last executing test programs:

12.412931914s ago: executing program 0 (id=4652):
r0 = socket$kcm(0x2a, 0x2, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112})
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000001c0)={0x2, &(0x7f0000000080)=[{0x30, 0x80, 0x5, 0xfffff034}, {0x6, 0x2, 0x4d, 0x8cf}]})
sendmsg$kcm(r0, &(0x7f0000001f80)={0x0, 0x0, 0x0}, 0x0)

9.092817176s ago: executing program 0 (id=4657):
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b15, 0x0)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="1b00000019007f089ea6690ca4dc04f11c", 0x11}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xdb33, 0x1}, 0x112001, 0x40000000000008, 0x0, 0x0, 0x10003, 0x0, 0x7}, 0x0, 0x3, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x4, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x23d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x80044944, 0x0)
socket$kcm(0xa, 0x5, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xffff0000, 0xf0, 0xe200, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x3}, 0x2b, 0x0, 0x5, 0x0, 0x4000004, 0x0, 0xffff}, 0x0, 0xffffffffbfffffff, r0, 0x1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB='7'], 0x0}, 0x90)
socket$kcm(0x11, 0x200000000000002, 0x300)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close(r3)
socket$kcm(0x2, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})

8.377175825s ago: executing program 3 (id=4671):
r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0}, 0x282, 0x0, 0x800, 0x0, 0x5, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4713}, 0x0, 0x10, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x795, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x2, 0xffffffffffffffff, 0x8)
ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x8000000000000001)
socket$kcm(0x10, 0x2, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r3 = socket$kcm(0x2, 0x2, 0x73)
sendmsg$inet(r3, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000340)='+', 0x34000}], 0x1}, 0x900000000000000)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB='+\x00\x00@\x00'], 0x5)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9)
r5 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f0000000c40), 0x12)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0xffffffcf, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0)
syz_clone(0x5001008, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)

8.206109336s ago: executing program 2 (id=4662):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
socket$kcm(0xa, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="b4050000200080066110000000000000c6000000000000009500d800000000009f33ef60916e55893f1eeb0b2ae13d922e6235592ce847e2566c43d72918a897323fd0723043c47c896ce0bce66a245ad9d6817fd98cd824498949714ffaac8a6f77ef0000ca5d82054d54d53cd2b6db714e75d9bdae214fa68a0557eb2c5ca683a4b6fcfcff0bffffffffffd47042eaebfa6fa26fa7a347c7faa8e700458c60897d4a6148a1c11428427c40de60beacf871ab5c2ff88a02084e5b5271e45f00003826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632f7a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffabe90ac5d08dd9d4e0359c41cf3626e1230bc1cd4c02c460ceb44276e9bd94d1c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd00000000000fbf940e6652d357474ed5f816f66ac3027460ae66317f83cdd7a7eb2a7003d1a6cf5478533584961c329fcf5a43e05c92bfef0dcd28000000003f2915a3039c9a78f63b8ec7e60a0000fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc5117c024185a062acb6b8eec31c21b3af8b9eedb4660ed2deb7acf2a33a376a5cb7d4266d5b0be14488d14b473502486ad8dd600000000000000000000c7766ea7c581782c0d90f42a85303835fc291c25d29e6bead5d7360f2e1929d7736ebc8558c4506407d3046022bdf25485bd5442169e9b4c1278343581b7a06f65e8ea6b042c4fd08381e5000000000000006398d6480000001a723b91030000006480304c66b217aea0156ce9eef911fe5b7370f79987303ecb3aabc53c60014a0101ab766754f596b41da9534d12b8306a1b36cf3b03f0d790879f523eabfbee83d8bd472ef69660cf6ec897106c51e54a17497f384c4956b41f3843e7c878b1e11316d8ddae1c6c3b85aaf7a9fcaf8f5d6186c42542d68ba72682c938d3c0a2e6e10eed71b1d31c9f300b41745329bf34495c63e43fb896e4903fb0fae54a8f0fe3b48a5b29d279070647e65097c8ecf32a15080000000000000001007ba4a70a084bd994ac5e00000000000000000000000000351a30cd97f83d72631d0fe92efa974a53f4dc1eb9a86df632a6d463688123f64d42a919bcfc44a90ffd680200000091f842a91c977f6075d07e39e669b0713af0498a99bf5261cb3269d499a5202d7a08b33ade7b38829b9bd39619688d5e9af22170ef83e5b92cbb32b655c45de1c154aad81bf64351668a3f76d5afa958aff76249e0ffdf8e45155536a1a44bfcbfbfd232af000052f9002a"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000d00)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="05"], 0x10)
close(r1)
socket$kcm(0x2, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000004c0)=r1}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r3}, &(0x7f00000002c0), &(0x7f00000003c0)=r0}, 0x20) (fail_nth: 7)

7.91293797s ago: executing program 2 (id=4663):
socket$kcm(0xa, 0x922000000003, 0x11)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d800000058008104", 0x8}], 0x1}, 0x0)
r0 = socket$kcm(0xa, 0x922000000003, 0x11)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x14, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x100)
r1 = socket$kcm(0x10, 0x2, 0x4)
recvmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x86bf2056334f3ae6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0xa, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x0, 0x8, 0x0, 0x7}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x3, 0x66, &(0x7f00000002c0)=""/102, 0x41100, 0x64, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x5, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000640)=[0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000700)=[{0x5, 0x1, 0x10, 0x6}, {0x3, 0x1, 0x7}, {0x5, 0x1, 0x10, 0x2}, {0x0, 0x2, 0xd, 0x2}], 0x10, 0x8001}, 0x94)
r2 = socket$kcm(0xa, 0x1, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340), 0x6}, 0x10c002, 0xac5d, 0x0, 0xc, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000880)={r3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff484f}, 0x50)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r4, 0x58, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r5=>0x0}}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000002000000040000000100000000000000", @ANYRES32=r4, @ANYBLOB='\x00'/20, @ANYRES32=r5, @ANYBLOB="0000000000d3893699708f671a640400"/28], 0x50)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="120000000c0000000400", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6, <r7=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r7, &(0x7f0000000500), &(0x7f0000000400)=""/198}, 0x20)
sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000000001000000000000", 0x20}], 0x1}, 0x40000)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x541b, &(0x7f0000000240))
sendmsg(r2, &(0x7f0000000540)={&(0x7f0000000080)=@nfc_llcp={0x27, 0x0, 0x0, 0x3, 0x43, 0xca, "e9d11e0f884bf9d1dd58dee5fc3bc76fcdf6c43cebbbff25a7348ef52b41ff545c75a909a774324d6f6b9759059b44cf991d641e9c3fba4b2f8882026d8df9", 0x35}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000380)="86d16605c6e9816033995e1b578d25978ea5ed19fb8d374dbf3c694c86ad9b67e3e44e10ff1b290fff1f9c722e85ee83f1c125d6ca40dc5feff0a93e4cd029f62acfbc2deea2dcc4f0a58ec5d33d8b85648bff7e649ada2b9bbf781171391b9cfb952b16f26649af07d02e76936f9a5db4e1fe3587f199787ae76057daada8b4ed5c4b0752821fabc01a256fab641d86665bb811f92455e48fa3a4a290419ba51005cfad18604720cd03a3ae5a7493237f2822cea1a2f30a", 0xb8}, {&(0x7f0000000900)="4f4e92f1a995c5f52285bec97297e31ae1b1b9c5a550b4a7cc4d09695336c4b482320ea7f44e9d9aa909ecbec8a3c377695430ca62ee63806092baee8f76dddaddf206ad014f51b9cc163d35b0c2ff2f0317b2571b0b8c5c85dca26b896f245139260f48f97322722adde081597314cd901d0aab7087a6a9f794637b22862808b46d60b4c0478e08f255dea8b3eab3616d2d1808d55b13a897418e907eeffede1b", 0xa1}, {&(0x7f0000001980)}], 0x3, &(0x7f0000002980)=ANY=[@ANYBLOB="78000000000000000201000000000000ee5738b164fd1b55c756981e1a45e72734acc44ebdad0089b3eaeafb12ba5799763ca2a0f37c407d7d1bdbd598d6a18627b703ae4dbce114c3b1948671ef0a3dbbea35c1de445609e634f753cc26177fb83ee729d977835b79d50b242d90c0d426b54ee400000000c8000000000000001201000000010000606a6b2ba379f65795735383c6349e0d853060e41c38532024021011982f269d2d1378f21e430e950583b0bf8cf559a883a85d07baa1232c1645855019858c40df108fe0075e8b5bca0d08cfca831bbecf256a8d9798414da4b87fd4431d087d38ae95e4761ad825963de54314157cff7f002241112cc2dbed0c910a462e2f966e755767ea3f95d2b689e36b00bd39588decf77babf28e2cd6d541b6caaa12b6e0f4e88423ab673afa84323471b6ec4a77437993f3150c0010100000000000001201000000040000e3a96dcfb662007c4ea03adc21489da3b98c772f938c477939fa1667f096623f138d33400f5e45864a4b6d19b384b940d9f25d560711327ee1b4130bbedd9fb508089909cb7a4f323c108d40cb22dbdba42ac6212b142ca6c1e9e027b22273c79c48a51d3d37238c1251e493dc1870d3102f81b5038ebd44ad13f7541e666113516f840bb115d55ade22507370123f9a0a27de346a3457c0fec1c1f099989ec3d2e47e7ef70788a859c17f823b4f7b1c97c5fa7c1174788ebb469b3508203baacb128c23a076321db64d15a7829f59ccfec791a0bb5b473ecb73bb6c1689deb353527e38973f4b44600437df1ed43d5c21e5cac5755ced562863bb681aeffda8fac2c6b6244557305653ca8c09a95adde32114854c1447023ce43d025e8ba80bea832bce1c576f229fb9887a5548ce14a411a9890865f663a18f32944e5f4907fe87f3e70af1fc2e909b0bad81fb7f40a985481787e65524cb12b1146883258928600cdae4dca8b318b1f31ee39c5735a5e19eaf04712e77593868634b1aff9aad88b2dc2fd999e1723dd4cc7bd4b4454d64f50991de5df13f290708d4db7d6a3e831d36c9de88da87335fcf76c9f982df0a389ea2f9179a4189e81daf4ec76e3bdad390829425371bb09f44b9b07d43656c36b939e5fc82373bd95586922e3ad45c53ec6bc86416094e8f793b3bf36b4beb93ccdc50bf1f887e0cb418cd6a21d33bbef05cb342316b3de0bbe81b123fb92785a2a431d76177858360fa7f01c1c723b7e63bd5f8b203f91e958f4a8223b6dc1157a4f29926ec4acb3e5a4a3053374f79e4838d982bd4587c7d0c91d9dcfa1494c591ba5d15021c961a024c4f63ea1654ff7a8763a4c506efd35d0527de16a0909f672b56e2ad2e18e3b445dc6ac2d921ae0d49f879c2c6521ce8045bd98d0adeb9ee62577b96854893aa1a89bd4ee76ec083e0119901cd69d22aafb6219504a4484bf68549c3675a11f1e99196ca852875d6c6862aeb251cc5352022d89dbc90d71e3fd9d24b1305beab1bc3cfb2ea77e7cf0f3fdaa488ae4a68c52d3861b391bd21c28962d7cb3f2812daffc54fc96a8ad365f918e10700480393ea01e7cdb7cf65d441fe770773e8db23c6dd51464a2518d64f8eae8d2c0600534bff8959c472418214c326be65341e6dfed5753514a997ef3649f52d8eea1397a651380215ef4071e3c08f90c0966d0939d49ec1cab90be8ebb469cda89fc45c2a3384fe9ba014c18a9f8903084d5e05101162416eadf7d74ef59b36a96e2c835a807c6c62291404ac9a09f55ba07b310c5a6180f1e8aaea90e816a232c98e2a5b334297fef5a7d905dcacb3e1d2565038df82a1df8825f4a99efab6853eae491e367769342ce7053ddf63548968e035bacf605098bfb0b8214b0f1fdf80925f611134a8f309c52c007f03ab908325e5306cbc7eea5a9ca99c1095369bb5f20b5cdfd087680c84eaff3aa1ca25b096cb0125dcbb5e39638a0c5caf174c2d9859662c4988ff840a155986c988e3b3982e8e205cdc462f3ba6991d12b537a17012d949c00901f1fa560fbf7837d741b87eb9798df7f271a283a24ffe6f4ba8b27f49f3fb23646feae2496239ec2da31ec51ef2563be5d7750c748e98a7989898e029c7ed7499139f91fd3a3f677503b85cd691cff550e6b6ac3081f285726732550e076ef54583a308009204adbc3516de8d45499696787d0a7dcbe39b863ed77d2f4e7f124147b47bd657cd129a3a838ab4e11099174276e07effa6b570716c3b0f47da3f0986210834b7d158b2899b1c1caff8a26877ead6c6024d6d7ebb32db07c67061c7355121f25f78f0488c9f83a12764f8fd3ed30b15eb60be8f5ad0b9a39fe16c937d793c5c5870b5d6f7485c291916c16fce934af0fd0f78d24b79c667efd3ed9a68f1c40870e952de4a7c70d728132a94d456f46ff0c7797fdad4a27fa14744c65846e3821a57725827cc785c9a3946497c453970f8f066f32df66ac5a74b1bad275a89d09a4cfedcb70696b59ffc021e3002d68b285d6852889b5fae0f93e5e491579a6dc012b31bdf716c29adc839ae506c8ebc6a60ad4d809140111244e537ab3a07a906ceece8e544e88f9190edbf391f0270718d7681c6bdde0b304e72c32b47237a87f50156eca3799670c7cb27b471b1f04b59042241b3f6505f46f7980f51f0b372b52e3fd50c6aba8a6850eaec29fbbfed16fe2ef6d6bdba19919924e54410eb7840e9266f908b8803ef7a2b44359b886b774f366957a96e5dc10acb34fb94caf4a99ffbf731aa32246ebe4836118dd59da78407d055d84fa8b07b3718bf562e11baec2916a6d6c85c5da57e2ae253403132a39ff18032a4a62239ca53929fbf3a80d3198b5c848b2284924ae9cdf3a7e25084a04dc9dfe076a8fdf318871195045f34a90a0654d93b0686568615faea6b305e5cce5eba5f24d02ca89833b6f1f5578d506c46af32684d29bdadb7ae9642ae668481c56daf7c0529005fcb1c3db0d903793923946fda259e5879d877a46c0c68688841b18004660d4fcabc7144f5f81539381f413c99f6dd70151acfbb960d3c6d17533bb93a9da9979f68ff528c00b038b2818a9fcab2a9db9bc5c210912db05a93ab9fd26242f9014d4c6a525ac42ad9d186745866ff2982b50bc1961761285b2ed33970a38535f3995804ed4d8ef011a654f700b3a0aeba0a24d4418ecf4a47facf4976aac8f023f8673fabb0e6099be74ea94bbb6792085e9e829cceb3521f9252c3745f101ffa3cadd56490342ece1cbda108f4a03cd24a0cf6025c7ddf0f7ead86f52080cdde9d6a971541de88852846bb55996a1aa9eed1a4aee15b4abb47d60b577e83fb5017368748e2408b1e8a187b0cab7f235a033556449a182b8c1498d2a303c00a30af144637b71f2847daf46a5e493d145dbb5978dca4a24596cb783053807f2d88aa1dc3d58982f621b2ffe2cc49275de3b6a2d871e0028176f6908cbaed3c75d522be404a0592849cfd0c410f9a2e6aad72fe3db5ac5ee66b8dc8d6d39f5e9839d3a6be334c46a1fd67988ec3d8f36f221c9518f1034cbce6e7640e10914cc593ff1b0f4d8178f5b9d785584d6524f4345993efab23001c72f291bc070cc533c703f26876466eaf4a503c85e8e31d58560cca82730c153cff24f50d49b970d75592a03b07bd49a7f5b55575e252c6fff7c1f0aac847e57d79065aeb6177d3346d3b8d91df2eb575d617cc612ddc11cde41e0ade6a9967e1d8e86af8f1b5a9723ce115ca5ba4cfc2369269720daa89169045aafeb267157bf6a694548e2f76e6ad91714a6e3331f2b1dc7aab98a1aa3cda4059b30684f00778e71fae5ed27328bcaed3df884ae37cbb9a8bff66e08b95efad9a63ac576efb0ddeae8d4675a77e356ae44232adc2981e8bce0470c97dcfae53a261554189b3b950a252c860828a0f8a1ce8a4f1b4846e677103d8c33b286058c22ba07b32d288647757ba905e264181c3e64a6f4dd9eef966ea23073647e9d2c4897fd76ecadd1d89ad286d1810f2ae10b7d001fc26e3541bf5c0ea672be27967e2cad60790a1c5ffcb1fab43e9f75e009b5baf518065c8b0a6a6c90adb920cbd2a609280d40828db40c03dfb0c0a92f46f6f9fc836fd968a72ed91f27cbd48d81827d983df41e3195e928e7767b4fbdcbf4090f09aa43d62e9eef84920d47f361f2bca7ded3a88e7d2291c9cfb5311c8a196470f0f9190622c5addf6ce2cf1051879a1766f91536c2e0227eabb4504f4d21acc80b5d502480dd6838a05398ee3c1e7d5f2596396bb2185eff6067acc1678ebd738aa65b8326f9cf0bd6641b1638ec8a7732b7bfef42bf01539104a1e990c3133ffcfd095a687f2e9fb0c9940bf7893a855b967b6cf3a89819f6f1b8f91f8d5c5796b3276ab4d861bdd3b2d87c602bb1cbee30d47622c870daffb2afd88b46442ccc068261d4d3144a078428b4eabbf5bcbc373f684b7b36bfcd1de85743470ce42cb2545adc323de965118d414677b84dbc85af2a3d32c5d69480e5d84dfd5708079949659fcb1598d6f29a4a5a507250d6aa1ff28c361c12db75c6211154ee13f530406ea15ae3aea81195ef0323bfd28e8f7fc8953e2045032b041bc60bc4963ac02fac57ad98c3d7b01ef02a6392f48775c6a56d73c4d6a3897abd851f419c8a435de4254c22f2cd147d37f1dfcdcdeb09185679141101879141590ecd9ac242ec506fe5b0b7caa29bee58145649f2e0cad7f22ecfc996730767e83f2265541734435bb3f0307504dc2bdf1e63a5e7932bcd5c873ad08a6ecc6496f6bf46fa12c4b7e4a3bf0c2350f54ec28292f96155525e07ed8dd8f6ae1f90671981a0d35babcd9e0a7bee9b3e5a3a30ef40cdf991fe8aff2d5313cee8900298be56977aabf1c75e864be94884cc175404eb5dc01213e946278a7f44385cd2940015458a6733251a5ce8d6b9cc0c31a8c71a8ceb6477be046ab53a947f4130dcd5fd20334257e816f76e5d4800e7b885ae3394028a58f1c59580850f4f276ddae42362acaecb4be5344cf866d3fb7cdca041b7106022c1db06b705f2a7fe30f7516640ceb7040f3b2c16f38de456a1a2d0a8d4f1cb68231350182f638ef2db2b79b12e455040ef68cf970879fa1bf593f6ac719aea50a0057402ffa0ecb19d935ddbe7309dfebef4464636a6ee89d29d83813679a1c2b3faa3b512ad3802eedf95a5c2e66e5eacc6770c1d99c0321b87e05416fc69d718c136a285e59ce75359be4ba854bcb9594fd78f10e781b11c62c4701275bb7067ea26f716d8fb2494a2aa590829d69485be193bd486d86111cd4ff5d201b1969b609583a8a3c7a45384efd40ea99dc8c29a46a89eafb5fc8287548e3aecb8e1722559bd44e1c8f6bff672f53bab9bd3ce9180bb296bf1d961c82b56844946becdc82b505fd3dc9a1c8e318e65bc40b0816335ea65be143ded342b0148cf5e36cc94794c6c06a8e87277aea53f1fc1fb148ac0e8dbf7139df3059f1cb5b5bb26f65cdc946dabf364c97aa338390bde4834c551a6f5bcb559e99f632b99d239a65528186747ce483fd2e16b1e537965f23299ab6b7fc539165af335df98b3b13640db8630a29091282a5aaa45a83e30bd22ccb177279ac1b8b661bd64234b807a05d08aa8197fb3e65813220b6a254a63651ba9232a77ce39f7274593ba5d7c349c633bf232729668c83b4ef0c93dad8f34a5dc842ed70e01d542c5adcd909828b7fffd5a77773fb89540ddfc08e6de8040086132f5c9ade04ac4e1d0b55dcf8519e61c000f51c8d46d71dd60e0eb7c7bd91ab0f20a2bd00e32e3a8ce79ca340ec4fc18608ed4ff551ac3214b448b27465db402c6946cee617e10ab42b7b978c3b0ba1b45f81b1e7178e738f1b95481070c2a99c4fb41a7703179cc6a48a92e90134b8c67a9adbae6413b05b3fa50e648e1814f0be53c24f9d2a38a40101ed1891592a1cacefec81441d4b45424f904909f10629eba9cac86bc10f72bd0928ed0c2a6dfa118044c5f5c143da494b13a3f6e5c26c15ef7f98683db9458851bf7fe6e08c0bbc0528abd098ccd088a28bc28fb137f598bf2b4b1f0b88f65fd3304b6406b486269bbce515b938e6df27a49f1688f7f0e31f9384c2b59c0f071c457466a66ff880be0fe4292f51dea0a9bf245333321f086d7c2da91bd77af72a27217ec6eae59a5d1c0338322b7a768178306a90ba4a71034d171dc7f516c280d6c996ba77147a86d53ae57f105e6ee438d3755316534b1e080100000000000084000000ff03000078af9a8c7dbb40e730822269959b0034935f215bddb981a7c3c4e734897a2ed6acdab129e2497618148c96fd209e603d67b8dc1d28cbb19d0e17a19e01ffafd6ba4d04aadf166016f493027bedac3a6145dc55ddd5e25fecf4fd776ce679f6776b37e8f9737cc77fee9e7c1eb1e3a98096440710968e5a03f5c65cc3b6f0cf4815411ea2d2adf0cab0e27942df0378301e2600d2b7474c318f7b1a982f45fd1e337988df5ef806f4d652b15bc27cc52139a1a0fda2af569d888d84776d09eb87f3564732d408b05e0ae30ed1021a6bdc8e2cd30a3e3a58658c0853800404af696561c2e4ffd76c2ba6b5a43068dbca1dcea6000000000000"], 0x1258}, 0x4000080)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
r9 = syz_clone(0x41f, &(0x7f0000001000), 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ab1, 0x0, @perf_bp={&(0x7f0000000080)}}, r9, 0x0, 0xffffffffffffffff, 0x0)

7.752381133s ago: executing program 3 (id=4664):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x394}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x9, 0x10, 0x0, 0xb}, 0x94)
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r5)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
write$cgroup_devices(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000300008c71ef28ff4b"], 0xffdd)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r6=>0xffffffffffffffff})
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
close(0x3)
socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000040)=r7, 0x4)
r8 = socket$kcm(0xa, 0x2, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x182, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x112c0a, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(r8, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0)

5.990828975s ago: executing program 0 (id=4666):
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b15, 0x0)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="1b00000019007f089ea6690ca4dc04f11c", 0x11}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xdb33, 0x1}, 0x112001, 0x40000000000008, 0x0, 0x0, 0x10003, 0x0, 0x7}, 0x0, 0x3, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x4, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x23d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x80044944, 0x0)
socket$kcm(0xa, 0x5, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xffff0000, 0xf0, 0xe200, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x3}, 0x2b, 0x0, 0x5, 0x0, 0x4000004, 0x0, 0xffff}, 0x0, 0xffffffffbfffffff, r0, 0x1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB='7'], 0x0}, 0x90)
socket$kcm(0x11, 0x200000000000002, 0x300)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close(r3)
socket$kcm(0x2, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})

5.854202646s ago: executing program 2 (id=4667):
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f0000000380)='%+9llu \x00'}, 0x20)
socket$kcm(0xa, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x9a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x1000}, 0x10c002, 0xac5d, 0x0, 0x0, 0x9, 0x0, 0xfff9, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r2, &(0x7f0000001a00)=ANY=[@ANYBLOB="13100000520091ef"], 0xfe33)
recvmsg$kcm(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001a40)=""/4095, 0xfff}], 0x1}, 0x0)
recvmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x50be}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="5400020029000b05d25a806f8c6394f90424fc602f0011002f2f2f00053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5000000}, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000002c0)=@ax25={{}, [@bcast, @remote, @default, @rose, @default, @remote, @rose, @bcast]}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000100)=""/58, 0x3a}, {&(0x7f0000000340)=""/235, 0xeb}, {&(0x7f00000005c0)=""/253, 0xfd}, {&(0x7f0000000840)=""/133, 0x85}, {&(0x7f0000000900)=""/180, 0xb4}], 0x5, &(0x7f00000001c0)=""/52, 0x34}, 0x2000)
recvmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
r3 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001180)=[{&(0x7f00000000c0)="1400000027000bff001b05290000000000000000", 0x14}], 0x1}, 0x4080)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)="3c00000033000b1229ae3f7f03b261130124fc60100c034009410000000300189215a2681cf6e50400003d490d20b735b16b6a44799406db26a57b35", 0x3c}], 0x1}, 0x0)
openat$cgroup_pressure(r1, &(0x7f0000000740)='io.pressure\x00', 0x2, 0x0)
recvmsg$kcm(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x3000000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000600)="b9ff03075fe9008cb89e08e09900", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000084}, 0x43)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0xe, &(0x7f00000006c0)=ANY=[@ANYRES64=r1], &(0x7f0000000700)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4}, 0x8, 0x10, &(0x7f0000000040)={0x0, 0x8, 0x404, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)

5.630098219s ago: executing program 1 (id=4669):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x102082, 0xac5d, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x2}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000380), 0x6c0ec0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r0, 0x27, 0x36, 0x0, &(0x7f0000000040)="f8ad48cc02cb20cec8007f5b86dd4188427f0629be0ce081f26a1a8b2670c05991862eb4e941a6e575b4e54a60d4fd184e463108d527", 0x0, 0x3ffe, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$kcm(0x21, 0x2, 0x2)
r1 = socket$kcm(0xa, 0x6, 0x0)
setsockopt$sock_attach_bpf(r1, 0x10d, 0x2, &(0x7f0000000040), 0x4)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac59, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0))
socket$kcm(0x10, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x88400, 0x0)
socket$kcm(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00')
recvmsg$unix(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x100, 0x0, 0x0, 0x8, 0x1, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8a", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000000000085000000b300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x2c, 0x3, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x70, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

4.992032097s ago: executing program 4 (id=4674):
socket$kcm(0x10, 0x1, 0x10) (async)
r0 = socket$kcm(0x10, 0x1, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)="1c00000033000b1229ae3f7f03b261130124fc60100c03400141000000", 0x1d}], 0x1}, 0x0)

4.855026269s ago: executing program 4 (id=4675):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380))
r0 = socket$kcm(0x10, 0x3, 0x10)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, 0x0)
r2 = socket$kcm(0x22, 0x7, 0x21)
sendmsg$inet(r2, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x4000080)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x20)
r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454da, &(0x7f0000000080)={'batadv0\x00'})
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0)
ioctl$TUNSETIFF(r6, 0x400454da, &(0x7f0000000140)={'batadv0\x00'})
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x411})
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000240)={'\x00', 0x52d35ce30131f272})
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r7)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
write$cgroup_devices(r4, &(0x7f0000000300)=ANY=[@ANYRESHEX=r6], 0xfdef)
r8 = openat$cgroup_subtree(r3, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r8, 0x0, 0x5)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300), 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x85)

3.380146907s ago: executing program 3 (id=4676):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x11, &(0x7f0000001540)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b705000008000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x110051, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuacct.stat\x00', 0x26e1, 0x0)
close(r1)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0))
ioctl$SIOCSIFHWADDR(r1, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="010000000006"})
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x1)
r2 = socket$kcm(0x2b, 0x1, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, 0x0, 0x0)
setsockopt$sock_attach_bpf(r2, 0x0, 0x61, 0x0, 0xa4d4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0xe3, 0x0, 0x0, 0x7, 0x10000}, 0x28)
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffff9}, 0x0, 0xc8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="9fedcb7968ddc36c"], 0xfdef)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r6=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0xfdef)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)

3.379593217s ago: executing program 2 (id=4677):
r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0}, 0x282, 0x0, 0x800, 0x0, 0x5, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4713}, 0x0, 0x10, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x795, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x2, 0xffffffffffffffff, 0x8)
ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x8000000000000001)
socket$kcm(0x10, 0x2, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r3 = socket$kcm(0x2, 0x2, 0x73)
sendmsg$inet(r3, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000340)='+', 0x34000}], 0x1}, 0x900000000000000)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB='+\x00\x00@\x00'], 0x5)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9)
r5 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f0000000c40), 0x12)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0xffffffcf, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0)
syz_clone(0x5001008, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)

1.508119491s ago: executing program 1 (id=4678):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
r0 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x400000000004, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003507d25a806f8c6394f90524fc600d001141090005000400000037153e370248038011000000d1", 0x2d}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r2 = socket$kcm(0x10, 0x3, 0x10)
r3 = syz_clone(0x20900000, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_procs(r4, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f00000005c0)=r3, 0x12)
perf_event_open(&(0x7f0000000a40)={0x5, 0x80, 0x0, 0x20, 0x0, 0x1, 0x0, 0x6, 0x3928, 0xc, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xe8f3, 0x0, @perf_bp={&(0x7f0000000a00), 0x8}, 0x0, 0x0, 0x1, 0x6, 0x5c89, 0x2, 0x1, 0x0, 0x5, 0x0, 0x7}, r3, 0x6, r0, 0x8)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x703, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000010000b0fd25a806c8c6f94f90a24fc60", 0x33fe0}], 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40305828, &(0x7f0000000040)=0x20000)
sendmsg$kcm(r6, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000500)="ca76ad9d1da49210cc761c58a98284e2b36903c039fa5a2c2bbe8a0fbb1b8f28bc6f3eea217c70", 0x27}, {&(0x7f0000000540)="881423fb9ea7c0492a14ff6d17c4b0df229793a190fd07f1d22a999e1f548acab614187e840392e0db29a13c2309beade0bf3557de9e897799ddd1a361e4e200048d14260a8fcb8fbda331b8f5ae5e5e7e020b7c1ecb9d52d786a0e26f951b705f9bb48589e4d10a9a4cf37e62a0f06ff4adfbe5e0a526712ed511e373abf4b844aff45a3d545c3f940728b590eac5940e7c4863cb0be041b95dee42b1cf3333c02f3990e44ed9e8a349a54fa4f9bec7b58cfe547b2e2cf5c85b4d925a2e3b2f5c5a465e48a029fd6dd5f9baaf5bec2c210f08d46734f1c95120448e637c8197b189cc3eab6552547eb7d9e706c46b49df11", 0xf2}, {&(0x7f0000000640)="6ad245a1f2f4d01236d397db715631b033525940a3507ddd9b4e32675142a4715c73fecdb19ec9fd64743d8132845807833192e63db81483fd2f412d9e90f577e63390be87e08e296b1ec6971a539c85923aa862fb1ede4423fd2fc2bc1d817e2e56ff0c7a1d", 0x66}, {&(0x7f00000006c0)="97aec38ebbd79011234667b18f54d2011f43a8d0779ae074e91afc5869525c00f5071121144f1436cc56efbe978f8b817db346aafdd978", 0x37}, {&(0x7f0000000700)="1b0fc127510b284acf72b43ce0acda10a8", 0x11}], 0x5, &(0x7f00000007c0)=[{0x70, 0x114, 0x1, "323500e16dfaf7f52d7554fd7fcf37f481b50a835388dfe5264fe802516ccbdfddee5273f1b19bba175bb61618fc1688c7f1e89e446aff904109e317e598e0d8f9b44997dd86353a28c4f02b493017d65a7db207321cdd572221a49c11"}, {0x80, 0x108, 0x800, "883bababb2815e0028c257d717f65f1472db84a1557fd1f9df3004e24a2450734c9ad72014d72b503750f7813abb5529a9d65336e2c54101799284778fa2d3168643e5b8bc283e7880140ce7348ea317b94556304cd59702f570004fafa85ccbd558c14ffc9e7354c4439d948d5c1b"}, {0xd8, 0x1, 0x6, "62f9736d8281405ad0076944bfdeb54cc8b7d6af6aa64cdaefd3087efeb297480c96a7a42a0e2f05724777e668cc81f35fd09ae765222250e25f755e65af8b1c66c734d39d6affdc5c8fc1281e71f67b29829b604f26d7fe79e407f7c9804ed6e1f53933c301391ca8c9e7b9c09dfeeee68180f302de51ee7fc45f44cc23d8ff998d4b19877f7cebfb5a59f1dd7a9b4065afadf1df9097447f13e77227514907e53a9477f7c5fca8c34cbbd226789709ebe80e8f99535e439a867eaa71f22a44c7"}, {0x28, 0x104, 0x7, "179b411ce301542bf0057dd8858a29199c3c4632b2"}], 0x1f0}, 0x4000000)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x86}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x1a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0xb, 0x8}, 0xc)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@map=r8, 0xd, 0x1, 0x1c4000, &(0x7f0000000040)=[0x0], 0x1, 0x0, &(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000300)=[0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000500), 0x3}, 0x50)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

1.494513731s ago: executing program 3 (id=4679):
socket$kcm(0xa, 0x922000000003, 0x11)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d800000058008104", 0x8}], 0x1}, 0x0)
r0 = socket$kcm(0xa, 0x922000000003, 0x11)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x14, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x100)
r1 = socket$kcm(0x10, 0x2, 0x4)
recvmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x86bf2056334f3ae6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0xa, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x0, 0x8, 0x0, 0x7}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x3, 0x66, &(0x7f00000002c0)=""/102, 0x41100, 0x64, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x5, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000640)=[0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000700)=[{0x5, 0x1, 0x10, 0x6}, {0x3, 0x1, 0x7}, {0x5, 0x1, 0x10, 0x2}, {0x0, 0x2, 0xd, 0x2}], 0x10, 0x8001}, 0x94)
r2 = socket$kcm(0xa, 0x1, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340), 0x6}, 0x10c002, 0xac5d, 0x0, 0xc, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000880)={r3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff484f}, 0x50)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r4, 0x58, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r5=>0x0}}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000002000000040000000100000000000000", @ANYRES32=r4, @ANYBLOB='\x00'/20, @ANYRES32=r5, @ANYBLOB="0000000000d3893699708f671a640400"/28], 0x50)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="120000000c0000000400", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6, <r7=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r7, &(0x7f0000000500), &(0x7f0000000400)=""/198}, 0x20)
sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000000001000000000000", 0x20}], 0x1}, 0x40000)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x541b, &(0x7f0000000240))
sendmsg(r2, &(0x7f0000000540)={&(0x7f0000000080)=@nfc_llcp={0x27, 0x0, 0x0, 0x3, 0x43, 0xca, "e9d11e0f884bf9d1dd58dee5fc3bc76fcdf6c43cebbbff25a7348ef52b41ff545c75a909a774324d6f6b9759059b44cf991d641e9c3fba4b2f8882026d8df9", 0x35}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000380)="86d16605c6e9816033995e1b578d25978ea5ed19fb8d374dbf3c694c86ad9b67e3e44e10ff1b290fff1f9c722e85ee83f1c125d6ca40dc5feff0a93e4cd029f62acfbc2deea2dcc4f0a58ec5d33d8b85648bff7e649ada2b9bbf781171391b9cfb952b16f26649af07d02e76936f9a5db4e1fe3587f199787ae76057daada8b4ed5c4b0752821fabc01a256fab641d86665bb811f92455e48fa3a4a290419ba51005cfad18604720cd03a3ae5a7493237f2822cea1a2f30a", 0xb8}, {&(0x7f0000000900)="4f4e92f1a995c5f52285bec97297e31ae1b1b9c5a550b4a7cc4d09695336c4b482320ea7f44e9d9aa909ecbec8a3c377695430ca62ee63806092baee8f76dddaddf206ad014f51b9cc163d35b0c2ff2f0317b2571b0b8c5c85dca26b896f245139260f48f97322722adde081597314cd901d0aab7087a6a9f794637b22862808b46d60b4c0478e08f255dea8b3eab3616d2d1808d55b13a897418e907eeffede1b", 0xa1}, {&(0x7f0000001980)}], 0x3, &(0x7f0000002980)=ANY=[@ANYBLOB="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"], 0x1258}, 0x4000080)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
r9 = syz_clone(0x41f, &(0x7f0000001000), 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ab1, 0x0, @perf_bp={&(0x7f0000000080)}}, r9, 0x0, 0xffffffffffffffff, 0x0)

1.493585271s ago: executing program 2 (id=4688):
bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1b68fc4ff51e0cec2ca9678a72f84b000000000000"], 0x50)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f00000003c0)=0x8000000000000002)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x9}]})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r0, 0x40107446, &(0x7f0000000180))
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x10)
recvmsg$kcm(r2, &(0x7f00000046c0)={0x0, 0x0, &(0x7f0000002340)=[{&(0x7f0000000940)}, {&(0x7f0000000f80)=""/4096, 0x1000}, {&(0x7f0000001f80)=""/155, 0x9b}, {&(0x7f0000002040)=""/28, 0x1c}, {&(0x7f0000002080)=""/127, 0x7f}, {&(0x7f0000002100)=""/151, 0x97}, {&(0x7f00000021c0)=""/51, 0x33}, {0x0}, {&(0x7f0000002280)=""/39, 0x27}, {&(0x7f00000022c0)=""/126, 0x7e}], 0xa, &(0x7f00000036c0)=""/4096, 0x1000}, 0x40000000)
r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0x0, 0x0)
socket$kcm(0x29, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x2c}, 0x28)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x7, 0x0, &(0x7f00000003c0)="e097566f5bec64", 0x0, 0x8c9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x0, @local}, 0x80, 0x0, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="c805"], 0x5c8}, 0xf7e5)
write$cgroup_subtree(r4, 0x0, 0xfdef)
socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x3e, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000b40)=ANY=[@ANYBLOB="b400000000000001691000000000000095000000000000000000000000000000b9bdfa5eeba0834e931b37e8b1ffe52a343365"], &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000e40)=ANY=[@ANYBLOB="1700000000000000", @ANYRES8=r3, @ANYBLOB="0000000000000000000000de66a8830000002000", @ANYRES32=r3, @ANYBLOB="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", @ANYBLOB="000000008000"/27], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
socketpair(0x3, 0x1, 0x4000000, &(0x7f0000000180))

1.415756202s ago: executing program 0 (id=4680):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="b4050000200080066110000000000000c6000000000000009500d800000000009f33ef60916e55893f1eeb0b2ae13d922e6235592ce847e2566c43d72918a897323fd0723043c47c896ce0bce66a245ad9d6817fd98cd824498949714ffaac8a6f77ef0000ca5d82054d54d53cd2b6db714e75d9bdae214fa68a0557eb2c5ca683a4b6fcfcff0bffffffffffd47042eaebfa6fa26fa7a347c7faa8e700458c60897d4a6148a1c11428427c40de60beacf871ab5c2ff88a02084e5b5271e45f00003826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632f7a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffabe90ac5d08dd9d4e0359c41cf3626e1230bc1cd4c02c460ceb44276e9bd94d1c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd00000000000fbf940e6652d357474ed5f816f66ac3027460ae66317f83cdd7a7eb2a7003d1a6cf5478533584961c329fcf5a43e05c92bfef0dcd28000000003f2915a3039c9a78f63b8ec7e60a0000fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc5117c024185a062acb6b8eec31c21b3af8b9eedb4660ed2deb7acf2a33a376a5cb7d4266d5b0be14488d14b473502486ad8dd600000000000000000000c7766ea7c581782c0d90f42a85303835fc291c25d29e6bead5d7360f2e1929d7736ebc8558c4506407d3046022bdf25485bd5442169e9b4c1278343581b7a06f65e8ea6b042c4fd08381e5000000000000006398d6480000001a723b91030000006480304c66b217aea0156ce9eef911fe5b7370f79987303ecb3aabc53c60014a0101ab766754f596b41da9534d12b8306a1b36cf3b03f0d790879f523eabfbee83d8bd472ef69660cf6ec897106c51e54a17497f384c4956b41f3843e7c878b1e11316d8ddae1c6c3b85aaf7a9fcaf8f5d6186c42542d68ba72682c938d3c0a2e6e10eed71b1d31c9f300b41745329bf34495c63e43fb896e4903fb0fae54a8f0fe3b48a5b29d279070647e65097c8ecf32a15080000000000000001007ba4a70a084bd994ac5e00000000000000000000000000351a30cd97f83d72631d0fe92efa974a53f4dc1eb9a86df632a6d463688123f64d42a919bcfc44a90ffd680200000091f842a91c977f6075d07e39e669b0713af0498a99bf5261cb3269d499a5202d7a08b33ade7b38829b9bd39619688d5e9af22170ef83e5b92cbb32b655c45de1c154aad81bf64351668a3f76d5afa958aff76249e0ffdf8e45155536a1a44bfcbfbfd232af000052f9002a"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="05"], 0x10)
r2 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r2, 0x6, 0x1e, &(0x7f0000000500), 0x4)
close(0x3)
close(r0)
close(0xffffffffffffffff)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0))
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r1}, &(0x7f0000000500), &(0x7f0000000540)=r0}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x0, 0x0, 0x0, 0xffbffffe, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0xfffffffd}, 0x94)
r3 = socket$kcm(0x2, 0x5, 0x84)
close(r3)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10, 0x0}, 0x40)
r4 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
socket$kcm(0x11, 0xa, 0x300)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50)
ioctl$TUNGETVNETLE(r7, 0x8953, &(0x7f0000000040))
close(r6)
recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}], 0x18}, 0x10020)
setsockopt$sock_attach_bpf(r4, 0x84, 0x64, &(0x7f0000000000)=r8, 0x10)
sendmsg$inet(r3, &(0x7f0000001a40)={&(0x7f00000001c0)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000080)="b8", 0x1}], 0x1}, 0x4004)
sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)='\\\x00', 0x2}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.current\x00', 0x275a, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r10, 0x1, 0x49, &(0x7f0000000180)=r9, 0x4)

855.926809ms ago: executing program 4 (id=4681):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = gettid()
sendmsg$unix(r3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[@rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c, 0x1, 0x2, {r4, 0xee01, 0xee00}}}], 0x38, 0x4050}, 0x20000800)
recvmsg$unix(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x40012140)
r5 = socket$kcm(0xa, 0x2, 0x3a)
sendmsg$kcm(r5, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x4000, 0x0, @mcast2, 0x41}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x0)
r6 = socket$kcm(0x2, 0x2, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7, <r8=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)
recvmsg(r6, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f00000002c0)=""/34, 0x56}], 0x1}, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000480)={r8, &(0x7f0000000440)}, 0x20)

761.79725ms ago: executing program 1 (id=4682):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0xffffffff, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8021, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x3, 0x4}, 0x80, 0x0}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0000000400000008000000ed", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500"/20], 0x50)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, 0x0)
socket$kcm(0xa, 0x3, 0x11)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r2 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000002540)=[{0x0}], 0x1}, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x22)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@o_path={&(0x7f0000000300)='./file0\x00', 0x0, 0xa83e369e93607be7, r1}, 0x18)
r3 = socket$kcm(0x15, 0x5, 0x0)
setsockopt$sock_attach_bpf(r3, 0x114, 0x7, 0x0, 0xa0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x12, &(0x7f0000000000), 0x4)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000240)={r0})
close(r3)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000031000b03d25a806f8c6394f90824fc60", 0x14}], 0x1}, 0x0)
socket$kcm(0x10, 0x2, 0x10)

628.773322ms ago: executing program 1 (id=4683):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x10}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="660a00000000000061114c0000000000850000"], &(0x7f0000000000)='GPL\x00'}, 0x94)
r1 = perf_event_open$cgroup(&(0x7f0000000240)={0x0, 0x80, 0x9, 0x7, 0x81, 0x3, 0x0, 0xfffffffffffeffff, 0x800, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xf, 0x1, @perf_config_ext={0x0, 0x3}, 0x8000, 0xa8e, 0x3, 0x0, 0xfffffffffffffffa, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0xd)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
socket$kcm(0xa, 0x922000000003, 0x11)
r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r4}, &(0x7f00000007c0), &(0x7f0000000640)}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r4}, 0x0, &(0x7f0000000280)='%pS    \x00'}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r4, &(0x7f00000004c0)}, 0x20)
socket$kcm(0x10, 0x3, 0x10)
r5 = socket$kcm(0xa, 0x1, 0x106)
setsockopt$sock_attach_bpf(r5, 0x29, 0x4e, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x200000000000, 0x80420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x40000000008, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0x4)
r6 = getpid()
sendmsg$unix(r3, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000240)='C', 0x1}], 0x1, &(0x7f0000000e00)=[@cred={{0x1c, 0x1, 0x2, {r6, 0x0, 0xee01}}}], 0x20, 0x10}, 0x80)
perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xd4, 0x6, 0x40, 0x7, 0x0, 0x2, 0x2040, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_bp={0x0, 0x5}, 0xa78, 0x8000, 0x8001, 0x4, 0x6, 0x400, 0xff6b, 0x0, 0x8, 0x0, 0x1c}, r6, 0xe, r2, 0x1)
bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffffc)

496.206294ms ago: executing program 3 (id=4684):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
socket$kcm(0x21, 0x2, 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0))
socket$kcm(0x2, 0x5, 0x84)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0xa, 0x2, 0x0)
socket$kcm(0x21, 0x2, 0x2)
socket$kcm(0x11, 0x2, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f00000003c0)='syzkaller\x00'}, 0x51)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x81000600, 0x12, 0x2f00, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

484.340334ms ago: executing program 4 (id=4685):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="110000004000000000000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0xa)

434.540524ms ago: executing program 1 (id=4686):
r0 = socket$kcm(0x10, 0x2, 0x4)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
close(0x3)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0], 0x0, 0xac, &(0x7f0000000280)=[{}, {}], 0x10, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x9b, 0x8, 0x8, &(0x7f0000000340)}}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0x5, 0x6, 0x34c, 0x10c1, r1, 0xbb1b, '\x00', r2, 0xffffffffffffffff, 0x6, 0x5, 0x1, 0x5}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6a2e4e0ed11fabf6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x12, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x2000}, 0x50)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4)
sendmsg$unix(r5, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)
close(r0)
socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c0000007a006bcd9e3fe3dc6e08000007600004000000007ea60864160af36504005425198bc3488bc3a0e69ee517d34460bc24eab556a705251e4e82949a3651f668c3664402682fb6e27bbfa83b5cae0300c9fcd1938037e786a6", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40448c0)
r7 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000000580)="5c00000014006b02c84e21100af32c6e0a0675f8d344604000050000be7937696182949a36c21b3b48dfd8cdbf9367b41b99c1b74e98fa51f6db64c9f4d493803792684b0000b6c0504bb9183132be471b93c91b5d7870743719b4b5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

406.282765ms ago: executing program 2 (id=4687):
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x3, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0xfffffd6e, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
recvmsg$unix(r3, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
write$cgroup_subtree(r5, &(0x7f0000000180)=ANY=[@ANYRES8=r4, @ANYBLOB="3ee901"], 0x9a)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="b0dcecbe4912dfc2040000000a00000000e4b740523a8bfa0000006eb490c99707fd428296f389b4b5a1", @ANYRES32=0x1, @ANYBLOB="0e00"/20, @ANYRES32=r2, @ANYRES32=r5, @ANYBLOB="0100"/28], 0x50)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a089, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x32, 0x5}, 0x2019, 0x0, 0x0, 0x8, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket$kcm(0x10, 0x2, 0x0)
socketpair(0x1, 0x3, 0x20000, &(0x7f0000000340))
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x8}, 0x107412, 0x0, 0x0, 0x0, 0x2c000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x6, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x9868, 0x0, 0xfffffffc, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000080)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'})
socketpair(0x1, 0x2, 0x0, &(0x7f0000000200))
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r7, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe0}, 0x100)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))

327.872715ms ago: executing program 0 (id=4689):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x11, &(0x7f0000001540)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b705000008000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x110051, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuacct.stat\x00', 0x26e1, 0x0)
close(r1)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0))
ioctl$SIOCSIFHWADDR(r1, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="010000000006"})
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x1)
r2 = socket$kcm(0x2b, 0x1, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, 0x0, 0x0)
setsockopt$sock_attach_bpf(r2, 0x0, 0x61, 0x0, 0xa4d4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0xe3, 0x0, 0x0, 0x7, 0x10000}, 0x28)
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffff9}, 0x0, 0xc8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="9fedcb7968ddc36c"], 0xfdef)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r6=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0xfdef)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)

251.459207ms ago: executing program 4 (id=4690):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1d, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000029008188040f80ec59a5a4d33f921921320000005e140602ffffffff0d0013000100000002800000121f", 0x2e}], 0x1}, 0x0)

157.736588ms ago: executing program 3 (id=4691):
socket$kcm(0x2a, 0x2, 0x0)
socketpair(0x2a, 0x80000, 0x200, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000feffffff00000000a0470000850000002000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000000850000009b0000009500"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES16=r0, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0600000004000000060000000b00000000000000", @ANYRES32, @ANYBLOB="feffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000008000001a0000000000000000000000000000002039f003ec1deb"], 0xfffffffffffffde0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3}, 0xc)
socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x8, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x20}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)="c6d3ddca886199f5af98723127d2", &(0x7f0000000340), 0xffffffff, r4}, 0x38)
r5 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00')
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00')
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r7, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r8 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="d8000000160081044e81f782db44b9040a1d080206000000040000a118000200fe05000000000e1208000f0100810401a80016ea1f00010000005f54c92011148ed08734843cb12b00000803", 0x4c}, {&(0x7f0000000500)="383d180ced167f4e20efe387e9f655200e9ef57059e65fda2a46ea72b507f849a24f8bd9dd8ae89a3816c910a61c28d2fa089f96b9807a8f55a832c4f11e448538ffcee0c6b822436a53c33c12f3a69d81efd66f3affa37aaa31c99041171824f069f392273bd5ce1ab2b2b6f2dcd0b5b5935c360149c52fd45fec45f0cf2728205888adff194e4191575a40", 0x8c}], 0x2, 0x0, 0x0, 0x7400}, 0x40)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r9=>0xffffffffffffffff})
recvmsg(r9, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40000083)

87.758759ms ago: executing program 0 (id=4692):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac59, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180200000900000000000000fdffffff850000003600000018010000756c6c2700000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a00000085000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="178d048604bf0bfb1945d7430008", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)

87.425519ms ago: executing program 1 (id=4693):
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
r1 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000000c0)=r1, 0x4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x3, [@fwd={0x1}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x3}]}, @typedef={0x1, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x5f]}}, &(0x7f0000000300)=""/209, 0x4b, 0xd1, 0x2}, 0x20)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x2, @perf_bp={0x0, 0x4}, 0x10041, 0xc8, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r3)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
r5 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0)
r6 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0)
recvmsg$kcm(r6, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x40010000)
r7 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r7, 0x29, 0x41, 0x0, 0x8f00)
write$cgroup_subtree(r4, &(0x7f0000000580)=ANY=[@ANYRESDEC=r3], 0xfdef)

0s ago: executing program 4 (id=4694):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0xffffffff, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8021, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x3, 0x4}, 0x80, 0x0}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0000000400000008000000ed", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500"/20], 0x50)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, 0x0)
socket$kcm(0xa, 0x3, 0x11)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r2 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000002540)=[{0x0}], 0x1}, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x22)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@o_path={&(0x7f0000000300)='./file0\x00', 0x0, 0xa83e369e93607be7, r1}, 0x18)
r3 = socket$kcm(0x15, 0x5, 0x0)
setsockopt$sock_attach_bpf(r3, 0x114, 0x7, 0x0, 0xa0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x12, &(0x7f0000000000), 0x4)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000240)={r0})
close(r3)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000031000b03d25a806f8c6394f90824fc60", 0x14}], 0x1}, 0x0)
socket$kcm(0x10, 0x2, 0x10)

kernel console output (not intermixed with test programs):

xpected cc 0x0c25 length: 249 > 3
[  778.692192][ T4273] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  778.910974][T14615] netlink: 'syz.1.3308': attribute type 2 has an invalid length.
[  778.981922][T14615] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3308'.
[  779.378517][ T4310] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  779.808872][T14636] netlink: 103 bytes leftover after parsing attributes in process `syz.0.3314'.
[  780.104086][ T4310] device 0 left promiscuous mode
[  780.211510][T14603] chnl_net:caif_netlink_parms(): no params data found
[  780.725159][T12932] Bluetooth: hci2: command 0x0409 tx timeout
[  781.573825][T14653] netlink: 'syz.0.3319': attribute type 2 has an invalid length.
[  781.605192][T14656] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3319'.
[  781.615026][T14657] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3319'.
[  781.776698][T14674] device sit0 left promiscuous mode
[  782.052495][T14672] device sit0 left promiscuous mode
[  782.114057][T14676] device sit0 entered promiscuous mode
[  782.190016][T14675] device sit0 entered promiscuous mode
[  782.262383][T14681] netlink: 103 bytes leftover after parsing attributes in process `syz.4.3325'.
[  782.293118][T14603] bridge0: port 1(bridge_slave_0) entered blocking state
[  782.300895][T14603] bridge0: port 1(bridge_slave_0) entered disabled state
[  782.313443][T14603] device bridge_slave_0 entered promiscuous mode
[  782.460365][T14603] bridge0: port 2(bridge_slave_1) entered blocking state
[  782.478860][T14603] bridge0: port 2(bridge_slave_1) entered disabled state
[  782.548123][T14603] device bridge_slave_1 entered promiscuous mode
[  782.794956][T14697] netlink: 'syz.3.3327': attribute type 2 has an invalid length.
[  782.803041][T14697] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3327'.
[  782.816406][T12932] Bluetooth: hci2: command 0x041b tx timeout
[  784.314071][T14603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  784.437837][T14603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  784.511385][T14728] device sit0 left promiscuous mode
[  784.818184][T14730] netlink: 103 bytes leftover after parsing attributes in process `syz.4.3336'.
[  784.844224][T14731] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.3333'.
[  784.864808][T14733] device sit0 entered promiscuous mode
[  784.885953][T12932] Bluetooth: hci2: command 0x040f tx timeout
[  784.998623][T14603] team0: Port device team_slave_0 added
[  785.112733][T14603] team0: Port device team_slave_1 added
[  785.182402][T14745] device sit0 entered promiscuous mode
[  785.357344][T14603] batman_adv: batadv0: Adding interface: batadv_slave_0
[  785.364338][T14603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  785.415312][T14751] netlink: 196 bytes leftover after parsing attributes in process `syz.3.3341'.
[  785.482274][T14603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  785.594205][T14603] batman_adv: batadv0: Adding interface: batadv_slave_1
[  785.611465][T14603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  785.711186][T14603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  785.870690][T14603] device hsr_slave_0 entered promiscuous mode
[  785.932063][T14603] device hsr_slave_1 entered promiscuous mode
[  785.948686][T14603] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  785.968906][T14603] Cannot create hsr debugfs directory
[  786.121232][T14770] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3344'.
[  786.143929][T14770] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  786.160346][T14770] net_ratelimit: 2 callbacks suppressed
[  786.160364][T14770] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  786.978294][T12932] Bluetooth: hci2: command 0x0419 tx timeout
[  790.062716][T14780] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3350'.
[  790.073889][T14780] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  790.092515][T14780] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  790.115988][T14787] netlink: 'syz.0.3352': attribute type 21 has an invalid length.
[  790.123997][T14787] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3352'.
[  790.172002][T14788] netlink: 'syz.0.3352': attribute type 21 has an invalid length.
[  790.371575][T14797] netlink: 'syz.4.3355': attribute type 1 has an invalid length.
[  790.415043][T14797] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.3355'.
[  790.662707][T14797] netlink: 'syz.4.3355': attribute type 33 has an invalid length.
[  790.695587][T14797] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3355'.
[  790.750940][T14808] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3356'.
[  790.775395][T14808] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  790.821905][T14808] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  793.314347][T14826] device sit0 left promiscuous mode
[  793.473928][T14829] device sit0 entered promiscuous mode
[  793.772052][ T4310] nr0: port 1(hsr0) entered disabled state
[  794.439057][ T4310] device hsr_slave_0 left promiscuous mode
[  794.465283][ T4310] device hsr_slave_1 left promiscuous mode
[  794.535257][ T4310] device veth1_macvtap left promiscuous mode
[  794.541657][ T4310] device veth0_macvtap left promiscuous mode
[  794.574723][ T4310] device veth1_vlan left promiscuous mode
[  795.566991][T14873] netlink: 196 bytes leftover after parsing attributes in process `syz.1.3373'.
[  796.098156][ T4310] team0 (unregistering): Port device team_slave_1 removed
[  796.139220][ T4310] team0 (unregistering): Port device team_slave_0 removed
[  796.585456][T14877] device sit0 left promiscuous mode
[  796.786918][T14878] device sit0 entered promiscuous mode
[  798.969755][T14902] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.3382'.
[  799.293179][T14603] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  799.363509][T14603] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  799.524202][T14603] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  799.607384][T14603] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  799.943720][T14603] 8021q: adding VLAN 0 to HW filter on device bond0
[  802.382331][T14945] device sit0 left promiscuous mode
[  802.461903][T14948] device sit0 entered promiscuous mode
[  802.566588][T14603] 8021q: adding VLAN 0 to HW filter on device team0
[  802.592693][ T6567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  802.613776][ T6567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  802.672955][ T6567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  802.698348][ T6567] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  802.754059][ T6567] bridge0: port 1(bridge_slave_0) entered blocking state
[  802.761269][ T6567] bridge0: port 1(bridge_slave_0) entered forwarding state
[  802.795996][ T6567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  802.813483][ T6567] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  802.823882][ T6567] bridge0: port 2(bridge_slave_1) entered blocking state
[  802.831090][ T6567] bridge0: port 2(bridge_slave_1) entered forwarding state
[  802.916426][ T6567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  802.978786][ T6567] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  803.008475][ T6567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  803.022400][ T6567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  803.033582][ T6567] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  803.043685][ T6567] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  803.080046][ T6567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  803.101485][ T6567] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  803.125286][ T6567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  803.169244][ T6567] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  803.201212][ T6567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  803.228598][ T6567] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  803.287721][T14603] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  803.335424][T14974] FAULT_INJECTION: forcing a failure.
[  803.335424][T14974] name failslab, interval 1, probability 0, space 0, times 0
[  803.411412][T14974] CPU: 1 PID: 14974 Comm: syz.4.3401 Not tainted syzkaller #0
[  803.418958][T14974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  803.429034][T14974] Call Trace:
[  803.432336][T14974]  <TASK>
[  803.435286][T14974]  dump_stack_lvl+0x188/0x24e
[  803.440003][T14974]  ? show_regs_print_info+0x12/0x12
[  803.445234][T14974]  ? load_image+0x400/0x400
[  803.449771][T14974]  ? __lock_acquire+0x7d10/0x7d10
[  803.454819][T14974]  should_fail_ex+0x399/0x4d0
[  803.459511][T14974]  should_failslab+0x5/0x20
[  803.464019][T14974]  slab_pre_alloc_hook+0x59/0x310
[  803.469052][T14974]  kmem_cache_alloc_node+0x5a/0x320
[  803.474247][T14974]  ? alloc_vmap_area+0x683/0x18c0
[  803.479272][T14974]  alloc_vmap_area+0x683/0x18c0
[  803.484134][T14974]  ? vm_map_ram+0xab0/0xab0
[  803.488634][T14974]  ? rcu_is_watching+0x11/0xa0
[  803.493487][T14974]  __get_vm_area_node+0x158/0x330
[  803.498509][T14974]  ? __local_bh_enable_ip+0x136/0x1c0
[  803.503880][T14974]  __vmalloc_node_range+0x357/0x13b0
[  803.509166][T14974]  ? netlink_sendmsg+0x5ec/0xbd0
[  803.514109][T14974]  ? netlink_insert+0x1034/0x13c0
[  803.519148][T14974]  ? free_vm_area+0x50/0x50
[  803.523658][T14974]  ? netlink_sendmsg+0x5ec/0xbd0
[  803.528598][T14974]  vmalloc+0x75/0x80
[  803.532496][T14974]  ? netlink_sendmsg+0x5ec/0xbd0
[  803.537443][T14974]  netlink_sendmsg+0x5ec/0xbd0
[  803.542233][T14974]  ? netlink_getsockopt+0x550/0x550
[  803.547431][T14974]  ? aa_file_perm+0x3ea/0xf00
[  803.552115][T14974]  ? aa_file_perm+0x112/0xf00
[  803.556783][T14974]  ? aa_sock_msg_perm+0x94/0x150
[  803.561714][T14974]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  803.566996][T14974]  ? security_socket_sendmsg+0x7c/0xa0
[  803.572469][T14974]  sock_write_iter+0x2d9/0x3e0
[  803.577235][T14974]  ? sock_read_iter+0x3a0/0x3a0
[  803.582090][T14974]  ? common_file_perm+0x171/0x1c0
[  803.587133][T14974]  vfs_write+0x4b1/0xa30
[  803.591382][T14974]  ? file_end_write+0x250/0x250
[  803.596238][T14974]  ? __fget_files+0x43d/0x4b0
[  803.600917][T14974]  ? __fdget_pos+0x1d4/0x360
[  803.605516][T14974]  ? ksys_write+0x71/0x250
[  803.609933][T14974]  ksys_write+0x14c/0x250
[  803.614265][T14974]  ? __ia32_sys_read+0x80/0x80
[  803.619036][T14974]  ? lockdep_hardirqs_on+0x94/0x140
[  803.624244][T14974]  do_syscall_64+0x4c/0xa0
[  803.628659][T14974]  ? clear_bhb_loop+0x60/0xb0
[  803.633423][T14974]  ? clear_bhb_loop+0x60/0xb0
[  803.638104][T14974]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  803.644081][T14974] RIP: 0033:0x7fb76819cdd9
[  803.648502][T14974] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  803.668106][T14974] RSP: 002b:00007fb769109028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  803.676518][T14974] RAX: ffffffffffffffda RBX: 00007fb768415fa0 RCX: 00007fb76819cdd9
[  803.684484][T14974] RDX: 000000000000fe33 RSI: 0000200000000040 RDI: 0000000000000004
[  803.692454][T14974] RBP: 00007fb769109090 R08: 0000000000000000 R09: 0000000000000000
[  803.700425][T14974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  803.708394][T14974] R13: 00007fb768416038 R14: 00007fb768415fa0 R15: 00007ffcfed482f8
[  803.716372][T14974]  </TASK>
[  803.775644][T14974] netlink: 2639 bytes leftover after parsing attributes in process `syz.4.3401'.
[  805.768375][ T4273] Bluetooth: hci5: command 0x0406 tx timeout
[  807.219439][T15001] device sit0 left promiscuous mode
[  807.281325][T15003] device sit0 entered promiscuous mode
[  807.330500][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  807.345179][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  807.438292][T14603] 8021q: adding VLAN 0 to HW filter on device batadv0
[  807.493660][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  807.525246][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  807.652862][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  807.678099][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  807.717322][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  807.753495][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  807.798346][T14603] device veth0_vlan entered promiscuous mode
[  807.867679][T14603] device veth1_vlan entered promiscuous mode
[  807.986421][ T9322] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  808.027913][ T9322] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  808.059095][T15046] netlink: 'syz.1.3412': attribute type 2 has an invalid length.
[  808.078211][ T9322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  808.102811][T15046] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3412'.
[  808.128185][ T9322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  808.163683][T14603] device veth0_macvtap entered promiscuous mode
[  808.209254][T14603] device veth1_macvtap entered promiscuous mode
[  808.320388][T14603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  808.437400][T14603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  808.474586][T14603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  808.504780][T14603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  808.563063][T14603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  808.590742][T14603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  808.613537][T14603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  808.633648][T14603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  808.680469][T14603] batman_adv: batadv0: Interface activated: batadv_slave_0
[  808.722007][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  808.727671][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  808.735926][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  808.768043][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  808.782525][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  808.792123][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  808.815818][T14603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  808.849276][T14603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  808.869316][T14603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  808.934675][T14603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  808.998223][T14603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  809.019841][T14603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  809.050973][T14603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  809.074709][T14603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  809.096155][T14603] batman_adv: batadv0: Interface activated: batadv_slave_1
[  809.104008][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  809.185002][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  809.268197][T14603] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  809.309132][T14603] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  809.320991][T14603] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  809.330522][T14603] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  810.290508][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  810.314946][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  810.353594][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  810.497406][T15084] device sit0 entered promiscuous mode
[  810.551384][ T9322] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  810.581203][ T9322] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  814.171019][ T6567] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  814.314627][T15188] netlink: 'syz.0.3427': attribute type 2 has an invalid length.
[  814.322419][T15188] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3427'.
[  814.921130][T15228] device sit0 left promiscuous mode
[  814.974344][T15229] netlink: 'syz.2.3436': attribute type 1 has an invalid length.
[  815.003060][T15229] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.3436'.
[  815.163100][T15225] device sit0 entered promiscuous mode
[  821.194912][T15249] netlink: 'syz.0.3441': attribute type 2 has an invalid length.
[  821.204838][T15249] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3441'.
[  821.458710][T15272] netlink: 'syz.3.3451': attribute type 1 has an invalid length.
[  821.475232][T15272] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.3451'.
[  824.325848][T15274] device sit0 left promiscuous mode
[  824.633413][T15276] device sit0 entered promiscuous mode
[  825.554446][T15308] netlink: 'syz.4.3462': attribute type 2 has an invalid length.
[  825.573375][T15308] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3462'.
[  830.334435][T15380] netlink: 'syz.4.3475': attribute type 1 has an invalid length.
[  830.349907][T15380] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.3475'.
[  832.099280][T15372] device sit0 left promiscuous mode
[  832.319592][T15376] device sit0 entered promiscuous mode
[  832.392536][T15381] netlink: 'syz.1.3474': attribute type 10 has an invalid length.
[  832.525291][T15397] netlink: 'syz.2.3478': attribute type 2 has an invalid length.
[  832.533350][T15397] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3478'.
[  832.563152][T15381] 8021q: adding VLAN 0 to HW filter on device batadv0
[  832.585128][T15381] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  832.961110][T15405] FAULT_INJECTION: forcing a failure.
[  832.961110][T15405] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  833.034671][T15405] CPU: 1 PID: 15405 Comm: syz.3.3480 Not tainted syzkaller #0
[  833.042192][T15405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  833.052266][T15405] Call Trace:
[  833.055567][T15405]  <TASK>
[  833.058521][T15405]  dump_stack_lvl+0x188/0x24e
[  833.063230][T15405]  ? show_regs_print_info+0x12/0x12
[  833.068459][T15405]  ? load_image+0x400/0x400
[  833.072987][T15405]  ? __lock_acquire+0x7d10/0x7d10
[  833.078040][T15405]  ? snprintf+0xe5/0x140
[  833.082311][T15405]  should_fail_ex+0x399/0x4d0
[  833.087011][T15405]  _copy_to_user+0x2c/0x130
[  833.091535][T15405]  simple_read_from_buffer+0xe3/0x150
[  833.096929][T15405]  proc_fail_nth_read+0x1a6/0x220
[  833.101977][T15405]  ? proc_fault_inject_write+0x310/0x310
[  833.107629][T15405]  ? fsnotify_perm+0x248/0x550
[  833.112414][T15405]  ? proc_fault_inject_write+0x310/0x310
[  833.118062][T15405]  vfs_read+0x2de/0xa00
[  833.122240][T15405]  ? kernel_read+0x1e0/0x1e0
[  833.126849][T15405]  ? __fget_files+0x28/0x4b0
[  833.131452][T15405]  ? __fget_files+0x28/0x4b0
[  833.136056][T15405]  ? __fget_files+0x43d/0x4b0
[  833.140762][T15405]  ? __fdget_pos+0x2ae/0x360
[  833.145366][T15405]  ? ksys_read+0x71/0x250
[  833.149713][T15405]  ksys_read+0x14c/0x250
[  833.153970][T15405]  ? vfs_write+0xa30/0xa30
[  833.158404][T15405]  ? lockdep_hardirqs_on+0x94/0x140
[  833.163610][T15405]  do_syscall_64+0x4c/0xa0
[  833.168039][T15405]  ? clear_bhb_loop+0x60/0xb0
[  833.172737][T15405]  ? clear_bhb_loop+0x60/0xb0
[  833.177425][T15405]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  833.183331][T15405] RIP: 0033:0x7f5e82b5d60e
[  833.187749][T15405] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  833.207374][T15405] RSP: 002b:00007f5e839fffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  833.215805][T15405] RAX: ffffffffffffffda RBX: 00007f5e83a006c0 RCX: 00007f5e82b5d60e
[  833.223790][T15405] RDX: 000000000000000f RSI: 00007f5e83a000a0 RDI: 0000000000000005
[  833.231771][T15405] RBP: 00007f5e83a00090 R08: 0000000000000000 R09: 0000000000000000
[  833.239751][T15405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  833.247728][T15405] R13: 00007f5e82e16038 R14: 00007f5e82e15fa0 R15: 00007ffd0d1ae708
[  833.255722][T15405]  </TASK>
[  833.351837][T15411] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3481'.
[  833.391952][T15411] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  833.442726][T15411] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  834.349495][T15445] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3487'.
[  834.399919][T15445] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  834.465722][T15445] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  835.754967][T15457] device sit0 left promiscuous mode
[  836.049336][T15458] device sit0 entered promiscuous mode
[  836.415554][T12932] Bluetooth: hci3: command 0x0406 tx timeout
[  836.625398][T15467] netlink: 'syz.4.3493': attribute type 10 has an invalid length.
[  836.807497][T15467] 8021q: adding VLAN 0 to HW filter on device batadv0
[  836.986088][T15467] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  837.598404][T15484] netlink: 'syz.1.3497': attribute type 2 has an invalid length.
[  837.621371][T15484] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3497'.
[  837.813066][T15491] FAULT_INJECTION: forcing a failure.
[  837.813066][T15491] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  837.826856][T15491] CPU: 1 PID: 15491 Comm: syz.3.3501 Not tainted syzkaller #0
[  837.834340][T15491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  837.844412][T15491] Call Trace:
[  837.847702][T15491]  <TASK>
[  837.850645][T15491]  dump_stack_lvl+0x188/0x24e
[  837.855350][T15491]  ? show_regs_print_info+0x12/0x12
[  837.860562][T15491]  ? load_image+0x400/0x400
[  837.865084][T15491]  ? __lock_acquire+0x7d10/0x7d10
[  837.870120][T15491]  ? seqcount_lockdep_reader_access+0x177/0x1d0
[  837.876386][T15491]  should_fail_ex+0x399/0x4d0
[  837.881077][T15491]  _copy_from_user+0x2c/0x170
[  837.885774][T15491]  __sys_bpf+0x2ea/0x780
[  837.890032][T15491]  ? bpf_link_show_fdinfo+0x380/0x380
[  837.895430][T15491]  ? lock_chain_count+0x20/0x20
[  837.900290][T15491]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  837.906297][T15491]  __x64_sys_bpf+0x78/0x90
[  837.910764][T15491]  do_syscall_64+0x4c/0xa0
[  837.915211][T15491]  ? clear_bhb_loop+0x60/0xb0
[  837.919912][T15491]  ? clear_bhb_loop+0x60/0xb0
[  837.924608][T15491]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  837.930513][T15491] RIP: 0033:0x7f5e82b9cdd9
[  837.934941][T15491] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  837.954579][T15491] RSP: 002b:00007f5e839df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  837.963014][T15491] RAX: ffffffffffffffda RBX: 00007f5e82e16090 RCX: 00007f5e82b9cdd9
[  837.971007][T15491] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 000000000000000a
[  837.978990][T15491] RBP: 00007f5e839df090 R08: 0000000000000000 R09: 0000000000000000
[  837.986969][T15491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  837.994947][T15491] R13: 00007f5e82e16128 R14: 00007f5e82e16090 R15: 00007ffd0d1ae708
[  838.002944][T15491]  </TASK>
[  839.055317][T15500] device sit0 left promiscuous mode
[  840.122875][T15513] netlink: 143932 bytes leftover after parsing attributes in process `syz.2.3509'.
[  840.144293][T15513] netlink: zone id is out of range
[  840.151368][T15513] netlink: zone id is out of range
[  840.157389][T15513] netlink: zone id is out of range
[  840.167365][T15513] netlink: zone id is out of range
[  840.172936][T15513] netlink: zone id is out of range
[  840.179673][T15513] netlink: zone id is out of range
[  840.185430][T15513] netlink: zone id is out of range
[  840.190931][T15513] netlink: zone id is out of range
[  840.196817][T15513] netlink: zone id is out of range
[  840.202283][T15513] netlink: zone id is out of range
[  841.460346][T15506] device sit0 entered promiscuous mode
[  841.516180][T15508] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3505'.
[  841.525700][T15508] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  841.798160][T15532] netlink: 'syz.1.3516': attribute type 9 has an invalid length.
[  842.026061][T15536] netlink: 'syz.3.3515': attribute type 2 has an invalid length.
[  842.084324][T15536] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3515'.
[  843.486122][T15561] device sit0 entered promiscuous mode
[  843.600559][T15568] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3526'.
[  843.617413][T15568] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  844.176734][T15585] FAULT_INJECTION: forcing a failure.
[  844.176734][T15585] name failslab, interval 1, probability 0, space 0, times 0
[  844.189602][T15585] CPU: 0 PID: 15585 Comm: syz.4.3535 Not tainted syzkaller #0
[  844.197101][T15585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  844.207174][T15585] Call Trace:
[  844.210467][T15585]  <TASK>
[  844.213410][T15585]  dump_stack_lvl+0x188/0x24e
[  844.218128][T15585]  ? show_regs_print_info+0x12/0x12
[  844.223361][T15585]  ? load_image+0x400/0x400
[  844.227897][T15585]  ? __might_sleep+0xd0/0xd0
[  844.232516][T15585]  ? __lock_acquire+0x7d10/0x7d10
[  844.237568][T15585]  should_fail_ex+0x399/0x4d0
[  844.242270][T15585]  should_failslab+0x5/0x20
[  844.246790][T15585]  slab_pre_alloc_hook+0x59/0x310
[  844.251828][T15585]  kmem_cache_alloc_node+0x5a/0x320
[  844.257043][T15585]  ? __alloc_skb+0xfc/0x7e0
[  844.261555][T15585]  __alloc_skb+0xfc/0x7e0
[  844.265885][T15585]  ? netlink_autobind+0xda/0x300
[  844.270819][T15585]  netlink_sendmsg+0x654/0xbd0
[  844.275590][T15585]  ? netlink_getsockopt+0x550/0x550
[  844.280788][T15585]  ? aa_sock_msg_perm+0x94/0x150
[  844.285736][T15585]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  844.291042][T15585]  ? security_socket_sendmsg+0x7c/0xa0
[  844.296500][T15585]  ? netlink_getsockopt+0x550/0x550
[  844.301694][T15585]  ____sys_sendmsg+0x5be/0x970
[  844.306478][T15585]  ? __sys_sendmsg_sock+0x30/0x30
[  844.311517][T15585]  ? __import_iovec+0x315/0x500
[  844.316381][T15585]  ? import_iovec+0x6f/0xa0
[  844.320893][T15585]  ___sys_sendmsg+0x2a2/0x360
[  844.325573][T15585]  ? __sys_sendmsg+0x290/0x290
[  844.330349][T15585]  ? __lock_acquire+0x7d10/0x7d10
[  844.335408][T15585]  __se_sys_sendmsg+0x1bb/0x2a0
[  844.340282][T15585]  ? __x64_sys_sendmsg+0x80/0x80
[  844.345231][T15585]  ? lockdep_hardirqs_on+0x94/0x140
[  844.350429][T15585]  do_syscall_64+0x4c/0xa0
[  844.354843][T15585]  ? clear_bhb_loop+0x60/0xb0
[  844.359514][T15585]  ? clear_bhb_loop+0x60/0xb0
[  844.364186][T15585]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  844.370074][T15585] RIP: 0033:0x7fb76819cdd9
[  844.374507][T15585] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  844.394104][T15585] RSP: 002b:00007fb769109028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  844.402510][T15585] RAX: ffffffffffffffda RBX: 00007fb768415fa0 RCX: 00007fb76819cdd9
[  844.410481][T15585] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000003
[  844.418445][T15585] RBP: 00007fb769109090 R08: 0000000000000000 R09: 0000000000000000
[  844.426412][T15585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  844.434372][T15585] R13: 00007fb768416038 R14: 00007fb768415fa0 R15: 00007ffcfed482f8
[  844.442346][T15585]  </TASK>
[  844.469417][T15583] netlink: 'syz.2.3532': attribute type 10 has an invalid length.
[  844.654187][T15583] 8021q: adding VLAN 0 to HW filter on device batadv0
[  844.788296][T15583] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  845.058329][T15600] netlink: 'syz.4.3538': attribute type 2 has an invalid length.
[  845.104993][T15600] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3538'.
[  845.354788][T15606] device sit0 left promiscuous mode
[  845.560795][T15614] device sit0 entered promiscuous mode
[  845.649558][T15615] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3541'.
[  845.671457][T15615] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  845.693665][T15615] net_ratelimit: 3547 callbacks suppressed
[  845.693684][T15615] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  846.632846][T15644] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3553'.
[  846.644793][T15644] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  846.670109][T15644] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  847.462136][T15654] netlink: 'syz.0.3555': attribute type 10 has an invalid length.
[  849.036290][T15654] 8021q: adding VLAN 0 to HW filter on device batadv0
[  849.107952][T15654] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  849.211092][T15662] device sit0 left promiscuous mode
[  849.444640][T15666] device sit0 entered promiscuous mode
[  850.107279][T15689] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3566'.
[  850.134728][T15689] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  850.156021][T15689] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  851.321746][T15699] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3572'.
[  851.764645][ T4273] Bluetooth: hci1: command 0x0406 tx timeout
[  852.090842][T15719] device sit0 left promiscuous mode
[  852.251605][T15724] FAULT_INJECTION: forcing a failure.
[  852.251605][T15724] name failslab, interval 1, probability 0, space 0, times 0
[  852.314775][T15724] CPU: 1 PID: 15724 Comm: syz.0.3581 Not tainted syzkaller #0
[  852.322307][T15724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  852.332388][T15724] Call Trace:
[  852.335685][T15724]  <TASK>
[  852.338632][T15724]  dump_stack_lvl+0x188/0x24e
[  852.343334][T15724]  ? sctp_sendmsg+0x15b0/0x2940
[  852.348214][T15724]  ? ___sys_sendmsg+0x2a2/0x360
[  852.353091][T15724]  ? show_regs_print_info+0x12/0x12
[  852.358322][T15724]  ? load_image+0x400/0x400
[  852.362859][T15724]  should_fail_ex+0x399/0x4d0
[  852.367563][T15724]  should_failslab+0x5/0x20
[  852.372085][T15724]  slab_pre_alloc_hook+0x59/0x310
[  852.377134][T15724]  ? sctp_add_bind_addr+0x89/0x350
[  852.382298][T15724]  __kmem_cache_alloc_node+0x4f/0x260
[  852.387788][T15724]  ? sctp_add_bind_addr+0x89/0x350
[  852.392938][T15724]  kmalloc_trace+0x26/0xe0
[  852.397418][T15724]  sctp_add_bind_addr+0x89/0x350
[  852.402394][T15724]  sctp_copy_local_addr_list+0x311/0x4e0
[  852.408078][T15724]  ? sctp_copy_local_addr_list+0xa1/0x4e0
[  852.413812][T15724]  ? sctp_do_8_2_transport_strike+0x8a0/0x8a0
[  852.419887][T15724]  ? sctp_v4_is_any+0x31/0x50
[  852.424574][T15724]  ? sctp_copy_one_addr+0x93/0x660
[  852.429692][T15724]  sctp_bind_addr_copy+0xaf/0x3c0
[  852.434719][T15724]  ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190
[  852.441045][T15724]  sctp_connect_new_asoc+0x2f5/0x6a0
[  852.446330][T15724]  ? __sctp_connect+0xd80/0xd80
[  852.451177][T15724]  ? __local_bh_enable_ip+0x136/0x1c0
[  852.456560][T15724]  ? _local_bh_enable+0xa0/0xa0
[  852.461403][T15724]  ? sctp_endpoint_lookup_assoc+0x77/0x260
[  852.467202][T15724]  ? sctp_endpoint_lookup_assoc+0x77/0x260
[  852.473001][T15724]  ? bpf_lsm_sctp_bind_connect+0x5/0x10
[  852.478542][T15724]  ? security_sctp_bind_connect+0x85/0xb0
[  852.484258][T15724]  sctp_sendmsg+0x15b0/0x2940
[  852.488946][T15724]  ? aa_sk_perm+0x771/0x950
[  852.493453][T15724]  ? sctp_getsockopt+0x8a0/0x8a0
[  852.498390][T15724]  ? __might_fault+0xa6/0x120
[  852.503060][T15724]  ? aa_af_perm+0x340/0x340
[  852.507556][T15724]  ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0
[  852.513974][T15724]  ? inet_sendmsg+0x78/0x2f0
[  852.518555][T15724]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  852.523830][T15724]  ? security_socket_sendmsg+0x7c/0xa0
[  852.529313][T15724]  ? inet_send_prepare+0x260/0x260
[  852.534436][T15724]  ____sys_sendmsg+0x5be/0x970
[  852.539222][T15724]  ? __sys_sendmsg_sock+0x30/0x30
[  852.544266][T15724]  ? __import_iovec+0x315/0x500
[  852.549142][T15724]  ? import_iovec+0x6f/0xa0
[  852.553653][T15724]  ___sys_sendmsg+0x2a2/0x360
[  852.558342][T15724]  ? __sys_sendmsg+0x290/0x290
[  852.563127][T15724]  ? ktime_get_real_ts64+0x440/0x440
[  852.568429][T15724]  __se_sys_sendmsg+0x1bb/0x2a0
[  852.573282][T15724]  ? ct_nmi_exit+0x145/0x1c0
[  852.577868][T15724]  ? __x64_sys_sendmsg+0x80/0x80
[  852.582819][T15724]  ? lockdep_hardirqs_on+0x94/0x140
[  852.588013][T15724]  do_syscall_64+0x4c/0xa0
[  852.592427][T15724]  ? clear_bhb_loop+0x60/0xb0
[  852.597105][T15724]  ? clear_bhb_loop+0x60/0xb0
[  852.601781][T15724]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  852.607670][T15724] RIP: 0033:0x7f064459cdd9
[  852.612082][T15724] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  852.631682][T15724] RSP: 002b:00007f064547a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  852.640094][T15724] RAX: ffffffffffffffda RBX: 00007f0644815fa0 RCX: 00007f064459cdd9
[  852.648058][T15724] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000003
[  852.656022][T15724] RBP: 00007f064547a090 R08: 0000000000000000 R09: 0000000000000000
[  852.663982][T15724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  852.671946][T15724] R13: 00007f0644816038 R14: 00007f0644815fa0 R15: 00007ffff08d0e28
[  852.679921][T15724]  </TASK>
[  852.780385][T15720] device sit0 entered promiscuous mode
[  855.802310][T15735] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3583'.
[  855.822080][T15735] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  855.849941][T15735] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  856.046103][T15749] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3589'.
[  856.300217][T15763] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3589'.
[  856.369908][T15766] FAULT_INJECTION: forcing a failure.
[  856.369908][T15766] name failslab, interval 1, probability 0, space 0, times 0
[  856.454471][T15766] CPU: 1 PID: 15766 Comm: syz.2.3594 Not tainted syzkaller #0
[  856.462053][T15766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  856.472159][T15766] Call Trace:
[  856.475478][T15766]  <TASK>
[  856.478454][T15766]  dump_stack_lvl+0x188/0x24e
[  856.483185][T15766]  ? sctp_sendmsg+0x15b0/0x2940
[  856.488107][T15766]  ? ___sys_sendmsg+0x2a2/0x360
[  856.493031][T15766]  ? show_regs_print_info+0x12/0x12
[  856.498302][T15766]  ? load_image+0x400/0x400
[  856.502906][T15766]  should_fail_ex+0x399/0x4d0
[  856.507650][T15766]  should_failslab+0x5/0x20
[  856.512198][T15766]  slab_pre_alloc_hook+0x59/0x310
[  856.517287][T15766]  ? sctp_add_bind_addr+0x89/0x350
[  856.522476][T15766]  __kmem_cache_alloc_node+0x4f/0x260
[  856.527911][T15766]  ? sctp_add_bind_addr+0x89/0x350
[  856.533081][T15766]  kmalloc_trace+0x26/0xe0
[  856.537567][T15766]  sctp_add_bind_addr+0x89/0x350
[  856.542583][T15766]  sctp_copy_local_addr_list+0x311/0x4e0
[  856.548295][T15766]  ? sctp_copy_local_addr_list+0xa1/0x4e0
[  856.554086][T15766]  ? sctp_do_8_2_transport_strike+0x8a0/0x8a0
[  856.560230][T15766]  ? sctp_v4_is_any+0x31/0x50
[  856.564976][T15766]  ? sctp_copy_one_addr+0x93/0x660
[  856.570162][T15766]  sctp_bind_addr_copy+0xaf/0x3c0
[  856.575253][T15766]  ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190
[  856.581650][T15766]  sctp_connect_new_asoc+0x2f5/0x6a0
[  856.586986][T15766]  ? __sctp_connect+0xd80/0xd80
[  856.591892][T15766]  ? __local_bh_enable_ip+0x136/0x1c0
[  856.597306][T15766]  ? _local_bh_enable+0xa0/0xa0
[  856.602180][T15766]  ? sctp_endpoint_lookup_assoc+0x77/0x260
[  856.608006][T15766]  ? sctp_endpoint_lookup_assoc+0x77/0x260
[  856.613828][T15766]  ? bpf_lsm_sctp_bind_connect+0x5/0x10
[  856.619392][T15766]  ? security_sctp_bind_connect+0x85/0xb0
[  856.625136][T15766]  sctp_sendmsg+0x15b0/0x2940
[  856.629839][T15766]  ? trace_event_raw_event_lock+0x250/0x250
[  856.635775][T15766]  ? aa_sk_perm+0x771/0x950
[  856.640310][T15766]  ? sctp_getsockopt+0x8a0/0x8a0
[  856.645277][T15766]  ? __might_fault+0xa6/0x120
[  856.649978][T15766]  ? aa_af_perm+0x340/0x340
[  856.654501][T15766]  ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0
[  856.660972][T15766]  ? inet_sendmsg+0x78/0x2f0
[  856.665580][T15766]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  856.670875][T15766]  ? security_socket_sendmsg+0x7c/0xa0
[  856.676373][T15766]  ? inet_send_prepare+0x260/0x260
[  856.681502][T15766]  ____sys_sendmsg+0x5be/0x970
[  856.686318][T15766]  ? __sys_sendmsg_sock+0x30/0x30
[  856.691363][T15766]  ? __import_iovec+0x315/0x500
[  856.696255][T15766]  ? import_iovec+0x6f/0xa0
[  856.700821][T15766]  ___sys_sendmsg+0x2a2/0x360
[  856.705555][T15766]  ? __sys_sendmsg+0x290/0x290
[  856.710430][T15766]  ? trace_call_bpf+0xbf/0x6b0
[  856.715301][T15766]  __se_sys_sendmsg+0x1bb/0x2a0
[  856.720193][T15766]  ? __x64_sys_sendmsg+0x80/0x80
[  856.725215][T15766]  ? lockdep_hardirqs_on+0x94/0x140
[  856.730443][T15766]  do_syscall_64+0x4c/0xa0
[  856.734893][T15766]  ? clear_bhb_loop+0x60/0xb0
[  856.739594][T15766]  ? clear_bhb_loop+0x60/0xb0
[  856.744304][T15766]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  856.750399][T15766] RIP: 0033:0x7f4debb9cdd9
[  856.754834][T15766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  856.774454][T15766] RSP: 002b:00007f4decae9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  856.782891][T15766] RAX: ffffffffffffffda RBX: 00007f4debe15fa0 RCX: 00007f4debb9cdd9
[  856.790905][T15766] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000004
[  856.798886][T15766] RBP: 00007f4decae9090 R08: 0000000000000000 R09: 0000000000000000
[  856.806869][T15766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  856.814850][T15766] R13: 00007f4debe16038 R14: 00007f4debe15fa0 R15: 00007ffdfe228e18
[  856.822869][T15766]  </TASK>
[  857.372743][T15780] device sit0 left promiscuous mode
[  857.714663][T15785] device sit0 entered promiscuous mode
[  858.661138][T15810] FAULT_INJECTION: forcing a failure.
[  858.661138][T15810] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  858.701897][T15810] CPU: 0 PID: 15810 Comm: syz.0.3607 Not tainted syzkaller #0
[  858.709444][T15810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  858.719525][T15810] Call Trace:
[  858.722834][T15810]  <TASK>
[  858.725786][T15810]  dump_stack_lvl+0x188/0x24e
[  858.730503][T15810]  ? show_regs_print_info+0x12/0x12
[  858.735736][T15810]  ? load_image+0x400/0x400
[  858.740280][T15810]  ? __lock_acquire+0x7d10/0x7d10
[  858.745341][T15810]  should_fail_ex+0x399/0x4d0
[  858.750051][T15810]  _copy_from_user+0x2c/0x170
[  858.754762][T15810]  iovec_from_user+0x143/0x360
[  858.759560][T15810]  __import_iovec+0x6d/0x500
[  858.764189][T15810]  import_iovec+0x6f/0xa0
[  858.768550][T15810]  ___sys_sendmsg+0x252/0x360
[  858.773264][T15810]  ? __sys_sendmsg+0x290/0x290
[  858.778085][T15810]  ? perf_trace_run_bpf_submit+0xf3/0x1c0
[  858.783877][T15810]  __se_sys_sendmsg+0x1bb/0x2a0
[  858.788768][T15810]  ? __x64_sys_sendmsg+0x80/0x80
[  858.793756][T15810]  ? syscall_enter_from_user_mode+0x2a/0x80
[  858.799686][T15810]  do_syscall_64+0x4c/0xa0
[  858.804148][T15810]  ? clear_bhb_loop+0x60/0xb0
[  858.808855][T15810]  ? clear_bhb_loop+0x60/0xb0
[  858.813568][T15810]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  858.819490][T15810] RIP: 0033:0x7f064459cdd9
[  858.823929][T15810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  858.843580][T15810] RSP: 002b:00007f064547a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  858.843608][T15810] RAX: ffffffffffffffda RBX: 00007f0644815fa0 RCX: 00007f064459cdd9
[  858.843620][T15810] RDX: 0000000000000800 RSI: 00002000000005c0 RDI: 0000000000000003
[  858.843632][T15810] RBP: 00007f064547a090 R08: 0000000000000000 R09: 0000000000000000
[  858.843644][T15810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  858.843656][T15810] R13: 00007f0644816038 R14: 00007f0644815fa0 R15: 00007ffff08d0e28
[  858.843686][T15810]  </TASK>
[  859.213307][T15817] netlink: 'syz.0.3609': attribute type 2 has an invalid length.
[  859.234956][T15817] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3609'.
[  861.504687][T15807] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3604'.
[  861.514266][T15807] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  861.552928][T15807] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  861.580045][T15822] device lo entered promiscuous mode
[  861.601294][T15822] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  862.359575][T15843] device sit0 left promiscuous mode
[  862.850173][T15847] device sit0 entered promiscuous mode
[  862.936735][T15860] netlink: 'syz.0.3621': attribute type 2 has an invalid length.
[  862.964910][T15860] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3621'.
[  863.008381][T15854] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.3620'.
[  863.155301][T15865] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3623'.
[  863.181171][T15865] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  863.223592][T15865] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  863.391279][ T4273] Bluetooth: hci1: ISO packet for unknown connection handle 255
[  863.401863][T15873] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3625'.
[  863.419461][T15873] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3625'.
[  863.433806][T15874] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3625'.
[  863.997946][T15876] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3626'.
[  864.125845][T15879] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3626'.
[  864.223050][T15900] FAULT_INJECTION: forcing a failure.
[  864.223050][T15900] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  864.263914][T15900] CPU: 1 PID: 15900 Comm: syz.1.3634 Not tainted syzkaller #0
[  864.271440][T15900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  864.281520][T15900] Call Trace:
[  864.284802][T15900]  <TASK>
[  864.287729][T15900]  dump_stack_lvl+0x188/0x24e
[  864.292413][T15900]  ? show_regs_print_info+0x12/0x12
[  864.297617][T15900]  ? load_image+0x400/0x400
[  864.302123][T15900]  ? __lock_acquire+0x7d10/0x7d10
[  864.307152][T15900]  should_fail_ex+0x399/0x4d0
[  864.311828][T15900]  _copy_from_user+0x2c/0x170
[  864.316509][T15900]  iovec_from_user+0x143/0x360
[  864.321275][T15900]  __import_iovec+0x6d/0x500
[  864.325869][T15900]  import_iovec+0x6f/0xa0
[  864.330198][T15900]  ___sys_sendmsg+0x252/0x360
[  864.334887][T15900]  ? __sys_sendmsg+0x290/0x290
[  864.339670][T15900]  ? trace_call_bpf+0xbf/0x6b0
[  864.344448][T15900]  __se_sys_sendmsg+0x1bb/0x2a0
[  864.349306][T15900]  ? __x64_sys_sendmsg+0x80/0x80
[  864.354254][T15900]  ? lockdep_hardirqs_on+0x94/0x140
[  864.359454][T15900]  do_syscall_64+0x4c/0xa0
[  864.363875][T15900]  ? clear_bhb_loop+0x60/0xb0
[  864.368550][T15900]  ? clear_bhb_loop+0x60/0xb0
[  864.373227][T15900]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  864.379115][T15900] RIP: 0033:0x7f5d6879cdd9
[  864.383522][T15900] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  864.403133][T15900] RSP: 002b:00007f5d696db028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  864.411548][T15900] RAX: ffffffffffffffda RBX: 00007f5d68a15fa0 RCX: 00007f5d6879cdd9
[  864.419519][T15900] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004
[  864.427495][T15900] RBP: 00007f5d696db090 R08: 0000000000000000 R09: 0000000000000000
[  864.435459][T15900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  864.443426][T15900] R13: 00007f5d68a16038 R14: 00007f5d68a15fa0 R15: 00007ffeaea3d9c8
[  864.451410][T15900]  </TASK>
[  864.832788][T15911] device sit0 left promiscuous mode
[  865.030778][T15907] device sit0 entered promiscuous mode
[  865.941931][T15934] netlink: 'syz.0.3646': attribute type 3 has an invalid length.
[  865.948010][T15932] netlink: 'syz.3.3645': attribute type 2 has an invalid length.
[  865.975764][T15934] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3646'.
[  866.193309][T15929] device syzkaller0 entered promiscuous mode
[  870.171453][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  870.177833][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  871.267076][T15942] __nla_validate_parse: 1 callbacks suppressed
[  871.267093][T15942] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3649'.
[  871.282903][T15943] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3649'.
[  871.295727][T15953] device sit0 left promiscuous mode
[  871.494223][T15955] device sit0 entered promiscuous mode
[  872.093692][T15975] netlink: 'syz.4.3660': attribute type 2 has an invalid length.
[  872.117381][T15975] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3660'.
[  872.853188][T16001] netlink: 'syz.0.3667': attribute type 21 has an invalid length.
[  872.882028][T16001] netlink: 'syz.0.3667': attribute type 1 has an invalid length.
[  873.072188][T16000] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3666'.
[  873.213654][T16000] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3666'.
[  873.310444][T16014] device sit0 left promiscuous mode
[  873.569535][T16017] device sit0 entered promiscuous mode
[  874.146574][T16034] FAULT_INJECTION: forcing a failure.
[  874.146574][T16034] name failslab, interval 1, probability 0, space 0, times 0
[  874.198027][T16034] CPU: 1 PID: 16034 Comm: syz.2.3677 Not tainted syzkaller #0
[  874.205552][T16034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  874.215639][T16034] Call Trace:
[  874.218936][T16034]  <TASK>
[  874.221888][T16034]  dump_stack_lvl+0x188/0x24e
[  874.226598][T16034]  ? show_regs_print_info+0x12/0x12
[  874.231822][T16034]  ? load_image+0x400/0x400
[  874.236356][T16034]  ? __might_sleep+0xd0/0xd0
[  874.240968][T16034]  ? __lock_acquire+0x7d10/0x7d10
[  874.246042][T16034]  should_fail_ex+0x399/0x4d0
[  874.250742][T16034]  should_failslab+0x5/0x20
[  874.255261][T16034]  slab_pre_alloc_hook+0x59/0x310
[  874.260309][T16034]  kmem_cache_alloc+0x56/0x2f0
[  874.265090][T16034]  ? fib_trie_unmerge+0x268/0xcd0
[  874.270148][T16034]  fib_trie_unmerge+0x268/0xcd0
[  874.275038][T16034]  fib_unmerge+0xbc/0x350
[  874.279394][T16034]  ? fib_nl_newrule+0x1db0/0x1db0
[  874.284445][T16034]  fib4_rule_delete+0x41/0x3e0
[  874.289233][T16034]  fib_nl_delrule+0x152b/0x1da0
[  874.294135][T16034]  ? notify_rule_change+0x210/0x210
[  874.299359][T16034]  ? rcu_is_watching+0x11/0xa0
[  874.304156][T16034]  ? trace_contention_end+0x5f/0x170
[  874.309487][T16034]  ? notify_rule_change+0x210/0x210
[  874.314709][T16034]  rtnetlink_rcv_msg+0x87c/0xfc0
[  874.319657][T16034]  ? rtnetlink_rcv_msg+0x226/0xfc0
[  874.324779][T16034]  ? rtnetlink_bind+0x80/0x80
[  874.329464][T16034]  ? __local_bh_enable_ip+0x136/0x1c0
[  874.334837][T16034]  ? lockdep_hardirqs_on+0x94/0x140
[  874.340033][T16034]  ? __local_bh_enable_ip+0x136/0x1c0
[  874.345402][T16034]  ? _local_bh_enable+0xa0/0xa0
[  874.350255][T16034]  ? __dev_queue_xmit+0x26b/0x37c0
[  874.355363][T16034]  ? __dev_queue_xmit+0x26b/0x37c0
[  874.360478][T16034]  ? __dev_queue_xmit+0x1cd2/0x37c0
[  874.365680][T16034]  ? __dev_queue_xmit+0x26b/0x37c0
[  874.370808][T16034]  ? ref_tracker_free+0x68c/0x840
[  874.375832][T16034]  ? __copy_skb_header+0x3ba/0x4f0
[  874.380945][T16034]  ? refcount_inc+0x70/0x70
[  874.385453][T16034]  ? memcpy+0x3c/0x60
[  874.389437][T16034]  ? __copy_skb_header+0x3ba/0x4f0
[  874.394552][T16034]  ? __skb_clone+0x480/0x790
[  874.399146][T16034]  netlink_rcv_skb+0x1fb/0x450
[  874.403911][T16034]  ? rtnetlink_bind+0x80/0x80
[  874.408590][T16034]  ? netlink_ack+0x1170/0x1170
[  874.413358][T16034]  ? netlink_deliver_tap+0x2e/0x1b0
[  874.418560][T16034]  netlink_unicast+0x74d/0x8d0
[  874.423331][T16034]  netlink_sendmsg+0x8ad/0xbd0
[  874.428107][T16034]  ? netlink_getsockopt+0x550/0x550
[  874.433310][T16034]  ? aa_sock_msg_perm+0x94/0x150
[  874.438246][T16034]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  874.443530][T16034]  ? security_socket_sendmsg+0x7c/0xa0
[  874.448990][T16034]  ? netlink_getsockopt+0x550/0x550
[  874.454188][T16034]  ____sys_sendmsg+0x5be/0x970
[  874.458958][T16034]  ? __sys_sendmsg_sock+0x30/0x30
[  874.463999][T16034]  ? __import_iovec+0x315/0x500
[  874.468870][T16034]  ? import_iovec+0x6f/0xa0
[  874.473369][T16034]  ___sys_sendmsg+0x2a2/0x360
[  874.478049][T16034]  ? __sys_sendmsg+0x290/0x290
[  874.482826][T16034]  ? __lock_acquire+0x7d10/0x7d10
[  874.487865][T16034]  __se_sys_sendmsg+0x1bb/0x2a0
[  874.492720][T16034]  ? __x64_sys_sendmsg+0x80/0x80
[  874.497670][T16034]  ? lockdep_hardirqs_on+0x94/0x140
[  874.502879][T16034]  do_syscall_64+0x4c/0xa0
[  874.507306][T16034]  ? clear_bhb_loop+0x60/0xb0
[  874.511984][T16034]  ? clear_bhb_loop+0x60/0xb0
[  874.516661][T16034]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  874.522555][T16034] RIP: 0033:0x7f4debb9cdd9
[  874.526971][T16034] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  874.546578][T16034] RSP: 002b:00007f4decae9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  874.554987][T16034] RAX: ffffffffffffffda RBX: 00007f4debe15fa0 RCX: 00007f4debb9cdd9
[  874.562954][T16034] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 000000000000000d
[  874.570925][T16034] RBP: 00007f4decae9090 R08: 0000000000000000 R09: 0000000000000000
[  874.578910][T16034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  874.586891][T16034] R13: 00007f4debe16038 R14: 00007f4debe15fa0 R15: 00007ffdfe228e18
[  874.594876][T16034]  </TASK>
[  878.304729][T16058] device sit0 left promiscuous mode
[  878.514832][T16061] device sit0 entered promiscuous mode
[  881.374734][T16083] FAULT_INJECTION: forcing a failure.
[  881.374734][T16083] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  881.431871][T16083] CPU: 0 PID: 16083 Comm: syz.0.3694 Not tainted syzkaller #0
[  881.439403][T16083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  881.449457][T16083] Call Trace:
[  881.452736][T16083]  <TASK>
[  881.455666][T16083]  dump_stack_lvl+0x188/0x24e
[  881.460352][T16083]  ? show_regs_print_info+0x12/0x12
[  881.465659][T16083]  ? load_image+0x400/0x400
[  881.470161][T16083]  ? __lock_acquire+0x7d10/0x7d10
[  881.475189][T16083]  ? __rcu_read_unlock+0x78/0xd0
[  881.480125][T16083]  should_fail_ex+0x399/0x4d0
[  881.484804][T16083]  _copy_to_user+0x2c/0x130
[  881.489310][T16083]  bpf_test_finish+0x4a2/0x600
[  881.494087][T16083]  ? convert___skb_to_skb+0x580/0x580
[  881.499459][T16083]  ? convert_skb_to___skb+0x420/0x420
[  881.504830][T16083]  ? _copy_from_user+0x11/0x170
[  881.509689][T16083]  ? copy_user_enhanced_fast_string+0xa/0x40
[  881.515689][T16083]  bpf_prog_test_run_xdp+0x80a/0xf10
[  881.520997][T16083]  ? dev_put+0x80/0x80
[  881.525077][T16083]  ? dev_put+0x80/0x80
[  881.529150][T16083]  bpf_prog_test_run+0x31e/0x390
[  881.534106][T16083]  __sys_bpf+0x62b/0x780
[  881.538362][T16083]  ? bpf_link_show_fdinfo+0x380/0x380
[  881.543748][T16083]  ? lock_chain_count+0x20/0x20
[  881.548607][T16083]  __x64_sys_bpf+0x78/0x90
[  881.553025][T16083]  do_syscall_64+0x4c/0xa0
[  881.557444][T16083]  ? clear_bhb_loop+0x60/0xb0
[  881.562120][T16083]  ? clear_bhb_loop+0x60/0xb0
[  881.566806][T16083]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  881.572708][T16083] RIP: 0033:0x7f064459cdd9
[  881.577120][T16083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  881.596723][T16083] RSP: 002b:00007f064547a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  881.605135][T16083] RAX: ffffffffffffffda RBX: 00007f0644815fa0 RCX: 00007f064459cdd9
[  881.613104][T16083] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a
[  881.621093][T16083] RBP: 00007f064547a090 R08: 0000000000000000 R09: 0000000000000000
[  881.629075][T16083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  881.637048][T16083] R13: 00007f0644816038 R14: 00007f0644815fa0 R15: 00007ffff08d0e28
[  881.645032][T16083]  </TASK>
[  881.729774][T16093] FAULT_INJECTION: forcing a failure.
[  881.729774][T16093] name failslab, interval 1, probability 0, space 0, times 0
[  881.757319][T16093] CPU: 0 PID: 16093 Comm: syz.4.3697 Not tainted syzkaller #0
[  881.764863][T16093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  881.774937][T16093] Call Trace:
[  881.778231][T16093]  <TASK>
[  881.781177][T16093]  dump_stack_lvl+0x188/0x24e
[  881.785883][T16093]  ? sctp_sendmsg+0x15b0/0x2940
[  881.790757][T16093]  ? ___sys_sendmsg+0x2a2/0x360
[  881.795634][T16093]  ? show_regs_print_info+0x12/0x12
[  881.800865][T16093]  ? load_image+0x400/0x400
[  881.805405][T16093]  should_fail_ex+0x399/0x4d0
[  881.810111][T16093]  should_failslab+0x5/0x20
[  881.814632][T16093]  slab_pre_alloc_hook+0x59/0x310
[  881.819682][T16093]  ? sctp_add_bind_addr+0x89/0x350
[  881.824818][T16093]  __kmem_cache_alloc_node+0x4f/0x260
[  881.830216][T16093]  ? sctp_add_bind_addr+0x89/0x350
[  881.835358][T16093]  kmalloc_trace+0x26/0xe0
[  881.839814][T16093]  sctp_add_bind_addr+0x89/0x350
[  881.844786][T16093]  sctp_copy_local_addr_list+0x311/0x4e0
[  881.850457][T16093]  ? sctp_copy_local_addr_list+0xa1/0x4e0
[  881.856207][T16093]  ? sctp_do_8_2_transport_strike+0x8a0/0x8a0
[  881.862316][T16093]  ? sctp_v4_is_any+0x31/0x50
[  881.867030][T16093]  ? sctp_copy_one_addr+0x93/0x660
[  881.872177][T16093]  sctp_bind_addr_copy+0xaf/0x3c0
[  881.877236][T16093]  ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190
[  881.883593][T16093]  sctp_connect_new_asoc+0x2f5/0x6a0
[  881.888908][T16093]  ? __sctp_connect+0xd80/0xd80
[  881.893795][T16093]  ? __local_bh_enable_ip+0x136/0x1c0
[  881.899186][T16093]  ? _local_bh_enable+0xa0/0xa0
[  881.904052][T16093]  ? sctp_endpoint_lookup_assoc+0x77/0x260
[  881.909874][T16093]  ? sctp_endpoint_lookup_assoc+0x77/0x260
[  881.915700][T16093]  ? bpf_lsm_sctp_bind_connect+0x5/0x10
[  881.921261][T16093]  ? security_sctp_bind_connect+0x85/0xb0
[  881.927006][T16093]  sctp_sendmsg+0x15b0/0x2940
[  881.931736][T16093]  ? aa_sk_perm+0x771/0x950
[  881.936275][T16093]  ? sctp_getsockopt+0x8a0/0x8a0
[  881.941235][T16093]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  881.947411][T16093]  ? aa_af_perm+0x340/0x340
[  881.951948][T16093]  ? inet_sendmsg+0x78/0x2f0
[  881.956548][T16093]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  881.961848][T16093]  ? security_socket_sendmsg+0x7c/0xa0
[  881.967330][T16093]  ? inet_send_prepare+0x260/0x260
[  881.972454][T16093]  ____sys_sendmsg+0x5be/0x970
[  881.977249][T16093]  ? __sys_sendmsg_sock+0x30/0x30
[  881.982292][T16093]  ? __import_iovec+0x315/0x500
[  881.987168][T16093]  ? import_iovec+0x6f/0xa0
[  881.991689][T16093]  ___sys_sendmsg+0x2a2/0x360
[  881.996407][T16093]  ? __sys_sendmsg+0x290/0x290
[  882.001245][T16093]  ? __lock_acquire+0x7d10/0x7d10
[  882.006324][T16093]  __se_sys_sendmsg+0x1bb/0x2a0
[  882.011203][T16093]  ? __x64_sys_sendmsg+0x80/0x80
[  882.016183][T16093]  ? lockdep_hardirqs_on+0x94/0x140
[  882.021400][T16093]  do_syscall_64+0x4c/0xa0
[  882.025843][T16093]  ? clear_bhb_loop+0x60/0xb0
[  882.030543][T16093]  ? clear_bhb_loop+0x60/0xb0
[  882.035241][T16093]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  882.041158][T16093] RIP: 0033:0x7fb76819cdd9
[  882.045592][T16093] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  882.065223][T16093] RSP: 002b:00007fb769109028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  882.073664][T16093] RAX: ffffffffffffffda RBX: 00007fb768415fa0 RCX: 00007fb76819cdd9
[  882.081653][T16093] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000003
[  882.089638][T16093] RBP: 00007fb769109090 R08: 0000000000000000 R09: 0000000000000000
[  882.097634][T16093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  882.105621][T16093] R13: 00007fb768416038 R14: 00007fb768415fa0 R15: 00007ffcfed482f8
[  882.113624][T16093]  </TASK>
[  882.494635][T12932] Bluetooth: hci0: command 0x0406 tx timeout
[  882.912400][T16108] device sit0 left promiscuous mode
[  883.433589][T16109] device sit0 entered promiscuous mode
[  887.128064][T16140] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3711'.
[  887.225919][T16143] netlink: 'syz.1.3713': attribute type 3 has an invalid length.
[  887.258417][T16143] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3713'.
[  887.578412][T16152] netlink: 'syz.4.3714': attribute type 10 has an invalid length.
[  887.857733][T16152] team0: Port device wlan1 added
[  887.906623][T16154] device sit0 left promiscuous mode
[  888.162214][T16162] netlink: 'syz.0.3718': attribute type 2 has an invalid length.
[  888.250442][T16162] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3718'.
[  888.334630][T16160] device sit0 entered promiscuous mode
[  891.923254][T16181] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3722'.
[  891.933609][T16181] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3722'.
[  891.944980][T16181] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3722'.
[  892.152892][T16183] netlink: 'syz.1.3725': attribute type 3 has an invalid length.
[  892.194285][T16183] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3725'.
[  894.443476][T16211] netlink: 'syz.0.3733': attribute type 10 has an invalid length.
[  894.701028][T16211] team0: Port device wlan1 added
[  894.731089][T16210] netlink: 'syz.1.3731': attribute type 10 has an invalid length.
[  894.930265][T16210] team0: Port device wlan1 added
[  895.008953][T16214] device sit0 left promiscuous mode
[  895.143226][T16227] netlink: 'syz.0.3737': attribute type 2 has an invalid length.
[  895.167481][T16227] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3737'.
[  895.177767][T16217] device sit0 entered promiscuous mode
[  895.612743][T16237] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3740'.
[  895.638005][T16237] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  895.978144][T16243] netlink: 'syz.2.3743': attribute type 3 has an invalid length.
[  895.996675][T16243] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3743'.
[  899.878288][T16245] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3744'.
[  900.366583][T16269] device sit0 left promiscuous mode
[  900.698239][T16274] device sit0 entered promiscuous mode
[  900.821239][T16286] netlink: 'syz.0.3755': attribute type 2 has an invalid length.
[  900.874422][T16286] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3755'.
[  902.828199][T16294] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3758'.
[  902.854980][T16294] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  902.911161][T16294] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  902.974753][ T4273] Bluetooth: hci2: command 0x0406 tx timeout
[  902.987531][T16297] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3759'.
[  903.136751][T16302] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3760'.
[  904.133361][T16322] FAULT_INJECTION: forcing a failure.
[  904.133361][T16322] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  904.152801][T16322] CPU: 0 PID: 16322 Comm: syz.0.3768 Not tainted syzkaller #0
[  904.160325][T16322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  904.170415][T16322] Call Trace:
[  904.173707][T16322]  <TASK>
[  904.176647][T16322]  dump_stack_lvl+0x188/0x24e
[  904.181350][T16322]  ? show_regs_print_info+0x12/0x12
[  904.186573][T16322]  ? load_image+0x400/0x400
[  904.191103][T16322]  ? __lock_acquire+0x7d10/0x7d10
[  904.196153][T16322]  should_fail_ex+0x399/0x4d0
[  904.200850][T16322]  _copy_from_user+0x2c/0x170
[  904.205547][T16322]  iovec_from_user+0x143/0x360
[  904.210336][T16322]  __import_iovec+0x6d/0x500
[  904.214946][T16322]  import_iovec+0x6f/0xa0
[  904.219292][T16322]  ___sys_sendmsg+0x252/0x360
[  904.223999][T16322]  ? __sys_sendmsg+0x290/0x290
[  904.228836][T16322]  __se_sys_sendmsg+0x1bb/0x2a0
[  904.231542][T16326] netlink: 'syz.1.3769': attribute type 2 has an invalid length.
[  904.233697][T16322]  ? __x64_sys_sendmsg+0x80/0x80
[  904.233742][T16322]  ? lockdep_hardirqs_on+0x94/0x140
[  904.233767][T16322]  do_syscall_64+0x4c/0xa0
[  904.233791][T16322]  ? clear_bhb_loop+0x60/0xb0
[  904.233813][T16322]  ? clear_bhb_loop+0x60/0xb0
[  904.253787][T16326] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3769'.
[  904.256043][T16322]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  904.256072][T16322] RIP: 0033:0x7f064459cdd9
[  904.256089][T16322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  904.256104][T16322] RSP: 002b:00007f064547a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  904.256125][T16322] RAX: ffffffffffffffda RBX: 00007f0644815fa0 RCX: 00007f064459cdd9
[  904.256138][T16322] RDX: 0000000000000800 RSI: 00002000000005c0 RDI: 0000000000000003
[  904.256149][T16322] RBP: 00007f064547a090 R08: 0000000000000000 R09: 0000000000000000
[  904.256161][T16322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  904.256172][T16322] R13: 00007f0644816038 R14: 00007f0644815fa0 R15: 00007ffff08d0e28
[  904.256196][T16322]  </TASK>
[  909.467562][T16360] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3782'.
[  909.706126][T16366] netlink: 'syz.0.3783': attribute type 2 has an invalid length.
[  909.713924][T16366] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3783'.
[  909.987580][T16375] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3787'.
[  910.019376][T16375] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  910.116321][T16375] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  916.991956][T16417] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3800'.
[  917.003067][T16417] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  917.016060][T16417] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  917.427194][T16441] netlink: 'syz.3.3804': attribute type 2 has an invalid length.
[  917.456057][T16441] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3804'.
[  920.549610][T16457] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3810'.
[  920.631248][T16457] openvswitch: netlink: Flow key attr not present in new flow.
[  920.676768][T16460] netlink: 'syz.0.3812': attribute type 3 has an invalid length.
[  920.731024][T16460] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3812'.
[  923.278694][T16458] device syzkaller0 entered promiscuous mode
[  923.573798][T16474] delete_channel: no stack
[  924.346670][T16494] netlink: 'syz.2.3819': attribute type 2 has an invalid length.
[  924.374769][T16494] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3819'.
[  927.699095][T16517] netlink: 'syz.2.3827': attribute type 3 has an invalid length.
[  927.713209][T16517] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3827'.
[  928.702891][T16482] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3815'.
[  928.712116][T16482] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  928.723657][T16482] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  928.906280][T16521] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3828'.
[  929.059159][T16528] netlink: 56537 bytes leftover after parsing attributes in process `syz.4.3828'.
[  929.330115][T16524] delete_channel: no stack
[  929.413188][T16535] netlink: 'syz.2.3833': attribute type 2 has an invalid length.
[  929.454732][T16535] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3833'.
[  931.610651][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  931.617028][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  932.839692][T16560] netlink: 'syz.1.3842': attribute type 3 has an invalid length.
[  932.893698][T16560] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3842'.
[  933.863105][T16587] netlink: 'syz.0.3849': attribute type 2 has an invalid length.
[  933.939723][T16587] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3849'.
[  934.452101][T16570] device syzkaller0 entered promiscuous mode
[  936.069138][T16603] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3856'.
[  936.085334][T16603] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  936.139086][T16603] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  938.093849][T16646] netlink: 'syz.0.3866': attribute type 2 has an invalid length.
[  938.134797][T16646] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3866'.
[  940.738049][T16614] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.3859'.
[  942.148823][T16678] device sit0 left promiscuous mode
[  942.383301][T16686] netlink: 'syz.0.3879': attribute type 2 has an invalid length.
[  942.554676][T16686] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3879'.
[  942.811684][T16679] device sit0 entered promiscuous mode
[  945.221207][T16718] device sit0 left promiscuous mode
[  945.584110][T16719] device sit0 entered promiscuous mode
[  945.883389][T16738] netlink: 'syz.4.3897': attribute type 2 has an invalid length.
[  945.982816][T16738] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3897'.
[  948.606885][T16754] device sit0 left promiscuous mode
[  948.974846][T16756] device sit0 entered promiscuous mode
[  949.222603][T16768] device sit0 left promiscuous mode
[  949.850265][T16773] device sit0 entered promiscuous mode
[  950.026893][T16776] netlink: 'syz.4.3911': attribute type 10 has an invalid length.
[  950.156709][T16783] netlink: 'syz.0.3912': attribute type 2 has an invalid length.
[  950.185300][T16783] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3912'.
[  950.292017][T16776] bridge0: port 2(bridge_slave_1) entered disabled state
[  950.301178][T16776] bridge0: port 1(bridge_slave_0) entered disabled state
[  950.334264][T16776] bridge0: port 2(bridge_slave_1) entered blocking state
[  950.341627][T16776] bridge0: port 2(bridge_slave_1) entered forwarding state
[  950.349314][T16776] bridge0: port 1(bridge_slave_0) entered blocking state
[  950.356601][T16776] bridge0: port 1(bridge_slave_0) entered forwarding state
[  950.409864][T16776] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  951.545724][T16814] device sit0 left promiscuous mode
[  951.660103][T16826] netlink: 'syz.0.3927': attribute type 2 has an invalid length.
[  951.744716][T16826] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3927'.
[  951.861099][T16816] device sit0 entered promiscuous mode
[  954.424701][T16831] netlink: 'syz.2.3929': attribute type 10 has an invalid length.
[  954.433699][T16831] bridge0: port 2(bridge_slave_1) entered disabled state
[  954.441569][T16831] bridge0: port 1(bridge_slave_0) entered disabled state
[  954.469883][T16831] bridge0: port 2(bridge_slave_1) entered blocking state
[  954.477197][T16831] bridge0: port 2(bridge_slave_1) entered forwarding state
[  954.484691][T16831] bridge0: port 1(bridge_slave_0) entered blocking state
[  954.491851][T16831] bridge0: port 1(bridge_slave_0) entered forwarding state
[  954.507055][T16831] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  954.520678][T16835] device sit0 left promiscuous mode
[  954.717915][T16837] device sit0 entered promiscuous mode
[  954.721096][T16849] netlink: 'syz.1.3937': attribute type 3 has an invalid length.
[  954.772813][T16849] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3937'.
[  955.358471][T16873] netlink: 'syz.0.3943': attribute type 2 has an invalid length.
[  955.395409][T16873] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3943'.
[  960.708045][T16897] device sit0 left promiscuous mode
[  960.764884][T16898] device sit0 entered promiscuous mode
[  961.179479][T16924] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3961'.
[  961.214845][T16924] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3961'.
[  961.799537][T16940] netlink: 'syz.3.3965': attribute type 2 has an invalid length.
[  961.848582][T16940] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3965'.
[  963.997572][T16949] device sit0 left promiscuous mode
[  964.012126][T16951] FAULT_INJECTION: forcing a failure.
[  964.012126][T16951] name failslab, interval 1, probability 0, space 0, times 0
[  964.100946][T16951] CPU: 0 PID: 16951 Comm: syz.3.3972 Not tainted syzkaller #0
[  964.108484][T16951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  964.118571][T16951] Call Trace:
[  964.121877][T16951]  <TASK>
[  964.124830][T16951]  dump_stack_lvl+0x188/0x24e
[  964.129666][T16951]  ? show_regs_print_info+0x12/0x12
[  964.134903][T16951]  ? load_image+0x400/0x400
[  964.139432][T16951]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  964.145532][T16951]  should_fail_ex+0x399/0x4d0
[  964.150228][T16951]  should_failslab+0x5/0x20
[  964.154741][T16951]  slab_pre_alloc_hook+0x59/0x310
[  964.159864][T16951]  kmem_cache_alloc+0x56/0x2f0
[  964.164638][T16951]  ? __build_skb+0x2a/0x3c0
[  964.169155][T16951]  __build_skb+0x2a/0x3c0
[  964.173493][T16951]  build_skb+0x1e/0x230
[  964.177673][T16951]  bpf_prog_test_run_skb+0x37e/0x12a0
[  964.183063][T16951]  ? __fget_files+0x28/0x4b0
[  964.187669][T16951]  ? __fget_files+0x43d/0x4b0
[  964.192367][T16951]  ? cpu_online+0xa0/0xa0
[  964.196716][T16951]  bpf_prog_test_run+0x31e/0x390
[  964.201660][T16951]  __sys_bpf+0x62b/0x780
[  964.205917][T16951]  ? bpf_link_show_fdinfo+0x380/0x380
[  964.211304][T16951]  ? lock_chain_count+0x20/0x20
[  964.216159][T16951]  __x64_sys_bpf+0x78/0x90
[  964.220576][T16951]  do_syscall_64+0x4c/0xa0
[  964.224994][T16951]  ? clear_bhb_loop+0x60/0xb0
[  964.229672][T16951]  ? clear_bhb_loop+0x60/0xb0
[  964.234350][T16951]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  964.240242][T16951] RIP: 0033:0x7f5e82b9cdd9
[  964.244659][T16951] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  964.264261][T16951] RSP: 002b:00007f5e83a00028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  964.272674][T16951] RAX: ffffffffffffffda RBX: 00007f5e82e15fa0 RCX: 00007f5e82b9cdd9
[  964.280648][T16951] RDX: 0000000000000050 RSI: 0000200000001200 RDI: 000000000000000a
[  964.288612][T16951] RBP: 00007f5e83a00090 R08: 0000000000000000 R09: 0000000000000000
[  964.296576][T16951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  964.304542][T16951] R13: 00007f5e82e16038 R14: 00007f5e82e15fa0 R15: 00007ffd0d1ae708
[  964.312610][T16951]  </TASK>
[  964.361359][T16953] device sit0 entered promiscuous mode
[  964.861517][T16972] netlink: 'syz.4.3980': attribute type 10 has an invalid length.
[  964.913163][T16972] team0: Port device wlan1 removed
[  964.939968][T16972] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  965.102313][T16981] netlink: 'syz.1.3982': attribute type 10 has an invalid length.
[  965.131648][T16981] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3982'.
[  965.168100][T16979] netlink: 'syz.3.3981': attribute type 10 has an invalid length.
[  965.345492][T16991] netlink: 'syz.0.3983': attribute type 2 has an invalid length.
[  965.364028][T16991] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3983'.
[  968.294802][T16979] 8021q: adding VLAN 0 to HW filter on device team0
[  968.306116][T16979] bond0: (slave team0): Enslaving as an active interface with an up link
[  968.457866][T16995] netlink: 'syz.2.3986': attribute type 21 has an invalid length.
[  968.494898][T16995] netlink: 'syz.2.3986': attribute type 6 has an invalid length.
[  968.514167][T16995] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3986'.
[  968.598087][T17006] device sit0 left promiscuous mode
[  968.929172][T17010] device sit0 entered promiscuous mode
[  969.479020][T17028] netlink: 'syz.1.3997': attribute type 2 has an invalid length.
[  969.518433][T17028] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3997'.
[  973.888206][T17036] netlink: 'syz.0.4000': attribute type 10 has an invalid length.
[  973.896193][T17036] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4000'.
[  974.279846][T17055] netlink: 'syz.2.4007': attribute type 29 has an invalid length.
[  974.298485][T17057] netlink: 'syz.0.4002': attribute type 10 has an invalid length.
[  974.429939][T17057] 8021q: adding VLAN 0 to HW filter on device team0
[  974.441294][T17057] bond0: (slave team0): Enslaving as an active interface with an up link
[  974.487217][T17064] netlink: 'syz.4.4009': attribute type 21 has an invalid length.
[  974.519307][T17064] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4009'.
[  975.017429][T17077] netlink: 'syz.2.4011': attribute type 2 has an invalid length.
[  975.064892][T17077] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4011'.
[  975.304703][T17083] netlink: 'syz.4.4014': attribute type 10 has an invalid length.
[  975.328799][T17083] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4014'.
[  977.376459][T17111] netlink: 'syz.3.4025': attribute type 10 has an invalid length.
[  977.442727][T17111] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  977.461171][T17113] netlink: 'syz.1.4022': attribute type 10 has an invalid length.
[  977.554737][T17113] 8021q: adding VLAN 0 to HW filter on device team0
[  977.583737][T17113] bond0: (slave team0): Enslaving as an active interface with an up link
[  979.970439][T17132] netlink: 'syz.3.4031': attribute type 10 has an invalid length.
[  979.987492][T17132] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4031'.
[  980.132114][T17144] netlink: 'syz.4.4032': attribute type 2 has an invalid length.
[  980.153641][T17144] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4032'.
[  981.024006][T17155] device sit0 left promiscuous mode
[  981.235398][T17156] device sit0 entered promiscuous mode
[  982.146419][T17186] netlink: 'syz.1.4050': attribute type 10 has an invalid length.
[  982.229525][T17190] FAULT_INJECTION: forcing a failure.
[  982.229525][T17190] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  982.245366][T17186] team0: Device hsr_slave_0 failed to register rx_handler
[  982.266225][T17192] FAULT_INJECTION: forcing a failure.
[  982.266225][T17192] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  982.284858][T17190] CPU: 0 PID: 17190 Comm: syz.4.4052 Not tainted syzkaller #0
[  982.292371][T17190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  982.302516][T17190] Call Trace:
[  982.305810][T17190]  <TASK>
[  982.308751][T17190]  dump_stack_lvl+0x188/0x24e
[  982.313471][T17190]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  982.319644][T17190]  ? show_regs_print_info+0x12/0x12
[  982.324860][T17190]  ? load_image+0x400/0x400
[  982.329394][T17190]  should_fail_ex+0x399/0x4d0
[  982.334088][T17190]  _copy_from_user+0x2c/0x170
[  982.338778][T17190]  __copy_msghdr+0x3b7/0x580
[  982.343392][T17190]  ___sys_sendmsg+0x210/0x360
[  982.348099][T17190]  ? __sys_sendmsg+0x290/0x290
[  982.352888][T17190]  ? ktime_get_real_ts64+0x440/0x440
[  982.358193][T17190]  __se_sys_sendmsg+0x1bb/0x2a0
[  982.363045][T17190]  ? __x64_sys_sendmsg+0x80/0x80
[  982.367998][T17190]  ? lockdep_hardirqs_on+0x94/0x140
[  982.373195][T17190]  do_syscall_64+0x4c/0xa0
[  982.377608][T17190]  ? clear_bhb_loop+0x60/0xb0
[  982.382286][T17190]  ? clear_bhb_loop+0x60/0xb0
[  982.386959][T17190]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  982.392849][T17190] RIP: 0033:0x7fb76819cdd9
[  982.397260][T17190] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  982.416859][T17190] RSP: 002b:00007fb769109028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  982.425266][T17190] RAX: ffffffffffffffda RBX: 00007fb768415fa0 RCX: 00007fb76819cdd9
[  982.433232][T17190] RDX: 00000000000480c0 RSI: 0000200000000200 RDI: 0000000000000005
[  982.441193][T17190] RBP: 00007fb769109090 R08: 0000000000000000 R09: 0000000000000000
[  982.449169][T17190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  982.457133][T17190] R13: 00007fb768416038 R14: 00007fb768415fa0 R15: 00007ffcfed482f8
[  982.465108][T17190]  </TASK>
[  982.471875][T17192] CPU: 0 PID: 17192 Comm: syz.0.4051 Not tainted syzkaller #0
[  982.479391][T17192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  982.489466][T17192] Call Trace:
[  982.492764][T17192]  <TASK>
[  982.495710][T17192]  dump_stack_lvl+0x188/0x24e
[  982.500443][T17192]  ? show_regs_print_info+0x12/0x12
[  982.505670][T17192]  ? load_image+0x400/0x400
[  982.510288][T17192]  ? __lock_acquire+0x7d10/0x7d10
[  982.515337][T17192]  ? cap_capable+0x4f/0x230
[  982.519853][T17192]  should_fail_ex+0x399/0x4d0
[  982.524536][T17192]  _copy_from_user+0x2c/0x170
[  982.529222][T17192]  __sys_bpf+0x2ea/0x780
[  982.533513][T17192]  ? bpf_link_show_fdinfo+0x380/0x380
[  982.538893][T17192]  ? lock_chain_count+0x20/0x20
[  982.543747][T17192]  __x64_sys_bpf+0x78/0x90
[  982.548169][T17192]  do_syscall_64+0x4c/0xa0
[  982.552583][T17192]  ? clear_bhb_loop+0x60/0xb0
[  982.557260][T17192]  ? clear_bhb_loop+0x60/0xb0
[  982.561941][T17192]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  982.567827][T17192] RIP: 0033:0x7f064459cdd9
[  982.572235][T17192] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  982.591927][T17192] RSP: 002b:00007f064547a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  982.600346][T17192] RAX: ffffffffffffffda RBX: 00007f0644815fa0 RCX: 00007f064459cdd9
[  982.608453][T17192] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 000000000000000a
[  982.616423][T17192] RBP: 00007f064547a090 R08: 0000000000000000 R09: 0000000000000000
[  982.624398][T17192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  982.632369][T17192] R13: 00007f0644816038 R14: 00007f0644815fa0 R15: 00007ffff08d0e28
[  982.640351][T17192]  </TASK>
[  982.675876][T17197] netlink: 'syz.2.4054': attribute type 2 has an invalid length.
[  982.689465][T17197] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4054'.
[  983.002589][T17208] device sit0 left promiscuous mode
[  983.230280][T17211] device sit0 entered promiscuous mode
[  983.933963][T17221] netlink: 'syz.1.4061': attribute type 10 has an invalid length.
[  984.281362][T17231] FAULT_INJECTION: forcing a failure.
[  984.281362][T17231] name failslab, interval 1, probability 0, space 0, times 0
[  984.334901][T17231] CPU: 1 PID: 17231 Comm: syz.4.4065 Not tainted syzkaller #0
[  984.342440][T17231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  984.352526][T17231] Call Trace:
[  984.355824][T17231]  <TASK>
[  984.358860][T17231]  dump_stack_lvl+0x188/0x24e
[  984.363571][T17231]  ? show_regs_print_info+0x12/0x12
[  984.368807][T17231]  ? load_image+0x400/0x400
[  984.373426][T17231]  ? __might_sleep+0xd0/0xd0
[  984.378046][T17231]  ? __lock_acquire+0x7d10/0x7d10
[  984.383113][T17231]  ? mark_lock+0x94/0x320
[  984.387491][T17231]  should_fail_ex+0x399/0x4d0
[  984.392200][T17231]  should_failslab+0x5/0x20
[  984.396745][T17231]  slab_pre_alloc_hook+0x59/0x310
[  984.401806][T17231]  ? __get_vm_area_node+0x122/0x330
[  984.407039][T17231]  __kmem_cache_alloc_node+0x4f/0x260
[  984.412455][T17231]  ? __get_vm_area_node+0x122/0x330
[  984.417693][T17231]  kmalloc_node_trace+0x22/0xe0
[  984.422589][T17231]  __get_vm_area_node+0x122/0x330
[  984.427639][T17231]  ? mark_lock+0x94/0x320
[  984.432094][T17231]  __vmalloc_node_range+0x357/0x13b0
[  984.437408][T17231]  ? bpf_prog_alloc_no_stats+0x3a/0x3a0
[  984.443008][T17231]  ? free_vm_area+0x50/0x50
[  984.447532][T17231]  ? end_current_label_crit_section+0x170/0x170
[  984.453795][T17231]  ? __lock_acquire+0x7d10/0x7d10
[  984.458840][T17231]  ? bpf_prog_alloc_no_stats+0x3a/0x3a0
[  984.464418][T17231]  __vmalloc+0x76/0x80
[  984.468502][T17231]  ? bpf_prog_alloc_no_stats+0x3a/0x3a0
[  984.474067][T17231]  bpf_prog_alloc_no_stats+0x3a/0x3a0
[  984.479462][T17231]  ? bpf_lsm_capable+0x5/0x10
[  984.484150][T17231]  ? security_capable+0x85/0xb0
[  984.489011][T17231]  bpf_prog_alloc+0x1c/0x1b0
[  984.493616][T17231]  bpf_prog_load+0x7c9/0x1560
[  984.498488][T17231]  ? map_freeze+0x390/0x390
[  984.503000][T17231]  ? __might_fault+0xa6/0x120
[  984.507688][T17231]  ? trace_call_bpf+0xbf/0x6b0
[  984.512474][T17231]  ? __might_fault+0xa6/0x120
[  984.517159][T17231]  ? __might_fault+0xc2/0x120
[  984.521846][T17231]  ? __might_fault+0xa6/0x120
[  984.526614][T17231]  ? bpf_lsm_bpf+0x5/0x10
[  984.530951][T17231]  ? security_bpf+0x7a/0xa0
[  984.535470][T17231]  __sys_bpf+0x5b8/0x780
[  984.539722][T17231]  ? bpf_link_show_fdinfo+0x380/0x380
[  984.545118][T17231]  ? lock_chain_count+0x20/0x20
[  984.549993][T17231]  __x64_sys_bpf+0x78/0x90
[  984.554419][T17231]  do_syscall_64+0x4c/0xa0
[  984.558856][T17231]  ? clear_bhb_loop+0x60/0xb0
[  984.563544][T17231]  ? clear_bhb_loop+0x60/0xb0
[  984.568234][T17231]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  984.574139][T17231] RIP: 0033:0x7fb76819cdd9
[  984.578565][T17231] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  984.598178][T17231] RSP: 002b:00007fb769109028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  984.606606][T17231] RAX: ffffffffffffffda RBX: 00007fb768415fa0 RCX: 00007fb76819cdd9
[  984.614593][T17231] RDX: 0000000000000094 RSI: 0000200000000840 RDI: 0000000000000005
[  984.622570][T17231] RBP: 00007fb769109090 R08: 0000000000000000 R09: 0000000000000000
[  984.630548][T17231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  984.638520][T17231] R13: 00007fb768416038 R14: 00007fb768415fa0 R15: 00007ffcfed482f8
[  984.646512][T17231]  </TASK>
[  984.715187][T17231] syz.4.4065: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz4,mems_allowed=0-1
[  984.764713][T17231] CPU: 0 PID: 17231 Comm: syz.4.4065 Not tainted syzkaller #0
[  984.772245][T17231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  984.782325][T17231] Call Trace:
[  984.785612][T17231]  <TASK>
[  984.788544][T17231]  dump_stack_lvl+0x188/0x24e
[  984.793232][T17231]  ? cpuset_print_current_mems_allowed+0x1b/0x360
[  984.799646][T17231]  ? show_regs_print_info+0x12/0x12
[  984.804855][T17231]  ? load_image+0x400/0x400
[  984.809366][T17231]  ? cpuset_print_current_mems_allowed+0x1b/0x360
[  984.815784][T17231]  ? cpuset_print_current_mems_allowed+0x2e3/0x360
[  984.822292][T17231]  warn_alloc+0x242/0x330
[  984.826619][T17231]  ? __get_vm_area_node+0x122/0x330
[  984.831820][T17231]  ? zone_watermark_ok_safe+0x270/0x270
[  984.837470][T17231]  ? rcu_is_watching+0x11/0xa0
[  984.842442][T17231]  ? __get_vm_area_node+0x318/0x330
[  984.847670][T17231]  ? mark_lock+0x94/0x320
[  984.852009][T17231]  __vmalloc_node_range+0x37c/0x13b0
[  984.857317][T17231]  ? free_vm_area+0x50/0x50
[  984.861818][T17231]  ? end_current_label_crit_section+0x170/0x170
[  984.868065][T17231]  ? __lock_acquire+0x7d10/0x7d10
[  984.873091][T17231]  ? bpf_prog_alloc_no_stats+0x3a/0x3a0
[  984.878636][T17231]  __vmalloc+0x76/0x80
[  984.882702][T17231]  ? bpf_prog_alloc_no_stats+0x3a/0x3a0
[  984.888268][T17231]  bpf_prog_alloc_no_stats+0x3a/0x3a0
[  984.893647][T17231]  ? bpf_lsm_capable+0x5/0x10
[  984.898679][T17231]  ? security_capable+0x85/0xb0
[  984.903534][T17231]  bpf_prog_alloc+0x1c/0x1b0
[  984.908152][T17231]  bpf_prog_load+0x7c9/0x1560
[  984.912863][T17231]  ? map_freeze+0x390/0x390
[  984.917395][T17231]  ? __might_fault+0xa6/0x120
[  984.922155][T17231]  ? trace_call_bpf+0xbf/0x6b0
[  984.926951][T17231]  ? __might_fault+0xa6/0x120
[  984.931648][T17231]  ? __might_fault+0xc2/0x120
[  984.936510][T17231]  ? __might_fault+0xa6/0x120
[  984.941193][T17231]  ? bpf_lsm_bpf+0x5/0x10
[  984.945520][T17231]  ? security_bpf+0x7a/0xa0
[  984.950020][T17231]  __sys_bpf+0x5b8/0x780
[  984.954266][T17231]  ? bpf_link_show_fdinfo+0x380/0x380
[  984.959660][T17231]  ? lock_chain_count+0x20/0x20
[  984.964522][T17231]  __x64_sys_bpf+0x78/0x90
[  984.968940][T17231]  do_syscall_64+0x4c/0xa0
[  984.973355][T17231]  ? clear_bhb_loop+0x60/0xb0
[  984.978032][T17231]  ? clear_bhb_loop+0x60/0xb0
[  984.982705][T17231]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  984.988601][T17231] RIP: 0033:0x7fb76819cdd9
[  984.993013][T17231] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  985.012704][T17231] RSP: 002b:00007fb769109028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  985.021134][T17231] RAX: ffffffffffffffda RBX: 00007fb768415fa0 RCX: 00007fb76819cdd9
[  985.029117][T17231] RDX: 0000000000000094 RSI: 0000200000000840 RDI: 0000000000000005
[  985.037099][T17231] RBP: 00007fb769109090 R08: 0000000000000000 R09: 0000000000000000
[  985.045065][T17231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  985.053039][T17231] R13: 00007fb768416038 R14: 00007fb768415fa0 R15: 00007ffcfed482f8
[  985.061034][T17231]  </TASK>
[  985.078838][T17231] Mem-Info:
[  985.082152][T17231] active_anon:7312 inactive_anon:0 isolated_anon:0
[  985.082152][T17231]  active_file:21788 inactive_file:40302 isolated_file:0
[  985.082152][T17231]  unevictable:768 dirty:237 writeback:0
[  985.082152][T17231]  slab_reclaimable:20887 slab_unreclaimable:96050
[  985.082152][T17231]  mapped:30085 shmem:1361 pagetables:626
[  985.082152][T17231]  sec_pagetables:0 bounce:0
[  985.082152][T17231]  kernel_misc_reclaimable:0
[  985.082152][T17231]  free:1320577 free_pcp:8565 free_cma:0
[  985.141650][T17231] Node 0 active_anon:29248kB inactive_anon:0kB active_file:87152kB inactive_file:161004kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120340kB dirty:948kB writeback:0kB shmem:3908kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11520kB pagetables:2504kB sec_pagetables:0kB all_unreclaimable? no
[  985.202931][T17231] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  985.280616][T17231] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  985.342691][T17231] lowmem_reserve[]: 0 2527 2528 2528 2528
[  985.350612][T17245] netlink: 'syz.3.4068': attribute type 39 has an invalid length.
[  985.364019][T17231] Node 0 DMA32 free:1362816kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:29148kB inactive_anon:0kB active_file:87152kB inactive_file:161004kB unevictable:1536kB writepending:948kB present:3129332kB managed:2592964kB mlocked:0kB bounce:0kB free_pcp:25168kB local_pcp:5380kB free_cma:0kB
[  985.409134][T17231] lowmem_reserve[]: 0 0 1 1 1
[  985.413933][T17231] Node 0 Normal free:16kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:12kB free_cma:0kB
[  985.454962][T17231] lowmem_reserve[]: 0 0 0 0 0
[  985.459831][T17231] Node 1 Normal free:3903620kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:9888kB local_pcp:4096kB free_cma:0kB
[  985.490114][T17231] lowmem_reserve[]: 0 0 0 0 0
[  985.495505][T17231] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  985.512377][T17231] Node 0 DMA32: 2610*4kB (UME) 1189*8kB (UM) 1713*16kB (UME) 570*32kB (UME) 313*64kB (UME) 534*128kB (UM) 254*256kB (UM) 216*512kB (UME) 113*1024kB (UM) 40*2048kB (UM) 204*4096kB (UM) = 1362816kB
[  985.544026][T17231] Node 0 Normal: 4*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB
[  985.559667][T17231] Node 1 Normal: 255*4kB (UE) 63*8kB (UME) 39*16kB (UME) 127*32kB (UE) 59*64kB (UME) 19*128kB (UME) 12*256kB (UM) 2*512kB (UM) 2*1024kB (UE) 1*2048kB (E) 948*4096kB (M) = 3903620kB
[  985.578716][T17231] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  985.589177][T17231] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  985.599149][T17231] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  985.609349][T17231] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  985.619262][T17231] 63451 total pagecache pages
[  985.624167][T17231] 0 pages in swap cache
[  985.628796][T17231] Free swap  = 124996kB
[  985.633085][T17231] Total swap = 124996kB
[  985.637763][T17231] 2097051 pages RAM
[  985.641698][T17231] 0 pages HighMem/MovableOnly
[  985.646878][T17231] 415209 pages reserved
[  985.651236][T17231] 0 pages cma reserved
[  985.870548][T17255] netlink: 'syz.4.4070': attribute type 2 has an invalid length.
[  985.900751][T17255] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4070'.
[  986.916509][T17274] FAULT_INJECTION: forcing a failure.
[  986.916509][T17274] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  986.944901][T17274] CPU: 0 PID: 17274 Comm: syz.2.4078 Not tainted syzkaller #0
[  986.952454][T17274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  986.962546][T17274] Call Trace:
[  986.965892][T17274]  <TASK>
[  986.968846][T17274]  dump_stack_lvl+0x188/0x24e
[  986.973571][T17274]  ? show_regs_print_info+0x12/0x12
[  986.978915][T17274]  ? load_image+0x400/0x400
[  986.983470][T17274]  ? __lock_acquire+0x7d10/0x7d10
[  986.988547][T17274]  ? perf_trace_run_bpf_submit+0xf3/0x1c0
[  986.994405][T17274]  should_fail_ex+0x399/0x4d0
[  986.999116][T17274]  _copy_from_user+0x2c/0x170
[  987.003819][T17274]  ___sys_sendmsg+0x1c3/0x360
[  987.008545][T17274]  ? __sys_sendmsg+0x290/0x290
[  987.013392][T17274]  ? __lock_acquire+0x7d10/0x7d10
[  987.018474][T17274]  __se_sys_sendmsg+0x1bb/0x2a0
[  987.023357][T17274]  ? __x64_sys_sendmsg+0x80/0x80
[  987.028319][T17274]  ? lockdep_hardirqs_on+0x94/0x140
[  987.033545][T17274]  do_syscall_64+0x4c/0xa0
[  987.037965][T17274]  ? clear_bhb_loop+0x60/0xb0
[  987.042647][T17274]  ? clear_bhb_loop+0x60/0xb0
[  987.047344][T17274]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  987.053237][T17274] RIP: 0033:0x7f4debb9cdd9
[  987.057671][T17274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  987.077480][T17274] RSP: 002b:00007f4decae9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  987.085909][T17274] RAX: ffffffffffffffda RBX: 00007f4debe15fa0 RCX: 00007f4debb9cdd9
[  987.093918][T17274] RDX: 0000000000040000 RSI: 00002000000000c0 RDI: 0000000000000005
[  987.101922][T17274] RBP: 00007f4decae9090 R08: 0000000000000000 R09: 0000000000000000
[  987.110177][T17274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  987.118287][T17274] R13: 00007f4debe16038 R14: 00007f4debe15fa0 R15: 00007ffdfe228e18
[  987.126330][T17274]  </TASK>
[  987.171818][T17284] netlink: 'syz.3.4081': attribute type 10 has an invalid length.
[  987.485324][T17284] device veth0_vlan left promiscuous mode
[  987.530595][T17284] device veth0_vlan entered promiscuous mode
[  987.643839][T17284] team0: Device veth0_vlan failed to register rx_handler
[  988.336007][T17305] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  988.382535][T17305] device syzkaller0 entered promiscuous mode
[  988.472461][T17315] FAULT_INJECTION: forcing a failure.
[  988.472461][T17315] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  988.488816][T17315] CPU: 1 PID: 17315 Comm: syz.1.4092 Not tainted syzkaller #0
[  988.496337][T17315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  988.506520][T17315] Call Trace:
[  988.509826][T17315]  <TASK>
[  988.512776][T17315]  dump_stack_lvl+0x188/0x24e
[  988.517499][T17315]  ? show_regs_print_info+0x12/0x12
[  988.522744][T17315]  ? load_image+0x400/0x400
[  988.527285][T17315]  ? __lock_acquire+0x7d10/0x7d10
[  988.532355][T17315]  should_fail_ex+0x399/0x4d0
[  988.537068][T17315]  strncpy_from_user+0x32/0x350
[  988.541940][T17315]  bpf_prog_load+0x1f3/0x1560
[  988.546689][T17315]  ? map_freeze+0x390/0x390
[  988.551194][T17315]  ? __might_fault+0xa6/0x120
[  988.555900][T17315]  ? __might_fault+0xa6/0x120
[  988.560577][T17315]  ? __might_fault+0xc2/0x120
[  988.565253][T17315]  ? __might_fault+0xa6/0x120
[  988.569929][T17315]  ? bpf_lsm_bpf+0x5/0x10
[  988.574252][T17315]  ? security_bpf+0x7a/0xa0
[  988.578784][T17315]  __sys_bpf+0x5b8/0x780
[  988.583050][T17315]  ? bpf_link_show_fdinfo+0x380/0x380
[  988.588723][T17315]  ? lock_chain_count+0x20/0x20
[  988.593611][T17315]  __x64_sys_bpf+0x78/0x90
[  988.598044][T17315]  do_syscall_64+0x4c/0xa0
[  988.602474][T17315]  ? clear_bhb_loop+0x60/0xb0
[  988.607173][T17315]  ? clear_bhb_loop+0x60/0xb0
[  988.611883][T17315]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  988.618450][T17315] RIP: 0033:0x7f5d6879cdd9
[  988.622967][T17315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  988.643016][T17315] RSP: 002b:00007f5d696db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  988.651434][T17315] RAX: ffffffffffffffda RBX: 00007f5d68a15fa0 RCX: 00007f5d6879cdd9
[  988.659407][T17315] RDX: 0000000000000094 RSI: 0000200000001bc0 RDI: 0000000000000005
[  988.667468][T17315] RBP: 00007f5d696db090 R08: 0000000000000000 R09: 0000000000000000
[  988.675524][T17315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  988.683533][T17315] R13: 00007f5d68a16038 R14: 00007f5d68a15fa0 R15: 00007ffeaea3d9c8
[  988.691515][T17315]  </TASK>
[  988.758797][T17316] netlink: 'syz.3.4093': attribute type 16 has an invalid length.
[  988.785332][T17316] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4093'.
[  988.835202][T17323] FAULT_INJECTION: forcing a failure.
[  988.835202][T17323] name failslab, interval 1, probability 0, space 0, times 0
[  988.906675][T17323] CPU: 0 PID: 17323 Comm: syz.1.4094 Not tainted syzkaller #0
[  988.914215][T17323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  988.924316][T17323] Call Trace:
[  988.927635][T17323]  <TASK>
[  988.930601][T17323]  dump_stack_lvl+0x188/0x24e
[  988.935427][T17323]  ? show_regs_print_info+0x12/0x12
[  988.940672][T17323]  ? load_image+0x400/0x400
[  988.945264][T17323]  ? kasan_set_track+0x60/0x70
[  988.950066][T17323]  ? kasan_set_track+0x4b/0x70
[  988.954860][T17323]  ? __kasan_slab_alloc+0x6b/0x80
[  988.959886][T17323]  ? slab_post_alloc_hook+0x4b/0x480
[  988.965210][T17323]  should_fail_ex+0x399/0x4d0
[  988.969943][T17323]  should_failslab+0x5/0x20
[  988.974481][T17323]  slab_pre_alloc_hook+0x59/0x310
[  988.979551][T17323]  ? ref_tracker_alloc+0x14e/0x4b0
[  988.984706][T17323]  __kmem_cache_alloc_node+0x4f/0x260
[  988.990134][T17323]  ? ref_tracker_alloc+0x14e/0x4b0
[  988.995298][T17323]  kmalloc_trace+0x26/0xe0
[  988.999773][T17323]  ref_tracker_alloc+0x14e/0x4b0
[  989.004769][T17323]  ? ref_tracker_dir_print+0x150/0x150
[  989.010290][T17323]  ? __kasan_slab_alloc+0x6b/0x80
[  989.015369][T17323]  ? slab_post_alloc_hook+0x67/0x480
[  989.020687][T17323]  ? slab_pre_alloc_hook+0x59/0x310
[  989.025972][T17323]  dst_init+0xda/0x410
[  989.030095][T17323]  dst_alloc+0x12a/0x160
[  989.034456][T17323]  ip_route_output_key_hash_rcu+0x14a4/0x23f0
[  989.040599][T17323]  ? ip_route_output_key_hash+0x139/0x330
[  989.046329][T17323]  ip_route_output_key_hash+0x1ef/0x330
[  989.051908][T17323]  ? ip_route_input_rcu+0x3160/0x3160
[  989.057358][T17323]  ? __lock_acquire+0x7d10/0x7d10
[  989.062455][T17323]  ip_route_output_flow+0x26/0x150
[  989.067613][T17323]  ? security_sk_classify_flow+0x77/0x90
[  989.073302][T17323]  raw_sendmsg+0x116d/0x1b20
[  989.077941][T17323]  ? raw_sendmsg+0x530/0x1b20
[  989.082862][T17323]  ? compat_raw_ioctl+0x60/0x60
[  989.087820][T17323]  ? __might_fault+0xa6/0x120
[  989.092543][T17323]  ? tomoyo_socket_sendmsg_permission+0x212/0x2f0
[  989.099004][T17323]  ? sock_rps_record_flow+0x19/0x3f0
[  989.104412][T17323]  ? inet_sendmsg+0x78/0x2f0
[  989.109001][T17323]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  989.114285][T17323]  ? security_socket_sendmsg+0x7c/0xa0
[  989.119782][T17323]  ? inet_send_prepare+0x260/0x260
[  989.124951][T17323]  ____sys_sendmsg+0x5be/0x970
[  989.129795][T17323]  ? __sys_sendmsg_sock+0x30/0x30
[  989.134861][T17323]  ? __import_iovec+0x315/0x500
[  989.139836][T17323]  ? import_iovec+0x6f/0xa0
[  989.144357][T17323]  ___sys_sendmsg+0x2a2/0x360
[  989.149054][T17323]  ? __sys_sendmsg+0x290/0x290
[  989.153885][T17323]  ? __lock_acquire+0x7d10/0x7d10
[  989.159018][T17323]  __se_sys_sendmsg+0x1bb/0x2a0
[  989.163914][T17323]  ? __x64_sys_sendmsg+0x80/0x80
[  989.169033][T17323]  ? lockdep_hardirqs_on+0x94/0x140
[  989.174285][T17323]  do_syscall_64+0x4c/0xa0
[  989.178750][T17323]  ? clear_bhb_loop+0x60/0xb0
[  989.183477][T17323]  ? clear_bhb_loop+0x60/0xb0
[  989.188282][T17323]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  989.194178][T17323] RIP: 0033:0x7f5d6879cdd9
[  989.198631][T17323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  989.218274][T17323] RSP: 002b:00007f5d696db028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  989.226734][T17323] RAX: ffffffffffffffda RBX: 00007f5d68a15fa0 RCX: 00007f5d6879cdd9
[  989.234769][T17323] RDX: 0000000000000000 RSI: 0000200000001000 RDI: 0000000000000007
[  989.242774][T17323] RBP: 00007f5d696db090 R08: 0000000000000000 R09: 0000000000000000
[  989.250757][T17323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  989.258736][T17323] R13: 00007f5d68a16038 R14: 00007f5d68a15fa0 R15: 00007ffeaea3d9c8
[  989.266785][T17323]  </TASK>
[  989.973148][T17335] FAULT_INJECTION: forcing a failure.
[  989.973148][T17335] name failslab, interval 1, probability 0, space 0, times 0
[  989.994936][T17335] CPU: 0 PID: 17335 Comm: syz.4.4098 Not tainted syzkaller #0
[  990.002585][T17335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  990.012643][T17335] Call Trace:
[  990.015920][T17335]  <TASK>
[  990.018855][T17335]  dump_stack_lvl+0x188/0x24e
[  990.023553][T17335]  ? show_regs_print_info+0x12/0x12
[  990.028754][T17335]  ? load_image+0x400/0x400
[  990.033256][T17335]  ? __might_sleep+0xd0/0xd0
[  990.037835][T17335]  ? __lock_acquire+0x7d10/0x7d10
[  990.042898][T17335]  should_fail_ex+0x399/0x4d0
[  990.047588][T17335]  should_failslab+0x5/0x20
[  990.052110][T17335]  slab_pre_alloc_hook+0x59/0x310
[  990.057255][T17335]  ? bpf_prog_test_run_skb+0x234/0x12a0
[  990.062888][T17335]  __kmem_cache_alloc_node+0x4f/0x260
[  990.068267][T17335]  ? bpf_prog_test_run_skb+0x234/0x12a0
[  990.073827][T17335]  __kmalloc+0xa0/0x240
[  990.077999][T17335]  ? lockdep_hardirqs_on+0x94/0x140
[  990.083210][T17335]  bpf_prog_test_run_skb+0x234/0x12a0
[  990.088717][T17335]  ? __fget_files+0x28/0x4b0
[  990.093368][T17335]  ? __fget_files+0x28/0x4b0
[  990.098056][T17335]  ? __fget_files+0x43d/0x4b0
[  990.102765][T17335]  ? cpu_online+0xa0/0xa0
[  990.107090][T17335]  bpf_prog_test_run+0x31e/0x390
[  990.112041][T17335]  __sys_bpf+0x62b/0x780
[  990.116306][T17335]  ? bpf_link_show_fdinfo+0x380/0x380
[  990.121692][T17335]  ? lock_chain_count+0x20/0x20
[  990.126546][T17335]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  990.132526][T17335]  __x64_sys_bpf+0x78/0x90
[  990.136988][T17335]  do_syscall_64+0x4c/0xa0
[  990.141852][T17335]  ? clear_bhb_loop+0x60/0xb0
[  990.146594][T17335]  ? clear_bhb_loop+0x60/0xb0
[  990.151396][T17335]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  990.157309][T17335] RIP: 0033:0x7fb76819cdd9
[  990.161740][T17335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  990.181362][T17335] RSP: 002b:00007fb769109028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  990.189782][T17335] RAX: ffffffffffffffda RBX: 00007fb768415fa0 RCX: 00007fb76819cdd9
[  990.197758][T17335] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a
[  990.206000][T17335] RBP: 00007fb769109090 R08: 0000000000000000 R09: 0000000000000000
[  990.213962][T17335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  990.222117][T17335] R13: 00007fb768416038 R14: 00007fb768415fa0 R15: 00007ffcfed482f8
[  990.230212][T17335]  </TASK>
[  993.048274][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  993.054667][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  993.937568][T17318] netlink: 'syz.3.4093': attribute type 10 has an invalid length.
[  993.958274][T17318] team0: Port device macvlan0 added
[  993.969602][T17333] netlink: 'syz.1.4096': attribute type 10 has an invalid length.
[  993.979502][T17333] netlink: 55 bytes leftover after parsing attributes in process `syz.1.4096'.
[  994.592411][T17359] netlink: 'syz.0.4105': attribute type 2 has an invalid length.
[  994.680062][T17359] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4105'.
[  997.499236][T17382] netlink: 'syz.2.4116': attribute type 39 has an invalid length.
[  997.955724][T17399] netlink: 'syz.3.4119': attribute type 10 has an invalid length.
[ 1000.411995][T17446] netlink: 'syz.2.4137': attribute type 2 has an invalid length.
[ 1000.503150][T17446] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4137'.
[ 1005.617782][T17476] device sit0 left promiscuous mode
[ 1007.018978][T17511] netlink: 'syz.0.4156': attribute type 2 has an invalid length.
[ 1007.088309][T17511] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4156'.
[ 1010.479812][T17521] device sit0 left promiscuous mode
[ 1011.702562][T17555] netlink: 'syz.2.4173': attribute type 2 has an invalid length.
[ 1011.741026][T17555] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4173'.
[ 1016.812781][T17562] device sit0 left promiscuous mode
[ 1017.909554][T17594] netlink: 'syz.0.4187': attribute type 2 has an invalid length.
[ 1017.929463][T17594] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4187'.
[ 1024.468130][T17619] device sit0 left promiscuous mode
[ 1025.005919][T17668] netlink: 'syz.1.4208': attribute type 2 has an invalid length.
[ 1025.061327][T17668] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4208'.
[ 1027.873636][T17711] netlink: 'syz.2.4226': attribute type 2 has an invalid length.
[ 1027.944952][T17711] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4226'.
[ 1033.252947][T17737] device sit0 left promiscuous mode
[ 1034.081375][T17768] netlink: 'syz.1.4245': attribute type 2 has an invalid length.
[ 1034.127684][T17768] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4245'.
[ 1038.727479][T17815] netlink: 'syz.2.4265': attribute type 2 has an invalid length.
[ 1038.764705][T17815] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4265'.
[ 1041.486422][T17809] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4263'.
[ 1041.533336][T17809] device veth0_macvtap left promiscuous mode
[ 1042.840226][T17846] netlink: 'syz.0.4276': attribute type 2 has an invalid length.
[ 1042.864657][T17846] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4276'.
[ 1045.933200][T17883] netlink: 'syz.1.4289': attribute type 2 has an invalid length.
[ 1045.950983][T17883] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4289'.
[ 1054.149668][T17920] netlink: 'syz.4.4301': attribute type 2 has an invalid length.
[ 1054.210059][T17920] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4301'.
[ 1054.487785][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.494208][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[ 1057.577233][T17963] netlink: 'syz.1.4317': attribute type 2 has an invalid length.
[ 1057.592829][T17963] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4317'.
[ 1062.201680][T18002] netlink: 'syz.0.4332': attribute type 2 has an invalid length.
[ 1062.219643][T18002] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4332'.
[ 1066.242675][T17977] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.4323'.
[ 1068.772682][T18043] netlink: 'syz.3.4343': attribute type 2 has an invalid length.
[ 1068.804736][T18043] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4343'.
[ 1069.091471][T18051] netlink: 'syz.2.4347': attribute type 39 has an invalid length.
[ 1071.153431][T18081] netlink: 'syz.2.4358': attribute type 2 has an invalid length.
[ 1071.172361][T18081] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4358'.
[ 1077.341583][T18126] netlink: 'syz.2.4372': attribute type 2 has an invalid length.
[ 1077.372782][T18126] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4372'.
[ 1077.825224][T18141] netlink: 103 bytes leftover after parsing attributes in process `syz.0.4378'.
[ 1080.338075][T18179] netlink: 'syz.3.4389': attribute type 2 has an invalid length.
[ 1080.367373][T18179] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4389'.
[ 1083.898702][T18219] netlink: 'syz.3.4406': attribute type 2 has an invalid length.
[ 1083.920739][T18219] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4406'.
[ 1084.095920][T18225] netlink: 'syz.0.4408': attribute type 29 has an invalid length.
[ 1087.294672][T18188] netlink: 103 bytes leftover after parsing attributes in process `syz.1.4394'.
[ 1087.311294][T18225] netlink: 'syz.0.4408': attribute type 29 has an invalid length.
[ 1087.788639][T18255] netlink: 'syz.1.4419': attribute type 2 has an invalid length.
[ 1087.817225][T18255] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4419'.
[ 1088.644916][T18272] netlink: 103 bytes leftover after parsing attributes in process `syz.4.4427'.
[ 1090.899184][T18290] netlink: 'syz.2.4433': attribute type 29 has an invalid length.
[ 1091.721935][T18308] netlink: 'syz.0.4439': attribute type 2 has an invalid length.
[ 1091.734775][T18308] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4439'.
[ 1094.749212][T18290] netlink: 'syz.2.4433': attribute type 29 has an invalid length.
[ 1094.764824][T18313] netlink: 103 bytes leftover after parsing attributes in process `syz.0.4441'.
[ 1095.809320][T18337] netlink: 'syz.3.4450': attribute type 2 has an invalid length.
[ 1095.856553][T18337] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4450'.
[ 1095.957090][T18345] netlink: 'syz.2.4452': attribute type 29 has an invalid length.
[ 1095.975245][T18345] netlink: 'syz.2.4452': attribute type 29 has an invalid length.
[ 1095.997810][T18346] netlink: 144 bytes leftover after parsing attributes in process `syz.4.4453'.
[ 1096.008440][T18341] FAULT_INJECTION: forcing a failure.
[ 1096.008440][T18341] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1096.025059][T18346] FAULT_INJECTION: forcing a failure.
[ 1096.025059][T18346] name failslab, interval 1, probability 0, space 0, times 0
[ 1096.043601][T18346] CPU: 1 PID: 18346 Comm: syz.4.4453 Not tainted syzkaller #0
[ 1096.051131][T18346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1096.061218][T18346] Call Trace:
[ 1096.064517][T18346]  <TASK>
[ 1096.067463][T18346]  dump_stack_lvl+0x188/0x24e
[ 1096.072180][T18346]  ? show_regs_print_info+0x12/0x12
[ 1096.077412][T18346]  ? load_image+0x400/0x400
[ 1096.082023][T18346]  ? __might_sleep+0xd0/0xd0
[ 1096.086727][T18346]  ? __lock_acquire+0x7d10/0x7d10
[ 1096.091782][T18346]  should_fail_ex+0x399/0x4d0
[ 1096.096486][T18346]  should_failslab+0x5/0x20
[ 1096.101008][T18346]  slab_pre_alloc_hook+0x59/0x310
[ 1096.106053][T18346]  ? widen_string+0x3b/0x2b0
[ 1096.110674][T18346]  ? string+0x26d/0x2b0
[ 1096.114859][T18346]  ? __request_module+0x31c/0xa00
[ 1096.119908][T18346]  __kmem_cache_alloc_node+0x4f/0x260
[ 1096.125309][T18346]  ? __request_module+0x31c/0xa00
[ 1096.130366][T18346]  kmalloc_trace+0x26/0xe0
[ 1096.134823][T18346]  __request_module+0x31c/0xa00
[ 1096.139707][T18346]  ? __lock_acquire+0x7d10/0x7d10
[ 1096.144768][T18346]  ? copy_regset_to_user+0x1e0/0x1e0
[ 1096.150092][T18346]  ? mutex_unlock+0x10/0x10
[ 1096.154632][T18346]  ? nla_strscpy+0x105/0x160
[ 1096.159249][T18346]  rtnl_newlink+0xb1e/0x20a0
[ 1096.163867][T18346]  ? rtnl_newlink+0x4c1/0x20a0
[ 1096.168660][T18346]  ? rtnl_newlink+0x4c1/0x20a0
[ 1096.173463][T18346]  ? rtnl_setlink+0x510/0x510
[ 1096.178165][T18346]  ? __rwlock_init+0x140/0x140
[ 1096.182946][T18346]  ? do_raw_spin_unlock+0x11d/0x230
[ 1096.188190][T18346]  ? __mutex_lock+0x810/0xaf0
[ 1096.192900][T18346]  ? __mutex_lock+0x3b2/0xaf0
[ 1096.197617][T18346]  ? rtnetlink_rcv_msg+0x226/0xfc0
[ 1096.202754][T18346]  ? rtnetlink_rcv_msg+0x226/0xfc0
[ 1096.207892][T18346]  ? rtnl_setlink+0x510/0x510
[ 1096.212597][T18346]  rtnetlink_rcv_msg+0x87c/0xfc0
[ 1096.217576][T18346]  ? rtnetlink_bind+0x80/0x80
[ 1096.222278][T18346]  ? __local_bh_enable_ip+0x136/0x1c0
[ 1096.227665][T18346]  ? lockdep_hardirqs_on+0x94/0x140
[ 1096.232889][T18346]  ? __local_bh_enable_ip+0x136/0x1c0
[ 1096.238281][T18346]  ? _local_bh_enable+0xa0/0xa0
[ 1096.243155][T18346]  ? __dev_queue_xmit+0x26b/0x37c0
[ 1096.248286][T18346]  ? __dev_queue_xmit+0x26b/0x37c0
[ 1096.253419][T18346]  ? __dev_queue_xmit+0x1cd2/0x37c0
[ 1096.258646][T18346]  ? __dev_queue_xmit+0x26b/0x37c0
[ 1096.263788][T18346]  ? ref_tracker_free+0x68c/0x840
[ 1096.268840][T18346]  ? __copy_skb_header+0x3ba/0x4f0
[ 1096.273980][T18346]  ? refcount_inc+0x70/0x70
[ 1096.278505][T18346]  ? memcpy+0x3c/0x60
[ 1096.282506][T18346]  ? __copy_skb_header+0x3ba/0x4f0
[ 1096.287642][T18346]  ? __skb_clone+0x480/0x790
[ 1096.292261][T18346]  netlink_rcv_skb+0x1fb/0x450
[ 1096.297062][T18346]  ? rtnetlink_bind+0x80/0x80
[ 1096.301766][T18346]  ? netlink_ack+0x1170/0x1170
[ 1096.306561][T18346]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1096.311790][T18346]  netlink_unicast+0x74d/0x8d0
[ 1096.316593][T18346]  netlink_sendmsg+0x8ad/0xbd0
[ 1096.321389][T18346]  ? netlink_getsockopt+0x550/0x550
[ 1096.326613][T18346]  ? aa_sock_msg_perm+0x94/0x150
[ 1096.331581][T18346]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1096.336971][T18346]  ? security_socket_sendmsg+0x7c/0xa0
[ 1096.342458][T18346]  ? netlink_getsockopt+0x550/0x550
[ 1096.347694][T18346]  ____sys_sendmsg+0x5be/0x970
[ 1096.352510][T18346]  ? __sys_sendmsg_sock+0x30/0x30
[ 1096.357559][T18346]  ? __import_iovec+0x315/0x500
[ 1096.362434][T18346]  ? import_iovec+0x6f/0xa0
[ 1096.366961][T18346]  ___sys_sendmsg+0x2a2/0x360
[ 1096.371670][T18346]  ? __sys_sendmsg+0x290/0x290
[ 1096.376517][T18346]  ? __lock_acquire+0x7d10/0x7d10
[ 1096.381589][T18346]  __se_sys_sendmsg+0x1bb/0x2a0
[ 1096.386476][T18346]  ? __x64_sys_sendmsg+0x80/0x80
[ 1096.391550][T18346]  ? lockdep_hardirqs_on+0x94/0x140
[ 1096.396771][T18346]  do_syscall_64+0x4c/0xa0
[ 1096.401207][T18346]  ? clear_bhb_loop+0x60/0xb0
[ 1096.405905][T18346]  ? clear_bhb_loop+0x60/0xb0
[ 1096.410604][T18346]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1096.416520][T18346] RIP: 0033:0x7fb76819cdd9
[ 1096.420952][T18346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1096.440585][T18346] RSP: 002b:00007fb7690e8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1096.449027][T18346] RAX: ffffffffffffffda RBX: 00007fb768416090 RCX: 00007fb76819cdd9
[ 1096.457025][T18346] RDX: 0000000004000840 RSI: 00002000000005c0 RDI: 0000000000000003
[ 1096.465192][T18346] RBP: 00007fb7690e8090 R08: 0000000000000000 R09: 0000000000000000
[ 1096.473193][T18346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1096.481272][T18346] R13: 00007fb768416128 R14: 00007fb768416090 R15: 00007ffcfed482f8
[ 1096.489288][T18346]  </TASK>
[ 1096.518088][T18341] CPU: 1 PID: 18341 Comm: syz.2.4452 Not tainted syzkaller #0
[ 1096.525612][T18341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1096.535697][T18341] Call Trace:
[ 1096.539004][T18341]  <TASK>
[ 1096.541954][T18341]  dump_stack_lvl+0x188/0x24e
[ 1096.546673][T18341]  ? show_regs_print_info+0x12/0x12
[ 1096.551906][T18341]  ? load_image+0x400/0x400
[ 1096.556441][T18341]  ? __might_fault+0xa6/0x120
[ 1096.561148][T18341]  should_fail_ex+0x399/0x4d0
[ 1096.565854][T18341]  copyout+0x1b/0x120
[ 1096.569877][T18341]  _copy_to_iter+0x48b/0x1040
[ 1096.574622][T18341]  ? iov_iter_init+0x1f0/0x1f0
[ 1096.579434][T18341]  ? __virt_addr_valid+0x188/0x540
[ 1096.584670][T18341]  ? __virt_addr_valid+0x465/0x540
[ 1096.589816][T18341]  ? __phys_addr_symbol+0x2b/0x70
[ 1096.594885][T18341]  ? __check_object_size+0x500/0xa40
[ 1096.600206][T18341]  __skb_datagram_iter+0xde/0x740
[ 1096.605275][T18341]  ? skb_copy_datagram_iter+0x290/0x290
[ 1096.610904][T18341]  skb_copy_datagram_iter+0xd7/0x290
[ 1096.616238][T18341]  netlink_recvmsg+0x2d0/0xe00
[ 1096.621045][T18341]  ? netlink_sendmsg+0xbd0/0xbd0
[ 1096.626025][T18341]  ? aa_af_perm+0x340/0x340
[ 1096.630557][T18341]  ? __might_fault+0xa6/0x120
[ 1096.635260][T18341]  ? bpf_lsm_socket_recvmsg+0x5/0x10
[ 1096.640566][T18341]  ? security_socket_recvmsg+0x85/0xb0
[ 1096.646060][T18341]  ? netlink_sendmsg+0xbd0/0xbd0
[ 1096.651026][T18341]  ____sys_recvmsg+0x2cb/0x5e0
[ 1096.655831][T18341]  ? __sys_recvmsg_sock+0x40/0x40
[ 1096.660914][T18341]  ? import_iovec+0x6f/0xa0
[ 1096.665442][T18341]  ___sys_recvmsg+0x212/0x590
[ 1096.670149][T18341]  ? __sys_recvmsg+0x290/0x290
[ 1096.674947][T18341]  ? common_file_perm+0x171/0x1c0
[ 1096.680015][T18341]  ? __fget_files+0x43d/0x4b0
[ 1096.684726][T18341]  __x64_sys_recvmsg+0x205/0x2e0
[ 1096.689873][T18341]  ? ___sys_recvmsg+0x590/0x590
[ 1096.694764][T18341]  ? lockdep_hardirqs_on+0x94/0x140
[ 1096.699990][T18341]  do_syscall_64+0x4c/0xa0
[ 1096.704444][T18341]  ? clear_bhb_loop+0x60/0xb0
[ 1096.709141][T18341]  ? clear_bhb_loop+0x60/0xb0
[ 1096.713840][T18341]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1096.719764][T18341] RIP: 0033:0x7f4debb9cdd9
[ 1096.724285][T18341] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1096.744095][T18341] RSP: 002b:00007f4decae9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[ 1096.752704][T18341] RAX: ffffffffffffffda RBX: 00007f4debe15fa0 RCX: 00007f4debb9cdd9
[ 1096.760701][T18341] RDX: 0000000000002000 RSI: 0000200000000300 RDI: 0000000000000003
[ 1096.768699][T18341] RBP: 00007f4decae9090 R08: 0000000000000000 R09: 0000000000000000
[ 1096.776694][T18341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1096.784682][T18341] R13: 00007f4debe16038 R14: 00007f4debe15fa0 R15: 00007ffdfe228e18
[ 1096.792679][T18341]  </TASK>
[ 1096.815769][T18341] netlink: 'syz.2.4452': attribute type 29 has an invalid length.
[ 1096.896999][T18348] netlink: 103 bytes leftover after parsing attributes in process `syz.2.4454'.
[ 1097.964241][T18379] netlink: 'syz.0.4465': attribute type 2 has an invalid length.
[ 1098.026314][T18379] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4465'.
[ 1100.844213][T18386] netlink: 'syz.4.4468': attribute type 39 has an invalid length.
[ 1100.852394][T18393] netlink: 103 bytes leftover after parsing attributes in process `syz.3.4469'.
[ 1101.415950][T18430] netlink: 'syz.0.4480': attribute type 2 has an invalid length.
[ 1101.446814][T18430] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4480'.
[ 1102.768900][T18445] netlink: 103 bytes leftover after parsing attributes in process `syz.3.4486'.
[ 1103.657751][T18474] netlink: 'syz.2.4495': attribute type 2 has an invalid length.
[ 1103.694748][T18474] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4495'.
[ 1106.384248][T18499] delete_channel: no stack
[ 1107.576621][T18487] netlink: 103 bytes leftover after parsing attributes in process `syz.2.4499'.
[ 1107.869191][T18514] netlink: 'syz.2.4509': attribute type 2 has an invalid length.
[ 1107.894706][T18514] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4509'.
[ 1110.322323][T18527] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4516'.
[ 1110.726409][T18537] netlink: 'syz.2.4519': attribute type 21 has an invalid length.
[ 1110.785930][T18537] netlink: 'syz.2.4519': attribute type 1 has an invalid length.
[ 1110.831545][T18542] netlink: 103 bytes leftover after parsing attributes in process `syz.0.4520'.
[ 1111.892847][T18554] netlink: 'syz.3.4525': attribute type 2 has an invalid length.
[ 1111.942030][T18554] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4525'.
[ 1116.064690][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[ 1116.071095][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[ 1118.251180][T18558] netlink: 'syz.2.4527': attribute type 19 has an invalid length.
[ 1118.259251][T18558] netlink: 14552 bytes leftover after parsing attributes in process `syz.2.4527'.
[ 1118.279430][T18580] netlink: 103 bytes leftover after parsing attributes in process `syz.3.4533'.
[ 1118.621024][T18601] netlink: 'syz.3.4538': attribute type 2 has an invalid length.
[ 1118.669067][T18601] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4538'.
[ 1124.776276][T18622] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4543'.
[ 1124.792017][T18634] netlink: 103 bytes leftover after parsing attributes in process `syz.0.4549'.
[ 1125.161283][T18651] netlink: 'syz.0.4554': attribute type 2 has an invalid length.
[ 1125.219259][T18651] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4554'.
[ 1128.183022][T18700] netlink: 'syz.3.4567': attribute type 2 has an invalid length.
[ 1128.208331][T18700] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4567'.
[ 1131.050519][T18719] netlink: 'syz.3.4574': attribute type 3 has an invalid length.
[ 1131.064304][T18719] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4574'.
[ 1131.090353][T18720] netlink: 'syz.3.4574': attribute type 3 has an invalid length.
[ 1131.098370][T18720] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4574'.
[ 1131.458931][T18732] netlink: 'syz.2.4578': attribute type 2 has an invalid length.
[ 1131.509887][T18732] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4578'.
[ 1134.142236][T18792] netlink: 'syz.0.4596': attribute type 2 has an invalid length.
[ 1134.166109][T18792] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4596'.
[ 1135.570750][T18778] delete_channel: no stack
[ 1139.979884][T18826] netlink: 'syz.2.4607': attribute type 2 has an invalid length.
[ 1139.993398][T18826] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4607'.
[ 1141.989187][T18856] netlink: 'syz.4.4618': attribute type 2 has an invalid length.
[ 1142.007876][T18856] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4618'.
[ 1145.481710][T18887] netlink: 'syz.2.4628': attribute type 16 has an invalid length.
[ 1145.519480][T18887] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4628'.
[ 1145.573729][T18891] netlink: 'syz.3.4629': attribute type 2 has an invalid length.
[ 1145.612219][T18891] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4629'.
[ 1150.728201][T18887] netlink: 'syz.2.4628': attribute type 10 has an invalid length.
[ 1150.753657][T18887] team0: Port device macvlan0 added
[ 1150.786770][T18894] team0: Port device team_slave_0 removed
[ 1150.842986][T18896] netlink: 'syz.4.4630': attribute type 10 has an invalid length.
[ 1150.921513][T18896] team0 (unregistering): Port device team_slave_1 removed
[ 1153.701819][T18943] device bridge_slave_1 left promiscuous mode
[ 1153.735377][T18943] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1153.841399][T18943] device bridge_slave_0 left promiscuous mode
[ 1153.933631][T18943] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1154.313394][T18957] netlink: 'syz.4.4642': attribute type 10 has an invalid length.
[ 1154.347656][T18957] device veth1_macvtap left promiscuous mode
[ 1160.793627][T19011] device bridge_slave_1 left promiscuous mode
[ 1160.800042][T19011] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1160.813188][T19011] device bridge_slave_0 left promiscuous mode
[ 1160.823259][T19011] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1160.876558][T19011] bond0: (slave bridge0): Releasing backup interface
[ 1160.978337][T19017] device syzkaller0 entered promiscuous mode
[ 1165.575205][T19083] device bridge_slave_1 left promiscuous mode
[ 1165.592230][T19083] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1165.653981][T19083] device bridge_slave_0 left promiscuous mode
[ 1165.680515][T19083] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1166.768091][T19110] netlink: 10 bytes leftover after parsing attributes in process `syz.4.4690'.
[ 1166.942279][    C0] 
[ 1166.942289][    C0] ================================
[ 1166.942294][    C0] WARNING: inconsistent lock state
[ 1166.942304][    C0] syzkaller #0 Not tainted
[ 1166.942314][    C0] --------------------------------
[ 1166.942319][    C0] inconsistent {INITIAL USE} -> {IN-NMI} usage.
[ 1166.942326][    C0] syz.3.4691/19112 [HC1[1]:SC0[0]:HE0:SE1] takes:
[ 1166.942347][    C0] ffff88807b91a218 (&htab->lockdep_key){....}-{2:2}, at: htab_lock_bucket+0x179/0x2f0
[ 1166.942396][    C0] {INITIAL USE} state was registered at:
[ 1166.942403][    C0]   lock_acquire+0x1bb/0x4a0
[ 1166.942422][    C0]   _raw_spin_lock+0x2a/0x40
[ 1166.942439][    C0]   htab_lock_bucket+0x179/0x2f0
[ 1166.942455][    C0]   htab_map_update_elem+0x226/0xb00
[ 1166.942469][    C0]   bpf_map_update_value+0x59e/0x670
[ 1166.942487][    C0]   generic_map_update_batch+0x54b/0x810
[ 1166.942504][    C0]   bpf_map_do_batch+0x466/0x600
[ 1166.942523][    C0]   __sys_bpf+0x6f7/0x780
[ 1166.942541][    C0]   __x64_sys_bpf+0x78/0x90
[ 1166.942559][    C0]   do_syscall_64+0x4c/0xa0
[ 1166.942579][    C0]   entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1166.942597][    C0] irq event stamp: 2748
[ 1166.942603][    C0] hardirqs last  enabled at (2747): [<ffffffff8a2db990>] exc_debug+0xf0/0x130
[ 1166.942622][    C0] hardirqs last disabled at (2748): [<ffffffff8a2db90e>] exc_debug+0x6e/0x130
[ 1166.942641][    C0] softirqs last  enabled at (1978): [<ffffffff814f749b>] __irq_exit_rcu+0x13b/0x230
[ 1166.942661][    C0] softirqs last disabled at (1839): [<ffffffff814f749b>] __irq_exit_rcu+0x13b/0x230
[ 1166.942679][    C0] 
[ 1166.942679][    C0] other info that might help us debug this:
[ 1166.942684][    C0]  Possible unsafe locking scenario:
[ 1166.942684][    C0] 
[ 1166.942689][    C0]        CPU0
[ 1166.942692][    C0]        ----
[ 1166.942695][    C0]   lock(&htab->lockdep_key);
[ 1166.942706][    C0]   <Interrupt>
[ 1166.942709][    C0]     lock(&htab->lockdep_key);
[ 1166.942720][    C0] 
[ 1166.942720][    C0]  *** DEADLOCK ***
[ 1166.942720][    C0] 
[ 1166.942723][    C0] no locks held by syz.3.4691/19112.
[ 1166.942730][    C0] 
[ 1166.942730][    C0] stack backtrace:
[ 1166.942735][    C0] CPU: 0 PID: 19112 Comm: syz.3.4691 Not tainted syzkaller #0
[ 1166.942751][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1166.942760][    C0] Call Trace:
[ 1166.942766][    C0]  <#DB>
[ 1166.942773][    C0]  dump_stack_lvl+0x188/0x24e
[ 1166.942796][    C0]  ? show_regs_print_info+0x12/0x12
[ 1166.942820][    C0]  ? print_usage_bug+0x42a/0x690
[ 1166.942840][    C0]  ? verify_lock_unused+0x18/0x140
[ 1166.942861][    C0]  lock_acquire+0x2df/0x4a0
[ 1166.942883][    C0]  ? htab_lock_bucket+0x179/0x2f0
[ 1166.942901][    C0]  ? read_lock_is_recursive+0x10/0x10
[ 1166.942923][    C0]  ? perf_trace_lock+0x301/0x390
[ 1166.942941][    C0]  ? perf_output_begin_forward+0xa7/0xa80
[ 1166.942963][    C0]  _raw_spin_lock+0x2a/0x40
[ 1166.942979][    C0]  ? htab_lock_bucket+0x179/0x2f0
[ 1166.942997][    C0]  htab_lock_bucket+0x179/0x2f0
[ 1166.943016][    C0]  ? htab_lru_map_delete_node+0x630/0x630
[ 1166.943034][    C0]  ? look_up_lock_class+0x75/0x140
[ 1166.943052][    C0]  ? verify_lock_unused+0x18/0x140
[ 1166.943073][    C0]  ? htab_map_hash+0x301/0x6d0
[ 1166.943092][    C0]  htab_map_delete_elem+0x19e/0x5b0
[ 1166.943110][    C0]  ? bpf_overflow_handler+0xd9/0x7c0
[ 1166.943128][    C0]  ? htab_map_update_elem+0xb00/0xb00
[ 1166.943144][    C0]  ? perf_trace_buf_update+0xa8/0x230
[ 1166.943162][    C0]  ? perf_tp_event+0xc30/0xc30
[ 1166.943183][    C0]  ? perf_trace_buf_alloc+0x300/0x300
[ 1166.943203][    C0]  bpf_prog_2c29ac5cdc6b1842+0x3a/0x3e
[ 1166.943230][    C0]  bpf_overflow_handler+0x522/0x7c0
[ 1166.943249][    C0]  ? bpf_overflow_handler+0xd9/0x7c0
[ 1166.943267][    C0]  ? perf_swevent_overflow+0x230/0x230
[ 1166.943288][    C0]  ? __perf_event_account_interrupt+0x187/0x280
[ 1166.943307][    C0]  __perf_event_overflow+0x448/0x610
[ 1166.943329][    C0]  perf_swevent_overflow+0x19b/0x230
[ 1166.943345][    C0]  perf_swevent_event+0x458/0x570
[ 1166.943365][    C0]  ? perf_tp_event+0xc30/0xc30
[ 1166.943385][    C0]  perf_bp_event+0x312/0x3f0
[ 1166.943406][    C0]  ? perf_event_free_bpf_prog+0x110/0x110
[ 1166.943434][    C0]  ? atomic_notifier_call_chain+0x2c/0x2b0
[ 1166.943453][    C0]  ? read_lock_is_recursive+0x10/0x10
[ 1166.943479][    C0]  hw_breakpoint_exceptions_notify+0x152/0x470
[ 1166.943503][    C0]  atomic_notifier_call_chain+0x17a/0x2b0
[ 1166.943521][    C0]  ? atomic_notifier_call_chain+0x2c/0x2b0
[ 1166.943539][    C0]  notify_die+0x141/0x1a0
[ 1166.943558][    C0]  ? srcu_init_notifier_head+0x90/0x90
[ 1166.943578][    C0]  notify_debug+0x20/0x30
[ 1166.943596][    C0]  exc_debug+0xd9/0x130
[ 1166.943610][    C0]  asm_exc_debug+0x1a/0x40
[ 1166.943628][    C0] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40
[ 1166.943652][    C0] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 <f3> a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90
[ 1166.943666][    C0] RSP: 0018:ffffc9000c91fd48 EFLAGS: 00050202
[ 1166.943678][    C0] RAX: ffffffff84114901 RBX: 0000000000000050 RCX: 000000000000000d
[ 1166.943689][    C0] RDX: 0000000000000050 RSI: 0000200000000303 RDI: ffffc9000c91fe03
[ 1166.943699][    C0] RBP: 0000000000000000 R08: ffffc9000c91fe0f R09: 1ffff92001923fc1
[ 1166.943709][    C0] R10: dffffc0000000000 R11: fffff52001923fc2 R12: 00007fffffffefb0
[ 1166.943720][    C0] R13: 0000000000000050 R14: ffffc9000c91fdc0 R15: 00002000000002c0
[ 1166.943733][    C0]  ? _copy_from_user+0x11/0x170
[ 1166.943756][    C0]  </#DB>
[ 1166.943760][    C0]  <TASK>
[ 1166.943765][    C0]  _copy_from_user+0xf4/0x170
[ 1166.943785][    C0]  __sys_bpf+0x2ea/0x780
[ 1166.943804][    C0]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1166.943828][    C0]  ? lock_chain_count+0x20/0x20
[ 1166.943850][    C0]  __x64_sys_bpf+0x78/0x90
[ 1166.943875][    C0]  do_syscall_64+0x4c/0xa0
[ 1166.943895][    C0]  ? clear_bhb_loop+0x60/0xb0
[ 1166.943914][    C0]  ? clear_bhb_loop+0x60/0xb0
[ 1166.943934][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1166.943953][    C0] RIP: 0033:0x7f5e82b9cdd9
[ 1166.943967][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1166.943980][    C0] RSP: 002b:00007f5e83a00028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1166.944045][    C0] RAX: ffffffffffffffda RBX: 00007f5e82e15fa0 RCX: 00007f5e82b9cdd9
[ 1166.944058][    C0] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000001c
[ 1166.944070][    C0] RBP: 00007f5e82c32d69 R08: 0000000000000000 R09: 0000000000000000
[ 1166.944081][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1166.944092][    C0] R13: 00007f5e82e16038 R14: 00007f5e82e15fa0 R15: 00007ffd0d1ae708
[ 1166.944110][    C0]  </TASK>
[ 1167.653578][T19112] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4691'.