]  ? alloc_pages+0x4dc/0x740
[ 1158.991647][T21713]  ? do_raw_spin_unlock+0x121/0x230
[ 1158.996855][T21713]  __get_free_pages+0xc/0x30
[ 1159.001452][T21713]  kasan_populate_vmalloc_pte+0x35/0x100
[ 1159.007098][T21713]  __apply_to_page_range+0x84c/0xd50
[ 1159.012396][T21713]  ? kasan_populate_vmalloc+0x70/0x70
[ 1159.017799][T21713]  ? apply_to_page_range+0x50/0x50
[ 1159.023042][T21713]  ? do_raw_spin_unlock+0x121/0x230
[ 1159.028249][T21713]  alloc_vmap_area+0x1b4a/0x1c70
[ 1159.033204][T21713]  ? vm_map_ram+0xcb0/0xcb0
[ 1159.037711][T21713]  ? rcu_is_watching+0x15/0xb0
[ 1159.042482][T21713]  __get_vm_area_node+0x162/0x370
[ 1159.047541][T21713]  __vmalloc_node_range+0x36e/0x1320
[ 1159.052828][T21713]  ? reuseport_array_alloc+0x98/0x120
[ 1159.058209][T21713]  ? trace_event_raw_event_lock_acquire+0x2a0/0x2a0
[ 1159.064893][T21713]  ? aa_get_newest_label+0xf8/0x5c0
[ 1159.070100][T21713]  ? end_current_label_crit_section+0x170/0x170
[ 1159.076344][T21713]  ? free_vm_area+0x50/0x50
[ 1159.080869][T21713]  ? apparmor_capable+0x137/0x1a0
[ 1159.085919][T21713]  bpf_map_area_alloc+0xf1/0x110
[ 1159.090863][T21713]  ? reuseport_array_alloc+0x98/0x120
[ 1159.096238][T21713]  reuseport_array_alloc+0x98/0x120
[ 1159.101447][T21713]  map_create+0x877/0x1110
[ 1159.105872][T21713]  ? security_bpf+0x7e/0xa0
[ 1159.110395][T21713]  __sys_bpf+0x5f0/0x800
[ 1159.114659][T21713]  ? bpf_link_show_fdinfo+0x350/0x350
[ 1159.120039][T21713]  ? lock_chain_count+0x20/0x20
[ 1159.124923][T21713]  __x64_sys_bpf+0x7c/0x90
[ 1159.129352][T21713]  do_syscall_64+0x55/0xb0
[ 1159.133766][T21713]  ? clear_bhb_loop+0x40/0x90
[ 1159.138439][T21713]  ? clear_bhb_loop+0x40/0x90
[ 1159.143112][T21713]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1159.149012][T21713] RIP: 0033:0x7f452db8ebe9
[ 1159.153427][T21713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1159.173029][T21713] RSP: 002b:00007f452ea2f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1159.181448][T21713] RAX: ffffffffffffffda RBX: 00007f452ddb5fa0 RCX: 00007f452db8ebe9
[ 1159.189425][T21713] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 0000000000000000
[ 1159.197420][T21713] RBP: 00007f452ea2f090 R08: 0000000000000000 R09: 0000000000000000
[ 1159.205406][T21713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1159.213385][T21713] R13: 00007f452ddb6038 R14: 00007f452ddb5fa0 R15: 00007ffc8be65b48
[ 1159.221385][T21713]  </TASK>
[ 1161.114967][T21707] netlink: 'syz.7.5333': attribute type 29 has an invalid length.
[ 1161.998177][T21737] netlink: 'syz.7.5344': attribute type 29 has an invalid length.
[ 1162.009278][T21737] netlink: 44 bytes leftover after parsing attributes in process `syz.7.5344'.
[ 1162.019020][T21737] netlink: 'syz.7.5344': attribute type 29 has an invalid length.
[ 1162.028076][T21737] netlink: 44 bytes leftover after parsing attributes in process `syz.7.5344'.
[ 1162.920869][T21751] syzkaller0: entered promiscuous mode
[ 1162.958038][T21751] syzkaller0: entered allmulticast mode
[ 1163.551675][T21770] netlink: 'syz.2.5353': attribute type 3 has an invalid length.
[ 1163.563936][T21770] netlink: 201336 bytes leftover after parsing attributes in process `syz.2.5353'.
[ 1163.744862][T21774] netlink: 44 bytes leftover after parsing attributes in process `syz.9.5352'.
[ 1177.791216][ T1284] ieee802154 phy0 wpan0: encryption failed: -22
[ 1177.797647][ T1284] ieee802154 phy1 wpan1: encryption failed: -22
[ 1178.006688][ T5796] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1178.015814][ T5796] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1178.023938][ T5796] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1178.045681][ T5796] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1178.053473][ T5796] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 1178.060886][ T5796] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1180.175705][ T5798] Bluetooth: hci1: command tx timeout
[ 1180.245393][T21793] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1180.256618][T21793] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1180.264686][T21793] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1180.274522][T21793] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1180.295430][T21793] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[ 1180.302846][T21793] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1180.342698][T21793] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1180.352405][T21793] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1180.360473][T21793] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1180.369485][T21793] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1180.384774][T21793] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[ 1180.392230][T21793] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1180.439082][T21793] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 1180.448633][T21793] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 1180.456720][T21793] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 1180.466386][T21793] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 1180.474894][T21793] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[ 1180.485406][T21793] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 1182.225701][T21795] Bluetooth: hci1: command tx timeout
[ 1182.325700][T21795] Bluetooth: hci5: command tx timeout
[ 1182.475860][T21795] Bluetooth: hci6: command tx timeout
[ 1182.581080][T21795] Bluetooth: hci7: command tx timeout
[ 1184.325869][T21795] Bluetooth: hci1: command tx timeout
[ 1184.375459][T21795] Bluetooth: hci5: command tx timeout
[ 1184.575752][T21795] Bluetooth: hci6: command tx timeout
[ 1184.625768][T21795] Bluetooth: hci7: command tx timeout
[ 1186.375581][T21795] Bluetooth: hci1: command tx timeout
[ 1186.475441][T21795] Bluetooth: hci5: command tx timeout
[ 1186.625540][T21795] Bluetooth: hci6: command tx timeout
[ 1186.725916][T21795] Bluetooth: hci7: command tx timeout
[ 1188.575540][T21795] Bluetooth: hci5: command tx timeout
[ 1188.725606][T21795] Bluetooth: hci6: command tx timeout
[ 1188.775605][T21795] Bluetooth: hci7: command tx timeout
[ 1205.429412][T21795] Bluetooth: hci3: command 0x0406 tx timeout
[ 1239.181852][ T1284] ieee802154 phy0 wpan0: encryption failed: -22
[ 1239.188263][ T1284] ieee802154 phy1 wpan1: encryption failed: -22
[ 1239.262558][T21793] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[ 1239.272161][T21793] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[ 1239.296956][T21793] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[ 1239.306142][T21793] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[ 1239.313984][T21793] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[ 1239.321479][T21793] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[ 1240.921992][ T5796] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[ 1240.931483][ T5796] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[ 1240.949154][ T5796] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[ 1240.957532][ T5796] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[ 1240.965798][ T5796] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[ 1240.974490][ T5796] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3
[ 1240.982407][ T5796] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[ 1240.998917][T21793] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[ 1241.008036][T21793] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[ 1241.016623][T21793] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[ 1241.024522][T21793] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3
[ 1241.032496][T21793] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[ 1241.147342][T19371] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[ 1241.162878][T19371] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[ 1241.171272][T19371] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[ 1241.186207][T19371] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[ 1241.194102][T19371] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3
[ 1241.201610][T19371] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[ 1268.875177][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[ 1268.882192][    C1] rcu: 	0-....: (1 GPs behind) idle=06d4/1/0x4000000000000000 softirq=102040/102041 fqs=2100
[ 1268.893532][    C1] rcu: 	         hardirqs   softirqs   csw/system
[ 1268.899972][    C1] rcu: 	 number: 11831617          0            0
[ 1268.906432][    C1] rcu: 	cputime:     5950      46617            0   ==> 52550(ms)
[ 1268.914277][    C1] rcu: 	(detected by 1, t=10506 jiffies, g=141309, q=1167 ncpus=2)
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1268.922197][    C1] Sending NMI from CPU 1 to CPUs 0:
[ 1268.927433][    C0] NMI backtrace for cpu 0
[ 1268.927443][    C0] CPU: 0 PID: 21770 Comm: syz.2.5353 Not tainted 6.6.102-syzkaller #0
[ 1268.927459][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1268.927468][    C0] RIP: 0010:__lock_acquire+0x1903/0x7c80
[ 1268.927493][    C0] Code: 0f b6 04 00 84 c0 0f 85 d3 53 00 00 41 be 01 00 00 00 41 f6 47 02 10 0f 85 bb 02 00 00 48 8b 84 24 b8 00 00 00 42 80 3c 00 00 <48> 8b 9c 24 88 00 00 00 74 12 48 89 df e8 fb b5 75 00 49 b8 00 00
[ 1268.927505][    C0] RSP: 0018:ffffc90000006ea0 EFLAGS: 00000046
[ 1268.927520][    C0] RAX: 1ffff1100fb7a15a RBX: ffffffff9070c780 RCX: 0000000000000000
[ 1268.927532][    C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff90da3500
[ 1268.927543][    C0] RBP: ffffc900000070e8 R08: dffffc0000000000 R09: 1ffffffff21b46a0
[ 1268.927554][    C0] R10: dffffc0000000000 R11: fffffbfff21b46a1 R12: 56b885a630cfc13a
[ 1268.927566][    C0] R13: ffff88807dbd0000 R14: 0000000000000001 R15: ffff88807dbd0b78
[ 1268.927577][    C0] FS:  00007f50623686c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[ 1268.927592][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1268.927602][    C0] CR2: 00007f452e9cbf98 CR3: 0000000051a96000 CR4: 00000000003506f0
[ 1268.927618][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1268.927628][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[ 1268.927638][    C0] Call Trace:
[ 1268.927646][    C0]  <IRQ>
[ 1268.927670][    C0]  ? verify_lock_unused+0x140/0x140
[ 1268.927689][    C0]  ? perf_trace_lock_acquire+0xfb/0x3e0
[ 1268.927714][    C0]  ? trace_event_raw_event_lock_acquire+0x2a0/0x2a0
[ 1268.927737][    C0]  ? perf_trace_lock_acquire+0xfb/0x3e0
[ 1268.927763][    C0]  lock_acquire+0x197/0x410
[ 1268.927779][    C0]  ? __virt_addr_valid+0x18c/0x540
[ 1268.927804][    C0]  ? read_lock_is_recursive+0x20/0x20
[ 1268.927824][    C0]  ? rcu_read_unlock+0x8c/0xa0
[ 1268.927840][    C0]  ? __virt_addr_valid+0x18c/0x540
[ 1268.927858][    C0]  __virt_addr_valid+0x1a9/0x540
[ 1268.927876][    C0]  ? __virt_addr_valid+0x18c/0x540
[ 1268.927895][    C0]  kasan_addr_to_slab+0xd/0xd0
[ 1268.927919][    C0]  __kasan_record_aux_stack+0xf/0xc0
[ 1268.927939][    C0]  irq_work_queue_on+0xf5/0x220
[ 1268.927958][    C0]  rcu_read_unlock_special+0x3a7/0x4c0
[ 1268.927984][    C0]  ? __rcu_read_unlock+0xd0/0xd0
[ 1268.928005][    C0]  ? __perf_cgroup_move+0x60/0x60
[ 1268.928027][    C0]  ? read_lock_is_recursive+0x20/0x20
[ 1268.928049][    C0]  __rcu_read_unlock+0x7c/0xd0
[ 1268.928071][    C0]  perf_event_output_forward+0x2e6/0x3a0
[ 1268.928089][    C0]  ? perf_event_output_forward+0x94/0x3a0
[ 1268.928104][    C0]  ? perf_prepare_header+0x1e0/0x1e0
[ 1268.928122][    C0]  ? perf_event_output_forward+0x2f7/0x3a0
[ 1268.928138][    C0]  ? perf_event_output_forward+0x94/0x3a0
[ 1268.928157][    C0]  ? __perf_event_account_interrupt+0x187/0x280
[ 1268.928175][    C0]  __perf_event_overflow+0x447/0x630
[ 1268.928191][    C0]  ? mark_lock+0x94/0x320
[ 1268.928211][    C0]  perf_swevent_event+0x2f5/0x5c0
[ 1268.928231][    C0]  ? perf_tp_event+0x13a0/0x13a0
[ 1268.928253][    C0]  perf_tp_event+0x4f9/0x13a0
[ 1268.928271][    C0]  ? verify_lock_unused+0x140/0x140
[ 1268.928288][    C0]  ? perf_trace_run_bpf_submit+0x1c0/0x1c0
[ 1268.928304][    C0]  ? perf_trace_lock_acquire+0xfb/0x3e0
[ 1268.928325][    C0]  ? perf_tp_event+0x12d7/0x13a0
[ 1268.928359][    C0]  ? sched_clock+0x3f/0x60
[ 1268.928375][    C0]  ? sched_clock_cpu+0x75/0x430
[ 1268.928389][    C0]  ? irq_work_single+0x122/0x230
[ 1268.928406][    C0]  ? __lock_acquire+0x7c80/0x7c80
[ 1268.928422][    C0]  ? flush_tlb_func+0x51b/0x650
[ 1268.928442][    C0]  perf_trace_run_bpf_submit+0xf4/0x1c0
[ 1268.928462][    C0]  perf_trace_preemptirq_template+0x281/0x340
[ 1268.928485][    C0]  ? asm_sysvec_irq_work+0x1a/0x20
[ 1268.928501][    C0]  ? trace_event_raw_event_preemptirq_template+0x1e0/0x1e0
[ 1268.928522][    C0]  ? __irq_exit_rcu+0xd3/0x190
[ 1268.928536][    C0]  ? irq_exit_rcu+0x20/0x20
[ 1268.928554][    C0]  ? asm_sysvec_irq_work+0x1a/0x20
[ 1268.928569][    C0]  trace_irq_enable+0xbf/0xe0
[ 1268.928589][    C0]  trace_hardirqs_on+0x18/0x40
[ 1268.928608][    C0]  asm_sysvec_irq_work+0x1a/0x20
[ 1268.928622][    C0] RIP: 0010:rcu_read_unlock_special+0x88/0x4c0
[ 1268.928644][    C0] Code: f1 f1 f1 00 f2 f2 f2 4a 89 04 2b 66 42 c7 44 2b 09 f3 f3 42 c6 44 2b 0b f3 65 44 8b 35 39 58 93 7e 41 f7 c6 00 00 f0 00 74 45 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 66 42 c7 44 2b
[ 1268.928657][    C0] RSP: 0018:ffffc90000007b00 EFLAGS: 00000206
[ 1268.928670][    C0] RAX: 988f5ae745752f00 RBX: 1ffff92000000f68 RCX: 988f5ae745752f00
[ 1268.928682][    C0] RDX: dffffc0000000000 RSI: ffffffff8aaab9c0 RDI: ffffffff8afc66c0
[ 1268.928694][    C0] RBP: ffffc90000007bf0 R08: ffffffff90da351f R09: 1ffffffff21b46a3
[ 1268.928705][    C0] R10: dffffc0000000000 R11: fffffbfff21b46a4 R12: ffffffff8cd35400
[ 1268.928717][    C0] R13: dffffc0000000000 R14: 0000000000000246 R15: 0000000000000001
[ 1268.928739][    C0]  ? mac80211_hwsim_beacon_tx+0x3e9/0x780
[ 1268.928760][    C0]  ? __rcu_read_unlock+0xd0/0xd0
[ 1268.928788][    C0]  __rcu_read_unlock+0x7c/0xd0
[ 1268.928808][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[ 1268.928829][    C0]  ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0
[ 1268.928847][    C0]  ieee80211_iterate_active_interfaces_atomic+0x15a/0x180
[ 1268.928868][    C0]  mac80211_hwsim_beacon+0xbb/0x1b0
[ 1268.928887][    C0]  __hrtimer_run_queues+0x51e/0xc40
[ 1268.928916][    C0]  ? hw_scan_work+0xf40/0xf40
[ 1268.928937][    C0]  ? hrtimer_interrupt+0x9c0/0x9c0
[ 1268.928953][    C0]  ? ktime_get_update_offsets_now+0x3d2/0x3f0
[ 1268.928976][    C0]  hrtimer_run_softirq+0x187/0x2b0
[ 1268.928996][    C0]  handle_softirqs+0x280/0x820
[ 1268.929013][    C0]  ? __irq_exit_rcu+0xc7/0x190
[ 1268.929031][    C0]  ? do_softirq+0x180/0x180
[ 1268.929048][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[ 1268.929069][    C0]  __irq_exit_rcu+0xc7/0x190
[ 1268.929084][    C0]  ? irq_exit_rcu+0x20/0x20
[ 1268.929103][    C0]  irq_exit_rcu+0x9/0x20
[ 1268.929117][    C0]  sysvec_apic_timer_interrupt+0xa4/0xc0
[ 1268.929139][    C0]  </IRQ>
[ 1268.929144][    C0]  <TASK>
[ 1268.929149][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1268.929173][    C0] RIP: 0010:lock_acquire+0x1f2/0x410
[ 1268.929190][    C0] Code: 00 9c 8f 84 24 80 00 00 00 f6 84 24 81 00 00 00 02 0f 85 f5 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 66 43 c7 44 3c 09 00 00 43 c6 44 3c 0b 00
[ 1268.929202][    C0] RSP: 0018:ffffc90004dafb80 EFLAGS: 00000206
[ 1268.929215][    C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 988f5ae745752f00
[ 1268.929226][    C0] RDX: 0000000000000000 RSI: ffffffff8aaacb40 RDI: ffffffff8afc66c0
[ 1268.929237][    C0] RBP: ffffc90004dafc98 R08: dffffc0000000000 R09: 1ffffffff21b46a3
[ 1268.929248][    C0] R10: dffffc0000000000 R11: fffffbfff21b46a4 R12: 1ffff920009b5f7c
[ 1268.929259][    C0] R13: ffff888018b7c0d8 R14: 0000000000000246 R15: dffffc0000000000
[ 1268.929281][    C0]  ? lock_chain_count+0x20/0x20
[ 1268.929299][    C0]  ? aa_get_newest_label+0xf8/0x5c0
[ 1268.929317][    C0]  ? read_lock_is_recursive+0x20/0x20
[ 1268.929334][    C0]  ? end_current_label_crit_section+0x170/0x170
[ 1268.929353][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1268.929380][    C0]  _raw_spin_lock+0x2e/0x40
[ 1268.929400][    C0]  ? alloc_fd+0x60/0x630
[ 1268.929418][    C0]  alloc_fd+0x60/0x630
[ 1268.929438][    C0]  ? bpf_lsm_perf_event_open+0x9/0x10
[ 1268.929460][    C0]  __se_sys_perf_event_open+0x48e/0x1c20
[ 1268.929481][    C0]  ? lockdep_hardirqs_on_prepare+0x400/0x760
[ 1268.929501][    C0]  ? __x64_sys_perf_event_open+0xc0/0xc0
[ 1268.929531][    C0]  ? syscall_enter_from_user_mode+0x2e/0x80
[ 1268.929550][    C0]  ? __x64_sys_perf_event_open+0x20/0xc0
[ 1268.929569][    C0]  do_syscall_64+0x55/0xb0
[ 1268.929585][    C0]  ? clear_bhb_loop+0x40/0x90
[ 1268.929598][    C0]  ? clear_bhb_loop+0x40/0x90
[ 1268.929614][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1268.929635][    C0] RIP: 0033:0x7f506158ebe9
[ 1268.929649][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1268.929662][    C0] RSP: 002b:00007f5062368038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[ 1268.929677][    C0] RAX: ffffffffffffffda RBX: 00007f50617b5fa0 RCX: 00007f506158ebe9
[ 1268.929689][    C0] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000040
[ 1268.929700][    C0] RBP: 00007f5061611e19 R08: 0000000000000000 R09: 0000000000000000
[ 1268.929710][    C0] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[ 1268.929720][    C0] R13: 00007f50617b6038 R14: 00007f50617b5fa0 R15: 00007ffd47de9738
[ 1268.929741][    C0]  </TASK>