last executing test programs:

1m29.472792398s ago: executing program 3 (id=3616):
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400020, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33a2d912}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8)
bpf$LINK_DETACH(0x22, &(0x7f00000002c0)=r2, 0x4)
r3 = socket$kcm(0x2, 0x200000000000001, 0x106)
recvmsg(r3, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x40)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
perf_event_open$cgroup(&(0x7f0000000000)={0x5, 0x80, 0xb3, 0x3, 0x6, 0x49, 0x0, 0x2, 0x2001, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7, 0x4, @perf_config_ext={0x8, 0x1}, 0x1410, 0x401, 0x0, 0x5, 0x1b, 0xffff0001, 0x2, 0x0, 0x4, 0x0, 0x727}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0xa)
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8916, &(0x7f0000000000)={'wlan1\x00', @random="0200ff7fffff"})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x20800, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x7, &(0x7f0000000300)=@raw=[@map_idx={0x18, 0x1, 0x5, 0x0, 0x7}, @ldst={0x1, 0x1, 0x1, 0x3, 0x5, 0x1, 0x1}, @map_val={0x18, 0x9, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0xfffffffe}, @exit, @call={0x85, 0x0, 0x0, 0x4d}], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, &(0x7f00000003c0), 0x41100, 0x10, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000400)={0xa, 0x5}, 0x8, 0x10, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f00000004c0)=[{0x0, 0x1, 0x4, 0x8}, {0x3, 0x2, 0x0, 0x6}, {0x3, 0x5, 0xf, 0xb}, {0x5, 0x5, 0xe, 0x9}], 0x10, 0xbf8}, 0x94)
r6 = socket$kcm(0x2, 0xa, 0x2)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r7, @ANYBLOB="0000000002000000b705000008000000850000000400000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x2a, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x39, 0x0, 0x0, 0x10, 0x1}, 0x94)
ioctl$TUNSETLINK(r5, 0x400454cd, 0x336)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})

1m28.895741073s ago: executing program 3 (id=3624):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x0]}}, 0x0, 0x1b}, 0x28)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f00000000c0)='./file0\x00')
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xfffe, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848420000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1, 0x0, 0x0, 0x8000000}, 0x0)

1m28.699755848s ago: executing program 3 (id=3626):
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48283, 0x0)
r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0)
r1 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="6000000068007f089e", 0x9}, {&(0x7f0000000280)="68cabf2dfb0200021d6b689866f05d48000c0088a8ffffefff248f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7290800093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc36024aa400", 0x57}], 0x2}, 0x0)
r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4044, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x2, @perf_bp={0x0, 0x3}, 0x10000, 0x6, 0x7, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000001c0)='!~u&00\t&&')
r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110c230000)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x10)
syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, 0x0)
r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x270, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x6}, 0x4000, 0x400, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[], 0x48)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000029c0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000fefffe7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000c9be17044171e1d3d7b1efd036d7af273bce36015779c4cef58fa35d17c668a4b63e069efb29797573b8538e31ec24925095a163b9d4e76be2661f2a395e41f7e31a8021e00b00104e0801d4de36e5fdc6c42a7b3ff13f2360a6e231fd223bc33091dd61258a1fda45991fbdce6793c8a4785ee8b60092659b941bbd694dff0f0000000000003a45404b04bf97c4fea679c032b363956cd8bac9626b5db1b07a0bd7cc85e961506a35a04617dc0200379e731d3a8d8feac94a4ee293001f6ce7d5b40bf2a7f9be8173a9639a79fae885d05afe042c0e7821d406c967379e7521292d24d6c8034f2fc7c855a8945e9bce678ee9a015abc9daac8876623db56346916674ceb55f60b493f2f4d736acb2f206fc538450a676d71c01175b8454eb92567e8f8a707b590d7219288e23ee0800000000000010a49fc8f4ff0300000000000000000000cb947d6017ad27714772ad790af252e648ef8c313c604324f5b306000000000000cf327a8f5dd89315b8c8650a70162bba30ad7804fa4140f1a754ffff000000ab744d306619dfb3a37d897662bee00189f43da46a908a235c84cbad335fd1d2f2ef93a6a70c8b8ece0e243eab05a34ab0a7e7e497065e5e282e284f8d5e8852a265d528075214af000000000070d42182d8f3a347d48289a824e5b7b238e27263a23c0b865f75331d888c72df1da4b290582f00024227f03204add786a87b23ceb17c25810e769fe2d6a7bd8e504843b66b1a8c7b364bd2194ba9c8f60ac0c9b18d8c1b9e1a736825c91b4dff0000c1c5dcffa295c2930000000000235d84b0193a5ea7c77cdb7de9ce1a59ab4158097b4dd13ebfaf4425c6855530b56a3320d85c8fe85f667998b1a7e589f486c107761108e4e230419fd27b6ad9c10b25c6b6ed84badbb970dcf133279dd355e41de944564bdab99c5c712a9fbc8e9691c775bb94f746505e1e748cf1710d52468b4b1625ce21612ed5e807dfb5f19f3267e5366b2c0b2a0be49ae476263c9407ac6c596bf3cf66204984f5aebf93d1caa220ea6969cea852fe9a7d1eee13f1f48722a69ad9fb850bd093a302b9250245900ad5c8e5f20ddf77ee3d5a168964fad1aa7347d36c502d02b1d96d753ef6fc354fc126070060c65c147651fca62c0a06939f40c90ebc3042e753fe91b5770b24f25c558736dd7e1e9fb214cbb04c5c6ee4c970b320ba6fb6ef4615f4092de54c519f4622e1224153463ea80248a45a95a189958f586d606dcaa9aac656cf95a2d35225cfb0e6f47486d5cbb04a590116d4de92e203e107d68728a189b0d537d2442beab2f8ce7b2dd357200dcd139e47267012fc2a2b6bad79be429d1ddaccbe0139f16ca1b9bc1103000000ed1ece54cfdbe04670bee9b42fe3dc42033997e2e700b6edb2b49b5f2f6001ee0a9e5d1bee199ce9124a5cb479040000000000000049ead5b02d5ea1dcf6cdcf332fe94b3c1932d8d391754774a32c9b7e6ca4023bce2c7281d27a2cb62383ab3a3bb535650fbfb96c89936855eb7a485698f0d20c3eedd6123ef8f218d52ea2c346f80acb8b9a71856d2f2d1a7c6f45ee127b6a1d1ac1e243ed02e49e8aafe835919564af915965a050c37ceff855bd2dec3452c7c38f5dbf1ff1ff00020000000000006a1a029ea6540b40b2f797813af2c7d4ed235c2dc5f1dbbfcc52b2f55fd3f9f100c4891d0cb4c10ed01489bf235c45822594842da1b411346297a40bbf221bbf63ad3822575dcc01a3c34b5aa4e3750400000000000000fc0fd9c746cf0ed4b0343d00a154e6a869346256ffbd666a34414ab0f40bec45b1c24f02ac9bc20e69201968537dd4dc61323c8b6d3643183631664eeca616696fb30fe89c8bdb15037c801fca4a9c220fec5d14582a00b62548ddf2599e5ffc5330cefb8903d276eae21b0b4b20100ead8256636c7e754185e815dd21445cc965a0526da38021a3e540949494ef3041cfa5067f556a0af5c19d27ff4f61fa7762d7963c96853709e773f14c47eef784cb145ae9d6d37fc7b5d83e05ac773fcc429eae6826a9d207d4c39df8eed9cc2ae3f68df1c6495a82d02939b448bf8038521057714e6e644d633d2abe9e0b0025d16b7eff573f78364ed70a62a7b1e55311dc0193d47f9ecc8c7ad268dc6e2e75f8cc83315411bd6c6b88e1850ee757ac2f9e4d6ac510003717d5847a19e750db92d33d6bdc434d0b52b2eb4b1790459e35122f46b205120a54bf657da9fd55d43a89e333481de468f5984a69509e9eac7a5b39c004396e8cb3ab037fd62fa43f259f13ebc4b590e9ea07ea37689049c799cd444d45dabe3e3cf086768daa6816c37793d17a284d2828f5eab2d3d0bedd5334b7bb4c983fa9cd4bd86f0ad227901e83ef4871695380d25bea2929fa66382af6ddb89917ab100046151bd08fce74247955247daa1ea75139b9ce3771526503c7db3a4b3ff39301986c1fd9b5c42d39e768946c9a7ee8dd081bfb6ea5fa132ebdbe72d02ce9f2000000006f63ae8311afc4943c963d39e42c425fe268892f654febdaee43e95b5ae6749275e1ad8b8b279e1ae296e03a8d9386d8e199dc1f00000008000000000000000026c43493c622f041b47d329b248e8ccd92e9b17007ba2578eefcb59f50343722e6cba3be72fd037eb5fa243a395b5c83376a14414b32c2e8a33de8000000003927da2bec76f4e15c8bf3715c5bfe7b3617d0fcf9b5861554b5b76b8ae69c644a48931306a16cff8a38ea95553867e2c5fb1e99b1802e616345871b4611627874cfbe30fa5793c873ae6f75427f3eeda690147b9615b096d967c2d7f5ddf725f0544f8750a5ed04d6ca0f223506fec5d5e65b467c59459f6113cf41c174a63a17fc79d0b777a0c903c0d2e7f79b6f9ce68a3b72315407040f6a09cadc25e87b7c6b4a3079c7989b4cf04b2581b555fa9a2d74392939b4dbaa9e620e22ab975ac3a5a329157762c1f29075fbdd39451a56b97c90e4fde6782a7c78e7fbe8400054dcafcd51e9eef2d2ea10a3f2636ac2239cef5d8505060de55f472aa89cb8e0188f2ee96cb1ae8dee3c03d0a942c6289cbc4499cea402bd0550520f4aae98c436f18a667ae4efeb5e6a4b1b3f53536145a87578eac8bfc1037acd9d9629449714ed1302714c3519fdd8"], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r9=>0x0}}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x5}, [@alu={0x7, 0x1, 0xc, 0xc, 0x3, 0x100, 0x4}]}, &(0x7f00000001c0)='syzkaller\x00', 0x8000, 0x0, 0x0, 0x41000, 0x10, '\x00', r9, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0xe, 0x3, 0x6}, 0x10, 0xffffffffffffffff, 0x0, 0x3, &(0x7f00000006c0)=[r6, r7, r7], &(0x7f0000000700)=[{0x5, 0x4, 0x7, 0xb}, {0x3, 0x2, 0xa, 0x6}, {0x5, 0x2, 0x0, 0x6}], 0x10, 0xd1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x2e0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440)}, 0x50)
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x7b, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
openat$cgroup_devices(r0, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0)

1m24.589430741s ago: executing program 3 (id=3641):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1, <r3=>0xffffffffffffffff}, &(0x7f0000000080), 0x0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3, <r4=>0xffffffffffffffff}, &(0x7f0000000180)=0x20000, &(0x7f00000001c0)=r2}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x6, 0x14, &(0x7f0000000580)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x6238}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x536}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)

1m24.446212195s ago: executing program 3 (id=3643):
r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000400000009"], 0x48)
r2 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xd, 0x6}, 0x92, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x2000000000000019, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1a"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000008c0)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
syz_clone(0x21140200, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x2b, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x2, 0x0, 0x10, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x2, 0x1}, 0x0, 0x400000, 0x0, 0x0, 0xfffffffffffffffe, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8712360000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x200000000000000)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r6)
ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000080)=0x3)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00')
r7 = socket$kcm(0x11, 0x3, 0x0)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000940), 0x84)
setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000000), 0x4)
r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0)={0xffffffffffffffff}, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r9, 0x0, 0xb7, 0x59, &(0x7f0000000200)="9ca99da622eea89731b9b52f4b13628a652ba41e6fafa6cb177bceafde834b410f6b2b342eeacf15398f784621b82d828fc96feb969a33c38e89efd583c100a5bcbc30a9438f94dca4d97b3f88223a67e748ba79c6be24fdf74d71c6fad7097cfada0c4fbb4fcf9996128b1175d80ef1eadd6f0f39e459fade1c820fb9e508c6f6fc6799503ba01b51c7f65ea9797370b675b31b1d4a622a63f8e39a2e3754bdf02c743707c6b0dba505dd76ab33cfe511d05b93a6f987", &(0x7f00000002c0)=""/89, 0xf, 0x0, 0x67, 0x8f, &(0x7f0000000340)="3db92c6c59b200b9d1ae5f485aca863b40b96c14244c3b87173462b5bd1fd1606c7faef39b6bf25cecbc98deb0021b2b0537eae58d384675ca44d605a27e6d62f9dfb6cac3b3d388500957bf8cd33966512be73d918171d607314836707d3ae3251662250066ad", &(0x7f00000003c0)="48bb8d12447cc6728db1a1b8d27fc14ddedfa9eb4d3fed889120164a2cfb850219031a706f8ec8eef0046c574c1d1932d37cf7c9c7c5f79e9790227775992133dced267c109b23b366561deeed8b048f42b62a0d6d623559cbeedfa875ab1b70b8a921e31a064fd2f352471964f0915194a4f7a4270e29a78c413b3c36863dad1e69a2e2a740d627c5f2a9551ae389", 0x3, 0x0, 0x3}, 0x50)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000540)=@o_path={&(0x7f0000000500)='./file0\x00', r6, 0x4000, r7}, 0x18)
sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000180)="27031c0016001400020000080000000006e1f0000000b29747b0256826a480ca82973d2bd4b836954268e611c00a", 0x2e}, {&(0x7f0000000940)="3e1ec8b3adedf6326aa6e126825a2f1c8ffde5a96e798dc1ad35b939dfa07a0b0b138571c1fc65", 0x27}, {&(0x7f0000001540)="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", 0xec5}], 0x3}, 0x24040008)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000700)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000780)=""/72, 0x48}, {&(0x7f0000000800)=""/111, 0x6f}, {&(0x7f0000000880)=""/2, 0x2}, {&(0x7f0000000980)=""/159, 0x9f}, {&(0x7f0000000a40)=""/189, 0xbd}, {&(0x7f0000000b00)=""/230, 0xe6}, {&(0x7f0000000d80)=""/222, 0xde}], 0x7}, 0x40010122)

1m23.887849159s ago: executing program 3 (id=3647):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x4, 0x6, 0xff, 0x42}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000780), &(0x7f0000000140)="cfb87f365b1150eb9ad4c53991695825d2bf29223cf352ee93022183cf2cd85c77aae2d2e5ade5a324be39b43a52aa7df243b119f13a12944e6659c05ba5390b7f6ba9fbe046ca2a247df49b7b7afa45070065b19a0f86f1b8a7179062000000", 0x100619, r0}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x38}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r0, &(0x7f00000005c0), &(0x7f0000000700)=""/117}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r0], &(0x7f0000000380)='GPL\x00', 0x4, 0xc3, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000004000000000000000000010071120c000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1m8.806846998s ago: executing program 32 (id=3647):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x4, 0x6, 0xff, 0x42}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000780), &(0x7f0000000140)="cfb87f365b1150eb9ad4c53991695825d2bf29223cf352ee93022183cf2cd85c77aae2d2e5ade5a324be39b43a52aa7df243b119f13a12944e6659c05ba5390b7f6ba9fbe046ca2a247df49b7b7afa45070065b19a0f86f1b8a7179062000000", 0x100619, r0}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x38}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r0, &(0x7f00000005c0), &(0x7f0000000700)=""/117}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r0], &(0x7f0000000380)='GPL\x00', 0x4, 0xc3, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000004000000000000000000010071120c000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

4.499685887s ago: executing program 4 (id=4056):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xf5, 0x8, 0x0, 0x0, 0x0, 0x6, 0x60, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe88f5d9965ff4a44, @perf_config_ext={0x2, 0x7}, 0xe5f1, 0xca, 0x0, 0x3, 0x9, 0x7ff, 0x400, 0x0, 0x0, 0x0, 0x400100}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0)
close(r1)
recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0xffffffbe}, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300005500000085000000d000000095"], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5, <r7=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)=r6}, 0x20)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3f, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1206"], 0x0, 0x0, 0xfffffffffffffc73, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x10, 0x5}, 0x94)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)='n', 0xffb8}], 0x1}, 0x20000081)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r8)
r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r9, 0xc004743e, 0x110e22ffe7)
ioctl$TUNGETVNETLE(r3, 0x4010744d, &(0x7f0000000180))
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b40)={{r2, <r10=>0xffffffffffffffff}, &(0x7f0000000ac0), &(0x7f0000000b00)=r6}, 0x20)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000b80)={<r11=>r0})
r12 = getpid()
r13 = gettid()
r14 = getpid()
sendmsg$unix(r1, &(0x7f0000000d00)={&(0x7f0000000400)=@abs={0x0, 0x0, 0x4e20}, 0xfffffffffffffec7, &(0x7f0000000a40)=[{&(0x7f0000000580)="cbdc0b2fea3ba7f2df25a2bc6617389ac5f1270aeb6078ad04f02662b3fa217f36c42825183ed5fe0118d5aac0bb542b7d697df92f9b12256f5144a8e5c61096cd298ff2ffddea896c05368da0a2bcb2668de5544fb99ab2e0d862946608b00ccf4a562df43bec1cf141a69f", 0x6c}, {&(0x7f0000000600)="5e24243e1b8cfaa39fb9c62210c156e4832f8c55c34f28cbae62412c8e696890b1f676f50233ab387fbaff865fdad809775ee42658e305f83d4c14043e0980b3df8098230454abf0ba1e6707303f0fba86c89f84f37550e3f5edf21b0e4758476857683c1bead29f24fd3f347366c0de1aae5ca035ed85dcb0cd6f04ffb5f1d2e213ccab151900796f956da68aa3a2abc35f06a60738dd18a2e16a94bcb159abfb146dddc0840c931daa74ca47bf25b617d558723caf31a714af", 0xba}, {&(0x7f00000006c0)="e840f4ecc650b681b056cf74cac664280508402b884bc7a6fb38e8eb2f2e225153212bf48a21c0adf2af42c55042119fe481b982b303a534568e5c16270803a05b25880d7a6499dd24f7509c561424840d2675f8499987537f3fddcd96224abb1a97a8a9f71d9303c002af798be8ee839f73d5421309470122dbfe99c5341f0c0bd34f947ebf53a6592c17a392c25681b96d81ead0e329955fd3854b538849ba816a983f7ad4487d691d87714fca612a36f20c15e00b21261be3325e517e63ef98932c4131a622e82f32162ed0cd7adbcc8a", 0xd2}, {&(0x7f00000007c0)="7b0531f89c464bcf0b1d969d6b2d89b5ad17a1ef83124302c8933c6ab98ea2b7acccfdcde8fa66e05618f233ba608ca38b450bda838bfb6fea270d13f71433a41720501b299b8be85943ef00c5cb42f13db0bd8ed1e4723e49feea0c778df7d19650abe899a121eaf2ff77b61c1b7f74da0d9194cf3c60074d6bb69a7da5bfd1a28ab21cfaf552b42bbee53f6251f262c693b7ee91644d1fdbcb30812b", 0x9d}, {&(0x7f0000000880)="870f93e1ab8c1c7ec1768f265b253cd0f95e96bbbd8edf7228c88615bbdf1fded5ec47e2454808e4396277c773cba60f0fffb58f03733f1175990b1165edc7cbcf9897a634cbeab37b59ca93c7a4028bd60d54d25463ec5dd7de3ec7a20b8a2558fe06ee286f6342d40c845b806a8fa2c17f5adde85764b3d73b5ca658f1f52939a18df2d378ff361ed6db95b121e50bf3c8b7cf6d0cf8a514c97fb311d40fe944c03291b733586a74e9ddfee6d927004f2d3a51949931f98ee4e791ab882a499744e99ba773c6ddd205b044b772a264ae57d5", 0xd3}, {0xfffffffffffffffc}, {&(0x7f0000000980)="b539bf9d6d33f1d7e617bdc23ce4ec70a91f53f78f6a6b0f87243a08ec6fc0191853c4ed808dda3d296d8fefd77d947b412c1e51ad1fb896943401422371dc5f90615a10e0ded83f752db52517d3b5e775c924ab9ec9598478b2113e33e29e1d09bd6f9d3c6c153f97627ff56dd10a615c31b3a3b90ee4e55fd2599955ad57d2a2fff83e6809b80cd3d73030d0ed29207de4e9111736", 0x96}], 0x7, &(0x7f0000000d40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32=r10, @ANYRES32=r2, @ANYRES32=r7, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r6, @ANYRES32=r5, @ANYRES32=r1, @ANYRES32=r6, @ANYBLOB="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", @ANYRES32=r7, @ANYRES32=r4, @ANYRES32=r6, @ANYRES32=r2, @ANYRES32=r4, @ANYRES32=r11, @ANYRESDEC=r6, @ANYRES32=r12, @ANYRES32=0xee01, @ANYRES32=0xee00, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r13, @ANYBLOB="65816fe3db77693e57b5491cfc46be032974e6adf24f671db58e7d27875a54bea78bef68a1f2ecb26860d95912a28e42bee887095b88d2432cf7fdcd7781edd477202e312bab839416452bc121455a211e38bf68442fe98f095518b33f5a7d2bce5f73ba0d3237f27aed63a841fb9222cba632a0423ad9f76d1e679af0ab467c1aab", @ANYRES32=0xee00, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r14, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0xee00, @ANYBLOB='\x00\x00\x00\x00'], 0x138, 0x40800}, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x2a979d)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0x0, 0x0, 0x2, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3e9b1d"], 0xf9)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r15 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x456c4997c6f4bb71, 0x0)
close(r15)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa8640, 0x0)

3.728308556s ago: executing program 1 (id=4057):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x8b}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x6f) (async)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x57, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x19a7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7a, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0x6, 0x3, 0x2, 0x100, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001080)={0xffffffffffffffff, &(0x7f0000000080)="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"}, 0x20)

3.623445099s ago: executing program 2 (id=4058):
perf_event_open(&(0x7f0000001500)={0x2, 0xffffffffffffff65, 0x59, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x100000, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$kcm(0x10, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_procs(r3, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0)
socket$kcm(0x2, 0x5, 0x84)
perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x4}, 0x100600, 0x2, 0x2, 0x9, 0x0, 0x1a72, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = socket$kcm(0x2, 0x2, 0x73)
sendmsg$inet(r4, &(0x7f0000000580)={&(0x7f00000000c0)={0x4, 0x0, @loopback}, 0x10, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000040c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r2, &(0x7f0000001640)={&(0x7f0000000000)={0x2, 0x4e28, @dev={0xac, 0x14, 0x14, 0x42}}, 0x8, 0x0, 0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="ac141411e00000010000000028000000000000000000000007aa78c748e98a75fa1fca93654dce73e7c21ca7151eff0f000000000000d47ac37f1496b473d2f69833f1c643854985308e793e2eeee505cb0e7972832d369b0981bb51e1039392b55dc0d456ecbe6eaed2642b3ea5fdcc929ac2e12589b16f25856e2d6c870075b214b2ccef471b488f1950b31843af6dbc67089dda6ff13b6fedb7f46935411d6a", @ANYRESHEX=r1, @ANYBLOB="1c000000000000000000000008000000ded1aa392c055493b65783109c80cb7e61983f3ed027285b467c878a7ecb42760772ab00e35fcc8b4c8dd81250af62000c85991a6bd16728c4cba3d4bb115ae67adc1ea06d3f31e083459230bd503b38551e84ea5d8880f7b539bf79d032496e8ca28a2b8c11d0ee21f9ad46a9288ae2efe518b343e5ad61d73b4febba4ec8255a4cb9afb2bdd963c26e78726f", @ANYRES8=r5, @ANYRESHEX=r0, @ANYRES16=r3, @ANYRES16=r5], 0x48}, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
r7 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0300000004000000050000000a00000000000000", @ANYRES32=0x1, @ANYBLOB='\n\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000050000000400"/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r8, <r9=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20)
r10 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0xc8, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40806, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x7}, 0x0, 0x1, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0xa)
recvmsg(0xffffffffffffffff, 0x0, 0x40)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="0900000017000000080000003e00000000100000", @ANYRES32=r9, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r11}, 0x38)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r12)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r7, 0x4008240b, &(0x7f0000000140)={0x5, 0x80, 0x8c, 0x9, 0x9, 0x40, 0x0, 0x7, 0x200, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xba, 0x0, @perf_config_ext={0x9c0, 0x800}, 0x10140, 0x7680000000000000, 0xf10, 0x8, 0x7f, 0x5, 0x4040, 0x0, 0x9, 0x0, 0xff})
ioctl$PERF_EVENT_IOC_PERIOD(r10, 0x40082404, &(0x7f00000001c0)=0x5)
recvmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42)

3.463737783s ago: executing program 1 (id=4059):
socket$kcm(0x10, 0x2, 0x0) (async, rerun: 64)
r0 = socket$kcm(0x10, 0x400000002, 0x0) (rerun: 64)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000500)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020007000200060005c00364683b9dad7aa21240d69a6a818cf6c551ae60fc91b169edb1b175732b9f597fe3b6c5a3d77cc766307de2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000000)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000003c0)=[{0xfffffffe, 0x0, 0x9}]}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x19}, 0x94) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) (async, rerun: 32)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff}) (rerun: 32)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080))
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a10000000e8fe55a118001500060014b9c3600e1209000a0044000200a8001600", 0x34}], 0x1}, 0x4)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cgroup.freeze\x00', 0x0, 0x0)
ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f00000002c0)=r1) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffaf, 0x10, &(0x7f0000000040)}, 0x3c)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c40)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfb35, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

3.302617457s ago: executing program 4 (id=4060):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0, <r2=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r1}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2}, &(0x7f0000000180)=0x20000, &(0x7f00000001c0)=r1}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x6, 0x4, &(0x7f0000000580)=@framed={{}, [@generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)

3.131865431s ago: executing program 2 (id=4061):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a40)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200001, 0x1, @perf_bp={0x0, 0x3}, 0x10781, 0x10, 0x0, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000640)=0x9)
r3 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x400, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000880)={r6, &(0x7f0000000700)="7df2bfea8241f18a4658f782bf09e1269fddee541714cd7f6c31f78447864aacf95a8af0d6a3818a739378fb354c66d59fda9136526d84448386721b3d6dac76a5959ed94f98bf6d9f962cb1f1e85775dd294d50ae38380608336120e41cfb40b4ed64", &(0x7f0000000780)=""/251}, 0x20)
close(r5)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x2, 0x3, 0xc, 0xb}, {0x1, 0x5, 0x7, 0x4}], 0x10, 0x2}, 0x94)
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x18, 0x1, 0x1, [<r7=>0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}, 0x10060)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r8, 0x89f9, &(0x7f0000000900)={'sit0\x00', @random="3f40230c1100"})
setsockopt$sock_attach_bpf(r3, 0x84, 0x23, &(0x7f0000000000)=r7, 0x8)
r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000440), 0x8)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="01000000040000000800000000010000000000004271d7938b553d8b032ffc2015df191431cc66d9cbfbb1715555171e54e4a775f21b9a83f35a328bffdc43ed8c0c288978b5681db3282716cf13dba843c13dc2af5c98366fd457739ac2d58cf68765080a67713b3b591837c2d4e60d017a5320bc45dfb2a555d4e903ee76f6f2e0aa06e4fb21f1a6d1971d7569481e009b659aa0898cb36bd09adca41227d915b9924f207187bd8722e18c7d5f", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x6, 0xb, &(0x7f0000000200)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r10}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa, 0x0, 0x2}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x6}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000280)='GPL\x00', 0x800, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r11, 0x0, 0xe, 0x0, &(0x7f0000000340)='\x00'/14, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@map, 0x1f, 0x0, 0x9, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0]}, 0x40)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r9}, &(0x7f0000000480), &(0x7f00000004c0)=r9}, 0x20)
r12 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="396cceaa92d80710308a", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20)
setsockopt$sock_attach_bpf(r0, 0x1, 0x2f, &(0x7f0000000200), 0x4)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x20, 0x61, 0x11, 0xc8}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe56}, 0x80)
r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
r14 = socket$kcm(0x2, 0x1000000000000002, 0x0)
setsockopt$sock_attach_bpf(r14, 0x1, 0x3e, &(0x7f00000002c0)=r13, 0x161)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xad}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNATTACHFILTER(r12, 0x401054d5, &(0x7f00000000c0))
r15 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRESOCT=r8, @ANYRESHEX=r5, @ANYRES64=r4], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map, r15, 0x7}, 0x10)

3.007504174s ago: executing program 4 (id=4062):
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2008, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x3fc2bda6, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x5)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0xfe, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x80000000, 0x6}, 0x0, 0x1, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xd, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x2, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x1e, 0x4, 0x0)
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000033000b35d25a806c8c6f940e1224fc60", 0x14}], 0x1}, 0x40010)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r3 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r3, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0, 0x900}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0)
socketpair(0x1, 0x801, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000001040), 0x8}, 0x104090, 0x6, 0x4000003, 0x0, 0x0, 0xed77, 0x200, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x11, 0xffffffffffffffff, 0x9)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x891c, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100028, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffeffffffff}, 0xc001, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x10)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
r4 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$inet(r4, 0x0, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0x0, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="850000002200000007000000000000089500000000000000e26c9bd1a6361b"], 0x0}, 0x90)
r5 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a00910006000000000000000a"], 0xfe33)

2.723706852s ago: executing program 0 (id=4063):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$kcm(0x2, 0x5, 0x84) (async)
r1 = socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async, rerun: 32)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) (rerun: 32)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000008"], 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) (async, rerun: 32)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') (async, rerun: 32)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff})
recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r6=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r6, 0x4) (async, rerun: 32)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x3, 0x0, 0x10000}, {0x10000002, 0x0, 0x0, 0x8}]}, 0x94) (async, rerun: 32)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
close(r8)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0xf6) (async)
socket$kcm(0x2, 0x5, 0x84) (async)
recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r9=>0xffffffffffffffff]}}], 0x18}, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.idle_time\x00', 0x275a, 0x0)
setsockopt$sock_attach_bpf(r10, 0x1, 0x2a, &(0x7f0000000100)=r12, 0x4) (async)
sendmsg$unix(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="4d8e5ca74b", 0x5}], 0x1}, 0x0)
sendmsg$inet(r11, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x20000090) (async)
recvmsg$unix(r10, &(0x7f0000000300)={0x0, 0xffffffffffffff55, 0x0}, 0x2142) (async)
recvmsg$unix(r10, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x40000062)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x98, 0x98, 0x6, [@volatile={0xa, 0x0, 0x0, 0x9, 0x2}, @decl_tag={0xb, 0x0, 0x0, 0x11, 0x1, 0x5}, @type_tag={0x6, 0x0, 0x0, 0x12, 0x1}, @union={0xa, 0x1, 0x0, 0x5, 0x1, 0x10000, [{0x5, 0x2, 0x1}]}, @decl_tag={0x10, 0x0, 0x0, 0x11, 0x2, 0x4}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0x9, 0x5}, {0xb, 0x3}, {0x2, 0x3}, {0xe}, {0xd, 0x1}, {0x4, 0x4}]}, @func={0x2, 0x0, 0x0, 0xc, 0x5}]}, {0x0, [0x5f, 0x0, 0x2e, 0x61]}}, &(0x7f0000000740)=""/167, 0xb6, 0xa7, 0x1, 0x7, 0x10000, @value=r8}, 0x28)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x244840, 0x0) (async)
setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, &(0x7f0000000000)=r9, 0x10)

2.698477462s ago: executing program 2 (id=4064):
r0 = socket$kcm(0x2, 0x1, 0x84)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000007000000050000000100000f05000000080000000600000000000000000000000061"], &(0x7f0000000040)=""/249, 0x37, 0xf9, 0xa}, 0x28)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x16}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe42, 0x0, &(0x7f0000000000)="0eefe1784c8b574772dd456e969e4cd0b6a1e80fdff25da951ba809d0e88b5e92e1304dcbade6c29e55cfecf89009522f5924de9d4cf5ab51da06f65b3584807c56d4a56e0cd55b17b6b5d3e432f48483a9ac5b981f1730586034e42f80aca17df94eabc583206", 0x0}, 0x50) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="180200000100ffff0000000000000000850000000700000085000000d000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async)
sendmsg$inet(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000340)="e15a", 0x2}], 0x1}, 0x200000fc)

2.503961686s ago: executing program 1 (id=4065):
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00410000039bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4044)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="b540174a82ec0c01000000040000000800000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
socket$kcm(0x29, 0x7, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f40)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000080), 0xfe41)
recvmsg$unix(r2, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500), 0xfd}, 0x0)
r4 = gettid()
sendmsg$unix(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)='z', 0x1}], 0x1, &(0x7f00000001c0)=[@cred={{0x1c, 0x1, 0x2, {r4, 0x0, 0xee00}}}], 0x20, 0x20000084}, 0x40880)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1, <r6=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r5}, 0x20)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d080201000000040000a118000200ffe5ffffff0000000300000000010201a80016ea1f00084003bc5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f722f054f55153c6f94007134cf6ee08000a09108a8d8ef075c0100000000000000cb490000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d1600360d8bcc00400040fad95667e0060000000000000580bb9ad809d5e1cace81b341139fe3cd4032e8edb100273f90a9b9b98c154bb444c6d291", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20004c04)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r6}, &(0x7f0000000180)=0x20000, &(0x7f00000001c0)=r5}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x6, 0x4, &(0x7f0000000580)=@framed={{}, [@generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)

2.411558539s ago: executing program 4 (id=4066):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x141042, 0x0)
close(r1) (async)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) (async)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast})
write$cgroup_devices(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b23000e"], 0xffdd) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e0000000000000007000000ff03000000000200", @ANYRES32, @ANYBLOB="0004000000000000000000836b243ec3fd01bb00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/28], 0x50)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xd, 0x7, 0x401, 0x1910, 0x80, 0xffffffffffffffff, 0x332, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x50)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffed4}, 0x94) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff})
recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r6=>0xffffffffffffffff]}}], 0x18}, 0x0) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001b40)={0xffffffffffffffff, 0xe0, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001840)=[0x0, 0x0], ""/16, <r7=>0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000001880)=[0x0, 0x0, 0x0], &(0x7f00000018c0)=[0x0, 0x0, 0x0], 0x0, 0x6c, &(0x7f0000001900)=[{}, {}, {}, {}, {}], 0x28, 0x0, 0x0, &(0x7f00000019c0), 0x8, 0xb7, 0x8, 0x8, &(0x7f0000001a00)}}, 0x10)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=ANY=[], 0x50)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001d80)={0x6, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000ffffffff000000000040280018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0xfffffa0a, 0x1000, &(0x7f0000000840)=""/4096, 0x41000, 0x48, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001bc0)={0x3, 0x0, 0x232c}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001d00)=[r8, r9], &(0x7f0000001d40)=[{0x5, 0x5, 0x5, 0xc}, {0x1, 0x4, 0xb, 0x1}, {0x4, 0x3, 0x5, 0x6}], 0x10, 0x7}, 0x94)
r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r10, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r11, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r12=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=r12, 0x4) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x26, &(0x7f0000001e40)=ANY=[@ANYBLOB="180000000500000000000000050000001800000000000000000000000400000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES8, @ANYBLOB="0000000000000000b70500000800000085000000a500000050940ca10df97626952fced2362c00ffffffff85100000fbffffff186400000c00000000000000fc64dba5364b9587b51354496d279b3eabc0d27ee791824c7f25aedf20e993ddde2f046d0044e4b41ce9267c2ab4227045000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000807b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000009500000000000000"], &(0x7f0000000900)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x4, '\x00', r7, @fallback=0x18, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r12, 0xffffffffffffffff, 0x1, 0x0, &(0x7f00000009c0)=[{0x1, 0x2, 0x0, 0xc}], 0x10, 0x4}, 0x94) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], <r13=>0x0, 0x12, &(0x7f00000005c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0xa5, 0x8, 0x8, &(0x7f0000001940)}}, 0x10) (async)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000008c0)={{r0, <r14=>0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)='%pi6   \x00'}, 0x20) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{0x1, <r15=>0xffffffffffffffff}, &(0x7f0000000900), &(0x7f0000000940)}, 0x20) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000009c0)={0xffffffffffffffff, <r16=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x1a, 0x34, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc1fc, 0x0, 0x0, 0x0, 0xffff9ffb}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x29f8}, @map_fd={0x18, 0x7, 0x1, 0x0, r3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @ldst={0x3, 0x2, 0x2, 0x8, 0x9, 0x10, 0xfffffffffffffff0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @jmp={0x5, 0x1, 0x4, 0xa, 0xa, 0xb5, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000440)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x3, '\x00', r7, @tracing=0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x4, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x2, 0x0, 0x8001, 0x4}, 0x10, r13, 0xffffffffffffffff, 0x7, &(0x7f0000000a00)=[r14, r15, r16], &(0x7f0000000a40)=[{0x3, 0x3, 0xe, 0xc}, {0x2, 0x1, 0x6, 0x3}, {0x5, 0x2, 0x9}, {0x1, 0xfffffffb, 0xf, 0x6}, {0x2, 0x5, 0xe, 0xc}, {0x3, 0x1, 0x8, 0xb}, {0x2, 0x3, 0x8, 0x2}], 0x10, 0x5}, 0x94) (async)
r17 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000008f000000000000000100000018110000", @ANYRES32=r17, @ANYBLOB="0000000000000000b702000054000001b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000c309000050000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100}, 0x94)

2.410815739s ago: executing program 2 (id=4067):
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x502b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x4, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r2, 0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x4005)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000012, 0xe, 0x0, &(0x7f00000000c0)="63d1ed8e64dc3f6d00000000b986", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815000100e000000103600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x4000000)
r6 = socket$kcm(0x10, 0x2, 0x0)
r7 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x9)
r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
close(r8)
bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=@base={0x7, 0x4, 0x100, 0x10, 0x8}, 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r9)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e2, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc)
sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040a00000000fe0500002015000600142603600e1209000a00000000000001060000b94dcf5c0468c1d67f6f94007134cfeee0800089e408e8d8ef52b40800de00e06bbace8017cbec4c2ee5a7cef4090000001fb79164075ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5035ccb29e00360db70100000040fad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a83954b43370e9701008400002d3bc75dc0bb9dd33e438c", 0xd8}], 0x1}, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)}], 0x1, 0x0, 0x0, 0x10000000}, 0x12cd)

1.856837183s ago: executing program 1 (id=4068):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xf5, 0x8, 0x0, 0x0, 0x0, 0x6, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe88f5d9965ff4a44, @perf_config_ext={0x2, 0x7}, 0xe5f1, 0xca, 0x0, 0x3, 0x0, 0x7ff, 0x7, 0x0, 0x0, 0x0, 0x400100}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0)
close(r1)
recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0xffffffbe}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4, <r6=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)=r5}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b40)={{r2, <r7=>0xffffffffffffffff}, &(0x7f0000000ac0), &(0x7f0000000b00)=r5}, 0x20)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000b80)={<r8=>r0})
r9 = getpid()
r10 = gettid()
r11 = getpid()
sendmsg$unix(r1, &(0x7f0000000d00)={&(0x7f0000000400)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000580)="cbdc0b2fea3ba7f2df25a2bc6617389ac5f1270aeb6078ad04f02662b3fa217f36c42825183ed5fe0118d5aac0bb542b7d697df92f9b12256f5144a8e5c61096cd298ff2ffddea896c05368da0a2bcb2668de5544fb99ab2e0d862946608b00ccf4a562df43bec1cf141a69f", 0x6c}, {&(0x7f0000000600)="5e24243e1b8cfaa39fb9c62210c156e4832f8c55c34f28cbae62412c8e696890b1f676f50233ab387fbaff865fdad809775ee42658e305f83d4c14043e0980b3df8098230454abf0ba1e6707303f0fba86c89f84f37550e3f5edf21b0e4758476857683c1bead29f24fd3f347366c0de1aae5ca035ed85dcb0cd6f04ffb5f1d2e213ccab151900796f956da68aa3a2abc35f06a60738dd18a2e16a94bcb159abfb146dddc0840c931daa74ca47bf25b617d558723caf31a714af", 0xba}, {&(0x7f00000006c0)="e840f4ecc650b681b056cf74cac664280508402b884bc7a6fb38e8eb2f2e225153212bf48a21c0adf2af42c55042119fe481b982b303a534568e5c16270803a05b25880d7a6499dd24f7509c561424840d2675f8499987537f3fddcd96224abb1a97a8a9f71d9303c002af798be8ee839f73d5421309470122dbfe99c5341f0c0bd34f947ebf53a6592c17a392c25681b96d81ead0e329955fd3854b538849ba816a983f7ad4487d691d87714fca612a36f20c15e00b21261be3325e517e63ef98932c4131a622e82f32162ed0cd7adbcc8a", 0xd2}, {&(0x7f00000007c0)="7b0531f89c464bcf0b1d969d6b2d89b5ad17a1ef83124302c8933c6ab98ea2b7acccfdcde8fa66e05618f233ba608ca38b450bda838bfb6fea270d13f71433a41720501b299b8be85943ef00c5cb42f13db0bd8ed1e4723e49feea0c778df7d19650abe899a121eaf2ff77b61c1b7f74da0d9194cf3c60074d6bb69a7da5bfd1a28ab21cfaf552b42bbee53f6251f262c693b7ee91644d1fdbcb30812b", 0x9d}, {&(0x7f0000000880)="870f93e1ab8c1c7ec1768f265b253cd0f95e96bbbd8edf7228c88615bbdf1fded5ec47e2454808e4396277c773cba60f0fffb58f03733f1175990b1165edc7cbcf9897a634cbeab37b59ca93c7a4028bd60d54d25463ec5dd7de3ec7a20b8a2558fe06ee286f6342d40c845b806a8fa2c17f5adde85764b3d73b5ca658f1f52939a18df2d378ff361ed6db95b121e50bf3c8b7cf6d0cf8a514c97fb311d40fe944c03291b733586a74e9ddfee6d927004f2d3a51949931f98ee4e791ab882a499744e99ba773c6ddd205b044b772a264ae57d5", 0xd3}, {0xfffffffffffffffc}, {&(0x7f0000000980)="b539bf9d6d33f1d7e617bdc23ce4ec70a91f53f78f6a6b0f87243a08ec6fc0191853c4ed808dda3d296d8fefd77d947b412c1e51ad1fb896943401422371dc5f90615a10e0ded83f752db52517d3b5e775c924ab9ec9598478b2113e33e29e1d09bd6f9d3c6c153f97627ff56dd10a615c31b3a3b90ee4e55fd2599955ad57d2a2fff83e6809b80cd3d73030d0ed29207de4e9111736", 0x96}], 0x7, &(0x7f0000000bc0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01}}}, @rights={{0x34, 0x1, 0x1, [r7, r2, r6, r1, r1, r5, r4, r1, r5]}}, @rights={{0x28, 0x1, 0x1, [r6, 0xffffffffffffffff, r5, r2, 0xffffffffffffffff, r8]}}, @cred={{0x1c, 0x1, 0x2, {r9, 0xee01, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r10, 0xee01, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r11, 0xee00, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee00}}}], 0x138, 0x40800}, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x2a979d)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0x0, 0x0, 0x2, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3e9b1d"], 0xf9)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x456c4997c6f4bb71, 0x0)
close(r12)
r13 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa8640, 0x0)
r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0)
r15 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0x0, 0x0, 0x662, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r15, 0x40082404, 0x0)
perf_event_open$cgroup(&(0x7f0000000100)={0x5, 0x80, 0x6, 0xfc, 0x7, 0x1, 0x0, 0xfff, 0x800, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, @perf_bp={&(0x7f00000000c0), 0xd}, 0x80, 0x0, 0x750d, 0x6, 0xfffffffffffff9f1, 0xa25, 0x6, 0x0, 0x4, 0x0, 0x66}, r14, 0x6, r15, 0x9)
ioctl$TUNSETOFFLOAD(r13, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r12, 0x4004743b, 0x0)

1.727084166s ago: executing program 0 (id=4069):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c0000000900000004000000020000060400000003000000000000000500000000000000000000615f01"], 0x0, 0x3d, 0x0, 0x1}, 0x28) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c0000000900000004000000020000060400000003000000000000000500000000000000000000615f01"], 0x0, 0x3d, 0x0, 0x1}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="0000000000000011660800000000000018000000000000000000000000000a009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50af8ff0000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78)

1.463764593s ago: executing program 0 (id=4070):
r0 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
r1 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r1, 0x29, 0x3a, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000000c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94)

1.448207053s ago: executing program 0 (id=4071):
r0 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94)
r3 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1c8c00005f00071b189da80400008000000000af1f"], 0xfe33)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x9, 0x1f, 0x0, 0x2, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, @perf_bp={&(0x7f0000000180), 0x8}, 0x0, 0x7c, 0xfffffffe, 0x5, 0x0, 0x0, 0x100}, 0x0, 0x3, 0xffffffffffffffff, 0x0)
close(r2)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x3, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xf, 0x4, 0x8, 0x1}, 0x37)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r4, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x3c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0xa8}, 0x2160)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'})
socketpair(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f0000000080))
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x25, &(0x7f0000000000)=r7, 0x20000010)
openat$cgroup_subtree(r7, &(0x7f0000000080), 0x2, 0x0)

1.360862196s ago: executing program 4 (id=4072):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x0, @perf_bp={0x0, 0x7}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x8002, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="00000011000000005506ed1700", @ANYRES32=0x0, @ANYRES32], 0x48)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@lli}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x0, 0xe, 0x0, &(0x7f0000000280)="b306ac9676b27004d3c8ff6f88ec", 0x0, 0x2000300, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="5c00000014006b", 0x7}, {&(0x7f00000017c0)="00000000ffffffff1f01a0c9a1171aa56a7f9138a6c073e99f8f2ffed6bd642c1238663e9e5189a46cb56c776afa8ec3d4d4d9c0648fc18bad3a6b5656235d60cb5af5c5a69e10ed9fd4ea", 0x4b}, {&(0x7f0000001840)="9a9245a259250adbc6e2", 0xa}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x0)

1.303568837s ago: executing program 2 (id=4073):
socket$kcm(0xa, 0x922000000003, 0x11) (async)
socket$kcm(0xa, 0x922000000003, 0x11)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xeb, 0x9, 0x1, 0x0, 0x0, 0x0, 0x8404, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}, 0x0, 0xfffffffffffffffc, 0xffffffff, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x7, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000000a50a000000000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x7, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000000a50a000000000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000080)='./cgroup/cgroup.procs\x00')
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x8cffffffffffffff}, 0x3b35, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x3, 0x3, 0x6, 0x3, 0x0, 0x3, 0x108, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0xef0, 0x5}, 0x10200, 0x76, 0xd2a, 0x9, 0x3, 0x3, 0x0, 0x0, 0xe5e, 0x0, 0x1}, 0x0, 0xb, 0xffffffffffffffff, 0xa) (async)
r2 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x3, 0x3, 0x6, 0x3, 0x0, 0x3, 0x108, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0xef0, 0x5}, 0x10200, 0x76, 0xd2a, 0x9, 0x3, 0x3, 0x0, 0x0, 0xe5e, 0x0, 0x1}, 0x0, 0xb, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, r2, 0x0) (async)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, r2, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000002280)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1100"/12, @ANYRES32=0x0, @ANYBLOB="b1"], 0x20) (async)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000002280)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1100"/12, @ANYRES32=0x0, @ANYBLOB="b1"], 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e00000000000000080000000900000000000000", @ANYRES32=0x1, @ANYBLOB="fd"], 0x48) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e00000000000000080000000900000000000000", @ANYRES32=0x1, @ANYBLOB="fd"], 0x48)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90224fc60100005", 0x17}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3504000040000511d25a35400c0002000200002037153e370c040180060410", 0x1f}], 0x1}, 0x10049014) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3504000040000511d25a35400c0002000200002037153e370c040180060410", 0x1f}], 0x1}, 0x10049014)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f91a24fc600702", 0x16}], 0x1, 0x0, 0x0, 0x400300}, 0x20044050) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f91a24fc600702", 0x16}], 0x1, 0x0, 0x0, 0x400300}, 0x20044050)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, 0x0, 0x29, 0x0, &(0x7f0000000280)="4e6f466c21233bd7f42b4dc8611a1e1088672ffa9153177f95ca88f2b010232a390e9e80d6c527972f", 0x0, 0x2, 0x0, 0x7}, 0x50)
socket$kcm(0x10, 0x2, 0x0) (async)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$unix(r1, &(0x7f0000000540)={&(0x7f00000003c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000440)="f9b73a5e30fb108bfce7675924702428ff6c3169ef1733b2a8a08ef396a25a", 0x1f}], 0x1, 0x0, 0x0, 0x5}, 0x2000c040)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000bc0)={r4, 0x0, 0xf, 0x0, &(0x7f0000000940)="38d26a3d9673399025aae4121e4207", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x20000}, 0x50)
r5 = socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4)
sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a12900150006001426036018120900040044000000a80016000a0001400200000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4eccb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9eedee5de6ccd40dd6e4ed12e749d21e100f323c4c716d15", 0xd8}], 0x1}, 0x0)

1.300480787s ago: executing program 0 (id=4074):
r0 = socket$kcm(0x10, 0x3, 0x10)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xc, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r3 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r3, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0204000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x23, &(0x7f0000000000), 0x4)
recvmsg(r3, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x20)
r4 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r4, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000040)="0207000902000000e4a17c45c8d260", 0xf}, {&(0x7f0000000200)="f0", 0x1}], 0x2}, 0x4000000)
sendmsg$kcm(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)="95b52777300a6be8f0e7b423e2b136302b02c69c66e52d30b458d7bfa6088b3b2097c1bb386fbfabd880b34542ee60fcd725a521abd2bdb3d87babb6b251d112b847fab613ddf28578fe2a0a85688b078efa270cd6ac25af86b4ea", 0x5b}, {&(0x7f0000000140)="2862283c46138e30362ed05b24563fe55837b68a1ed2815c840800c563389d25d037dc02a994265c0b169a080561a6f3ca088498d876e46764ef9880247e99acd0bc7ae81651f4c401cd8d27f005c33911e03e388ad4a61c22cb0bdcf6e108914da909977a4020bf36dbc4472e71579f06d7bddcd088121349f3b159343d9ab09fbe8a8a81deb9c9cc43877d4066f746112bf8b44db0d231cd6f253821bd0ae7fa3bb9d6427f1f66652592d882ea966ecceb5a1041df40f9263a86d8619d9847835fadc958125f304c9d05ba8078f0f69152e23843cd90a9e50940587f462c90", 0xe0}, {&(0x7f0000000240)="bcde71a97087131730293f1d67cbc0d145aa0ca8083992ae0d1591401167c79b6beacbc586a031bc1c1fc2ee45f00353eeddcb36dcb14f59d9b2392009fd85a24749e2972580c36912e335cb742fddaec153a438cbadac395d4735ced0987205862a812531b6ef300216610dd4e4042025558f028a926818c1c0938f98d6ab96f22cf490b052a2d94d208189801b", 0x8e}, {&(0x7f0000000300)="e1bc71e625b04eb870ddd9457d30211f2ef9e5e79466eb63d8489556dbba44c1259590a35e4cb1ab2c69bb8940471195ff83c8f3dd16797cdccc95082f86fa53adcd940c2239567e378edfb89bab067861e9f5665742b8387eed45d8b4842e0d9001cc70350c63bdf2a93de47ead8d18c6e3b0926b383e89f7", 0x79}, {&(0x7f0000000380)="0dd03a9b177a9d741c02dbe980e2229bc26076f9bcdb1614f1297a6330f843774192ca610850b1f3b6548994dcc5cb7980119b15a9163bf68789cf0d1ef5288005d5aa4868f5b555d8593f15c996879c86e725a87767812b5125aa6367cc9d59d8266c2c93002e4ae13da31a67134236370c406639e4bf39b862c43d170078e8d08d36b5c4ae5015b953673c86bda659b7f7d5350e07197cfcbfb9531a17d1a34d01c9fa95126149d62de610e271f465", 0xb0}, {&(0x7f0000000440)="5b121a599271eb73a2b0f0a2cd6a7f7f9b69a69feabfe8f36f5de45ee2b1391e7594ce8dcbe8e78184ef8e2de5905887d60073fd3f5a089bec75189de4973e0eafeb49ca99b4bd89a424eaef4e0f7661dbc999157d0190716047025fe3ebc7a67d1b36e1029aaedb5ed31650ee871c71b7d8fcd53d4e7701db01c93fc6d6ef5b23746781fd90bc0e090ccdbb5ccb6349dee23abf2000c8e24e534a857afe949288b9", 0xa2}, {&(0x7f0000000500)="68f08a6954e6fd525d582cd0b51f6fbabd0032c0f5a8de0421739257f85886ce7b9d5ac2dd555833398afa1e326fc07188113b76763709766d73d57f", 0x3c}, {&(0x7f0000000540)}], 0x8, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x698}, 0x24000010)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000035000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000540)={<r5=>r0})
recvmsg(r5, &(0x7f0000001f40)={&(0x7f0000000d00)=@generic, 0x80, &(0x7f0000001e40)=[{&(0x7f0000000d80)=""/189, 0xbd}, {&(0x7f0000000e40)=""/4096, 0x1000}], 0x2, &(0x7f0000001e80)=""/163, 0xa3}, 0x2)

1.266294818s ago: executing program 1 (id=4075):
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x7, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef6}, 0xbafa, 0xff, 0x98, 0x2, 0x0, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, r0, 0x2)
write$cgroup_devices(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[], 0x9)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r1=>0xffffffffffffffff})
r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r4, @ANYBLOB="0000000002000000b70500000800000085000000c200000095", @ANYRES64=r4, @ANYRES8=r4], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
sendmsg$kcm(r4, &(0x7f0000000340)={&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x4, 0x0, 0x1, {0xa, 0x4e22, 0xffffffff, @empty, 0x6}}}, 0x80, &(0x7f0000000140)=[{0x0}], 0x1}, 0x880)
socket$kcm(0x10, 0x2, 0x10)
r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x4, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x86bf2056334f3ae6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x7ff}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xe, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x54}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1007f}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce6266"], 0xfdef)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000fd0020851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000016608fffffff3f800180000000000000000000000001000009500000000000000360a0200000000001801000020207825"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1e}, 0x94)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x28008840)
r9 = socket$kcm(0x23, 0x2, 0x0)
close(r0)
sendmsg$kcm(r9, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x4)

286.996903ms ago: executing program 4 (id=4076):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50)
close(r2) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x6, 0x5, 0x82}, 0x48) (async, rerun: 32)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000002a00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001100)={{r3}, &(0x7f0000000540), &(0x7f00000010c0)}, 0x20)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r4}, 0xc)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) (async, rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000080654d970008"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32)
r5 = socket$kcm(0xa, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8918, &(0x7f0000000000)={r5})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000069103c0000000000bc001000000000009500000000000000ef4f7c81f5427c16bd2aacf32cdbb47063fd9a7bb1f3ad622c3261f324e081c0ea39bd16d9869302cc08fbd94867708cb208e22cc0ad536525e3b39869285c126353f6a49bc5abc6b9a4eab313655286ee33a56f03b665dd5f1739bda6accc3b9b0d26450d3161263aed01194269a5fba4553bb18fa1f37e2f68a8ef81f090829d0ee04b52611a41642b31a6fe2653171379cc327fc11e38418b589777f8c8ddcbf88df947a05937ea"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0xfffffffffffffcc9)

1.11741ms ago: executing program 2 (id=4077):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3fe, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x7, 0x4, 0x18, 0x3}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000070000850000001b"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
r5 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x1540, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x10000, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
syz_clone(0x84021000, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r10 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800"/13], &(0x7f00000001c0)='GPL\x00'}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r11, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r12=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
socket$kcm(0x2, 0x3, 0x2)
r13 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="48000000140081fb7059ae08060c040002fff903905800000000000000006fabca3b4e7d06a6bd7c00000000030000068a562ad6e74703c48f93bc06020000004603b886a5e54f8f", 0x48}], 0x1}, 0x4000000)
recvmsg$kcm(r13, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x2000)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=r12, @ANYRES32=0x0, @ANYBLOB="0000000e00000000000000000000000000000000000000000092f11d481a0bfc04056764b84ea4e8e1dc2dfe2f"], 0x50)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0300000004000000040000000a000000000000005153987c0fdd60d6a4dfd858267817827f383401c9b079ba90360870b96fcc5f5de459cfdfb757c1a220e0681583b8aca3ce8aef136d3a5d6759d492c9908316da4f616b1801eb22a9e2a110e414e8ba8668b8df08e8841321d754e462ef36b65e1a04dfaf6d0b154f8d1a51200ffc8711a54c9c64299c0493ed86f8445c0917481d49ea8526920af6654985ce0dccbfdb093cca7f147fb290df70a1b60000", @ANYRES32=0x1, @ANYBLOB="018000"/20, @ANYRES32=r12, @ANYRES32=r10, @ANYBLOB="05000000030000000100"/28], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x1, &(0x7f0000000000)=@raw=[@alu={0x7, 0x1, 0x4, 0x9, 0x9, 0xffffffffffffffff, 0x4}], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x5f, '\x00', r12, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[r0, r1, r7, r8, r8, r0], &(0x7f00000004c0)=[{0x0, 0x1, 0xa, 0x1}, {0x3, 0x1, 0xe, 0x4}, {0x0, 0x3, 0x1, 0x6}, {0x0, 0x5, 0xb, 0x7}, {0x2, 0x5, 0x5, 0x1}, {0x0, 0x5, 0x0, 0xb}, {0x3, 0x800, 0x9, 0xb}]}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r8, <r14=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r9}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r14}, &(0x7f0000000180)=0x20000, &(0x7f00000001c0)=r9}, 0x20)

759.63µs ago: executing program 0 (id=4078):
perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x0, 0xd299, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x100882, 0x7ff, 0x6, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x3002500, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0xae12e400, 0x0, 0x0, 0x0, 0x0, 0x0)

0s ago: executing program 1 (id=4079):
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x410, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x810, 0x2, @perf_bp={&(0x7f0000000340), 0xd}, 0x100b01, 0x10000, 0x9f4, 0x8, 0xffffffffffffffff, 0x20005, 0x88, 0x0, 0x1, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000100ff12142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open$cgroup(&(0x7f0000000000)={0x3, 0x80, 0x3, 0x9, 0x4, 0xfd, 0x0, 0x7, 0x14004, 0xa, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x7, 0x9}, 0x0, 0x2, 0x0, 0x0, 0x0, 0xa23, 0x4, 0x0, 0xd, 0x0, 0x80000001}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x17443037dc221d7b)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x0, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x114905, 0x4, 0xfffffffc, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x2)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200})
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f2, &(0x7f0000000080))
r7 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000200)=ANY=[@ANYRES8=r7], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0xf, 0x0, 0x0, 0x0, 0x0, 0x402, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x100c08, 0x2, 0x0, 0x8, 0x3fe, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r8 = socket$kcm(0x2, 0xa, 0x2)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x60040, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e00000001000100010000000900000002000400", @ANYRES32, @ANYBLOB="a5000000000000000091b006f1f6357c2a15f5eb", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000004000000010000000400"/28], 0x50)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)=@o_path={&(0x7f0000000100)='./file0\x00', r10, 0x4000, r2}, 0x18)
ioctl$SIOCSIFHWADDR(r9, 0x8916, &(0x7f0000000000)={'vlan1\x00', @random="046e55f57980"})
r11 = syz_clone(0x23000200, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYRESDEC=r4, @ANYRES64=r11, @ANYRESDEC=r0, @ANYRES32=r8, @ANYRESDEC=r7], 0x20)
r12 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r12, 0x29, 0x2a, &(0x7f0000000040), 0xcf)

kernel console output (not intermixed with test programs):

15301] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  540.176634][T15301] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  541.235926][T15342] netlink: 'syz.2.2640': attribute type 13 has an invalid length.
[  541.257931][T15342] netlink: 160 bytes leftover after parsing attributes in process `syz.2.2640'.
[  541.312060][T15342] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  541.522460][T15344] tap0: tun_chr_ioctl cmd 1074025675
[  541.529401][T15344] tap0: persist enabled
[  541.552458][T15344] tap0: tun_chr_ioctl cmd 1074025675
[  541.559205][T15344] tap0: persist enabled
[  541.714747][T15347] netlink: 668 bytes leftover after parsing attributes in process `syz.3.2643'.
[  541.775710][T15347] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  541.832466][T15347] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  542.870463][T15389] netlink: 668 bytes leftover after parsing attributes in process `syz.0.2657'.
[  542.934981][T15389] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  542.950762][T15389] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  543.480095][T15405] syzkaller0: entered promiscuous mode
[  543.486234][T15405] syzkaller0: entered allmulticast mode
[  543.777723][T15422] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.2666'.
[  544.098931][T15426] netlink: 668 bytes leftover after parsing attributes in process `syz.2.2668'.
[  544.136030][T15426] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  544.180085][T15426] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  545.511501][T15463] netlink: 155172 bytes leftover after parsing attributes in process `syz.2.2673'.
[  547.627836][T15480] netlink: 668 bytes leftover after parsing attributes in process `syz.2.2679'.
[  547.638073][T15480] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  547.647223][T15480] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  547.686217][T15482] netlink: 'syz.0.2680': attribute type 39 has an invalid length.
[  547.695836][T15482] macvlan0: entered promiscuous mode
[  547.702963][T15482] macvlan0: entered allmulticast mode
[  547.709155][T15482] veth1_vlan: entered allmulticast mode
[  547.767292][T15482] netlink: zone id is out of range
[  547.774233][T15482] netlink: set zone limit has 8 unknown bytes
[  547.892837][T15487] FAULT_INJECTION: forcing a failure.
[  547.892837][T15487] name failslab, interval 1, probability 0, space 0, times 0
[  547.909709][T15487] CPU: 0 PID: 15487 Comm: syz.2.2681 Not tainted syzkaller #0
[  547.917801][T15487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  547.928177][T15487] Call Trace:
[  547.931569][T15487]  <TASK>
[  547.934606][T15487]  dump_stack_lvl+0x18c/0x250
[  547.939846][T15487]  ? show_regs_print_info+0x20/0x20
[  547.945681][T15487]  ? load_image+0x420/0x420
[  547.950576][T15487]  ? __might_sleep+0xe0/0xe0
[  547.955441][T15487]  ? __lock_acquire+0x7eb0/0x7eb0
[  547.961580][T15487]  should_fail_ex+0x394/0x4c0
[  547.966748][T15487]  should_failslab+0x9/0x20
[  547.971461][T15487]  slab_pre_alloc_hook+0x59/0x300
[  547.976995][T15487]  ? trace_call_bpf+0x5e9/0x6c0
[  547.981955][T15487]  ? tomoyo_realpath_from_path+0xe6/0x5c0
[  547.987818][T15487]  ? tomoyo_realpath_from_path+0xe6/0x5c0
[  547.993686][T15487]  __kmem_cache_alloc_node+0x53/0x250
[  547.999202][T15487]  ? tomoyo_realpath_from_path+0xe6/0x5c0
[  548.005066][T15487]  __kmalloc+0xa7/0x240
[  548.009343][T15487]  tomoyo_realpath_from_path+0xe6/0x5c0
[  548.015035][T15487]  ? tomoyo_domain+0xd6/0x120
[  548.021357][T15487]  tomoyo_path_number_perm+0x248/0x5e0
[  548.026950][T15487]  ? tomoyo_path_number_perm+0x217/0x5e0
[  548.032910][T15487]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  548.038689][T15487]  ? ksys_write+0x1d2/0x260
[  548.043574][T15487]  ? __fget_files+0x28/0x460
[  548.048431][T15487]  security_file_ioctl+0x70/0xa0
[  548.053583][T15487]  __se_sys_ioctl+0x48/0x170
[  548.058242][T15487]  do_syscall_64+0x55/0xb0
[  548.062960][T15487]  ? clear_bhb_loop+0x40/0x90
[  548.067853][T15487]  ? clear_bhb_loop+0x40/0x90
[  548.072637][T15487]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  548.078912][T15487] RIP: 0033:0x7fe8dff9e199
[  548.083438][T15487] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  548.103880][T15487] RSP: 002b:00007fe8e0e55028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  548.112787][T15487] RAX: ffffffffffffffda RBX: 00007fe8e0225fa0 RCX: 00007fe8dff9e199
[  548.120967][T15487] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000006
[  548.128958][T15487] RBP: 00007fe8e0e55090 R08: 0000000000000000 R09: 0000000000000000
[  548.137211][T15487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  548.145303][T15487] R13: 00007fe8e0226038 R14: 00007fe8e0225fa0 R15: 00007ffff886f8c8
[  548.153502][T15487]  </TASK>
[  548.225326][T15487] ERROR: Out of memory at tomoyo_realpath_from_path.
[  548.834234][T15514] netlink: 668 bytes leftover after parsing attributes in process `syz.1.2689'.
[  548.851341][T15514] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  548.860096][T15514] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  549.454205][T15520] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.2690'.
[  551.770803][T15520] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.2690'.
[  552.016266][T15530] netlink: 'syz.2.2692': attribute type 27 has an invalid length.
[  552.032333][T15525] bridge0: port 1(bridge_slave_0) entered forwarding state
[  552.355747][T15538] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2697'.
[  552.451605][T15538] debugfs: Directory '!!ô' with parent 'ieee80211' already present!
[  552.855203][T15542] netlink: 668 bytes leftover after parsing attributes in process `syz.2.2698'.
[  552.891336][T15542] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  552.920910][T15542] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  553.110402][T15555] netlink: 'syz.3.2702': attribute type 10 has an invalid length.
[  553.494024][T15562] netlink: 'syz.3.2702': attribute type 21 has an invalid length.
[  553.503526][T15562] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2702'.
[  553.513330][T15562] netlink: 'syz.3.2702': attribute type 4 has an invalid length.
[  553.623704][T15573] FAULT_INJECTION: forcing a failure.
[  553.623704][T15573] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  553.637972][T15573] CPU: 1 PID: 15573 Comm: syz.2.2707 Not tainted syzkaller #0
[  553.645635][T15573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  553.655805][T15573] Call Trace:
[  553.659260][T15573]  <TASK>
[  553.662231][T15573]  dump_stack_lvl+0x18c/0x250
[  553.667065][T15573]  ? show_regs_print_info+0x20/0x20
[  553.672305][T15573]  ? load_image+0x420/0x420
[  553.676843][T15573]  ? __might_fault+0xaa/0x120
[  553.681862][T15573]  ? __lock_acquire+0x7eb0/0x7eb0
[  553.686913][T15573]  ? unix_ioctl+0x259/0x6b0
[  553.691489][T15573]  should_fail_ex+0x394/0x4c0
[  553.696297][T15573]  _copy_from_user+0x2f/0xe0
[  553.700920][T15573]  sock_do_ioctl+0x190/0x310
[  553.705536][T15573]  ? sock_show_fdinfo+0xb0/0xb0
[  553.710533][T15573]  sock_ioctl+0x5be/0x7e0
[  553.714987][T15573]  ? sock_poll+0x3e0/0x3e0
[  553.719446][T15573]  ? bpf_lsm_file_ioctl+0x9/0x10
[  553.724398][T15573]  ? security_file_ioctl+0x80/0xa0
[  553.729533][T15573]  ? sock_poll+0x3e0/0x3e0
[  553.733974][T15573]  __se_sys_ioctl+0xfd/0x170
[  553.738741][T15573]  do_syscall_64+0x55/0xb0
[  553.743353][T15573]  ? clear_bhb_loop+0x40/0x90
[  553.748309][T15573]  ? clear_bhb_loop+0x40/0x90
[  553.753094][T15573]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  553.759111][T15573] RIP: 0033:0x7fe8dff9e199
[  553.763685][T15573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  553.784289][T15573] RSP: 002b:00007fe8e0e55028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  553.792910][T15573] RAX: ffffffffffffffda RBX: 00007fe8e0225fa0 RCX: 00007fe8dff9e199
[  553.800907][T15573] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000006
[  553.809000][T15573] RBP: 00007fe8e0e55090 R08: 0000000000000000 R09: 0000000000000000
[  553.817351][T15573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  553.825338][T15573] R13: 00007fe8e0226038 R14: 00007fe8e0225fa0 R15: 00007ffff886f8c8
[  553.833377][T15573]  </TASK>
[  554.039194][T15584] netlink: 668 bytes leftover after parsing attributes in process `syz.2.2711'.
[  554.052121][T15584] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  554.062981][T15584] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  554.068489][T15586] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app
[  554.265434][T15591] netlink: 'syz.3.2714': attribute type 39 has an invalid length.
[  554.618497][T15602] netlink: 'syz.2.2716': attribute type 2 has an invalid length.
[  554.641222][T15602] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2716'.
[  554.665418][T15606] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2718'.
[  554.714829][T15606] netlink: 'syz.3.2718': attribute type 22 has an invalid length.
[  554.723348][T15606] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2718'.
[  555.072209][T15618] FAULT_INJECTION: forcing a failure.
[  555.072209][T15618] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  555.105756][T15618] CPU: 1 PID: 15618 Comm: syz.0.2722 Not tainted syzkaller #0
[  555.113400][T15618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  555.123510][T15618] Call Trace:
[  555.127013][T15618]  <TASK>
[  555.130064][T15618]  dump_stack_lvl+0x18c/0x250
[  555.134912][T15618]  ? show_regs_print_info+0x20/0x20
[  555.140303][T15618]  ? load_image+0x420/0x420
[  555.145175][T15618]  ? __might_fault+0xaa/0x120
[  555.149934][T15618]  ? __lock_acquire+0x7eb0/0x7eb0
[  555.155123][T15618]  should_fail_ex+0x394/0x4c0
[  555.159888][T15618]  _copy_from_user+0x2f/0xe0
[  555.164547][T15618]  dev_ethtool+0xc6/0x18d0
[  555.169243][T15618]  ? ethtool_get_module_eeprom_call+0x170/0x170
[  555.175726][T15618]  ? __lock_acquire+0x7eb0/0x7eb0
[  555.180822][T15618]  ? __might_fault+0xaa/0x120
[  555.185558][T15618]  ? full_name_hash+0x92/0xe0
[  555.190411][T15618]  ? dev_load+0x21/0x1f0
[  555.194898][T15618]  dev_ioctl+0x392/0x1140
[  555.199441][T15618]  sock_do_ioctl+0x239/0x310
[  555.204381][T15618]  ? sock_show_fdinfo+0xb0/0xb0
[  555.209700][T15618]  sock_ioctl+0x5be/0x7e0
[  555.214191][T15618]  ? sock_poll+0x3e0/0x3e0
[  555.218720][T15618]  ? bpf_lsm_file_ioctl+0x9/0x10
[  555.223980][T15618]  ? security_file_ioctl+0x80/0xa0
[  555.229252][T15618]  ? sock_poll+0x3e0/0x3e0
[  555.233731][T15618]  __se_sys_ioctl+0xfd/0x170
[  555.238491][T15618]  do_syscall_64+0x55/0xb0
[  555.242955][T15618]  ? clear_bhb_loop+0x40/0x90
[  555.247847][T15618]  ? clear_bhb_loop+0x40/0x90
[  555.252767][T15618]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  555.258794][T15618] RIP: 0033:0x7f3afc39e199
[  555.263424][T15618] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  555.283507][T15618] RSP: 002b:00007f3afd184028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  555.291956][T15618] RAX: ffffffffffffffda RBX: 00007f3afc625fa0 RCX: 00007f3afc39e199
[  555.300139][T15618] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000006
[  555.308444][T15618] RBP: 00007f3afd184090 R08: 0000000000000000 R09: 0000000000000000
[  555.316534][T15618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  555.324706][T15618] R13: 00007f3afc626038 R14: 00007f3afc625fa0 R15: 00007ffdcfaf07b8
[  555.332742][T15618]  </TASK>
[  555.698124][T15623] netlink: 668 bytes leftover after parsing attributes in process `syz.2.2724'.
[  555.740774][T15623] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  555.779833][T15623] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  556.093172][   T51] Bluetooth: hci0: unexpected event 0x04 length: 15 > 10
[  556.152008][T15652] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2730'.
[  556.252508][T15652] netlink: 'syz.0.2730': attribute type 22 has an invalid length.
[  557.700946][T15682] FAULT_INJECTION: forcing a failure.
[  557.700946][T15682] name failslab, interval 1, probability 0, space 0, times 0
[  557.733396][T15682] CPU: 1 PID: 15682 Comm: syz.3.2735 Not tainted syzkaller #0
[  557.741099][T15682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  557.751181][T15682] Call Trace:
[  557.754536][T15682]  <TASK>
[  557.757485][T15682]  dump_stack_lvl+0x18c/0x250
[  557.762382][T15682]  ? show_regs_print_info+0x20/0x20
[  557.767611][T15682]  ? load_image+0x420/0x420
[  557.772141][T15682]  ? __might_sleep+0xe0/0xe0
[  557.776942][T15682]  ? __lock_acquire+0x7eb0/0x7eb0
[  557.782087][T15682]  should_fail_ex+0x394/0x4c0
[  557.786974][T15682]  should_failslab+0x9/0x20
[  557.791693][T15682]  slab_pre_alloc_hook+0x59/0x300
[  557.797016][T15682]  ? __lock_acquire+0x7eb0/0x7eb0
[  557.802600][T15682]  ? dev_ethtool+0x129/0x18d0
[  557.807311][T15682]  __kmem_cache_alloc_node+0x53/0x250
[  557.812723][T15682]  ? __might_fault+0xaa/0x120
[  557.817433][T15682]  ? dev_ethtool+0x129/0x18d0
[  557.822134][T15682]  kmalloc_trace+0x2a/0xe0
[  557.826589][T15682]  dev_ethtool+0x129/0x18d0
[  557.831130][T15682]  ? ethtool_get_module_eeprom_call+0x170/0x170
[  557.837923][T15682]  ? __lock_acquire+0x7eb0/0x7eb0
[  557.842983][T15682]  ? __might_fault+0xaa/0x120
[  557.847788][T15682]  ? full_name_hash+0x92/0xe0
[  557.852591][T15682]  ? dev_load+0x21/0x1f0
[  557.856995][T15682]  dev_ioctl+0x392/0x1140
[  557.861372][T15682]  sock_do_ioctl+0x239/0x310
[  557.866178][T15682]  ? sock_show_fdinfo+0xb0/0xb0
[  557.871077][T15682]  sock_ioctl+0x5be/0x7e0
[  557.875438][T15682]  ? sock_poll+0x3e0/0x3e0
[  557.879895][T15682]  ? bpf_lsm_file_ioctl+0x9/0x10
[  557.884862][T15682]  ? security_file_ioctl+0x80/0xa0
[  557.890000][T15682]  ? sock_poll+0x3e0/0x3e0
[  557.894535][T15682]  __se_sys_ioctl+0xfd/0x170
[  557.899159][T15682]  do_syscall_64+0x55/0xb0
[  557.903696][T15682]  ? clear_bhb_loop+0x40/0x90
[  557.908653][T15682]  ? clear_bhb_loop+0x40/0x90
[  557.913661][T15682]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  557.919680][T15682] RIP: 0033:0x7fd92239e199
[  557.924256][T15682] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  557.944353][T15682] RSP: 002b:00007fd9231e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  557.952980][T15682] RAX: ffffffffffffffda RBX: 00007fd922626090 RCX: 00007fd92239e199
[  557.961557][T15682] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000006
[  557.970009][T15682] RBP: 00007fd9231e7090 R08: 0000000000000000 R09: 0000000000000000
[  557.978194][T15682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  557.986419][T15682] R13: 00007fd922626128 R14: 00007fd922626090 R15: 00007ffda24264c8
[  557.994910][T15682]  </TASK>
[  558.121287][   T51] Bluetooth: hci0: command tx timeout
[  560.250098][T15688] __nla_validate_parse: 1 callbacks suppressed
[  560.250122][T15688] netlink: 668 bytes leftover after parsing attributes in process `syz.2.2736'.
[  560.289792][T15688] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  560.305567][T15688] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  560.408469][T15693] netlink: 'syz.0.2741': attribute type 3 has an invalid length.
[  560.440880][T15693] netlink: 'syz.0.2741': attribute type 1 has an invalid length.
[  560.448692][T15693] netlink: 198800 bytes leftover after parsing attributes in process `syz.0.2741'.
[  560.451354][T15697] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2742'.
[  560.491402][T15697] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  560.694609][T15696] syzkaller0: entered promiscuous mode
[  560.710788][T15696] syzkaller0: entered allmulticast mode
[  563.262950][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  563.269562][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  563.773649][T15713] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2744'.
[  566.049565][T15731] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2747'.
[  566.146454][T15738] FAULT_INJECTION: forcing a failure.
[  566.146454][T15738] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  566.240880][T15738] CPU: 0 PID: 15738 Comm: syz.2.2749 Not tainted syzkaller #0
[  566.248704][T15738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  566.259008][T15738] Call Trace:
[  566.262518][T15738]  <TASK>
[  566.265503][T15738]  dump_stack_lvl+0x18c/0x250
[  566.270265][T15738]  ? show_regs_print_info+0x20/0x20
[  566.275534][T15738]  ? load_image+0x420/0x420
[  566.280122][T15738]  ? __might_fault+0xaa/0x120
[  566.284873][T15738]  ? __lock_acquire+0x7eb0/0x7eb0
[  566.289985][T15738]  should_fail_ex+0x394/0x4c0
[  566.294755][T15738]  _copy_to_user+0x2f/0xa0
[  566.299340][T15738]  ethtool_get_settings+0x2c4/0x3a0
[  566.304710][T15738]  ? ethtool_rx_flow_rule_destroy+0x40/0x40
[  566.311045][T15738]  ? mutex_lock_nested+0x20/0x20
[  566.316182][T15738]  ? full_name_hash+0x92/0xe0
[  566.321102][T15738]  dev_ethtool+0xf38/0x18d0
[  566.325687][T15738]  ? ethtool_get_module_eeprom_call+0x170/0x170
[  566.332542][T15738]  ? __lock_acquire+0x7eb0/0x7eb0
[  566.337730][T15738]  ? __might_fault+0xaa/0x120
[  566.342902][T15738]  ? full_name_hash+0x92/0xe0
[  566.347826][T15738]  ? dev_load+0x21/0x1f0
[  566.352152][T15738]  dev_ioctl+0x392/0x1140
[  566.356658][T15738]  sock_do_ioctl+0x239/0x310
[  566.361343][T15738]  ? sock_show_fdinfo+0xb0/0xb0
[  566.366389][T15738]  sock_ioctl+0x5be/0x7e0
[  566.370856][T15738]  ? sock_poll+0x3e0/0x3e0
[  566.375858][T15738]  ? bpf_lsm_file_ioctl+0x9/0x10
[  566.380825][T15738]  ? security_file_ioctl+0x80/0xa0
[  566.386091][T15738]  ? sock_poll+0x3e0/0x3e0
[  566.390628][T15738]  __se_sys_ioctl+0xfd/0x170
[  566.395265][T15738]  do_syscall_64+0x55/0xb0
[  566.399709][T15738]  ? clear_bhb_loop+0x40/0x90
[  566.404405][T15738]  ? clear_bhb_loop+0x40/0x90
[  566.409208][T15738]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  566.415227][T15738] RIP: 0033:0x7fe8dff9e199
[  566.419669][T15738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  566.439749][T15738] RSP: 002b:00007fe8e0e55028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  566.448204][T15738] RAX: ffffffffffffffda RBX: 00007fe8e0225fa0 RCX: 00007fe8dff9e199
[  566.456308][T15738] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000006
[  566.464411][T15738] RBP: 00007fe8e0e55090 R08: 0000000000000000 R09: 0000000000000000
[  566.472690][T15738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  566.480792][T15738] R13: 00007fe8e0226038 R14: 00007fe8e0225fa0 R15: 00007ffff886f8c8
[  566.489530][T15738]  </TASK>
[  567.323326][T15781] FAULT_INJECTION: forcing a failure.
[  567.323326][T15781] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  567.367510][T15781] CPU: 0 PID: 15781 Comm: syz.1.2760 Not tainted syzkaller #0
[  567.375242][T15781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  567.385598][T15781] Call Trace:
[  567.388914][T15781]  <TASK>
[  567.391861][T15781]  dump_stack_lvl+0x18c/0x250
[  567.396642][T15781]  ? show_regs_print_info+0x20/0x20
[  567.401906][T15781]  ? load_image+0x420/0x420
[  567.406802][T15781]  ? __lock_acquire+0x7eb0/0x7eb0
[  567.411900][T15781]  ? __might_fault+0xaa/0x120
[  567.416601][T15781]  ? full_name_hash+0x92/0xe0
[  567.421579][T15781]  should_fail_ex+0x394/0x4c0
[  567.426305][T15781]  _copy_to_user+0x2f/0xa0
[  567.430766][T15781]  put_user_ifreq+0x78/0xb0
[  567.435306][T15781]  sock_do_ioctl+0x268/0x310
[  567.440034][T15781]  ? sock_show_fdinfo+0xb0/0xb0
[  567.444951][T15781]  sock_ioctl+0x5be/0x7e0
[  567.449312][T15781]  ? sock_poll+0x3e0/0x3e0
[  567.453870][T15781]  ? bpf_lsm_file_ioctl+0x9/0x10
[  567.458920][T15781]  ? security_file_ioctl+0x80/0xa0
[  567.464180][T15781]  ? sock_poll+0x3e0/0x3e0
[  567.468709][T15781]  __se_sys_ioctl+0xfd/0x170
[  567.473343][T15781]  do_syscall_64+0x55/0xb0
[  567.477960][T15781]  ? clear_bhb_loop+0x40/0x90
[  567.482914][T15781]  ? clear_bhb_loop+0x40/0x90
[  567.487707][T15781]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  567.493724][T15781] RIP: 0033:0x7f661cd9e199
[  567.498365][T15781] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  567.518841][T15781] RSP: 002b:00007f661dca1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  567.527377][T15781] RAX: ffffffffffffffda RBX: 00007f661d025fa0 RCX: 00007f661cd9e199
[  567.535559][T15781] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000006
[  567.543903][T15781] RBP: 00007f661dca1090 R08: 0000000000000000 R09: 0000000000000000
[  567.552503][T15781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  567.560689][T15781] R13: 00007f661d026038 R14: 00007f661d025fa0 R15: 00007ffeb3d08998
[  567.569257][T15781]  </TASK>
[  568.425447][T15802] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2765'.
[  568.486140][T15802] bridge0: port 1(bridge_slave_0) entered disabled state
[  568.622765][T15802] bridge_slave_0 (unregistering): left allmulticast mode
[  568.630236][T15802] bridge_slave_0 (unregistering): left promiscuous mode
[  568.670432][T15802] bridge0: port 1(bridge_slave_0) entered disabled state
[  568.803734][T15800] tun0: tun_chr_ioctl cmd 1074025673
[  568.897672][T15814] netlink: 'syz.2.2769': attribute type 39 has an invalid length.
[  568.987077][T15817] netlink: 668 bytes leftover after parsing attributes in process `syz.3.2770'.
[  568.998053][T15817] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  569.032117][T15817] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  569.455166][T15826] netlink: 'syz.3.2773': attribute type 10 has an invalid length.
[  569.662332][T15826] team0: Device gre0 is of different type
[  569.812875][T15830] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2774'.
[  570.253234][T15847] FAULT_INJECTION: forcing a failure.
[  570.253234][T15847] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  570.348360][T15847] CPU: 1 PID: 15847 Comm: syz.2.2778 Not tainted syzkaller #0
[  570.355918][T15847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  570.366296][T15847] Call Trace:
[  570.369710][T15847]  <TASK>
[  570.372690][T15847]  dump_stack_lvl+0x18c/0x250
[  570.377449][T15847]  ? show_regs_print_info+0x20/0x20
[  570.382799][T15847]  ? load_image+0x420/0x420
[  570.387379][T15847]  ? __lock_acquire+0x7eb0/0x7eb0
[  570.392768][T15847]  ? snprintf+0xe9/0x140
[  570.397353][T15847]  should_fail_ex+0x394/0x4c0
[  570.402120][T15847]  _copy_to_user+0x2f/0xa0
[  570.406605][T15847]  simple_read_from_buffer+0xe7/0x150
[  570.412490][T15847]  proc_fail_nth_read+0x1e8/0x260
[  570.417640][T15847]  ? proc_fault_inject_write+0x360/0x360
[  570.423354][T15847]  ? fsnotify_perm+0x271/0x5e0
[  570.428177][T15847]  ? proc_fault_inject_write+0x360/0x360
[  570.433883][T15847]  vfs_read+0x298/0x990
[  570.438201][T15847]  ? kernel_read+0x1e0/0x1e0
[  570.442870][T15847]  ? __fget_files+0x28/0x460
[  570.447540][T15847]  ? __fget_files+0x3fc/0x460
[  570.452296][T15847]  ? __fdget_pos+0x2a3/0x330
[  570.456911][T15847]  ? ksys_read+0x74/0x260
[  570.461362][T15847]  ksys_read+0x151/0x260
[  570.465656][T15847]  ? vfs_write+0x9a0/0x9a0
[  570.470125][T15847]  ? lockdep_hardirqs_on+0x98/0x150
[  570.475353][T15847]  do_syscall_64+0x55/0xb0
[  570.479811][T15847]  ? clear_bhb_loop+0x40/0x90
[  570.484606][T15847]  ? clear_bhb_loop+0x40/0x90
[  570.489388][T15847]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  570.495351][T15847] RIP: 0033:0x7fe8dff5e9ce
[  570.499796][T15847] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  570.519709][T15847] RSP: 002b:00007fe8e0e54fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  570.528282][T15847] RAX: ffffffffffffffda RBX: 00007fe8e0e556c0 RCX: 00007fe8dff5e9ce
[  570.536532][T15847] RDX: 000000000000000f RSI: 00007fe8e0e550a0 RDI: 0000000000000007
[  570.544788][T15847] RBP: 00007fe8e0e55090 R08: 0000000000000000 R09: 0000000000000000
[  570.552945][T15847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  570.560939][T15847] R13: 00007fe8e0226038 R14: 00007fe8e0225fa0 R15: 00007ffff886f8c8
[  570.569105][T15847]  </TASK>
[  570.918114][T15851] syzkaller0: entered promiscuous mode
[  570.946893][T15851] syzkaller0: entered allmulticast mode
[  573.671112][T15860] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2783'.
[  575.064790][T15914] netlink: 'syz.2.2802': attribute type 4 has an invalid length.
[  575.081175][T15914] netlink: 'syz.2.2802': attribute type 4 has an invalid length.
[  575.088971][T15914] netlink: 203268 bytes leftover after parsing attributes in process `syz.2.2802'.
[  575.168710][T15920] netlink: 'syz.1.2805': attribute type 1 has an invalid length.
[  575.177076][T15920] netlink: 15743 bytes leftover after parsing attributes in process `syz.1.2805'.
[  575.556219][T15938] netlink: 'syz.3.2810': attribute type 2 has an invalid length.
[  575.567792][T15938] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.2810'.
[  575.864023][T15942] -1: renamed from syzkaller0
[  576.027103][T15950] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.2814'.
[  576.049809][T15949] netlink: 'syz.2.2815': attribute type 21 has an invalid length.
[  576.076121][T15949] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2815'.
[  576.321424][T15952] netlink: 'syz.2.2815': attribute type 21 has an invalid length.
[  576.329381][T15952] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2815'.
[  576.842915][T15979] netlink: 'syz.0.2823': attribute type 46 has an invalid length.
[  576.860883][T15979] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2823'.
[  577.018656][T15990] syzkaller0: entered promiscuous mode
[  577.040814][T15990] syzkaller0: entered allmulticast mode
[  577.395979][T15995] netlink: 'syz.0.2828': attribute type 2 has an invalid length.
[  577.406249][T15995] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2828'.
[  578.048544][T16010] syzkaller0: tun_chr_ioctl cmd 2147767506
[  578.281018][T16025] netlink: 'syz.0.2837': attribute type 17 has an invalid length.
[  578.340821][T16025] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2837'.
[  578.420834][T16025] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  578.913684][T16034] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  578.965994][T16039] netlink: 'syz.3.2841': attribute type 2 has an invalid length.
[  578.987148][T16039] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2841'.
[  579.553787][T16062] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2849'.
[  579.586204][T16062] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2849'.
[  579.623640][T16062] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2849'.
[  579.647832][T16062] netlink: 144448 bytes leftover after parsing attributes in process `syz.0.2849'.
[  579.686643][T16059] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2849'.
[  580.797560][T16097] validate_nla: 4 callbacks suppressed
[  580.797581][T16097] netlink: 'syz.1.2858': attribute type 2 has an invalid length.
[  580.847426][T16097] netlink: 'syz.1.2858': attribute type 1 has an invalid length.
[  580.890094][T16097] netlink: 198036 bytes leftover after parsing attributes in process `syz.1.2858'.
[  581.264979][T16105] netlink: set zone limit has 8 unknown bytes
[  583.710992][T16084] netlink: 'syz.2.2856': attribute type 2 has an invalid length.
[  583.719289][T16084] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2856'.
[  583.760608][T16101] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.2860'.
[  583.770341][T16101] bridge_slave_1: default FDB implementation only supports local addresses
[  585.025900][T16129] netlink: 173820 bytes leftover after parsing attributes in process `syz.2.2868'.
[  585.048213][T16128] delete_channel: no stack
[  585.184630][T16134] netlink: 668 bytes leftover after parsing attributes in process `syz.1.2869'.
[  585.204390][T16134] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  585.217086][T16138] netlink: 668 bytes leftover after parsing attributes in process `syz.2.2870'.
[  585.220825][T16134] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  585.236284][T16138] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  585.236314][T16138] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  586.138403][T16154] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.2875'.
[  586.646057][T16175] netlink: 668 bytes leftover after parsing attributes in process `syz.0.2881'.
[  586.661091][T16175] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  586.669720][T16175] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  587.011567][T16185] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.2884'.
[  587.176575][T16185] netlink: 26 bytes leftover after parsing attributes in process `syz.3.2884'.
[  588.106450][T16208] netlink: 668 bytes leftover after parsing attributes in process `syz.0.2894'.
[  588.155246][T16208] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  588.195825][T16208] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  588.637320][T16219] netlink: 'syz.0.2897': attribute type 4 has an invalid length.
[  588.647551][T16223] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2897'.
[  589.025866][T16239] netlink: 668 bytes leftover after parsing attributes in process `syz.1.2905'.
[  589.048956][T16239] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  589.071974][T16239] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  590.488369][T16270] netlink: 'syz.3.2911': attribute type 4 has an invalid length.
[  590.536856][T16270] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2911'.
[  591.430889][T16289] netlink: 668 bytes leftover after parsing attributes in process `syz.1.2917'.
[  591.450875][T16289] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  591.460177][T16289] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  591.642161][T16293] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.2918'.
[  591.748385][T16295] netlink: 'syz.3.2919': attribute type 10 has an invalid length.
[  591.775447][T16296] netlink: 'syz.3.2919': attribute type 10 has an invalid length.
[  591.827608][T16295] netlink: 'syz.3.2919': attribute type 10 has an invalid length.
[  591.858535][T16295] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2919'.
[  591.898524][T16295] ipvlan1: entered promiscuous mode
[  591.908843][T16295] ipvlan1: entered allmulticast mode
[  591.918993][T16295] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  591.936129][T16300] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2920'.
[  592.092755][T16308] netlink: 'syz.2.2923': attribute type 2 has an invalid length.
[  592.104624][T16308] netlink: 'syz.2.2923': attribute type 1 has an invalid length.
[  592.129798][T16308] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2923'.
[  592.344714][T16316] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.2923'.
[  592.366686][T16316] nbd: must specify a device to reconfigure
[  593.041367][T16321] netlink: 668 bytes leftover after parsing attributes in process `syz.3.2926'.
[  593.051530][T16321] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  593.060284][T16321] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  593.166149][T16325] netlink: 'syz.3.2927': attribute type 9 has an invalid length.
[  593.187865][T16325] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2927'.
[  594.876954][T16316] netlink: 'syz.2.2923': attribute type 3 has an invalid length.
[  594.884959][T16316] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2923'.
[  596.042843][ T5780] Bluetooth: hci4: command 0x0406 tx timeout
[  596.146662][T16367] netlink: 'syz.3.2940': attribute type 9 has an invalid length.
[  596.175464][T16367] __nla_validate_parse: 1 callbacks suppressed
[  596.175500][T16367] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.2940'.
[  596.265502][T16372] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.2942'.
[  598.272763][T16443] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.2961'.
[  598.413476][T16448] netlink: 'syz.0.2964': attribute type 3 has an invalid length.
[  598.422444][T16448] netlink: 'syz.0.2964': attribute type 1 has an invalid length.
[  598.434870][T16448] netlink: 'syz.0.2964': attribute type 6 has an invalid length.
[  598.435620][T16446] netlink: 'syz.3.2965': attribute type 4 has an invalid length.
[  598.443531][T16448] netlink: 144448 bytes leftover after parsing attributes in process `syz.0.2964'.
[  598.464815][T16446] netlink: 'syz.3.2965': attribute type 4 has an invalid length.
[  598.473365][T16446] netlink: 203048 bytes leftover after parsing attributes in process `syz.3.2965'.
[  598.557369][T16449] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2965'.
[  598.922553][T16466] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  598.930157][T16466] IPv6: NLM_F_CREATE should be set when creating new route
[  598.937985][T16466] IPv6: NLM_F_CREATE should be set when creating new route
[  598.945979][T16466] IPv6: NLM_F_CREATE should be set when creating new route
[  598.975082][T16473] netlink: 'syz.0.2971': attribute type 9 has an invalid length.
[  599.011293][T16473] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2971'.
[  599.147677][T16466] netlink: 'syz.0.2971': attribute type 9 has an invalid length.
[  599.166422][T16466] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2971'.
[  599.211016][T16477] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  599.804540][T16494] netlink: 'syz.2.2980': attribute type 1 has an invalid length.
[  599.821696][T16494] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.2980'.
[  599.841002][T16494] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.2980'.
[  600.309398][T16513] validate_nla: 1 callbacks suppressed
[  600.309419][T16513] netlink: 'syz.1.2986': attribute type 2 has an invalid length.
[  601.187271][T16522] mac80211_hwsim hwsim33 wlan1: entered promiscuous mode
[  601.205278][T16522] mac80211_hwsim hwsim33 wlan1: entered allmulticast mode
[  604.126201][T16541] __nla_validate_parse: 1 callbacks suppressed
[  604.126329][T16541] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2997'.
[  604.553640][   T51] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  604.564296][   T51] Bluetooth: hci2: Injecting HCI hardware error event
[  604.577002][   T51] Bluetooth: hci2: hardware error 0x00
[  604.732424][T16550] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2999'.
[  604.795862][T16550] team0: Port device team_slave_0 removed
[  604.817969][T16550] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  605.257829][T16577] netlink: 'syz.2.3008': attribute type 6 has an invalid length.
[  605.266385][T16577] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3008'.
[  605.689319][T16589] netlink: 'syz.2.3012': attribute type 3 has an invalid length.
[  605.721423][T16589] netlink: 'syz.2.3012': attribute type 4 has an invalid length.
[  605.739814][T16589] netlink: 12391 bytes leftover after parsing attributes in process `syz.2.3012'.
[  606.462380][T16621] netlink: 'syz.0.3017': attribute type 14 has an invalid length.
[  606.470356][T16621] netlink: 2046 bytes leftover after parsing attributes in process `syz.0.3017'.
[  606.680725][   T51] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  606.875629][T16625] pim6reg1: entered promiscuous mode
[  606.893485][T16625] pim6reg1: entered allmulticast mode
[  606.930994][T16625] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3020'.
[  606.960463][T16625] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3020'.
[  607.285127][T16644] netlink: 'syz.3.3028': attribute type 21 has an invalid length.
[  607.293441][T16644] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3028'.
[  607.308327][T16645] netlink: 40227 bytes leftover after parsing attributes in process `syz.3.3028'.
[  607.475265][T16653] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.3031'.
[  607.491039][T16653] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  608.769770][   T51] Bluetooth: hci2: Opcode 0x2046 failed: -110
[  609.690450][T16737] syzkaller0: entered promiscuous mode
[  609.696823][T16737] syzkaller0: entered allmulticast mode
[  609.705330][T16742] __nla_validate_parse: 4 callbacks suppressed
[  609.705345][T16742] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3064'.
[  609.722313][T16742] : renamed from caif0
[  609.736533][T16742] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  610.317898][T16769] __sock_release: fasync list not empty!
[  613.485975][T16780] netlink: 'syz.1.3074': attribute type 10 has an invalid length.
[  613.495826][T16780] macvlan0: entered promiscuous mode
[  613.522189][T16780] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  613.840130][T16807] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.3082'.
[  613.882845][T16805] netlink: 'syz.2.3081': attribute type 10 has an invalid length.
[  613.905272][T16805] veth0_vlan: entered allmulticast mode
[  614.117534][T16805] veth0_vlan: left promiscuous mode
[  614.174562][T16805] veth0_vlan: entered promiscuous mode
[  614.229518][T16805] team0: Device veth0_vlan failed to register rx_handler
[  614.555879][T16833] tap0: tun_chr_ioctl cmd 1074025675
[  614.563292][T16833] tap0: persist enabled
[  614.568202][T16832] tap0: tun_chr_ioctl cmd 1074025675
[  614.578342][T16832] tap0: persist enabled
[  614.600863][T16839] tap0: tun_chr_ioctl cmd 35108
[  614.852490][T16844] syzkaller0: entered promiscuous mode
[  614.858035][T16844] syzkaller0: entered allmulticast mode
[  614.865642][ T8601] syzkaller0: tun_net_xmit 48
[  615.509873][T16876] netlink: 6 bytes leftover after parsing attributes in process `syz.0.3103'.
[  615.529485][T16877] netlink: 6 bytes leftover after parsing attributes in process `syz.0.3103'.
[  615.540218][T16876] openvswitch: netlink: Flow actions attr not present in new flow.
[  615.548971][T16877] openvswitch: netlink: Flow actions attr not present in new flow.
[  617.658709][T16868] netlink: 'syz.2.3100': attribute type 10 has an invalid length.
[  617.666789][T16868] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.3100'.
[  617.910320][T16892] veth1_macvtap: left promiscuous mode
[  617.921439][T16892] macsec0: entered allmulticast mode
[  618.018199][T16894] netlink: 'syz.2.3108': attribute type 21 has an invalid length.
[  618.037730][T16894] netlink: 'syz.2.3108': attribute type 13 has an invalid length.
[  618.045979][T16894] netlink: 5672 bytes leftover after parsing attributes in process `syz.2.3108'.
[  618.056573][T16895] veth1_macvtap: entered promiscuous mode
[  618.080875][T16895] veth1_macvtap: entered allmulticast mode
[  618.106369][T16895] macsec0: entered promiscuous mode
[  618.130862][T16899] netlink: 'syz.3.3109': attribute type 21 has an invalid length.
[  618.238073][T16914] netlink: 'syz.0.3112': attribute type 21 has an invalid length.
[  618.464630][T16929] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.3116'.
[  618.489343][T16929] netlink: 'syz.2.3116': attribute type 4 has an invalid length.
[  618.499604][T16929] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3116'.
[  618.547568][T16931] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3117'.
[  619.275749][T16940] netlink: 'syz.0.3121': attribute type 10 has an invalid length.
[  619.376522][T16940] team0: Device wg1 is of different type
[  619.743407][T16958] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.3126'.
[  619.764171][T16958] netlink: del zone limit has 8 unknown bytes
[  619.787282][T16958] netlink: 'syz.2.3126': attribute type 1 has an invalid length.
[  619.796065][T16958] netlink: 191376 bytes leftover after parsing attributes in process `syz.2.3126'.
[  620.395605][T16979] netlink: 'syz.2.3129': attribute type 4 has an invalid length.
[  620.638048][T16982] netlink: 'syz.3.3131': attribute type 3 has an invalid length.
[  620.656415][T16986] netlink: 'syz.1.3134': attribute type 3 has an invalid length.
[  620.665251][T16982] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.3131'.
[  620.678949][T16986] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.3134'.
[  620.833609][T16990] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3133'.
[  620.846076][T16986] netlink: 'syz.1.3134': attribute type 39 has an invalid length.
[  621.137497][T16998] netlink: 'syz.3.3136': attribute type 10 has an invalid length.
[  621.386115][T16998] veth0_vlan: left promiscuous mode
[  621.430201][T16998] veth0_vlan: entered promiscuous mode
[  621.534677][T16998] team0: Device veth0_vlan failed to register rx_handler
[  621.720862][   T51] Bluetooth: hci0: command 0x0406 tx timeout
[  621.879706][T16998] syz.3.3136 (16998) used greatest stack depth: 17256 bytes left
[  622.236497][T17019] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3139'.
[  622.588525][T17041] netlink: 15626 bytes leftover after parsing attributes in process `syz.1.3147'.
[  623.701577][T17058] netlink: 'syz.0.3150': attribute type 2 has an invalid length.
[  623.709511][T17058] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.3150'.
[  623.767227][T17056] syzkaller0: entered promiscuous mode
[  623.774675][T17056] syzkaller0: entered allmulticast mode
[  623.798620][ T8604] syzkaller0: tun_net_xmit 48
[  623.902448][T17067] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3155'.
[  624.101375][T17078] delete_channel: no stack
[  624.106302][T17078] delete_channel: no stack
[  624.261053][   T51] Bluetooth: hci0: ISO packet for unknown connection handle 3850
[  624.703455][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  624.710027][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  627.389576][T17107] netlink: 'syz.0.3163': attribute type 3 has an invalid length.
[  627.410785][T17107] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3163'.
[  627.469533][T17118] netlink: 142528 bytes leftover after parsing attributes in process `syz.1.3167'.
[  627.513562][T17118] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3167'.
[  628.817070][T17160] netlink: 'syz.0.3178': attribute type 10 has an invalid length.
[  628.843121][T17160] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.3178'.
[  629.058552][T17158] netlink: 611 bytes leftover after parsing attributes in process `syz.3.3177'.
[  631.918209][T17221] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.3194'.
[  635.489792][T17289] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3204'.
[  635.543144][T17289] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3204'.
[  635.617734][T17290] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3204'.
[  635.662526][T17292] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3204'.
[  636.156984][T17299] netlink: 196 bytes leftover after parsing attributes in process `syz.2.3206'.
[  636.578277][T17312] netlink: 'syz.3.3214': attribute type 10 has an invalid length.
[  636.595353][T17312] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.3214'.
[  636.609954][T17314] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3215'.
[  636.669188][T17314] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.3215'.
[  637.178411][T17337] netlink: 'syz.1.3223': attribute type 3 has an invalid length.
[  637.201090][T17337] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3223'.
[  637.512929][T17350] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3224'.
[  639.091424][T17366] netlink: 'syz.3.3232': attribute type 21 has an invalid length.
[  639.783062][T17395] netlink: 'syz.3.3238': attribute type 2 has an invalid length.
[  639.816393][T17395] netlink: 'syz.3.3238': attribute type 8 has an invalid length.
[  643.224179][T17441] netlink: 'syz.0.3253': attribute type 2 has an invalid length.
[  643.282473][T17441] netlink: 'syz.0.3253': attribute type 8 has an invalid length.
[  643.313655][T17445] netlink: 'syz.2.3255': attribute type 1 has an invalid length.
[  643.329879][T17441] __nla_validate_parse: 9 callbacks suppressed
[  643.329916][T17441] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3253'.
[  643.331293][T17445] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.3255'.
[  643.639313][T17463] C: renamed from team_slave_0
[  643.671412][T17463] netlink: 'syz.3.3258': attribute type 4 has an invalid length.
[  643.689832][T17463] netlink: 116 bytes leftover after parsing attributes in process `syz.3.3258'.
[  643.738473][T17463] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  644.520303][T17484] FAULT_INJECTION: forcing a failure.
[  644.520303][T17484] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  644.569611][T17484] CPU: 1 PID: 17484 Comm: syz.1.3265 Not tainted syzkaller #0
[  644.577414][T17484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  644.587929][T17484] Call Trace:
[  644.591228][T17484]  <TASK>
[  644.594264][T17484]  dump_stack_lvl+0x18c/0x250
[  644.599065][T17484]  ? show_regs_print_info+0x20/0x20
[  644.604383][T17484]  ? load_image+0x420/0x420
[  644.609000][T17484]  ? __might_fault+0xaa/0x120
[  644.613903][T17484]  ? __lock_acquire+0x7eb0/0x7eb0
[  644.619388][T17484]  ? __lock_acquire+0x135d/0x7eb0
[  644.624622][T17484]  should_fail_ex+0x394/0x4c0
[  644.629789][T17484]  _copy_from_user+0x2f/0xe0
[  644.634423][T17484]  do_ipv6_setsockopt+0x275/0x3290
[  644.639709][T17484]  ? sk_dst_reset+0xa0/0xa0
[  644.644350][T17484]  ? __might_sleep+0xe0/0xe0
[  644.649052][T17484]  ? ksys_write+0x1d2/0x260
[  644.653687][T17484]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  644.659866][T17484]  ? aa_sk_perm+0x83c/0x970
[  644.664406][T17484]  ? aa_af_perm+0x330/0x330
[  644.669048][T17484]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  644.675326][T17484]  ? aa_sock_opt_perm+0x74/0x100
[  644.680397][T17484]  ipv6_setsockopt+0x59/0x190
[  644.685189][T17484]  ? sock_common_recvmsg+0x190/0x190
[  644.690598][T17484]  do_sock_setsockopt+0x175/0x1a0
[  644.695645][T17484]  ? __fdget+0x180/0x210
[  644.699913][T17484]  __x64_sys_setsockopt+0x182/0x200
[  644.705408][T17484]  do_syscall_64+0x55/0xb0
[  644.709846][T17484]  ? clear_bhb_loop+0x40/0x90
[  644.714548][T17484]  ? clear_bhb_loop+0x40/0x90
[  644.719388][T17484]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  644.725397][T17484] RIP: 0033:0x7f661cd9e199
[  644.729833][T17484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  644.749657][T17484] RSP: 002b:00007f661dca1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  644.758188][T17484] RAX: ffffffffffffffda RBX: 00007f661d025fa0 RCX: 00007f661cd9e199
[  644.766538][T17484] RDX: 0000000000000030 RSI: 0000000000000029 RDI: 0000000000000008
[  644.774533][T17484] RBP: 00007f661dca1090 R08: 00000000000033eb R09: 0000000000000000
[  644.782631][T17484] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001
[  644.791154][T17484] R13: 00007f661d026038 R14: 00007f661d025fa0 R15: 00007ffeb3d08998
[  644.799318][T17484]  </TASK>
[  645.609174][T17496] netlink: 180 bytes leftover after parsing attributes in process `syz.1.3269'.
[  647.114074][T17511] netlink: 160 bytes leftover after parsing attributes in process `syz.3.3271'.
[  647.611369][T17529] netlink: 'syz.1.3276': attribute type 2 has an invalid length.
[  647.646814][T17529] netlink: 'syz.1.3276': attribute type 8 has an invalid length.
[  647.682936][T17529] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3276'.
[  648.171167][T17542] sit0: entered allmulticast mode
[  648.250897][T17537] sit0: entered promiscuous mode
[  649.375036][T17554] netlink: 'syz.3.3283': attribute type 3 has an invalid length.
[  649.435706][T17554] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.3283'.
[  649.643402][T17561] netlink: 'syz.2.3285': attribute type 10 has an invalid length.
[  649.762479][T17561] bridge0: port 2(bridge_slave_1) entered disabled state
[  649.783443][T17561] bridge_slave_1: left allmulticast mode
[  649.796847][T17561] bridge_slave_1: left promiscuous mode
[  649.811974][T17561] bridge0: port 2(bridge_slave_1) entered disabled state
[  650.040154][T17561] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  650.577202][T17588] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3290'.
[  651.771835][T17616] syzkaller0: entered promiscuous mode
[  651.777938][T17616] syzkaller0: entered allmulticast mode
[  652.134973][T17622] netlink: 'syz.0.3309': attribute type 2 has an invalid length.
[  652.148384][T17622] netlink: 'syz.0.3309': attribute type 1 has an invalid length.
[  652.157280][T17622] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3309'.
[  652.363600][ T5780] Bluetooth: hci5: command 0x0406 tx timeout
[  652.554609][T17635] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.3303'.
[  655.550741][T17628] sit0: entered allmulticast mode
[  655.747615][T17641] netlink: 33255 bytes leftover after parsing attributes in process `syz.0.3304'.
[  657.543500][T17669] netlink: 'syz.2.3314': attribute type 2 has an invalid length.
[  657.562136][T17669] netlink: 'syz.2.3314': attribute type 1 has an invalid length.
[  657.641143][T17669] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3314'.
[  657.792114][T17670] sit0: left promiscuous mode
[  658.025853][T17663] delete_channel: no stack
[  658.560346][T17683] ref_tracker: memory allocation failure, unreliable refcount tracker.
[  658.659941][T17689] bridge0: port 2(bridge_slave_1) entered disabled state
[  658.899848][T17688] batadv_slave_0: entered promiscuous mode
[  658.985263][T17692] netlink: 'syz.2.3321': attribute type 21 has an invalid length.
[  659.030808][T17692] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3321'.
[  660.117756][T17712] netlink: 188 bytes leftover after parsing attributes in process `syz.0.3326'.
[  660.482644][T17724] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3331'.
[  660.491157][T17721] FAULT_INJECTION: forcing a failure.
[  660.491157][T17721] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  660.546812][T17721] CPU: 1 PID: 17721 Comm: syz.3.3329 Not tainted syzkaller #0
[  660.555045][T17721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  660.565213][T17721] Call Trace:
[  660.568517][T17721]  <TASK>
[  660.571550][T17721]  dump_stack_lvl+0x18c/0x250
[  660.576366][T17721]  ? show_regs_print_info+0x20/0x20
[  660.581694][T17721]  ? load_image+0x420/0x420
[  660.586245][T17721]  ? __might_fault+0xaa/0x120
[  660.590968][T17721]  ? __lock_acquire+0x7eb0/0x7eb0
[  660.596376][T17721]  should_fail_ex+0x394/0x4c0
[  660.601250][T17721]  _copy_from_user+0x2f/0xe0
[  660.605852][T17721]  kstrtouint_from_user+0xde/0x170
[  660.611144][T17721]  ? kstrtol_from_user+0x190/0x190
[  660.616286][T17721]  proc_fail_nth_write+0x8f/0x250
[  660.621334][T17721]  ? proc_fail_nth_read+0x260/0x260
[  660.626637][T17721]  ? proc_fail_nth_read+0x260/0x260
[  660.631940][T17721]  vfs_write+0x299/0x9a0
[  660.636324][T17721]  ? file_end_write+0x250/0x250
[  660.641281][T17721]  ? __fget_files+0x28/0x460
[  660.646055][T17721]  ? __fget_files+0x3fc/0x460
[  660.650741][T17721]  ? __fdget_pos+0x2a3/0x330
[  660.655514][T17721]  ? ksys_write+0x74/0x260
[  660.660028][T17721]  ksys_write+0x151/0x260
[  660.664545][T17721]  ? __ia32_sys_read+0x90/0x90
[  660.669337][T17721]  ? lockdep_hardirqs_on+0x98/0x150
[  660.674873][T17721]  do_syscall_64+0x55/0xb0
[  660.679393][T17721]  ? clear_bhb_loop+0x40/0x90
[  660.684257][T17721]  ? clear_bhb_loop+0x40/0x90
[  660.689133][T17721]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  660.695031][T17721] RIP: 0033:0x7fd92235e9ce
[  660.699447][T17721] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  660.719143][T17721] RSP: 002b:00007fd923207fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  660.727586][T17721] RAX: ffffffffffffffda RBX: 00007fd9232086c0 RCX: 00007fd92235e9ce
[  660.735824][T17721] RDX: 0000000000000001 RSI: 00007fd9232080a0 RDI: 0000000000000009
[  660.743798][T17721] RBP: 00007fd923208090 R08: 0000000000000000 R09: 0000000000000000
[  660.751773][T17721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  660.759752][T17721] R13: 00007fd922626038 R14: 00007fd922625fa0 R15: 00007ffda24264c8
[  660.767822][T17721]  </TASK>
[  664.393033][T17768] netlink: 'syz.2.3342': attribute type 10 has an invalid length.
[  664.513950][T17770] netlink: 'syz.2.3342': attribute type 10 has an invalid length.
[  664.533928][T17767] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.3342'.
[  664.671414][T17775] sit0: left promiscuous mode
[  664.822421][T17780] netlink: 'syz.0.3346': attribute type 153 has an invalid length.
[  664.853403][T17780] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.3346'.
[  665.593053][T17782] netlink: 'syz.2.3345': attribute type 21 has an invalid length.
[  665.619542][T17782] IPv6: NLM_F_CREATE should be specified when creating new route
[  665.647031][T17782] IPv6: Can't replace route, no match found
[  666.095438][T17801] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3352'.
[  667.258416][T17828] netlink: 'syz.3.3358': attribute type 21 has an invalid length.
[  667.281916][T17828] netlink: 'syz.3.3358': attribute type 30 has an invalid length.
[  667.743465][T17836] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.3361'.
[  667.839677][T17841] syzkaller0: entered promiscuous mode
[  667.850936][T17841] syzkaller0: entered allmulticast mode
[  667.959770][T17847] netlink: 'syz.2.3364': attribute type 27 has an invalid length.
[  668.090176][T17853] netlink: 'syz.1.3366': attribute type 6 has an invalid length.
[  668.109691][T17853] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3366'.
[  668.284677][T17855] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3367'.
[  668.438305][T17855] netlink: 'syz.0.3367': attribute type 10 has an invalid length.
[  668.457768][T17855] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3367'.
[  668.709247][T17864] delete_channel: no stack
[  668.751069][T17869] netlink: 'syz.1.3371': attribute type 21 has an invalid length.
[  668.792177][T17871] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3373'.
[  668.846179][T17874] batman_adv: The newly added mac address (00:20:10:00:00:00) already exists on: batadv_slave_0
[  668.866281][T17874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  669.427466][T17892] netlink: 'syz.2.3381': attribute type 2 has an invalid length.
[  669.435534][T17892] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3381'.
[  669.449716][T17896] netlink: 'syz.2.3381': attribute type 2 has an invalid length.
[  669.458209][T17896] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3381'.
[  669.572700][T17894] syzkaller0: entered promiscuous mode
[  669.590657][T17894] syzkaller0: entered allmulticast mode
[  672.180856][T17907] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  672.188428][T17907] batman_adv: batadv0: Removing interface: batadv_slave_0
[  672.197102][T17907] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  672.206473][T17907] batman_adv: batadv0: Removing interface: batadv_slave_1
[  672.255438][T17915] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3389'.
[  672.265109][T17924] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3391'.
[  672.274744][T17924] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  672.393224][T17927] netlink: 'syz.0.3392': attribute type 19 has an invalid length.
[  672.422431][T17927] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3392'.
[  672.533202][T17931] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3393'.
[  672.563241][T17931] openvswitch: netlink: Key 32 has unexpected len 3064 expected 2
[  673.751518][T17971] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.3405'.
[  673.774603][T17971] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3405'.
[  675.302070][T18032] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  675.331421][T18032] batman_adv: batadv0: Removing interface: batadv_slave_0
[  675.358963][T18032] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  675.408846][T18032] batman_adv: batadv0: Removing interface: batadv_slave_1
[  675.436379][T18037] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3426'.
[  675.554636][T18037] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3426'.
[  676.027613][T18058] netlink: 'syz.0.3428': attribute type 10 has an invalid length.
[  676.049588][T18058] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3428'.
[  676.141347][T18058] netlink: 'syz.0.3428': attribute type 3 has an invalid length.
[  676.152049][T18058] netlink: 145672 bytes leftover after parsing attributes in process `syz.0.3428'.
[  677.156942][T18098] netlink: 'syz.2.3442': attribute type 10 has an invalid length.
[  677.186597][T18098] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[  677.303381][T18098] netlink: 'syz.2.3442': attribute type 3 has an invalid length.
[  677.311935][T18098] __nla_validate_parse: 2 callbacks suppressed
[  677.311949][T18098] netlink: 145672 bytes leftover after parsing attributes in process `syz.2.3442'.
[  677.689842][T18107] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3444'.
[  677.720328][T18107] debugfs: Directory '!!ô!' with parent 'ieee80211' already present!
[  678.132297][T18120] netlink: 'syz.1.3448': attribute type 2 has an invalid length.
[  678.140412][T18120] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3448'.
[  678.384676][T18127] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3451'.
[  678.384820][T18129] netlink: 'syz.3.3452': attribute type 27 has an invalid length.
[  678.402306][T18127] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3451'.
[  678.417490][T18127] netlink: 13 bytes leftover after parsing attributes in process `syz.1.3451'.
[  678.470709][T18129] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3452'.
[  681.543912][T18149] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.3457'.
[  681.578597][T18153] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.3457'.
[  681.625336][T18154] netlink: 11254 bytes leftover after parsing attributes in process `syz.2.3459'.
[  681.652115][T18154] netlink: 'syz.2.3459': attribute type 21 has an invalid length.
[  681.660501][T18154] netlink: 'syz.2.3459': attribute type 25 has an invalid length.
[  681.690685][T18154] netlink: 'syz.2.3459': attribute type 27 has an invalid length.
[  681.725952][T18154] netlink: 'syz.2.3459': attribute type 28 has an invalid length.
[  681.756364][T18154] netlink: 'syz.2.3459': attribute type 29 has an invalid length.
[  681.783626][T18154] netlink: 'syz.2.3459': attribute type 30 has an invalid length.
[  681.988634][T18177] netlink: 'syz.2.3468': attribute type 7 has an invalid length.
[  682.035684][T18179] netlink: 'syz.1.3466': attribute type 21 has an invalid length.
[  682.235778][T18187] netlink: 'syz.2.3472': attribute type 9 has an invalid length.
[  683.931369][T18237] netlink: 'syz.3.3491': attribute type 28 has an invalid length.
[  683.951902][T18237] __nla_validate_parse: 6 callbacks suppressed
[  683.951920][T18237] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3491'.
[  684.032747][T18247] bridge0: port 1(bridge_slave_0) entered disabled state
[  684.056523][T18251] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3495'.
[  684.086311][T18251] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3495'.
[  684.292886][T18257] syzkaller0: entered promiscuous mode
[  684.298627][T18257] syzkaller0: entered allmulticast mode
[  686.129661][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  686.136535][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  687.120069][T18288] mac80211_hwsim hwsim36 wlan1: entered promiscuous mode
[  687.132194][T18291] validate_nla: 1 callbacks suppressed
[  687.132212][T18291] netlink: 'syz.2.3506': attribute type 29 has an invalid length.
[  687.152698][T18288] mac80211_hwsim hwsim36 wlan1: entered allmulticast mode
[  687.167249][T18291] netlink: 'syz.2.3506': attribute type 29 has an invalid length.
[  687.188128][T18291] netlink: 'syz.2.3506': attribute type 29 has an invalid length.
[  687.242265][T18291] netlink: 'syz.2.3506': attribute type 29 has an invalid length.
[  687.266510][T18291] netlink: 'syz.2.3506': attribute type 29 has an invalid length.
[  690.039848][T18305] netlink: 'syz.1.3508': attribute type 64 has an invalid length.
[  690.084749][T18312] netlink: 'syz.2.3510': attribute type 10 has an invalid length.
[  690.097919][T18312] macvlan0: entered promiscuous mode
[  690.131611][T18312] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  690.657480][T18331] netlink: 15743 bytes leftover after parsing attributes in process `syz.0.3516'.
[  690.724253][T18331] syzkaller0: entered promiscuous mode
[  690.741854][T18331] syzkaller0: entered allmulticast mode
[  693.666160][T18343] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3519'.
[  693.723807][T18349] netlink: 'syz.3.3520': attribute type 2 has an invalid length.
[  693.750630][T18349] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3520'.
[  693.770464][T18349] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  693.854890][T18347] netlink: 'syz.0.3519': attribute type 10 has an invalid length.
[  693.878807][T18347] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3519'.
[  693.892366][T18347] hsr0: entered promiscuous mode
[  693.897791][T18347] bridge0: port 1(hsr0) entered blocking state
[  693.910173][T18347] bridge0: port 1(hsr0) entered disabled state
[  693.917203][T18347] hsr0: entered allmulticast mode
[  693.925784][T18347] hsr_slave_0: entered allmulticast mode
[  693.936460][T18347] hsr_slave_1: entered allmulticast mode
[  693.955447][T18347] bridge0: port 1(hsr0) entered blocking state
[  693.961896][T18347] bridge0: port 1(hsr0) entered forwarding state
[  693.974642][T18357] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.3523'.
[  694.314335][T18370] netlink: 'syz.3.3528': attribute type 10 has an invalid length.
[  694.333293][T18370] macvlan0: entered promiscuous mode
[  694.346290][T18370] bond0: (slave macvlan0): Error -22 calling dev_set_mtu
[  694.646292][T18380] Â: renamed from ip6gretap0 (while UP)
[  694.885921][T18380] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.3529'.
[  696.177082][T18429] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3545'.
[  699.460843][T18461] bridge0: port 1(bridge_slave_0) entered forwarding state
[  699.617661][T18467] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3556'.
[  700.237239][T18485] netlink: 'syz.2.3561': attribute type 3 has an invalid length.
[  700.261839][T18485] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.3561'.
[  700.693384][T18494] netlink: 'syz.2.3565': attribute type 10 has an invalid length.
[  700.722028][T18494] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3565'.
[  700.757603][T18494] ipvlan1: entered promiscuous mode
[  700.764448][T18494] ipvlan1: entered allmulticast mode
[  700.791497][T18494] bridge0: port 2(ipvlan1) entered blocking state
[  700.800208][T18494] bridge0: port 2(ipvlan1) entered disabled state
[  700.830343][T18494] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  701.023143][T18511] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.3571'.
[  701.150386][T18516] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.3574'.
[  701.907703][T18538] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3581'.
[  702.068105][T18542] netlink: 'syz.0.3583': attribute type 21 has an invalid length.
[  702.089356][T18542] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3583'.
[  702.107988][T18542] netlink: 'syz.0.3583': attribute type 4 has an invalid length.
[  702.128389][T18542] netlink: 'syz.0.3583': attribute type 3 has an invalid length.
[  702.157345][T18542] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3583'.
[  702.807727][T18546] netlink: 'syz.3.3584': attribute type 1 has an invalid length.
[  702.846664][T18546] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.3584'.
[  703.886325][T18576] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.3593'.
[  704.605935][T18576] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  708.874960][T18597] netlink: 'syz.0.3600': attribute type 10 has an invalid length.
[  708.896582][T18597] team0: Port device geneve1 added
[  708.986437][T18610] netlink: 'syz.2.3603': attribute type 1 has an invalid length.
[  708.999673][T18610] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.3603'.
[  709.057353][T18615] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3611'.
[  709.163431][T18614] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.3604'.
[  710.218097][T18617] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3605'.
[  710.248098][T18637] netlink: 'syz.2.3612': attribute type 10 has an invalid length.
[  710.347163][T18637] team0: Port device geneve1 added
[  710.528836][T18650] FAULT_INJECTION: forcing a failure.
[  710.528836][T18650] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  710.546924][T18650] CPU: 1 PID: 18650 Comm: syz.2.3617 Not tainted syzkaller #0
[  710.554535][T18650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  710.564702][T18650] Call Trace:
[  710.568036][T18650]  <TASK>
[  710.571172][T18650]  dump_stack_lvl+0x18c/0x250
[  710.576120][T18650]  ? show_regs_print_info+0x20/0x20
[  710.581524][T18650]  ? load_image+0x420/0x420
[  710.586146][T18650]  ? __lock_acquire+0x7eb0/0x7eb0
[  710.591342][T18650]  should_fail_ex+0x394/0x4c0
[  710.596170][T18650]  prepare_alloc_pages+0x1e1/0x5b0
[  710.601397][T18650]  __alloc_pages+0x134/0x460
[  710.606008][T18650]  ? zone_statistics+0x170/0x170
[  710.611174][T18650]  ? __build_skb_around+0x245/0x3c0
[  710.616550][T18650]  ? alloc_pages+0x4e1/0x740
[  710.621260][T18650]  alloc_skb_with_frags+0x23e/0x7a0
[  710.626500][T18650]  sock_alloc_send_pskb+0x883/0x9a0
[  710.631920][T18650]  ? sock_kzfree_s+0x50/0x50
[  710.636548][T18650]  tun_get_user+0xa44/0x3d30
[  710.641701][T18650]  ? aa_file_perm+0x3e3/0xee0
[  710.646414][T18650]  ? rcu_read_unlock+0xa0/0xa0
[  710.651310][T18650]  ? tun_get+0x1c/0x2e0
[  710.655509][T18650]  ? __lock_acquire+0x7eb0/0x7eb0
[  710.660657][T18650]  ? tun_get+0x1c/0x2e0
[  710.664844][T18650]  tun_chr_write_iter+0x119/0x200
[  710.669985][T18650]  vfs_write+0x474/0x9a0
[  710.674348][T18650]  ? file_end_write+0x250/0x250
[  710.679241][T18650]  ? __fget_files+0x3fc/0x460
[  710.684138][T18650]  ? __fdget_pos+0x1d8/0x330
[  710.688786][T18650]  ? ksys_write+0x74/0x260
[  710.693335][T18650]  ksys_write+0x151/0x260
[  710.697784][T18650]  ? __ia32_sys_read+0x90/0x90
[  710.702840][T18650]  ? lockdep_hardirqs_on+0x98/0x150
[  710.708075][T18650]  do_syscall_64+0x55/0xb0
[  710.712528][T18650]  ? clear_bhb_loop+0x40/0x90
[  710.717402][T18650]  ? clear_bhb_loop+0x40/0x90
[  710.722190][T18650]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  710.728122][T18650] RIP: 0033:0x7fe8dff9e199
[  710.732650][T18650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  710.752973][T18650] RSP: 002b:00007fe8e0e55028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  710.761588][T18650] RAX: ffffffffffffffda RBX: 00007fe8e0225fa0 RCX: 00007fe8dff9e199
[  710.769905][T18650] RDX: 000000000000fdef RSI: 00002000000004c0 RDI: 00000000000000c8
[  710.778160][T18650] RBP: 00007fe8e0e55090 R08: 0000000000000000 R09: 0000000000000000
[  710.786665][T18650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  710.794657][T18650] R13: 00007fe8e0226038 R14: 00007fe8e0225fa0 R15: 00007ffff886f8c8
[  710.802645][T18650]  </TASK>
[  711.079671][T18670] netlink: 'syz.3.3624': attribute type 10 has an invalid length.
[  712.240595][T18684] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3628'.
[  712.324102][T18684] netlink: 'syz.1.3628': attribute type 21 has an invalid length.
[  712.439738][T18689] FAULT_INJECTION: forcing a failure.
[  712.439738][T18689] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  712.472403][T18689] CPU: 1 PID: 18689 Comm: syz.2.3629 Not tainted syzkaller #0
[  712.480108][T18689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  712.490219][T18689] Call Trace:
[  712.493627][T18689]  <TASK>
[  712.496624][T18689]  dump_stack_lvl+0x18c/0x250
[  712.501512][T18689]  ? show_regs_print_info+0x20/0x20
[  712.506757][T18689]  ? load_image+0x420/0x420
[  712.511297][T18689]  ? __might_fault+0xaa/0x120
[  712.516060][T18689]  ? __lock_acquire+0x7eb0/0x7eb0
[  712.521513][T18689]  should_fail_ex+0x394/0x4c0
[  712.526498][T18689]  _copy_from_iter+0x1cd/0x1290
[  712.531573][T18689]  ? sock_alloc_send_pskb+0x8a1/0x9a0
[  712.537023][T18689]  ? copyout_mc+0x70/0x70
[  712.541550][T18689]  ? __virt_addr_valid+0x10c/0x380
[  712.546816][T18689]  ? __virt_addr_valid+0x10c/0x380
[  712.552107][T18689]  ? __virt_addr_valid+0x10c/0x380
[  712.557217][T18689]  ? __check_object_size+0x4fc/0xa40
[  712.562767][T18689]  skb_copy_datagram_from_iter+0xf2/0x6f0
[  712.568902][T18689]  ? skb_put+0x112/0x210
[  712.573695][T18689]  tun_get_user+0xc99/0x3d30
[  712.578396][T18689]  ? aa_file_perm+0x3e3/0xee0
[  712.583169][T18689]  ? rcu_read_unlock+0xa0/0xa0
[  712.588035][T18689]  ? tun_get+0x1c/0x2e0
[  712.592195][T18689]  ? __lock_acquire+0x7eb0/0x7eb0
[  712.597236][T18689]  ? tun_get+0x1c/0x2e0
[  712.601410][T18689]  tun_chr_write_iter+0x119/0x200
[  712.606526][T18689]  vfs_write+0x474/0x9a0
[  712.611046][T18689]  ? file_end_write+0x250/0x250
[  712.616021][T18689]  ? __fget_files+0x3fc/0x460
[  712.620793][T18689]  ? __fdget_pos+0x1d8/0x330
[  712.625389][T18689]  ? ksys_write+0x74/0x260
[  712.629837][T18689]  ksys_write+0x151/0x260
[  712.634190][T18689]  ? __ia32_sys_read+0x90/0x90
[  712.639058][T18689]  ? lockdep_hardirqs_on+0x98/0x150
[  712.644433][T18689]  do_syscall_64+0x55/0xb0
[  712.648942][T18689]  ? clear_bhb_loop+0x40/0x90
[  712.653618][T18689]  ? clear_bhb_loop+0x40/0x90
[  712.658355][T18689]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  712.664255][T18689] RIP: 0033:0x7fe8dff9e199
[  712.668763][T18689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  712.688492][T18689] RSP: 002b:00007fe8e0e55028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  712.697001][T18689] RAX: ffffffffffffffda RBX: 00007fe8e0225fa0 RCX: 00007fe8dff9e199
[  712.705070][T18689] RDX: 000000000000fdef RSI: 00002000000004c0 RDI: 00000000000000c8
[  712.713044][T18689] RBP: 00007fe8e0e55090 R08: 0000000000000000 R09: 0000000000000000
[  712.721283][T18689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  712.729343][T18689] R13: 00007fe8e0226038 R14: 00007fe8e0225fa0 R15: 00007ffff886f8c8
[  712.737509][T18689]  </TASK>
[  713.260325][T18705] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.3635'.
[  713.269934][T18705] bridge_slave_1: default FDB implementation only supports local addresses
[  715.029138][T18717] FAULT_INJECTION: forcing a failure.
[  715.029138][T18717] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  715.061520][T18717] CPU: 1 PID: 18717 Comm: syz.1.3640 Not tainted syzkaller #0
[  715.069574][T18717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  715.079914][T18717] Call Trace:
[  715.083207][T18717]  <TASK>
[  715.086179][T18717]  dump_stack_lvl+0x18c/0x250
[  715.090973][T18717]  ? show_regs_print_info+0x20/0x20
[  715.096275][T18717]  ? load_image+0x420/0x420
[  715.100991][T18717]  ? __might_fault+0xaa/0x120
[  715.106034][T18717]  ? __lock_acquire+0x7eb0/0x7eb0
[  715.111158][T18717]  ? __might_fault+0xaa/0x120
[  715.116079][T18717]  should_fail_ex+0x394/0x4c0
[  715.120864][T18717]  _copy_from_iter+0x1cd/0x1290
[  715.125723][T18717]  ? __might_fault+0xaa/0x120
[  715.130530][T18717]  ? copyout_mc+0x70/0x70
[  715.134874][T18717]  ? copyout_mc+0x70/0x70
[  715.139203][T18717]  ? __virt_addr_valid+0x10c/0x380
[  715.144321][T18717]  ? page_copy_sane+0x16a/0x270
[  715.149178][T18717]  copy_page_from_iter+0x7b/0x100
[  715.154221][T18717]  skb_copy_datagram_from_iter+0x2ea/0x6f0
[  715.160311][T18717]  tun_get_user+0xc99/0x3d30
[  715.164923][T18717]  ? aa_file_perm+0x3e3/0xee0
[  715.169608][T18717]  ? rcu_read_unlock+0xa0/0xa0
[  715.174390][T18717]  ? tun_get+0x1c/0x2e0
[  715.178738][T18717]  ? __lock_acquire+0x7eb0/0x7eb0
[  715.183852][T18717]  ? tun_get+0x1c/0x2e0
[  715.188281][T18717]  tun_chr_write_iter+0x119/0x200
[  715.193410][T18717]  vfs_write+0x474/0x9a0
[  715.197851][T18717]  ? file_end_write+0x250/0x250
[  715.202795][T18717]  ? __fget_files+0x3fc/0x460
[  715.207747][T18717]  ? __fdget_pos+0x1d8/0x330
[  715.212485][T18717]  ? ksys_write+0x74/0x260
[  715.217036][T18717]  ksys_write+0x151/0x260
[  715.221386][T18717]  ? __ia32_sys_read+0x90/0x90
[  715.226161][T18717]  ? lockdep_hardirqs_on+0x98/0x150
[  715.231378][T18717]  do_syscall_64+0x55/0xb0
[  715.235889][T18717]  ? clear_bhb_loop+0x40/0x90
[  715.240572][T18717]  ? clear_bhb_loop+0x40/0x90
[  715.245431][T18717]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  715.251349][T18717] RIP: 0033:0x7f661cd9e199
[  715.255944][T18717] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  715.275734][T18717] RSP: 002b:00007f661dca1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  715.284331][T18717] RAX: ffffffffffffffda RBX: 00007f661d025fa0 RCX: 00007f661cd9e199
[  715.292564][T18717] RDX: 000000000000fdef RSI: 00002000000004c0 RDI: 00000000000000c8
[  715.300795][T18717] RBP: 00007f661dca1090 R08: 0000000000000000 R09: 0000000000000000
[  715.308771][T18717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  715.317179][T18717] R13: 00007f661d026038 R14: 00007f661d025fa0 R15: 00007ffeb3d08998
[  715.325337][T18717]  </TASK>
[  715.610565][T18725] veth1_macvtap: left promiscuous mode
[  715.642118][T18725] macsec0: entered allmulticast mode
[  715.714125][T18730] netlink: 'syz.3.3643': attribute type 10 has an invalid length.
[  715.733115][T18730] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3643'.
[  715.769541][T18730] veth0_vlan: left promiscuous mode
[  715.789603][T18730] veth0_vlan: entered promiscuous mode
[  715.836711][T18730] batman_adv: batadv0: Adding interface: veth0_vlan
[  715.850836][T18730] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  715.889902][T18730] batman_adv: batadv0: Interface activated: veth0_vlan
[  716.088275][T18747] netlink: 'syz.1.3646': attribute type 10 has an invalid length.
[  716.104470][T18747] macvlan0: entered allmulticast mode
[  716.719814][T18767] FAULT_INJECTION: forcing a failure.
[  716.719814][T18767] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  716.754851][T18767] CPU: 0 PID: 18767 Comm: syz.1.3652 Not tainted syzkaller #0
[  716.762563][T18767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  716.773265][T18767] Call Trace:
[  716.776657][T18767]  <TASK>
[  716.779618][T18767]  dump_stack_lvl+0x18c/0x250
[  716.784342][T18767]  ? show_regs_print_info+0x20/0x20
[  716.789768][T18767]  ? load_image+0x420/0x420
[  716.794695][T18767]  ? __might_fault+0xaa/0x120
[  716.799496][T18767]  ? __lock_acquire+0x7eb0/0x7eb0
[  716.804569][T18767]  ? __might_fault+0xaa/0x120
[  716.809289][T18767]  should_fail_ex+0x394/0x4c0
[  716.814115][T18767]  _copy_from_iter+0x1cd/0x1290
[  716.819005][T18767]  ? __might_fault+0xaa/0x120
[  716.823816][T18767]  ? copyout_mc+0x70/0x70
[  716.828545][T18767]  ? copyout_mc+0x70/0x70
[  716.832918][T18767]  ? __virt_addr_valid+0x10c/0x380
[  716.838163][T18767]  ? page_copy_sane+0x16a/0x270
[  716.843240][T18767]  copy_page_from_iter+0x7b/0x100
[  716.848495][T18767]  skb_copy_datagram_from_iter+0x2ea/0x6f0
[  716.854882][T18767]  tun_get_user+0xc99/0x3d30
[  716.859790][T18767]  ? trace_event_raw_event_lock+0x240/0x240
[  716.865785][T18767]  ? aa_file_perm+0x3e3/0xee0
[  716.870678][T18767]  ? rcu_read_unlock+0xa0/0xa0
[  716.875463][T18767]  ? tun_get+0x1c/0x2e0
[  716.879837][T18767]  ? __lock_acquire+0x7eb0/0x7eb0
[  716.885082][T18767]  ? tun_get+0x1c/0x2e0
[  716.889449][T18767]  tun_chr_write_iter+0x119/0x200
[  716.894506][T18767]  vfs_write+0x474/0x9a0
[  716.899108][T18767]  ? file_end_write+0x250/0x250
[  716.903966][T18767]  ? __fget_files+0x3fc/0x460
[  716.908968][T18767]  ? __fdget_pos+0x1d8/0x330
[  716.913566][T18767]  ? ksys_write+0x74/0x260
[  716.918042][T18767]  ksys_write+0x151/0x260
[  716.922379][T18767]  ? __ia32_sys_read+0x90/0x90
[  716.927529][T18767]  ? lockdep_hardirqs_on+0x98/0x150
[  716.932874][T18767]  do_syscall_64+0x55/0xb0
[  716.937472][T18767]  ? clear_bhb_loop+0x40/0x90
[  716.942234][T18767]  ? clear_bhb_loop+0x40/0x90
[  716.947038][T18767]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  716.953225][T18767] RIP: 0033:0x7f661cd9e199
[  716.957649][T18767] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  716.978669][T18767] RSP: 002b:00007f661dca1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  716.987192][T18767] RAX: ffffffffffffffda RBX: 00007f661d025fa0 RCX: 00007f661cd9e199
[  716.995349][T18767] RDX: 000000000000fdef RSI: 00002000000004c0 RDI: 00000000000000c8
[  717.003502][T18767] RBP: 00007f661dca1090 R08: 0000000000000000 R09: 0000000000000000
[  717.012185][T18767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  717.020243][T18767] R13: 00007f661d026038 R14: 00007f661d025fa0 R15: 00007ffeb3d08998
[  717.028406][T18767]  </TASK>
[  717.188026][T18771] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.3654'.
[  717.250790][T18771] netlink: 21068 bytes leftover after parsing attributes in process `syz.2.3654'.
[  717.260184][T18771] tipc: Started in network mode
[  717.300787][T18771] tipc: Node identity b, cluster identity 73
[  717.307022][T18771] tipc: Node number set to 11
[  717.331897][T18774] netlink: 'syz.1.3655': attribute type 10 has an invalid length.
[  717.352839][T18774] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3655'.
[  717.376321][T18774] bridge0: port 3(dummy0) entered blocking state
[  717.399807][T18774] bridge0: port 3(dummy0) entered disabled state
[  717.430928][T18774] dummy0: entered allmulticast mode
[  717.438201][T18774] dummy0: entered promiscuous mode
[  717.461954][T18774] bridge0: port 3(dummy0) entered blocking state
[  717.468531][T18774] bridge0: port 3(dummy0) entered forwarding state
[  717.498160][T18775] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3655'.
[  717.950379][T18784] netlink: 22 bytes leftover after parsing attributes in process `syz.2.3659'.
[  718.356174][T18794] FAULT_INJECTION: forcing a failure.
[  718.356174][T18794] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  718.392737][T18794] CPU: 1 PID: 18794 Comm: syz.1.3663 Not tainted syzkaller #0
[  718.400271][T18794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  718.410439][T18794] Call Trace:
[  718.413837][T18794]  <TASK>
[  718.416797][T18794]  dump_stack_lvl+0x18c/0x250
[  718.421808][T18794]  ? show_regs_print_info+0x20/0x20
[  718.427054][T18794]  ? load_image+0x420/0x420
[  718.431715][T18794]  ? __might_fault+0xaa/0x120
[  718.436421][T18794]  ? __lock_acquire+0x7eb0/0x7eb0
[  718.441585][T18794]  ? __might_fault+0xaa/0x120
[  718.446378][T18794]  should_fail_ex+0x394/0x4c0
[  718.451092][T18794]  _copy_from_iter+0x1cd/0x1290
[  718.456449][T18794]  ? __might_fault+0xaa/0x120
[  718.461193][T18794]  ? copyout_mc+0x70/0x70
[  718.465644][T18794]  ? copyout_mc+0x70/0x70
[  718.470089][T18794]  ? __virt_addr_valid+0x10c/0x380
[  718.475242][T18794]  ? page_copy_sane+0x16a/0x270
[  718.480217][T18794]  copy_page_from_iter+0x7b/0x100
[  718.485359][T18794]  skb_copy_datagram_from_iter+0x2ea/0x6f0
[  718.491291][T18794]  tun_get_user+0xc99/0x3d30
[  718.496012][T18794]  ? trace_event_raw_event_lock+0x240/0x240
[  718.502104][T18794]  ? aa_file_perm+0x3e3/0xee0
[  718.506898][T18794]  ? rcu_read_unlock+0xa0/0xa0
[  718.511699][T18794]  ? tun_get+0x1c/0x2e0
[  718.515891][T18794]  ? __lock_acquire+0x7eb0/0x7eb0
[  718.521029][T18794]  ? tun_get+0x1c/0x2e0
[  718.525238][T18794]  tun_chr_write_iter+0x119/0x200
[  718.530285][T18794]  vfs_write+0x474/0x9a0
[  718.534563][T18794]  ? file_end_write+0x250/0x250
[  718.539457][T18794]  ? __fget_files+0x3fc/0x460
[  718.544160][T18794]  ? __fdget_pos+0x1d8/0x330
[  718.548771][T18794]  ? ksys_write+0x74/0x260
[  718.553212][T18794]  ksys_write+0x151/0x260
[  718.557658][T18794]  ? __ia32_sys_read+0x90/0x90
[  718.562482][T18794]  ? lockdep_hardirqs_on+0x98/0x150
[  718.568161][T18794]  do_syscall_64+0x55/0xb0
[  718.572604][T18794]  ? clear_bhb_loop+0x40/0x90
[  718.577302][T18794]  ? clear_bhb_loop+0x40/0x90
[  718.582133][T18794]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  718.588537][T18794] RIP: 0033:0x7f661cd9e199
[  718.592977][T18794] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  718.612829][T18794] RSP: 002b:00007f661dca1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  718.621275][T18794] RAX: ffffffffffffffda RBX: 00007f661d025fa0 RCX: 00007f661cd9e199
[  718.629267][T18794] RDX: 000000000000fdef RSI: 00002000000004c0 RDI: 00000000000000c8
[  718.637265][T18794] RBP: 00007f661dca1090 R08: 0000000000000000 R09: 0000000000000000
[  718.645430][T18794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  718.653466][T18794] R13: 00007f661d026038 R14: 00007f661d025fa0 R15: 00007ffeb3d08998
[  718.661644][T18794]  </TASK>
[  718.959157][T18796] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.3664'.
[  718.968675][T18804] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3665'.
[  719.076139][T18804] netlink: 'syz.1.3665': attribute type 10 has an invalid length.
[  719.137731][T18804] bridge0: port 2(bridge_slave_1) entered disabled state
[  719.215691][T18804] bridge_slave_1: left allmulticast mode
[  719.225615][T18804] bridge_slave_1: left promiscuous mode
[  719.252910][T18804] bridge0: port 2(bridge_slave_1) entered disabled state
[  719.334998][T18804] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  719.380816][T18809] netlink: 'syz.1.3665': attribute type 10 has an invalid length.
[  719.418129][T18812] netlink: 'syz.2.3666': attribute type 3 has an invalid length.
[  719.435838][T18812] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.3666'.
[  719.915683][T18814] syzkaller0: entered promiscuous mode
[  719.921835][T18814] syzkaller0: entered allmulticast mode
[  722.467108][T18854] sock: sock_timestamping_bind_phc: sock not bind to device
[  725.284741][T18853] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3678'.
[  725.301588][T18854] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3678'.
[  725.343766][T18854] bridge0: port 1(bridge_slave_0) entered disabled state
[  725.426824][T18854] bridge_slave_0 (unregistering): left promiscuous mode
[  725.435585][T18854] bridge0: port 1(bridge_slave_0) entered disabled state
[  725.975619][T18866] syzkaller0: entered promiscuous mode
[  725.995168][T18866] syzkaller0: entered allmulticast mode
[  726.069634][T18876] netlink: 13439 bytes leftover after parsing attributes in process `syz.0.3684'.
[  726.668836][T18891] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3688'.
[  726.811214][T18891] debugfs: Directory '!!ô!' with parent 'ieee80211' already present!
[  731.437585][T18912] netlink: 'syz.0.3694': attribute type 10 has an invalid length.
[  731.442726][T18914] netlink: 'syz.2.3696': attribute type 46 has an invalid length.
[  731.460700][T18912] nla_validate_range_unsigned: 25 callbacks suppressed
[  731.460770][T18912] netlink: 'syz.0.3694': attribute type 11 has an invalid length.
[  731.499396][T18914] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3696'.
[  731.501695][T18912] netlink: 'syz.0.3694': attribute type 11 has an invalid length.
[  731.536010][T18915] netlink: 'syz.2.3696': attribute type 10 has an invalid length.
[  731.546810][T18912] netlink: 'syz.0.3694': attribute type 11 has an invalid length.
[  731.552718][T18915] netlink: 55 bytes leftover after parsing attributes in process `syz.2.3696'.
[  731.565486][T18912] netlink: 'syz.0.3694': attribute type 11 has an invalid length.
[  731.590762][T18912] netlink: 'syz.0.3694': attribute type 11 has an invalid length.
[  731.610871][T18912] netlink: 'syz.0.3694': attribute type 11 has an invalid length.
[  731.631178][T18912] netlink: 'syz.0.3694': attribute type 11 has an invalid length.
[  731.651252][T18912] netlink: 'syz.0.3694': attribute type 11 has an invalid length.
[  731.680777][T18912] netlink: 'syz.0.3694': attribute type 11 has an invalid length.
[  731.695184][T18912] netlink: 'syz.0.3694': attribute type 11 has an invalid length.
[  731.726099][T18912] netlink: 'syz.0.3694': attribute type 4 has an invalid length.
[  731.747954][ T5780] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  731.758804][T18920] bridge_slave_1 (unregistering): left promiscuous mode
[  731.759411][ T5780] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  731.774438][T18912] netlink: 'syz.0.3694': attribute type 5 has an invalid length.
[  731.790244][T18920] bridge0: port 2(bridge_slave_1) entered disabled state
[  731.796231][T18912] netlink: 208556 bytes leftover after parsing attributes in process `syz.0.3694'.
[  731.798029][ T5780] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  731.820613][ T5780] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  731.828332][ T5780] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  731.837993][ T5780] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  732.022911][T18911] delete_channel: no stack
[  732.200080][T18921] chnl_net:caif_netlink_parms(): no params data found
[  732.225478][T18929] syz.1.3695[18929] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  732.443082][T18935] : renamed from bond_slave_1 (while UP)
[  733.166163][T18921] bridge0: port 1(bridge_slave_0) entered blocking state
[  733.177885][T18921] bridge0: port 1(bridge_slave_0) entered disabled state
[  733.189352][T18921] bridge_slave_0: entered allmulticast mode
[  733.221164][T18921] bridge_slave_0: entered promiscuous mode
[  733.243726][T18921] bridge0: port 2(bridge_slave_1) entered blocking state
[  733.270260][T18921] bridge0: port 2(bridge_slave_1) entered disabled state
[  733.283368][T18921] bridge_slave_1: entered allmulticast mode
[  733.293365][T18921] bridge_slave_1: entered promiscuous mode
[  733.548765][T18941] syzkaller0: entered promiscuous mode
[  733.560896][T18941] syzkaller0: entered allmulticast mode
[  733.662736][T18921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  733.692891][T18921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  733.798047][T18921] team0: Port device team_slave_0 added
[  733.883964][ T5780] Bluetooth: hci1: command tx timeout
[  733.907473][T18921] team0: Port device team_slave_1 added
[  734.015276][T18921] batman_adv: batadv0: Adding interface: batadv_slave_0
[  734.027369][T18921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  734.053861][T18921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  734.067078][T18921] batman_adv: batadv0: Adding interface: batadv_slave_1
[  734.074300][T18921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  734.101877][T18921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  734.217434][T18921] hsr_slave_0: entered promiscuous mode
[  734.271386][T18921] hsr_slave_1: entered promiscuous mode
[  734.286075][T18921] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  734.298823][T18921] Cannot create hsr debugfs directory
[  734.490269][T18965] netlink: 'syz.0.3703': attribute type 27 has an invalid length.
[  735.960888][ T5780] Bluetooth: hci1: command tx timeout
[  738.048414][ T5780] Bluetooth: hci1: command tx timeout
[  738.254755][T18971] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3704'.
[  738.366189][T18990] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.3711'.
[  738.629559][T18921] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  738.671665][T18921] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  738.702650][T18921] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  738.734153][T18921] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  738.858221][T19013] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3717'.
[  738.917314][T18921] 8021q: adding VLAN 0 to HW filter on device bond0
[  738.959102][T18921] 8021q: adding VLAN 0 to HW filter on device team0
[  738.983077][ T8970] bridge0: port 1(bridge_slave_0) entered blocking state
[  738.990716][ T8970] bridge0: port 1(bridge_slave_0) entered forwarding state
[  739.012081][ T8970] bridge0: port 2(bridge_slave_1) entered blocking state
[  739.019930][ T8970] bridge0: port 2(bridge_slave_1) entered forwarding state
[  739.455483][T18921] 8021q: adding VLAN 0 to HW filter on device batadv0
[  740.120839][ T5780] Bluetooth: hci1: command tx timeout
[  740.231862][T18921] veth0_vlan: entered promiscuous mode
[  740.266881][T18921] veth1_vlan: entered promiscuous mode
[  740.346049][T18921] veth0_macvtap: entered promiscuous mode
[  740.419513][T18921] veth1_macvtap: entered promiscuous mode
[  740.518920][T18921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  740.559722][T18921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  740.597629][T18921] batman_adv: batadv0: Interface activated: batadv_slave_0
[  740.633165][T18921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  740.679086][T18921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  740.724527][T18921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  740.759571][T18921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  740.788811][T18921] batman_adv: batadv0: Interface activated: batadv_slave_1
[  740.848995][T18921] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  740.878707][T18921] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  740.910681][T18921] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  740.935355][T18921] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  741.319158][ T8598] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  741.345065][ T8598] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  741.403574][ T6714] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  741.423031][T19060] netlink: 'syz.2.3729': attribute type 21 has an invalid length.
[  741.424345][ T6714] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  741.438410][T19060] netlink: 'syz.2.3729': attribute type 6 has an invalid length.
[  741.454439][T19060] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3729'.
[  741.605653][T19063] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.3728'.
[  741.763581][T19067] netlink: 'syz.0.3730': attribute type 29 has an invalid length.
[  741.825298][T19067] netlink: 'syz.0.3730': attribute type 29 has an invalid length.
[  741.851684][T19073] netlink: 'syz.0.3730': attribute type 29 has an invalid length.
[  741.883598][T19067] netlink: 'syz.0.3730': attribute type 29 has an invalid length.
[  741.998234][T19073] netlink: 'syz.0.3730': attribute type 29 has an invalid length.
[  742.031642][T19079] netlink: 'syz.0.3730': attribute type 29 has an invalid length.
[  742.121377][T19080] netlink: 'syz.0.3730': attribute type 29 has an invalid length.
[  742.508667][T19092] netlink: 'syz.4.3733': attribute type 39 has an invalid length.
[  743.356827][T19107] netlink: 4263 bytes leftover after parsing attributes in process `syz.2.3736'.
[  743.787665][T19117] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.3737'.
[  745.768801][T19120] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  745.986052][T19125] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.3741'.
[  746.001183][T19125] netlink: 6324 bytes leftover after parsing attributes in process `syz.0.3741'.
[  746.233694][T19132] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3744'.
[  746.457477][T19134] team0: Port device geneve1 added
[  747.141283][T19144] sit0: entered allmulticast mode
[  747.178910][T19149] sit0: entered promiscuous mode
[  747.451156][T19146] syzkaller0: entered promiscuous mode
[  747.456869][T19146] syzkaller0: entered allmulticast mode
[  747.578636][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  747.587136][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  750.720757][T19158] validate_nla: 4 callbacks suppressed
[  750.720776][T19158] netlink: 'syz.1.3749': attribute type 39 has an invalid length.
[  751.267414][T19190] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3763'.
[  751.285566][T19190] bridge0: port 1(bridge_slave_0) entered disabled state
[  751.331872][T19190] bridge_slave_0 (unregistering): left allmulticast mode
[  751.339242][T19190] bridge_slave_0 (unregistering): left promiscuous mode
[  751.356818][T19190] bridge0: port 1(bridge_slave_0) entered disabled state
[  751.455949][T19192] netlink: 'syz.4.3764': attribute type 21 has an invalid length.
[  751.464955][T19192] IPv6: NLM_F_CREATE should be specified when creating new route
[  751.485569][T19192] IPv6: Can't replace route, no match found
[  751.496769][T19189] dummy0: left allmulticast mode
[  751.506671][T19189] dummy0: left promiscuous mode
[  751.517684][T19189] bridge0: port 3(dummy0) entered disabled state
[  751.625698][T19193] netlink: 'syz.4.3764': attribute type 10 has an invalid length.
[  751.654031][T19193] team0: Device wg1 is of different type
[  754.432731][T19215] netlink: 'syz.2.3769': attribute type 39 has an invalid length.
[  754.681435][T19236] netlink: 'syz.0.3774': attribute type 3 has an invalid length.
[  754.689415][T19236] netlink: 'syz.0.3774': attribute type 1 has an invalid length.
[  754.698991][T19236] netlink: 198800 bytes leftover after parsing attributes in process `syz.0.3774'.
[  754.780711][T19238] netlink: 'syz.0.3774': attribute type 10 has an invalid length.
[  754.788745][T19238] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.3774'.
[  754.867208][ T5780] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4
[  755.475265][T19259] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.3783'.
[  756.062012][T19271] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3787'.
[  756.338271][T19267] netlink: 'syz.0.3785': attribute type 3 has an invalid length.
[  756.347324][T19267] netlink: 16066 bytes leftover after parsing attributes in process `syz.0.3785'.
[  756.360172][T19268] netlink: 'syz.0.3785': attribute type 3 has an invalid length.
[  756.373506][T19268] netlink: 16066 bytes leftover after parsing attributes in process `syz.0.3785'.
[  756.384651][T19276] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3785'.
[  756.416034][T19269] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3785'.
[  756.437313][T19274] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3785'.
[  756.930704][   T51] Bluetooth: hci1: command 0x0406 tx timeout
[  756.963409][T19273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  757.321326][T19321] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3800'.
[  757.360762][T19321] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  757.486584][T19324] syzkaller0: entered promiscuous mode
[  757.504144][T19324] syzkaller0: entered allmulticast mode
[  757.525604][T19325] netlink: 14546 bytes leftover after parsing attributes in process `syz.2.3801'.
[  760.267017][T19335] syzkaller0: entered promiscuous mode
[  760.286360][T19335] syzkaller0: entered allmulticast mode
[  760.299197][T19354] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3808'.
[  762.885434][T19361] netlink: 'syz.1.3818': attribute type 10 has an invalid length.
[  762.911089][T19361] team0: Device wg1 is of different type
[  763.162472][T19367] bridge_slave_1: left allmulticast mode
[  763.174182][T19367] bridge_slave_1: left promiscuous mode
[  763.201774][T19367] bridge0: port 2(bridge_slave_1) entered disabled state
[  763.257979][T19367] bridge_slave_0: left allmulticast mode
[  763.270127][T19367] bridge_slave_0: left promiscuous mode
[  763.309219][T19367] bridge0: port 1(bridge_slave_0) entered disabled state
[  763.747545][T19389] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3820'.
[  764.446672][T19413] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.3825'.
[  764.526465][T19412] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3825'.
[  764.568882][T19412] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3825'.
[  764.601366][T19413] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3825'.
[  765.046098][T19431] netlink: 'syz.1.3832': attribute type 21 has an invalid length.
[  765.072783][T19431] IPv6: NLM_F_CREATE should be specified when creating new route
[  765.168729][T19435] netlink: 38831 bytes leftover after parsing attributes in process `syz.2.3833'.
[  765.347878][T19441] netlink: 'syz.0.3835': attribute type 10 has an invalid length.
[  765.396951][T19441] team0: Device wg1 is of different type
[  766.048894][T19466] syzkaller0: entered promiscuous mode
[  766.056898][T19466] syzkaller0: entered allmulticast mode
[  766.067619][T19468] netlink: 'syz.0.3844': attribute type 21 has an invalid length.
[  766.703789][T19492] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.3850'.
[  766.727125][T19492] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes.
[  769.703917][T19508] netlink: 'syz.4.3855': attribute type 21 has an invalid length.
[  769.713482][T19508] IPv6: NLM_F_CREATE should be specified when creating new route
[  770.805013][T19533] netlink: 'syz.0.3865': attribute type 10 has an invalid length.
[  772.155543][T19562] netlink: 'syz.1.3874': attribute type 7 has an invalid length.
[  772.169768][T19562] netlink: 'syz.1.3874': attribute type 7 has an invalid length.
[  773.274894][T19593] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3883'.
[  773.319701][T19595] netlink: 'syz.1.3882': attribute type 10 has an invalid length.
[  773.337050][T19595] netlink: 181596 bytes leftover after parsing attributes in process `syz.1.3882'.
[  773.546686][T19609] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3886'.
[  773.609671][T19609] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3886'.
[  774.074797][T19587] delete_channel: no stack
[  774.190079][T19631] netlink: 'syz.1.3893': attribute type 2 has an invalid length.
[  774.199332][T19631] netlink: 'syz.1.3893': attribute type 3 has an invalid length.
[  774.209112][T19631] netlink: 'syz.1.3893': attribute type 4 has an invalid length.
[  774.228346][T19631] netlink: 198036 bytes leftover after parsing attributes in process `syz.1.3893'.
[  774.513973][T19641] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3896'.
[  775.100163][T19657] netlink: 'syz.2.3901': attribute type 5 has an invalid length.
[  775.119931][T19657] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3901'.
[  776.806753][T19676] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3906'.
[  776.816547][T19676] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  776.831568][T19670] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  779.026039][T19752] netlink: 'syz.1.3923': attribute type 1 has an invalid length.
[  780.201202][T19790] mac80211_hwsim hwsim47 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  780.301965][T19803] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.3934'.
[  781.249048][T19841] syzkaller0: entered promiscuous mode
[  781.270507][T19841] syzkaller0: entered allmulticast mode
[  782.685274][T19865] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  782.724540][T19865] netlink: 'syz.0.3951': attribute type 9 has an invalid length.
[  782.739305][T19865] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3951'.
[  782.901112][T19870] netlink: 'syz.1.3953': attribute type 10 has an invalid length.
[  782.926924][T19870] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3953'.
[  782.956791][T19870] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  783.099720][T19872] netlink: 'syz.0.3951': attribute type 9 has an invalid length.
[  783.150824][T19872] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3951'.
[  783.389690][T19880] netlink: 'syz.1.3956': attribute type 3 has an invalid length.
[  783.426409][T19880] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.3956'.
[  783.652050][T19891] netlink: 'syz.4.3959': attribute type 1 has an invalid length.
[  783.680773][T19891] netlink: 146340 bytes leftover after parsing attributes in process `syz.4.3959'.
[  783.982330][T19909] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3963'.
[  784.002579][T19909] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3963'.
[  784.024509][T19909] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3963'.
[  784.141437][T19915] netlink: 'syz.0.3965': attribute type 33 has an invalid length.
[  784.172102][T19915] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3965'.
[  784.183597][T19915] `: renamed from ip6tnl0 (while UP)
[  784.214653][T17266] wlan1: Trigger new scan to find an IBSS to join
[  784.229728][T19915] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check.
[  784.258688][T19919] netlink: 'syz.4.3966': attribute type 10 has an invalid length.
[  784.309496][T19919] hsr0: entered promiscuous mode
[  784.331308][T19919] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  784.357438][T19919] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  784.390302][T19919] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  784.424230][T19919] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  784.838342][T19934] netlink: 'syz.4.3972': attribute type 2 has an invalid length.
[  785.977551][T19969] sctp: [Deprecated]: syz.0.3982 (pid 19969) Use of int in max_burst socket option deprecated.
[  785.977551][T19969] Use struct sctp_assoc_value instead
[  786.175956][T19962] __nla_validate_parse: 1 callbacks suppressed
[  786.175977][T19962] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.3979'.
[  786.480929][T19962] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.3979'.
[  786.611514][T19984] netlink: 'syz.2.3984': attribute type 21 has an invalid length.
[  786.667893][T19984] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3984'.
[  786.778756][T19984] virt_wifi0: entered promiscuous mode
[  786.850063][T19984] virt_wifi0: entered allmulticast mode
[  787.241288][T17266] wlan1: Trigger new scan to find an IBSS to join
[  788.189444][T17246] wlan1: Creating new IBSS network, BSSID d6:fe:61:77:0e:96
[  788.206915][T20020] netlink: 'syz.1.3995': attribute type 10 has an invalid length.
[  789.062290][T20024] netlink: 'syz.2.3994': attribute type 10 has an invalid length.
[  789.127948][T20024] 8021q: adding VLAN 0 to HW filter on device bond0
[  789.155124][T20024] team0: Port device bond0 added
[  789.175009][T20023] netlink: 'syz.1.3995': attribute type 21 has an invalid length.
[  789.193056][T20023] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3995'.
[  789.207859][T20023] netlink: 'syz.1.3995': attribute type 4 has an invalid length.
[  789.803331][T20048] netlink: 'syz.4.4004': attribute type 4 has an invalid length.
[  790.077055][T20060] netlink: 168 bytes leftover after parsing attributes in process `syz.4.4007'.
[  790.340148][T20077] mac80211_hwsim hwsim36 ..ãc¤±: renamed from wlan1 (while UP)
[  791.044775][T20080] syz.4.4013[20080] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  791.045022][T20080] syz.4.4013[20080] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  791.074310][T20084] netlink: 'syz.0.4014': attribute type 21 has an invalid length.
[  791.095353][T20084] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4014'.
[  791.217369][T20087] netlink: 'syz.1.4015': attribute type 3 has an invalid length.
[  791.229967][T20087] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.4015'.
[  791.844750][T20130] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4026'.
[  791.854539][T20130] netlink: 6 bytes leftover after parsing attributes in process `syz.2.4026'.
[  792.503617][T20148] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4033'.
[  792.654829][T20150] : renamed from bond0 (while UP)
[  793.876288][T20170] FAULT_INJECTION: forcing a failure.
[  793.876288][T20170] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  793.905586][T20170] CPU: 0 PID: 20170 Comm: syz.2.4041 Not tainted syzkaller #0
[  793.913143][T20170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  793.923600][T20170] Call Trace:
[  793.926920][T20170]  <TASK>
[  793.929986][T20170]  dump_stack_lvl+0x18c/0x250
[  793.934833][T20170]  ? show_regs_print_info+0x20/0x20
[  793.940176][T20170]  ? load_image+0x420/0x420
[  793.944748][T20170]  ? __might_fault+0xaa/0x120
[  793.949588][T20170]  ? __lock_acquire+0x7eb0/0x7eb0
[  793.954701][T20170]  should_fail_ex+0x394/0x4c0
[  793.959472][T20170]  _copy_from_user+0x2f/0xe0
[  793.964228][T20170]  __sys_bpf+0x23e/0x890
[  793.968626][T20170]  ? bpf_link_show_fdinfo+0x560/0x560
[  793.974292][T20170]  ? lock_chain_count+0x20/0x20
[  793.979240][T20170]  __x64_sys_bpf+0x7c/0x90
[  793.983820][T20170]  do_syscall_64+0x55/0xb0
[  793.988393][T20170]  ? clear_bhb_loop+0x40/0x90
[  793.993588][T20170]  ? clear_bhb_loop+0x40/0x90
[  793.998427][T20170]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  794.004821][T20170] RIP: 0033:0x7fe8dff9e199
[  794.009294][T20170] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  794.029330][T20170] RSP: 002b:00007fe8e0e55028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  794.037796][T20170] RAX: ffffffffffffffda RBX: 00007fe8e0225fa0 RCX: 00007fe8dff9e199
[  794.045795][T20170] RDX: 0000000000000094 RSI: 0000200000000ac0 RDI: 0000000000000005
[  794.053803][T20170] RBP: 00007fe8e0e55090 R08: 0000000000000000 R09: 0000000000000000
[  794.061976][T20170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  794.070158][T20170] R13: 00007fe8e0226038 R14: 00007fe8e0225fa0 R15: 00007ffff886f8c8
[  794.078283][T20170]  </TASK>
[  794.670351][T20185] netlink: 'syz.4.4046': attribute type 21 has an invalid length.
[  794.694089][T20185] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4046'.
[  794.717588][T20188] tun0: tun_chr_ioctl cmd 1074025675
[  794.730885][T20188] tun0: persist enabled
[  794.739954][T20192] tun0: tun_chr_ioctl cmd 1074025675
[  794.761048][T20192] tun0: persist disabled
[  794.954800][T20198] netlink: 'syz.4.4048': attribute type 10 has an invalid length.
[  794.988539][T20198] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4048'.
[  795.035902][T20198] caif0: entered promiscuous mode
[  795.054872][T20198] caif0: entered allmulticast mode
[  795.069243][T20198] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  795.420287][T20210] netlink: 'syz.1.4053': attribute type 10 has an invalid length.
[  795.432091][T20210] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4053'.
[  795.472086][T20210] caif0: entered promiscuous mode
[  795.484192][T20213] FAULT_INJECTION: forcing a failure.
[  795.484192][T20213] name failslab, interval 1, probability 0, space 0, times 0
[  795.510750][T20210] caif0: entered allmulticast mode
[  795.514004][T20213] CPU: 1 PID: 20213 Comm: syz.0.4054 Not tainted syzkaller #0
[  795.523534][T20213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  795.534135][T20213] Call Trace:
[  795.537680][T20213]  <TASK>
[  795.540634][T20213]  dump_stack_lvl+0x18c/0x250
[  795.545330][T20213]  ? show_regs_print_info+0x20/0x20
[  795.550646][T20213]  ? load_image+0x420/0x420
[  795.555151][T20213]  ? __might_sleep+0xe0/0xe0
[  795.559753][T20213]  ? __lock_acquire+0x7eb0/0x7eb0
[  795.564786][T20213]  ? mark_lock+0x94/0x320
[  795.569473][T20213]  should_fail_ex+0x394/0x4c0
[  795.574169][T20213]  should_failslab+0x9/0x20
[  795.578677][T20213]  slab_pre_alloc_hook+0x59/0x300
[  795.583705][T20213]  ? __get_vm_area_node+0x125/0x370
[  795.589006][T20213]  __kmem_cache_alloc_node+0x53/0x250
[  795.594399][T20213]  ? __get_vm_area_node+0x125/0x370
[  795.599605][T20213]  kmalloc_node_trace+0x26/0xe0
[  795.604641][T20213]  __get_vm_area_node+0x125/0x370
[  795.609707][T20213]  __vmalloc_node_range+0x36f/0x1320
[  795.615015][T20213]  ? bpf_prog_alloc_no_stats+0x46/0x430
[  795.620570][T20213]  ? mark_lock+0x94/0x320
[  795.624936][T20213]  ? __lock_acquire+0x1431/0x7eb0
[  795.630069][T20213]  ? aa_get_newest_label+0xfd/0x5c0
[  795.635463][T20213]  ? free_vm_area+0x50/0x50
[  795.639973][T20213]  ? end_current_label_crit_section+0x170/0x170
[  795.646308][T20213]  ? verify_lock_unused+0x140/0x140
[  795.651515][T20213]  ? bpf_prog_alloc_no_stats+0x46/0x430
[  795.657153][T20213]  __vmalloc+0x7a/0x90
[  795.661231][T20213]  ? bpf_prog_alloc_no_stats+0x46/0x430
[  795.666805][T20213]  bpf_prog_alloc_no_stats+0x46/0x430
[  795.672183][T20213]  bpf_prog_alloc+0x3d/0x1a0
[  795.677036][T20213]  bpf_prog_load+0x6b2/0x1610
[  795.682102][T20213]  ? map_freeze+0x420/0x420
[  795.686616][T20213]  ? __might_fault+0xaa/0x120
[  795.691302][T20213]  ? __lock_acquire+0x7eb0/0x7eb0
[  795.696534][T20213]  ? file_end_write+0x159/0x250
[  795.701392][T20213]  ? __might_fault+0xaa/0x120
[  795.706328][T20213]  ? __might_fault+0xc6/0x120
[  795.711005][T20213]  ? __might_fault+0xaa/0x120
[  795.715680][T20213]  ? bpf_lsm_bpf+0x9/0x10
[  795.720014][T20213]  ? security_bpf+0x7e/0xa0
[  795.724522][T20213]  __sys_bpf+0x5ba/0x890
[  795.728878][T20213]  ? bpf_link_show_fdinfo+0x560/0x560
[  795.734529][T20213]  ? lock_chain_count+0x20/0x20
[  795.739443][T20213]  __x64_sys_bpf+0x7c/0x90
[  795.743957][T20213]  do_syscall_64+0x55/0xb0
[  795.748588][T20213]  ? clear_bhb_loop+0x40/0x90
[  795.753263][T20213]  ? clear_bhb_loop+0x40/0x90
[  795.758043][T20213]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  795.763940][T20213] RIP: 0033:0x7f3afc39e199
[  795.768353][T20213] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  795.788052][T20213] RSP: 002b:00007f3afd184028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  795.796731][T20213] RAX: ffffffffffffffda RBX: 00007f3afc625fa0 RCX: 00007f3afc39e199
[  795.804714][T20213] RDX: 0000000000000094 RSI: 0000200000000ac0 RDI: 0000000000000005
[  795.812685][T20213] RBP: 00007f3afd184090 R08: 0000000000000000 R09: 0000000000000000
[  795.820926][T20213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  795.828899][T20213] R13: 00007f3afc626038 R14: 00007f3afc625fa0 R15: 00007ffdcfaf07b8
[  795.836899][T20213]  </TASK>
[  795.840834][T20210] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  795.861183][T20213] syz.0.4054: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz0,mems_allowed=0-1
[  795.892548][T20213] CPU: 0 PID: 20213 Comm: syz.0.4054 Not tainted syzkaller #0
[  795.900301][T20213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  795.910558][T20213] Call Trace:
[  795.913855][T20213]  <TASK>
[  795.916910][T20213]  dump_stack_lvl+0x18c/0x250
[  795.921677][T20213]  ? show_regs_print_info+0x20/0x20
[  795.927526][T20213]  ? load_image+0x420/0x420
[  795.932165][T20213]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  795.938622][T20213]  ? cpuset_print_current_mems_allowed+0x2e7/0x360
[  795.945187][T20213]  warn_alloc+0x246/0x340
[  795.949573][T20213]  ? __get_vm_area_node+0x125/0x370
[  795.954905][T20213]  ? zone_watermark_ok_safe+0x230/0x230
[  795.960665][T20213]  ? rcu_is_watching+0x15/0xb0
[  795.965573][T20213]  ? __get_vm_area_node+0x356/0x370
[  795.970859][T20213]  __vmalloc_node_range+0x394/0x1320
[  795.976241][T20213]  ? mark_lock+0x94/0x320
[  795.980618][T20213]  ? __lock_acquire+0x1431/0x7eb0
[  795.985786][T20213]  ? aa_get_newest_label+0xfd/0x5c0
[  795.991279][T20213]  ? free_vm_area+0x50/0x50
[  795.996082][T20213]  ? end_current_label_crit_section+0x170/0x170
[  796.002537][T20213]  ? verify_lock_unused+0x140/0x140
[  796.007842][T20213]  ? bpf_prog_alloc_no_stats+0x46/0x430
[  796.013568][T20213]  __vmalloc+0x7a/0x90
[  796.017753][T20213]  ? bpf_prog_alloc_no_stats+0x46/0x430
[  796.023487][T20213]  bpf_prog_alloc_no_stats+0x46/0x430
[  796.028967][T20213]  bpf_prog_alloc+0x3d/0x1a0
[  796.033584][T20213]  bpf_prog_load+0x6b2/0x1610
[  796.038279][T20213]  ? map_freeze+0x420/0x420
[  796.042817][T20213]  ? __might_fault+0xaa/0x120
[  796.047497][T20213]  ? __lock_acquire+0x7eb0/0x7eb0
[  796.052531][T20213]  ? file_end_write+0x159/0x250
[  796.057605][T20213]  ? __might_fault+0xaa/0x120
[  796.062373][T20213]  ? __might_fault+0xc6/0x120
[  796.067047][T20213]  ? __might_fault+0xaa/0x120
[  796.071755][T20213]  ? bpf_lsm_bpf+0x9/0x10
[  796.076117][T20213]  ? security_bpf+0x7e/0xa0
[  796.080628][T20213]  __sys_bpf+0x5ba/0x890
[  796.085176][T20213]  ? bpf_link_show_fdinfo+0x560/0x560
[  796.090676][T20213]  ? lock_chain_count+0x20/0x20
[  796.095724][T20213]  __x64_sys_bpf+0x7c/0x90
[  796.100417][T20213]  do_syscall_64+0x55/0xb0
[  796.104937][T20213]  ? clear_bhb_loop+0x40/0x90
[  796.109719][T20213]  ? clear_bhb_loop+0x40/0x90
[  796.114533][T20213]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  796.120438][T20213] RIP: 0033:0x7f3afc39e199
[  796.124940][T20213] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  796.145271][T20213] RSP: 002b:00007f3afd184028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  796.153798][T20213] RAX: ffffffffffffffda RBX: 00007f3afc625fa0 RCX: 00007f3afc39e199
[  796.161780][T20213] RDX: 0000000000000094 RSI: 0000200000000ac0 RDI: 0000000000000005
[  796.170132][T20213] RBP: 00007f3afd184090 R08: 0000000000000000 R09: 0000000000000000
[  796.178370][T20213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  796.186371][T20213] R13: 00007f3afc626038 R14: 00007f3afc625fa0 R15: 00007ffdcfaf07b8
[  796.194465][T20213]  </TASK>
[  796.237383][T20213] Mem-Info:
[  796.247043][T20213] active_anon:19781 inactive_anon:0 isolated_anon:0
[  796.247043][T20213]  active_file:18588 inactive_file:40240 isolated_file:0
[  796.247043][T20213]  unevictable:768 dirty:106 writeback:0
[  796.247043][T20213]  slab_reclaimable:11406 slab_unreclaimable:101859
[  796.247043][T20213]  mapped:43363 shmem:10188 pagetables:593
[  796.247043][T20213]  sec_pagetables:0 bounce:0
[  796.247043][T20213]  kernel_misc_reclaimable:0
[  796.247043][T20213]  free:1297926 free_pcp:8993 free_cma:0
[  796.351650][T20213] Node 0 active_anon:83124kB inactive_anon:0kB active_file:74352kB inactive_file:160752kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:177452kB dirty:424kB writeback:0kB shmem:43216kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13200kB pagetables:2472kB sec_pagetables:0kB all_unreclaimable? no
[  796.405999][T20213] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  796.496709][T20213] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  796.572832][T20213] lowmem_reserve[]: 0 2521 2522 2522 2522
[  796.578788][T20213] Node 0 DMA32 free:1279876kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:86284kB inactive_anon:0kB active_file:74352kB inactive_file:159920kB unevictable:1536kB writepending:424kB present:3129332kB managed:2586780kB mlocked:0kB bounce:0kB free_pcp:14704kB local_pcp:12020kB free_cma:0kB
[  796.635595][T20213] lowmem_reserve[]: 0 0 0 0 0
[  796.640443][T20213] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  796.694040][T20213] lowmem_reserve[]: 0 0 0 0 0
[  796.702317][T20213] Node 1 Normal free:3888940kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:21248kB local_pcp:10972kB free_cma:0kB
[  796.749790][T20213] lowmem_reserve[]: 0 0 0 0 0
[  796.759838][T20213] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  796.803900][T20213] Node 0 DMA32: 84*4kB (U) 173*8kB (UM) 41*16kB (UE) 730*32kB (UM) 547*64kB (UM) 661*128kB (UME) 177*256kB (UME) 27*512kB (UM) 12*1024kB (UME) 13*2048kB (UME) 252*4096kB (M) = 1275592kB
[  796.848620][T20213] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  796.885418][T20213] Node 1 Normal: 173*4kB (UME) 63*8kB (UME) 40*16kB (UME) 56*32kB (UME) 18*64kB (UME) 5*128kB (U) 2*256kB (UE) 2*512kB (UM) 1*1024kB (U) 1*2048kB (E) 947*4096kB (M) = 3888940kB
[  796.933728][T20213] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  796.952889][T20213] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  796.976319][T20213] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  796.999797][T20213] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  797.021576][T20213] 72416 total pagecache pages
[  797.035243][T20213] 0 pages in swap cache
[  797.045513][T20213] Free swap  = 124996kB
[  797.056614][T20213] Total swap = 124996kB
[  797.069826][T20213] 2097051 pages RAM
[  797.078520][T20213] 0 pages HighMem/MovableOnly
[  797.090166][T20213] 416970 pages reserved
[  797.099259][T20213] 0 pages cma reserved
[  797.279137][T20236] netlink: 'syz.4.4062': attribute type 27 has an invalid length.
[  797.331326][T20236] netlink: 2418 bytes leftover after parsing attributes in process `syz.4.4062'.
[  797.576082][T20252] syzkaller0: entered promiscuous mode
[  797.601618][T20252] syzkaller0: entered allmulticast mode
[  797.623770][T20247] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 65487
[  797.686852][T20255] netlink: 'syz.2.4067': attribute type 1 has an invalid length.
[  797.706120][T20255] netlink: 'syz.2.4067': attribute type 3 has an invalid length.
[  797.730001][T20255] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4067'.
[  797.817758][T20254] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4065'.
[  798.071579][T20258] netlink: 'syz.2.4067': attribute type 10 has an invalid length.
[  798.084306][T20258] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4067'.
[  798.718844][T20273] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.4073'.
[  798.754863][T20273] netlink: 'syz.2.4073': attribute type 4 has an invalid length.
[  798.781192][T20273] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4073'.
[  798.815272][T20273] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  800.028190][    C1] 
[  800.028199][    C1] ================================
[  800.028204][    C1] WARNING: inconsistent lock state
[  800.028223][    C1] syzkaller #0 Not tainted
[  800.028231][    C1] --------------------------------
[  800.028235][    C1] inconsistent {INITIAL USE} -> {IN-NMI} usage.
[  800.028243][    C1] syz.2.4077/20296 [HC1[1]:SC0[0]:HE0:SE1] takes:
[  800.028262][    C1] ffff88805ad2b6f8 (&htab->lockdep_key#2){....}-{2:2}, at: htab_lock_bucket+0x17d/0x300
[  800.028313][    C1] {INITIAL USE} state was registered at:
[  800.028319][    C1]   lock_acquire+0x19e/0x420
[  800.028336][    C1]   _raw_spin_lock+0x2e/0x40
[  800.028357][    C1]   htab_lock_bucket+0x17d/0x300
[  800.028374][    C1]   htab_map_delete_elem+0x19f/0x640
[  800.028389][    C1]   bpf_prog_a8e63e838209a5e2+0x49/0x4b
[  800.028409][    C1]   bpf_overflow_handler+0x1fc/0x510
[  800.028430][    C1]   __perf_event_overflow+0x461/0x660
[  800.028446][    C1]   perf_swevent_event+0x319/0x570
[  800.028462][    C1]   perf_bp_event+0x319/0x430
[  800.028477][    C1]   hw_breakpoint_exceptions_notify+0x23e/0x670
[  800.028495][    C1]   notifier_call_chain+0x18f/0x380
[  800.028512][    C1]   atomic_notifier_call_chain+0xda/0x180
[  800.028529][    C1]   notify_die+0x145/0x1a0
[  800.028546][    C1]   notify_debug+0x2e/0x50
[  800.028587][    C1]   noist_exc_debug+0x77/0x120
[  800.028599][    C1]   asm_exc_debug+0x33/0x40
[  800.028623][    C1] irq event stamp: 3732
[  800.028628][    C1] hardirqs last  enabled at (3731): [<ffffffff81c4eb72>] pcpu_memcg_post_alloc_hook+0x282/0x3f0
[  800.028653][    C1] hardirqs last disabled at (3732): [<ffffffff8a927943>] exc_debug+0x73/0x140
[  800.028671][    C1] softirqs last  enabled at (3656): [<ffffffff81977717>] bpf_map_alloc_id+0x87/0xd0
[  800.028691][    C1] softirqs last disabled at (3654): [<ffffffff819776b1>] bpf_map_alloc_id+0x21/0xd0
[  800.028712][    C1] 
[  800.028712][    C1] other info that might help us debug this:
[  800.028715][    C1]  Possible unsafe locking scenario:
[  800.028715][    C1] 
[  800.028718][    C1]        CPU0
[  800.028721][    C1]        ----
[  800.028723][    C1]   lock(&htab->lockdep_key#2);
[  800.028735][    C1]   <Interrupt>
[  800.028737][    C1]     lock(&htab->lockdep_key#2);
[  800.028750][    C1] 
[  800.028750][    C1]  *** DEADLOCK ***
[  800.028750][    C1] 
[  800.028753][    C1] no locks held by syz.2.4077/20296.
[  800.028760][    C1] 
[  800.028760][    C1] stack backtrace:
[  800.028772][    C1] CPU: 1 PID: 20296 Comm: syz.2.4077 Not tainted syzkaller #0
[  800.028786][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  800.028794][    C1] Call Trace:
[  800.028799][    C1]  <#DB>
[  800.028860][    C1]  dump_stack_lvl+0x18c/0x250
[  800.028888][    C1]  ? show_regs_print_info+0x20/0x20
[  800.028918][    C1]  ? print_usage_bug+0x43d/0x6a0
[  800.028937][    C1]  ? verify_lock_unused+0x15/0x140
[  800.028958][    C1]  lock_acquire+0x2c2/0x420
[  800.028981][    C1]  ? htab_lock_bucket+0x17d/0x300
[  800.029003][    C1]  ? read_lock_is_recursive+0x20/0x20
[  800.029039][    C1]  _raw_spin_lock+0x2e/0x40
[  800.029058][    C1]  ? htab_lock_bucket+0x17d/0x300
[  800.029075][    C1]  htab_lock_bucket+0x17d/0x300
[  800.029098][    C1]  ? htab_lru_map_delete_node+0x770/0x770
[  800.029123][    C1]  ? pcpu_freelist_pop+0x12a/0x190
[  800.029147][    C1]  ? htab_map_hash+0x1e8/0x330
[  800.029169][    C1]  htab_map_delete_elem+0x19f/0x640
[  800.029196][    C1]  ? htab_map_update_elem+0x1270/0x1270
[  800.029213][    C1]  ? __bpf_get_stackid+0x772/0x900
[  800.029248][    C1]  bpf_prog_a8e63e838209a5e2+0x49/0x4b
[  800.029268][    C1]  bpf_overflow_handler+0x1fc/0x510
[  800.029297][    C1]  ? bpf_overflow_handler+0xde/0x510
[  800.029318][    C1]  ? tp_perf_event_destroy+0x20/0x20
[  800.029353][    C1]  ? __perf_event_account_interrupt+0x187/0x280
[  800.029376][    C1]  __perf_event_overflow+0x461/0x660
[  800.029405][    C1]  perf_swevent_event+0x319/0x570
[  800.029429][    C1]  ? perf_tp_event+0x1550/0x1550
[  800.029450][    C1]  ? perf_trace_lock+0xfc/0x3b0
[  800.029478][    C1]  perf_bp_event+0x319/0x430
[  800.029506][    C1]  ? perf_event_free_bpf_prog+0x120/0x120
[  800.029570][    C1]  ? lock_acquire+0x2c2/0x420
[  800.029601][    C1]  hw_breakpoint_exceptions_notify+0x23e/0x670
[  800.029629][    C1]  notifier_call_chain+0x18f/0x380
[  800.029654][    C1]  ? atomic_notifier_call_chain+0x26/0x180
[  800.029677][    C1]  atomic_notifier_call_chain+0xda/0x180
[  800.029701][    C1]  notify_die+0x145/0x1a0
[  800.029726][    C1]  ? srcu_init_notifier_head+0x90/0x90
[  800.029757][    C1]  ? rcu_is_watching+0x15/0xb0
[  800.029789][    C1]  notify_debug+0x2e/0x50
[  800.029806][    C1]  exc_debug+0xde/0x140
[  800.029828][    C1]  asm_exc_debug+0x1e/0x40
[  800.029850][    C1] RIP: 0010:rep_movs_alternative+0x4a/0x90
[  800.029868][    C1] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 <f3> a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01
[  800.029881][    C1] RSP: 0018:ffffc90011ab7b48 EFLAGS: 00050206
[  800.029896][    C1] RAX: ffffffff84348a01 RBX: 0000000000000068 RCX: 0000000000000018
[  800.029908][    C1] RDX: 0000000000000001 RSI: 0000200000000310 RDI: ffffc90003671098
[  800.029919][    C1] RBP: 0000000000000000 R08: ffffc900036710af R09: 1ffff920006ce215
[  800.029930][    C1] R10: dffffc0000000000 R11: fffff520006ce216 R12: 0000200000000328
[  800.029940][    C1] R13: dffffc0000000000 R14: ffffc90003671048 R15: 00002000000002c0
[  800.029962][    C1]  ? rcuref_put_slowpath+0xc1/0x150
[  800.029994][    C1]  </#DB>
[  800.029999][    C1]  <TASK>
[  800.030004][    C1]  _copy_from_user+0x8b/0xe0
[  800.030025][    C1]  copy_from_bpfptr+0x67/0x80
[  800.030046][    C1]  bpf_prog_load+0xa3a/0x1610
[  800.030082][    C1]  ? map_freeze+0x420/0x420
[  800.030124][    C1]  ? __might_fault+0xaa/0x120
[  800.030152][    C1]  ? __might_fault+0xc6/0x120
[  800.030167][    C1]  ? __might_fault+0xaa/0x120
[  800.030186][    C1]  ? bpf_lsm_bpf+0x9/0x10
[  800.030205][    C1]  ? security_bpf+0x7e/0xa0
[  800.030230][    C1]  __sys_bpf+0x5ba/0x890
[  800.030252][    C1]  ? bpf_link_show_fdinfo+0x560/0x560
[  800.030293][    C1]  ? lock_chain_count+0x20/0x20
[  800.030325][    C1]  __x64_sys_bpf+0x7c/0x90
[  800.030346][    C1]  do_syscall_64+0x55/0xb0
[  800.030367][    C1]  ? clear_bhb_loop+0x40/0x90
[  800.030381][    C1]  ? clear_bhb_loop+0x40/0x90
[  800.030399][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  800.030421][    C1] RIP: 0033:0x7fe8dff9e199
[  800.030435][    C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  800.030448][    C1] RSP: 002b:00007fe8e0e55028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  800.030464][    C1] RAX: ffffffffffffffda RBX: 00007fe8e0225fa0 RCX: 00007fe8dff9e199
[  800.030475][    C1] RDX: 0000000000000090 RSI: 00002000000000c0 RDI: 0000000000000005
[  800.030486][    C1] RBP: 00007fe8e00358e0 R08: 0000000000000000 R09: 0000000000000000
[  800.030496][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  800.030505][    C1] R13: 00007fe8e0226038 R14: 00007fe8e0225fa0 R15: 00007ffff886f8c8
[  800.030536][    C1]  </TASK>
[  800.054897][T20300] netlink: 'syz.1.4079': attribute type 3 has an invalid length.
[  800.743885][T20300] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4079'.
[  809.003885][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  809.012920][ T1293] ieee802154 phy1 wpan1: encryption failed: -22