last executing test programs:

6.804016753s ago: executing program 1 (id=9571):
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x40, 0x0, 0x9, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)="d8000000180081064e81f782db4cb904021d0800fe027c05e8fe55a10a0005000140020003600e41b0000900ac0006e01100000016000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b43370e9703920723f97e46", 0xd2}], 0x1}, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080), 0xc)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0)
close(r2)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x1, 0x0, 0xffdff036}, {0x6}]})
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x28, 0x25, 0x44, 0xffeff010}]})
ioctl$TUNGETVNETLE(r2, 0x40107447, &(0x7f0000000180))
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$TUNSETOFFLOAD(r4, 0x4004743d, 0x110e22fff6)
write$cgroup_type(r4, &(0x7f0000000280), 0x9)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)}, 0x4004010)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080))

5.914706887s ago: executing program 4 (id=9578):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xf6, 0xe}, 0x10c500, 0xac5d, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0x7}, 0x12044, 0x0, 0x1, 0x0, 0x8, 0x5, 0x2000, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x19)
openat$tun(0xffffffffffffff9c, 0x0, 0x10202, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, 0x0, &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x1b, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b702000008000000bfa300000000000007030000ffffffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000001404000001007d60b7030000000000006a0a00fe40000900850000001f000000b70000000000000095000000000000006623848adf1dc9a764ab51a064caff0c9b27a26293fddf0180000071ff31f1622271d5518193e09483c5a020c334f8c76334d8ce8303b81ddaa52e8756ad60a07d6f27c125e16d024098f755d8583da60f27c162dbba0700002ac9170f50f2568836077b7f711a18ebf608d87b885297b6b6981978d51514b00dcc4a2748b376358c33c9753beab62bdf27dc04e4cb4bc598affd989b1ca58949a54d5827df14feecea46408a05d572077f1252fbb72c3d099c501bc4ded6fca17a3447222c95edb47b770009524edd5fa5c53e9c37251709f1ff7f0000f07bf7f53ce129a9ecd3b4dd15100f2b450f98526a0d8cac7c97fc2f64015306a1bd88345710fb6379b4c53cf55eefb4c0974486a8d25a363adbd83b49e13fbd1757b27020bd9b8cff3f48c9411670c34f23ab8caf7851b290feb3045a1b622f20c4383a0280f040de7667f8b1d0842835e81c35af41e5b5b924275cb1749289b44e9728e7a73f148ac8206afe120c1437490d9900000011000003971b32fdffffffffffffffaf580278e1342aabd1b623f6c4f128858e4eb6b42f2173184c2b99b645f6ec0e14e5d7c95a0008000000f30f6c0000000000ff0000b8f5001a1d2a34dc0973ec302bc23211d3e3b6e6dad65a51e5497a3419cecec38126247b27113ad4c7915c8f82c333a7b350802f0311807010d1ed50c18411aa6900daccc02f4ba4b078f07e41f781eee222c7d071d5a94d82ca9a0846c1af59cee16639b4970f8f0a82c6a712fd5722d677d406160ffaffffffb4e0bde6749aa52c408b74251914c5d3255fd88a42e7ebb69ebcd8eee623e51dbb1f1b548c91a6825c0686fdc16be1cbb72c217fda18bd746253ca66093daf35923300b600000000ac376e0a4649a8a84e1d293a6b109c5e59b366bca5cc3d936c53d4a48c05099e6fc37e5aa23bff8cce0600000000000300a568a8532623d12b40b50ac26f2e8255470a04bfbe7acb581b90991d965a01d1f84cb6b973558e1e3f8118c77ccf0b3c6eb6443870004da10c75723b65f83769ad1f0e4ef6b9ef1cec23264fd8fdac6264af1cb467020bdc12b797b6c156c439105829d2ae1c45f7cfa40df68f536a03353a55a8a8e176e5d48887d31c8e0f77f2c1e68ec7c01bd5a2028a8fc107007f5f4c67600a6ade3deb1f200abe1f753754678dae8b4e3ba3d086d4b95dfc5817e3dafae2d38b522f942cc750399d9029f071fdb1e05882f8a4b8fbd219ccac3a895828b4f22b6527ce31ceb02b7b2b4492510134552f0b076b168394f8417f25cc82ae04007193cbe69de8bf35e4bebd15412426b2020ab1f05fc44ae9ae094c1b81d3ef947692b44d2afb09c7498dedf0f87c38bbcab7357836f03e8a7c392e535694a3ead2de11e6b1781e2a017ac341fda2e563ee95085742f5fee9f95f4741b226e428d20b00bc140000e4b2f5efd0a0b1ceba000830ba8634b5aa26bdbe91614e92fae3c7349531df9bf4c01ebf5d8eb7d53e5f30647661623fbdb3f6c3652c423ce6ecc1be5d4e8133fc32f68ea86a2df1e7df98a0ae216c405d0ae9eed114ff2d6fe27dfdff1cf9194849c4cc0da9533e5983863e526a7dc0d8728f3b573ca4427bdb44df9341e9b8420e896598a156c935c800436a312e7ae3c011e46851ac599f0427729ab9c55ae0ab4c0000000000000000000000000000c87bcc2ac5aed9467b51d92e0993af4beaf1f3d47dcdfab9165f98155d93e383d6b85158b54675c1585037508c1e9461a1c3d1a6e2402045cae150a7016f716eebbdf6afc4414d900be0bdf19f4a273f44f4357380b4387f1c8b104f0e406b2f04e5ed88631be6411f9927fe9f83412b7c5a676ceec8b454ebf6481c98e86b6933a02daea0b4ec0be5b3d916bd70208b4588626c27c318475802e2c62681bd1a331422a6e47bbd40857d52c4894944fae5c5000000000000000000000000e0c47613e950b6aefeae054fc723f62ac7d13941de11b018f1f48ac50335df91c771729f81929128135b2803562c1171ee00a3f4a31281aa363e087d53d86dd85e3ff979a7e72d16fdd7e1a0f07a1c8e6085d280d760f74975ceb3a5be6cfb4da8e0aeb769b8b75f4aad803ed77d34872eed2711aa40a3b38099dc2752e8ec9b520faf39e416752aa0830206736570f5d41a4df848c9052551cf8dcb1be000000000eb2577188e8e96bd825d462350905d3eb916b397d2a46a64081e85661d7a5a2716cc87cb1976d15d9b6418e94f165911803e43830432226c660f4da67bb7c8ceb3755c07197d8b80b8d16b12c2ec63bebe107aa2350a7ae564bf69a6c52a2da1496016dd66a1c1b112"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xcc0, 0x0, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xfdff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x200000000}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = getpid()
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x5d31, 0x60, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffffffffffff}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32=0x0, @ANYRES32], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000180)=ANY=[@ANYRES32=r2, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0xe, 0x0, &(0x7f0000000340)="14fd54ab72df97e6256c00000000", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
close(r0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, 0x0, &(0x7f0000000700)}, 0x20)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
r7 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r7, &(0x7f0000000100)={0x0, 0x300, &(0x7f00000002c0)=[{&(0x7f0000000300)="6000000022007f029e607dd75fcb520003a124b244de91f7f414adcf41bfafdd1b1e93c6292aefa3ca89563a63fb94b2584ca2faa20f2c308b0fe298acec10e3019e1e26e6efd0166e6c1b01132e5423294ac2f4d53c3870c3068461957e5357", 0x60}], 0x1}, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)

5.629349365s ago: executing program 3 (id=9581):
r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00122800014007032400000004009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0xffc2}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="140000002f000b6c8cff00380529fc60077678cf", 0x14}], 0x1}, 0x4884)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0)
recvmsg(r4, 0x0, 0x40000040)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"})
r5 = socket$kcm(0xa, 0x6, 0x0)
ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000400)=0x1)
ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x5411, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="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", 0x13c}, {&(0x7f0000000380)="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", 0x2f2}], 0x2, 0x0, 0x0, 0x5865}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000013c0)={0xffffffffffffffff, 0xe0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r8=>0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001180)=[0x0], 0x0, 0xe, &(0x7f00000011c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000001200), &(0x7f0000001240), 0x8, 0xae, 0x8, 0x8, &(0x7f0000001280)}}, 0x10)
sendmsg$inet(r1, &(0x7f0000001500)={&(0x7f0000000200)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000001040)=[{&(0x7f0000000a00)="d574e8c1d1d356019b27173686d240c8526a1b7c044ea01bbcde6ffbacbe50697818fe5755522cbedff6d960df1d0758225067361845d654950a696c777f95a7c1f2d1d3892719ddd0c384cbb091937905f723d33748a3515ef178c8fc7257a36cabd77b1f0e6552c5b7ee20a3101ee3a78cd90c80934f972fda461ac94a1be7ef561d6c2fb45f83f98833d84147064aa12ba3fa9215f49d688cc152f114ddf1d21b2bf8e6ae7cb82270", 0xaa}, {&(0x7f0000000ac0)}, {&(0x7f0000000b00)}, {&(0x7f0000000b80)="7a44bbace74365e85b7fcf52ad9c4ef64d4f54da66d5efc350688292a6cce52b5f", 0x21}, {&(0x7f0000000bc0)="9c60ba75d81df2481b84004dcb2a2aad9ae563534df4e07b64df236fe46e693f51784b8b5b70a2a9ded05a94c68a9a4310a28a219c39a42a846999f6259b0f4b5fa9dacef13cbd443945611dfe3e70e15a8ecea8c7a98d6ad9abc824168d100283e620fc1be2926658425ef0a77afe1519f911e03c61ce43241846a59e116d651f5d447a3c9d97401ce697935955303559a38140e98aced439630b5b09156b90e3bec11624994bb1ca4dea7efd8f5322e3129b3c64a6015cec586bcf8de6", 0xbe}, {&(0x7f0000000680)="7641c8e8f3da4d9f7561a84f7a58866deef24a6a6bcd9b8c484d6464cc5729680c06b28cb293ef70f557204d836046f5b167e9ac6effed952d931c8ed375e25b3d6251f9bb031e8d9a766d4ecc83ed92025c57d50e8cf86491949527b4726286cce6e8a884b145a504dc5ed8a1152a750bb246caa7ecd88f4e8e5ea7c402ccc8b5f0e9a1977e51dc8e0426185626999d8d0ee7a7ee9b9e425e637598a1530c995b687f9346f9f51314eade45f4d935ad21ed8f0bf7e7f172439de5b414950b11063b3e", 0xc3}, {&(0x7f0000000e80)="c34fedf1fdaeb57474c15ed43783ce4caf332aaef9ad48ffaea1c6c2cdd8636f4e57a5ad9c27d878115668e2b18f26a486bdc718db1667b8be5417a6f5a30153088850d9c0e0da267a11b4e2157677f1c15ec51090d6b30489a8f9e6320a5b9b95587fa1c9cdb869822761c26484c850c61a1fb9180136ab10baa23aea29f28b11ce774d659f4f4516b2fcd3139429def0031468", 0x94}, {&(0x7f0000000f40)="b60a110c", 0x4}, {&(0x7f0000000f80)="53763f48bcd8e5c946f76f1cac5a2d6d8d61c322618deb58eb2d0f48692e19168579c518e52158d3ff99378ba960b3b993788f611473da02db43aed4c59f7bc58790c707fad4af23defba6040972fc5641b7bf942e082ff6cfa7", 0x5a}], 0x9, &(0x7f0000001540)=ANY=[@ANYBLOB="1400000000000000000000000100000007000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="e0000001ffffffff000000001400000000000000000000000700"/36, @ANYRES64=r4, @ANYRES32=r2, @ANYBLOB="e5252f4cade65dfd8f034ddeba022bbdd05cc6546858b58edc82a7b5356882dbebc651ba6e6e6820c6b6de3c52475e872d2932b4e2f1a6373ed7572fcc2cd7d6c284ec8d13b66665956a684e2324cae3ce605e9597515b1e2cfd6bf96ce02e3f843a584824a037c5142c70adc8ecf600c007ef435d4bf5cdf8868b6267e7a3be31ce6dad58acd2df255a7026e466d182813b7cfd5af64e369789d4c4936d61583afb8828af979dfd25d0b77ef0e47e400e5997fb3a62f4a38f4740a4413dab0c029b53d518b003d34aea826a000752b34d7dff851d89749cfb97e8a864524b2c9de723b60cab8f73069b025688829cf48ae7932190"], 0xe8}, 0x4000001)
ioctl$SIOCSIFHWADDR(r7, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}})
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r9 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x324a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x1a220, 0x0, 0xc2b8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000500000028000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="000000000000000000000000000000000000000000000041bf000000"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000050000850000001b000000b700000018000000850000005000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r11 = socket$kcm(0x2, 0x1000000000000002, 0x0)
sendmsg$inet(r11, &(0x7f0000000b40)={&(0x7f0000000200)={0x2, 0x4c20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @loopback}}}], 0x20}, 0xe900)

5.556723047s ago: executing program 2 (id=9582):
r0 = socket$kcm(0x10, 0x2, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='tasks\x00', 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1d}, 0x94)
r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000180)='./file0\x00', 0x0, 0x10}, 0x18)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x44, 0xd1, &(0x7f0000000280)="d2a8cc29708ab893f41aafc396ab8d34016df1fa050a4b095c9d2f7e11aa9da18572688e88a67184b411132e26f6f9bc53d7b79a037b6693b7043dda8d04d912058acef0", &(0x7f0000000400)=""/209, 0x3, 0x0, 0x90, 0x40, &(0x7f0000000500)="5c5316b16b3df417c66def6aa1e756b90ab359d95504d0b158a8d3b547fab78f106c1ce4e9a206c0950d1688398679ec762d7bfdb18a9452f00dc952968133c43c659bb62309516a0e5b7e4f850c46fdc5e5a9d4927f9dc03c72f64907bf3c000401b51bdc63603c6093d34fa92e6e93154336b1bd57398c52b2486e91e6089f2212eddd0fd3bfc12216618f7a4e585a", &(0x7f00000005c0)="4c91ec13765b2efc418c3a52df89112edb5a17c8133c656ecf6e390028470f9a55d0cd8368c39688461c893effbc48958d0e45286d8f6cf2cb32cd2123aa63db", 0x5, 0x0, 0x8}, 0x50)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001840)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xed, 0xed, 0x5, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1, 0x6d}}, @type_tag={0x8, 0x0, 0x0, 0x12, 0x3}, @int={0x8, 0x0, 0x0, 0x1, 0x0, 0x75, 0x0, 0x70, 0x2}, @datasec={0x4, 0x0, 0x0, 0xf, 0x2, [], "44f9"}, @enum64={0xa, 0x8, 0x0, 0x13, 0x1, 0xd, [{0xe, 0x123ed58e}, {0x3, 0xa7, 0x80}, {0xf, 0x8, 0x2c2}, {0x7, 0xf, 0x3}, {0xc, 0xfffeffff, 0x4037}, {0x9, 0xcaa, 0xabd0}, {0x8, 0x1, 0xffffffff}, {0x1, 0xffff, 0x9}]}, @datasec={0x9, 0x1, 0x0, 0xf, 0x3, [{0x4, 0x3, 0x4}], "7f2ae0"}, @volatile={0x5}, @volatile={0x0, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x0, 0x61, 0x61]}}, &(0x7f0000000840)=""/4096, 0x10d, 0x1000, 0x1, 0x5, 0x10000, @value=r0}, 0x28)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0x1, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0}}, 0x10)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d80000001a0081044e810082db4cb904021d0800fe007c05e8fe55a112001c0002001426080005007a010401a80016002000044004007a00035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a0600ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e63adcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a94100000000", 0xd8}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000740)=ANY=[@ANYRES64, @ANYRES8, @ANYRES16=r4, @ANYRESOCT, @ANYRESOCT, @ANYRES64], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0xd, 0x0, 0x1, 0x9, '\x00', 0x0, r2, 0x4, 0x0, 0x4}, 0x50)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001b00)={&(0x7f0000001940)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x9, [@const={0x9, 0x0, 0x0, 0xa, 0x3}, @enum64={0xf, 0x5, 0x0, 0x13, 0x1, 0x2, [{0x4, 0xb, 0x8001}, {0x3, 0x3, 0x9}, {0xf, 0x7, 0x200}, {0x10, 0x0, 0xffffff0b}, {0x3, 0x5, 0xd}]}, @ptr={0x3, 0x0, 0x0, 0x2, 0x1}]}, {0x0, [0x61, 0x30, 0x30, 0x30, 0x2e, 0x5f, 0x61]}}, &(0x7f0000001a00)=""/207, 0x81, 0xcf, 0x1, 0x80000000, 0x10000}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000001b40)=@bloom_filter={0x1e, 0x9, 0x8, 0xf97c, 0x100, r5, 0x1, '\x00', r3, r6, 0x2, 0x2, 0x0, 0x4}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000001880)={0xa, 0xc, &(0x7f0000000240)=ANY=[@ANYRES8], 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x21, '\x00', r3, @fallback=0x1e, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x29, 0x7, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x75, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed009875f37538e486dd0000000003"], 0xfe1b)
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4d)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000001bc0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8946, &(0x7f0000000080))
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)="2e00000010008188040f80ec59acbc0413a1f848290000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x400c084)

5.530795567s ago: executing program 1 (id=9583):
r0 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000100)=@nl=@unspec, 0x80, 0x0}, 0x20000004)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x3, 0x10)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000dc0)={&(0x7f0000000c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8936, &(0x7f0000000000)={r3})
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r1, 0x20, &(0x7f0000000140)={0xfffffffffffffffd, 0x38, 0x0, 0xfffffffffffffffe}}, 0x10)
recvmsg(r2, &(0x7f0000000980)={&(0x7f00000000c0)=@isdn, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/43, 0x2b}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/102, 0x66}, {&(0x7f0000000500)=""/218, 0xda}, {&(0x7f0000000600)=""/212, 0xd4}, {&(0x7f0000000700)=""/189, 0xbd}, {&(0x7f00000007c0)=""/66, 0x42}], 0x7, &(0x7f00000008c0)=""/138, 0x8a}, 0x2100)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x50028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2, 0x7}, 0x0, 0xfffffffffffffffd, 0xfffffffe, 0x4, 0x6, 0xc07, 0xfffd, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x0, 0xffffffffffffffff, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32], 0x48)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
close(r4)
close(r2)
r5 = openat$cgroup_procs(r4, 0x0, 0x2, 0x0)
r6 = gettid()
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_pid(r5, &(0x7f00000002c0)=r6, 0x12)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef434000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e9", 0x61}], 0x1}, 0x0)

5.312605864s ago: executing program 4 (id=9585):
socket$kcm(0x2, 0x3, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYRESDEC], 0x9a)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe92f5f45114c79f7}, 0x1003b9, 0x7, 0x2000, 0xa, 0x1, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$sock(r1, 0x0, 0x40801)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x0)
bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="180000"], 0x48)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
close(r3)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000195"], 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce220000"], 0xfdef)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

5.255110245s ago: executing program 1 (id=9586):
perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffff81, 0x0, 0x4000000, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2112, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0xb}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x3e}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000010c0)={r0, 0x20, &(0x7f0000001080)={0x0, 0x0, <r1=>0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x8}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r3 = gettid()
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xb, 0x3, 0x3, 0x5, 0x0, 0x6, 0x12080, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x2, 0x4}, 0x40, 0x7fff, 0x0, 0x9, 0x52, 0x7, 0x0, 0x0, 0x6, 0x0, 0x8}, r3, 0x5, r2, 0x2)
r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x657a, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
write$cgroup_netprio_ifpriomap(r5, 0x0, 0x7)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r2)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0xe, &(0x7f0000001cc0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x31, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x2d1, 0xfffffffffffffd85, &(0x7f00000000c0)="b9ff0303000d698cb89e40f086dd6000000e00ff8900630677", 0x0, 0xfffff1de, 0x2000000, 0x0, 0xfffffffffffffefc, &(0x7f0000000440)}, 0x28)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$unix(r7, &(0x7f0000000200)={&(0x7f0000000040)=@abs={0x1, 0x2e}, 0x6e, 0x0}, 0x0)

5.06442395s ago: executing program 3 (id=9587):
socket$kcm(0xa, 0x5, 0x0)
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x10c002, 0x3, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r0}, 0x8)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800f5842493099d9fd582b8e0f9000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x1b, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="250a00000000000061116c00000000004cef5425e31a11ea686dc01db3e183db00"], &(0x7f0000000000)='GPL\x00'}, 0x94)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0))
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000400000001"], 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000500)={r3, &(0x7f0000000180)="acec48", 0x0}, 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r4 = socket$kcm(0x11, 0xa, 0x300)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000000)=r5, 0x4)
r6 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r7 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r7, <r8=>0xffffffffffffffff}, 0x0, 0x0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r8}, 0x0, &(0x7f0000000200)}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r6, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000340), 0x0, 0x2e, &(0x7f0000000380)=[{}], 0x8, 0x0, 0x0, &(0x7f0000000400), 0x8, 0x3b, 0x8, 0x0, 0x0}}, 0x10)
r9 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
socket$kcm(0x2b, 0x1, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

4.992950973s ago: executing program 2 (id=9588):
r0 = socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0xffffffff, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000031c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000980000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xac)
sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00", 0x73}, {&(0x7f0000000080)="83d2ff5f00000080d2898a0cc6d6703b87eb28f77b09bc7e64f918fa3bc7664d327d90424d5503002800"/52, 0x34}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4)

4.986854353s ago: executing program 1 (id=9590):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xf6}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x10202, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, 0x0, &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x1b, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xcc0, 0x0, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xfdff, 0xcac, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x200000000}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = getpid()
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x5d31, 0x60, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffffffffffff}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32=0x0, @ANYRES32], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000180)=ANY=[@ANYRES32=r2, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0xe, 0x0, &(0x7f0000000340)="14fd54ab72df97e6256c00000000", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
close(r0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, 0x0, &(0x7f0000000700)}, 0x20)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38)
r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
close(r7)
syz_clone(0x84008200, &(0x7f0000000080), 0x0, &(0x7f0000000240), 0x0, &(0x7f00000002c0)="3dacaa69546ea62dbcf850e8d68273becde11f3b67a5721a52a5971bde97e925bd4bd773080c077c81be74c8b4272cba4a0e4859d3d17d74b57ad835eb3bf1e897a48937f03a9734a213cfcf7041df2efb7a062a62b88af84323fb1fc287edae771f28e1de")
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340))

4.35253689s ago: executing program 3 (id=9591):
r0 = socket$kcm(0xa, 0x2, 0x88)
socket$kcm(0x10, 0x2, 0x0)
r1 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r1, &(0x7f0000000b40)={&(0x7f0000000240)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}, 0x20000045)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x0, 0x0, 0x0, 0x67699ee7, 0x0, 0x0, 0xc3000, 0x4d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x1}, {0x2}], 0x10, 0x3}, 0x94)
r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x100000001}, 0x22, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(r1, 0x84, 0x76, &(0x7f0000000000), 0x8)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2000000}, 0x94)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x55, &(0x7f00000002c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @multicast1}}}], 0x20}, 0x8000)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000300)={r2, 0x0, 0x41, 0x0, &(0x7f00000001c0)="f6e7a998ddcd1cffe65a75b536546cb9f99eacccd07a549afd2a12d0eaedea050946e8a00d8cadc483eac69432ab20419f44e55b4933987ec4c1834e0d85d90ae4", 0x0, 0x80, 0x0, 0x2c, 0x0, &(0x7f0000000280)="76affdb34869dcb6738970465f0a5864cbeae1f7de8d4329a847ce63c1526d3dea739145d4e116ef5d178609", 0x0, 0x2, 0x0, 0x800}, 0x50)
ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0x58a8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r0, r5}, 0xc)
write$cgroup_subtree(r0, 0x0, 0x97)

4.33849995s ago: executing program 2 (id=9592):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x80}, 0x1001, 0x2, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x2, 0x5}, 0x51f5, 0x0, 0xfffffffc, 0x0, 0x0, 0x2, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2d, &(0x7f0000000040), 0x4)
r0 = socket$kcm(0x10, 0x2, 0x0)
close(0xffffffffffffffff)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a115000100ff11142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b4337", 0xd7}], 0x1}, 0x0)
r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000840)={0x0, 0x6, 0x8}, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x17, &(0x7f0000000600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @map_val={0x18, 0x1, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffff}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x8}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xb7}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f00000006c0)='GPL\x00', 0x2, 0x63, &(0x7f00000009c0)=""/99, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000800)={0x2, 0x1, 0x5, 0xc}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000880)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000008c0)=[{0x1, 0x2, 0xc, 0x6}], 0x10, 0x5}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4620, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x5}, 0x400, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r2 = socket$kcm(0xa, 0x2, 0x73)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x4)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x1, 0x5, 0x81, 0xef, 0x0, 0x1, 0x1c008, 0xa, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x2972, 0xffffffff00000000}, 0x4090, 0x9, 0x7, 0x3, 0x7, 0xffffffff, 0x7, 0x0, 0x3}, 0x0, 0x9, r3, 0x8)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000002c0)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000300eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004080)

4.204773594s ago: executing program 4 (id=9594):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=ANY=[@ANYRESHEX=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000008000"/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="000000000000000001"], 0x50)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea018512babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7acbf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000005d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd353646000000000000000000002b0000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4092140faed0c329be610c30180000000000000c03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3e16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e2e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54ae54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db55474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1386f5800"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x18000000000002a0, 0x29, 0x0, &(0x7f0000000500)="b9fa030711a5f32e019e14f088a847e0ffff00124000632177fbac141416e000030a94029f03030180", 0x0, 0xfffffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50)
close(r3)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0bf2e80005000000010001000001000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000040)={r4, &(0x7f0000000140), &(0x7f00000002c0)=""/4095}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r5, r3}, 0xc)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_ext={0x1c, 0x25, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000004000000000000000200000018000000050000000000000000000000b7080000000000007b8af8ff00000000b7080000030000007b8af0ff00000000bfa100000000000007010000f8fbffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000b7080000000000007b8af8ff00000000b7080000ff0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000018230000", @ANYRES32=r1, @ANYBLOB="00000000080000009509f8fff0ffffff8510000006000000184000000800000000000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x1, 0xa9, &(0x7f0000000240)=""/169, 0x0, 0x23b4891900565e1f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x1, 0xb, 0x25}, 0x10, 0x318d, 0xffffffffffffffff, 0x1, &(0x7f0000000380)=[0xffffffffffffffff, r1, r1, r1, r1], &(0x7f00000003c0)=[{0x0, 0x4, 0xd, 0x9}], 0x10, 0xfffffffe}, 0x94)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e00000038000511d25a80698c63940d0300fc602f0000000b000200001ec0003715de60cfd9a1af05d81d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
close(0x3)
close(r7)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={<r8=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r8, 0x1, 0x2c, &(0x7f0000000000), 0x4)
setsockopt$sock_attach_bpf(r7, 0x1, 0x33, &(0x7f0000000040), 0x10)
close(r2)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x9, 0x3, 0x27, 0x0, 0x62, 0xd3251, 0x5, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xffffffff, 0x4, @perf_bp={0x0, 0x5}, 0x400a, 0x0, 0x3, 0x3, 0x200000000081, 0x71a5, 0x7fff, 0x0, 0x2cb, 0x0, 0x101}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89f0, &(0x7f0000000080))

4.204286734s ago: executing program 1 (id=9595):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x9}, 0x10c002, 0x89, 0x2, 0x3, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000a80)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x9, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x7c}]}, &(0x7f0000000080)='GPL\x00'}, 0x94)
r2 = socket$kcm(0x10, 0x2, 0x0)
r3 = socket$kcm(0x10, 0x400000002, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="934300005a0033d487277b9b108b4ab502", @ANYRES32, @ANYRES8=r3], 0xfe33)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000011008188040f80ec59acbc0413a1f848090000005e2f0042180000180e000a001400000002800000121f", 0x2e}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYRES16=r0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x1}, 0x10, 0x0, r1}, 0x94)

4.052597228s ago: executing program 2 (id=9596):
r0 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000100)=@nl=@unspec, 0x80, 0x0}, 0x20000004)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x3, 0x10)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000dc0)={&(0x7f0000000c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8936, &(0x7f0000000000)={r3})
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r1, 0x20, &(0x7f0000000140)={0xfffffffffffffffd, 0x38, 0x0, 0xfffffffffffffffe}}, 0x10)
recvmsg(r2, &(0x7f0000000980)={&(0x7f00000000c0)=@isdn, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/43, 0x2b}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/102, 0x66}, {&(0x7f0000000500)=""/218, 0xda}, {&(0x7f0000000600)=""/212, 0xd4}, {&(0x7f0000000700)=""/189, 0xbd}, {&(0x7f00000007c0)=""/66, 0x42}], 0x7, &(0x7f00000008c0)=""/138, 0x8a}, 0x2100)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x50028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2, 0x7}, 0x0, 0xfffffffffffffffd, 0xfffffffe, 0x4, 0x6, 0xc07, 0xfffd, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x0, 0xffffffffffffffff, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32], 0x48)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
close(r4)
close(r2)
r5 = openat$cgroup_procs(r4, 0x0, 0x2, 0x0)
r6 = gettid()
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_pid(r5, &(0x7f00000002c0)=r6, 0x12)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef434000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cd", 0x64}], 0x1}, 0x0)

3.319409029s ago: executing program 0 (id=9597):
bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0xe, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd046}, [@alu={0x4, 0x0, 0x2, 0x8}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000040), &(0x7f0000000080)='%pI4   \x00'}, 0x20) (async)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, <r0=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%pI4   \x00'}, 0x20)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe8, 0xe8, 0x7, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3, 0x9}}, @float={0xf, 0x0, 0x0, 0x10, 0xc}, @enum={0xa, 0x4, 0x0, 0x6, 0x4, [{0x5, 0xffff}, {0xb, 0x6}, {0xdc67, 0x4d}, {0xf, 0x10}]}, @enum={0x2, 0x3, 0x0, 0x6, 0x4, [{0x9, 0xff}, {0x6, 0x554e}, {0xa, 0x30}]}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x3d, 0x0, 0x22, 0x3}, @volatile={0xa, 0x0, 0x0, 0x9, 0x5}, @decl_tag={0x8, 0x0, 0x0, 0x11, 0x3, 0x5}, @union={0x2, 0x5, 0x0, 0x5, 0x0, 0x8, [{0x10, 0x1, 0x5}, {0x3, 0x5, 0x80000001}, {0x10, 0x3, 0xffff}, {0xe, 0x2, 0xb}, {0x6, 0x1, 0x7fffffff}]}]}, {0x0, [0x20, 0x0, 0x2e, 0x61, 0xbe]}}, &(0x7f0000000340)=""/208, 0x107, 0xd0, 0x1, 0x4, 0x10000}, 0x28)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x4018, r0}, 0x18)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0xfffffffd, '\x00', 0x0, r1, 0x2, 0x4, 0x2}, 0x50)

3.121029204s ago: executing program 0 (id=9598):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x48)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map=r0, 0x7, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02"], 0x48)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8946, &(0x7f0000000040)={'syz_tun\x00', @random='\x00\x00\x00\x00\x00 '})

3.001687208s ago: executing program 0 (id=9599):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0)
recvmsg$unix(r0, 0x0, 0x1c0)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x9a)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe92f5f45114c79f7}, 0x1003b9, 0x7, 0x2000, 0xa, 0x1, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$ENABLE_STATS(0x20, &(0x7f00000000c0), 0x4)
r4 = openat$cgroup(r2, &(0x7f0000000340)='syz1\x00', 0x200002, 0x0)
perf_event_open$cgroup(&(0x7f00000002c0)={0x4, 0x80, 0x9, 0x1, 0x4, 0x3, 0x0, 0x5, 0x800, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, @perf_bp={&(0x7f00000001c0), 0x6}, 0x1, 0x2, 0x1, 0x9, 0xa5, 0x5, 0x1, 0x0, 0x8, 0x0, 0x3}, r4, 0x0, r3, 0x0)
r5 = perf_event_open$cgroup(&(0x7f0000000240)={0x4, 0x80, 0x7, 0x6, 0xfe, 0x6, 0x0, 0x3, 0x802c0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000080), 0x8}, 0x110, 0x9, 0x8000, 0x9, 0x0, 0xf2a3, 0x8fe, 0x0, 0x1149, 0x0, 0x9e}, 0xffffffffffffffff, 0xb, r3, 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x6)
sendmsg$sock(r1, &(0x7f0000001a00)={&(0x7f0000000dc0)=@pptp={0x18, 0x2, {0x2, @multicast2}}, 0x80, 0x0}, 0x40801)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x108)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_type(r6, &(0x7f0000001000), 0x2, 0x0)
unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00')

1.008441172s ago: executing program 0 (id=9600):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc000, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x100})
r2 = gettid()
perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x2, 0x2, 0xe, 0x2f, 0x0, 0xdb9, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x100, 0x1, @perf_bp={&(0x7f00000000c0), 0x5}, 0x2000, 0x8, 0x761, 0x3, 0x7ff, 0x2024, 0x8001, 0x0, 0xa1, 0x0, 0x4}, r2, 0x10, 0xffffffffffffffff, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x101100, 0x0)
ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f00000001c0)=0x72)
mkdir(&(0x7f0000000200)='./file0\x00', 0x10)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x141000, 0x0)
ioctl$TUNGETDEVNETNS(r4, 0x54e3, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz0\x00', 0x200002, 0x0)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x1}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r6, &(0x7f0000000340)="b08b1dda68d8dca354c10fd8855d0dc0d647858a6b647540918427b373145e3af7bbcf25e4a235788683755aa55b7202fb1c62037e33e599b4a1de6faf605bd0ec03a191cf61cf6c74f5cd41560f2c9ae1502403fb3591e01a6635b47fe21cba8dd3a8b3aadb9a6e37dade57cb12ebce85fb39a70d113fa8248f60a7", &(0x7f00000003c0)=""/53, 0x4}, 0x20)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x8c, 0x8c, 0x3, [@struct={0x0, 0x2, 0x0, 0x4, 0x1, 0x9eb, [{0xe, 0x2}, {0xa, 0x5, 0x401}]}, @func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{0xd, 0x2}, {0x7, 0x2}, {0x0, 0x4}, {0xe, 0x1}, {0xb, 0x1}, {0x6, 0x4}, {0xd, 0x1}]}, @int={0x8, 0x0, 0x0, 0x1, 0x0, 0x71, 0x0, 0x61, 0x4}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x7, 0x3}]}]}, {0x0, [0x30]}}, &(0x7f0000000500)=""/147, 0xa7, 0x93, 0x1, 0x3}, 0x28)
r8 = socket$kcm(0x29, 0x5, 0x0)
ioctl$TUNGETSNDBUF(r4, 0x800454d3, &(0x7f0000000600))
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000680)=@o_path={&(0x7f0000000640)='./file0\x00', 0xffffffffffffffff, 0x4000, r8}, 0x18)
ioctl$TUNSETPERSIST(r5, 0x400454cb, 0x0)
recvmsg$kcm(r8, &(0x7f0000001900)={&(0x7f00000006c0)=@vsock, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/47, 0x2f}, {&(0x7f0000001780)=""/61, 0x3d}], 0x3, &(0x7f0000001800)=""/206, 0xce}, 0x143)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001940)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x5ed, '\x00', 0x0, r7, 0x0, 0x0, 0x1}, 0x50)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001a00)=@generic={&(0x7f00000019c0)='./file0\x00', r6}, 0x18)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002c00)={&(0x7f0000001a40)=@vsock={0x28, 0x0, 0x0, @my=0x1}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000001ac0)="d58335ba8408a4ba5c5f572e385361d5083fd8a98fe4fae973b19bcce7534981451dc08179f935077ac2a0dfb278e4368aa9b2185b5410a7ff24a7baa8", 0x3d}, {&(0x7f0000001b00)="4c2f8b59915db306812b666a7328e76a9a5395d6d1ee8f80d559dbf55973f4662ec61ddc401531917000", 0x2a}, {&(0x7f0000001b40)="ad9c8ab4d87359e5ec8ac1ab073e8fe77cda71b6e06800", 0x17}], 0x3, &(0x7f0000001bc0)=[{0x18, 0x10d, 0x57a2, "f8b64e9753156196"}, {0x1010, 0x114, 0x3, "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"}], 0x1028}, 0x1)
mkdirat$cgroup(r5, &(0x7f0000002c40)='syz0\x00', 0x1ff)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000002c80), 0xc00000, 0x0)
ioctl$SIOCSIFHWADDR(r10, 0x8924, &(0x7f0000002cc0)={'pimreg1\x00', @remote})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003100)={0xffffffffffffffff, 0xe0, &(0x7f0000003000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000002e40)=[0x0, 0x0, 0x0, 0x0], ""/16, <r11=>0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f0000002e80)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002ec0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x7b, &(0x7f0000002f00)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000002f40), &(0x7f0000002f80), 0x8, 0xd0, 0x8, 0x8, &(0x7f0000002fc0)}}, 0x10)
r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003300)={&(0x7f0000003140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6d, 0x6d, 0x3, [@fwd={0x9}, @datasec={0x9, 0x1, 0x0, 0xf, 0x1, [{0x3, 0x8001, 0x7ff}], "f0"}, @union={0xf, 0x5, 0x0, 0x5, 0x0, 0x3, [{0xf, 0x4}, {0xf, 0x4, 0x8}, {0xa, 0x0, 0x7}, {0x9, 0x3, 0xa}, {0x5, 0x4, 0x3}]}]}, {0x0, [0x0]}}, &(0x7f0000003200)=""/194, 0x8b, 0xc2, 0x1, 0x70000000}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f0000003400)={0x76d789d94ae35969, 0x6, &(0x7f0000002d00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xe4}, [@generic={0x8, 0x9, 0xc, 0xd26, 0x2}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x1}]}, &(0x7f0000002d40)='GPL\x00', 0xffff, 0xb0, &(0x7f0000002d80)=""/176, 0x1f00, 0x40, '\x00', r11, @fallback=0x1b, r12, 0x8, &(0x7f0000003340)={0x0, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000003380)=[r9, r9, r6, r6], &(0x7f00000033c0)=[{0x2, 0x3, 0x8, 0x9}, {0x1, 0x2, 0xb, 0x8}], 0x10, 0x6c}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000003540)={{}, &(0x7f00000034c0), &(0x7f0000003500)='%-5lx  \x00'}, 0x20)
openat$tun(0xffffffffffffff9c, &(0x7f0000003580), 0x103141, 0x0)

973.350953ms ago: executing program 2 (id=9601):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000f1ff00"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3, <r4=>0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="6eaa00000000000071109500000000009500000000008000a08b7431284e0510f61d8582e0cbd957835aec30d105f763418214"], &(0x7f0000000480)='syzkaller\x00'}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
socketpair(0x1, 0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="c9fe00001c00810ce00f80ecdb4cb9f207c804a01f000000020005fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, r7, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0xf1000000, 0x71, 0x10, 0xb4}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80)
write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xf, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000200)='syzkaller\x00', 0x19, 0xa2, &(0x7f0000000240)=""/162, 0x40f00, 0x9, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0xa, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, &(0x7f0000000500), 0x10, 0x8}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4)
close(r4)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r3, 0x58, &(0x7f0000000300)}, 0x10)
sendmsg$inet(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)

972.106473ms ago: executing program 3 (id=9602):
r0 = socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0xffffffff, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000980000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xac)
sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00", 0x73}, {&(0x7f0000000080)="83d2ff5f00000080d2898a0cc6d6703b87eb28f77b09bc7e64f918fa3bc7664d327d90424d5503002800"/52, 0x34}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4)

924.719625ms ago: executing program 4 (id=9603):
socket$kcm(0xa, 0x5, 0x0)
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x10c002, 0x3, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r0}, 0x8)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800f5842493099d9fd582b8e0f9000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x1b, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="250a00000000000061116c00000000004cef5425e31a11ea686dc01db3e183db00"], &(0x7f0000000000)='GPL\x00'}, 0x94)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0))
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000400000001"], 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000500)={r3, &(0x7f0000000180)="acec48", 0x0}, 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r4 = socket$kcm(0x11, 0xa, 0x300)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000000)=r5, 0x4)
r6 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r7 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r7, <r8=>0xffffffffffffffff}, 0x0, 0x0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r8}, 0x0, &(0x7f0000000200)}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r6, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000340), 0x0, 0x2e, &(0x7f0000000380)=[{}], 0x8, 0x0, 0x0, &(0x7f0000000400), 0x8, 0x3b, 0x8, 0x0, 0x0}}, 0x10)
r9 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
socket$kcm(0x2b, 0x1, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

824.249337ms ago: executing program 1 (id=9604):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0)
r1 = socket$kcm(0x2b, 0x1, 0x0)
close(r1)
r2 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000006e892b9bcfa27cee879ed18592fb7ab22e518ca7db52c312f6d0bab2b6a9db8e"], 0x48)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x94a, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0)
close(r5)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28, @ANYRES64=r3, @ANYBLOB="9a3cf2de118a8a5cf9cc573093e8de2011646825687aef345d7d05032064befd78ab53cf1a8bf7bca7de5dacd2396cb5523b77d2cd2d1435378b03c204a84956085b27842318c3e9c9965b0f34860209772a2e56416e9cd4050d68e5e904018a8d4b2a01ad1c4d52854da5a80551c09ca7b042d8cbdc53b52860aed5907abc7974c126749a780b2d494680c09feb1d233d90e0b4dbf0c6ceeb8d63ce03d61d5e2ffe64c055af11629411d893262723517b5a9fec376bbb8fc0339cbb88a6dfc880e30706b135be6e93cadca08de07a6823c4b347cd6e6f68af800e110e7b3f179de018b7475d737f28d88c9cd5e05e56f57c667566c6eb", @ANYRESOCT=r3], 0x50)
r8 = socket$kcm(0x29, 0x2, 0x0)
setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000000)=r0, 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r7, <r9=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r5}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r9}, &(0x7f0000000300), &(0x7f0000000400)=r5}, 0x20)
ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f0000000100)=r0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r7}, &(0x7f0000000080), &(0x7f0000000380)=r6}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3, <r10=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000070000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b704000000000000850000004900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(r2, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x80fe, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x12, 0x2}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007f00000000000000b8"], 0xd0}, 0x488c4)
setsockopt$sock_attach_bpf(r1, 0x1, 0xd, &(0x7f00000001c0), 0x45)
close(r1)

624.246793ms ago: executing program 0 (id=9605):
socket$kcm(0x2, 0x3, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYRESDEC], 0x9a)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe92f5f45114c79f7}, 0x1003b9, 0x7, 0x2000, 0xa, 0x1, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$sock(r1, 0x0, 0x40801)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x0)
bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="180000"], 0x48)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000195"], 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce220000"], 0xfdef)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x20, 0x0, 0x0, 0x0, 0x2}, 0x48)

597.928153ms ago: executing program 4 (id=9606):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x80}, 0x1001, 0x2, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x2, 0x5}, 0x51f5, 0x0, 0xfffffffc, 0x0, 0x0, 0x2, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2d, &(0x7f0000000040), 0x4)
r0 = socket$kcm(0x10, 0x2, 0x0)
close(0xffffffffffffffff)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a115000100ff11142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b4337", 0xd7}], 0x1}, 0x0)
r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000840)={0x0, 0x6, 0x8}, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x17, &(0x7f0000000600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @map_val={0x18, 0x1, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffff}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x8}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xb7}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f00000006c0)='GPL\x00', 0x2, 0x63, &(0x7f00000009c0)=""/99, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000800)={0x2, 0x1, 0x5, 0xc}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000880)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000008c0)=[{0x1, 0x2, 0xc, 0x6}], 0x10, 0x5}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4620, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x5}, 0x400, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r2 = socket$kcm(0xa, 0x2, 0x73)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x4)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x1, 0x5, 0x81, 0xef, 0x0, 0x1, 0x1c008, 0xa, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x2972, 0xffffffff00000000}, 0x4090, 0x9, 0x7, 0x3, 0x7, 0xffffffff, 0x7, 0x0, 0x3}, 0x0, 0x9, r3, 0x8)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000002c0)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000300eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004080)

499.583366ms ago: executing program 3 (id=9607):
r0 = socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0xffffffff, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000031c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000980000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xac)
sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00", 0x73}, {&(0x7f0000000080)="83d2ff5f00000080d2898a0cc6d6703b87eb28f77b09bc7e64f918fa3bc7664d327d90424d5503002800"/52, 0x34}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4)

159.163866ms ago: executing program 0 (id=9608):
r0 = socket$kcm(0x10, 0x3, 0x10)
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x2, 0x922000000001, 0x106)
setsockopt$sock_attach_bpf(r1, 0x29, 0x4, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0xf, 0x3, 0x2)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0xfeffffffffffffff)
ioctl$SIOCSIFHWADDR(r3, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}})
ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x10)
sendmsg$inet(r2, 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
socket$kcm(0x10, 0x3, 0x10)
socket$kcm(0xa, 0x5, 0x0)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xdf, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x2, @perf_config_ext={0x408003, 0x1}, 0x14105, 0x32, 0xfffffbff, 0x0, 0x6, 0x0, 0xffda, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@fallback=r4, 0x1d, 0x0, 0x20080, &(0x7f00000001c0)=[0x0], 0x1, 0x0, &(0x7f0000000240), &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)}, 0x40)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0)
recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r7=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}], 0xb0}, 0x42)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x1c, 0xe, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x19dcdb9e}, [@ldst={0x2, 0x0, 0x2, 0x7, 0xb, 0x20, 0x10}, @alu={0x7, 0x0, 0x5, 0xa, 0x6, 0x8000000000000050, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8095}}]}, &(0x7f0000000440)='syzkaller\x00', 0x800, 0x38, &(0x7f0000000480)=""/56, 0x40f00, 0x6cb7c9de0f9588cc, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x2, 0x4}, 0x8, 0x10, &(0x7f00000005c0)={0x1, 0xd, 0x28f, 0xa85f}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3, @value=r7}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8946, &(0x7f0000000080))
socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)="3c00000033000b1229ae3f7f03b261130124fc60100c034001410000002000179215a2681cf6e50400003d490d20b735b16b6a44799406db26a57b35", 0x3c}], 0x1}, 0x0)
socket$kcm(0x10, 0x2, 0x0)

146.271576ms ago: executing program 4 (id=9609):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x6}, 0x0, 0x1000, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
close(0x3)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x41, 0x41, 0x7, [@int={0xe, 0x0, 0x0, 0x1, 0x0, 0x71, 0x0, 0x47}, @const={0x5, 0x0, 0x0, 0xa, 0x1}, @datasec={0xe, 0x1, 0x0, 0xf, 0x1, [{0x5, 0x8, 0x1ff}], '8'}, @func={0xe, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x2e, 0x0, 0x30, 0x5f, 0x30]}}, &(0x7f00000003c0)=""/48, 0x63, 0x30, 0x1, 0x40}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
socket$kcm(0x10, 0x2, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0)
ioctl$TUNSETCARRIER(r5, 0x400454e2, &(0x7f0000000280))
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40814)
r6 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="1400000027000b6c8cff00f90429fc60010fc569", 0x14}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x4, 0x6, 0xff, 0x42}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x619, r7}, 0x38)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={r2, 0x58, &(0x7f0000000500)}, 0x10)

44.843329ms ago: executing program 2 (id=9610):
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000540)='cpu==0||!')
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
syz_open_procfs$namespace(r1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000880)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x2, 0x100a, &(0x7f0000002500)=""/4106}, 0x94)
ioctl$SIOCSIFHWADDR(r2, 0x8b20, &(0x7f0000000040)={'wlan1\x00', @random='\x00\x00]\x00N\v'})
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000941fd08c7c7f6b867aa212053e98a8b9c69830d2b964a8b10bf7975186d7fc59d535d5a72f3b30e1c18ba6fe2cb53272566c47c621b7a3f2dbf0cc90949c4efd357d31921d4f321232d602b5d05911aa52bdf44da5332a3967f52ec7be32136e3ce7e65f8c48a16335945da0316606426284dbb599541888961d6cdd94718f83d73ac615d22f03da9d5e8b6792f2aa832716669b3a7667d0b668f893f23d160e77", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r4 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r4, &(0x7f0000000780)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0302}}}, 0x80, &(0x7f0000001440)=[{&(0x7f0000000840)="1a01000000180090000084", 0xb}], 0x1}, 0x4000080)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000014e24007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r5, 0xffffffffffffffff, 0x60000000}, 0xc)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b00000005000000010001000a000000"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000008000000000000000000000181100", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r7)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x12, 0x6, 0x4, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r9}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r8}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r8], 0x48)
r10 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r10, &(0x7f00000031c0)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x0, 0x4}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000f00)="9eb8a2", 0x3}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000002900000004"], 0x18}, 0x8080)
sendmsg$kcm(r10, &(0x7f0000000000)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x1, @remote}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)='S\x00', 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x0)
perf_event_open(&(0x7f00000012c0)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4004, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)

0s ago: executing program 3 (id=9611):
r0 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000100)=@nl=@unspec, 0x80, 0x0}, 0x20000004)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x3, 0x10)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000dc0)={&(0x7f0000000c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8936, &(0x7f0000000000)={r3})
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r1, 0x20, &(0x7f0000000140)={0xfffffffffffffffd, 0x38, 0x0, 0xfffffffffffffffe}}, 0x10)
recvmsg(r2, &(0x7f0000000980)={&(0x7f00000000c0)=@isdn, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/43, 0x2b}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/102, 0x66}, {&(0x7f0000000500)=""/218, 0xda}, {&(0x7f0000000600)=""/212, 0xd4}, {&(0x7f0000000700)=""/189, 0xbd}, {&(0x7f00000007c0)=""/66, 0x42}], 0x7, &(0x7f00000008c0)=""/138, 0x8a}, 0x2100)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x50028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2, 0x7}, 0x0, 0xfffffffffffffffd, 0xfffffffe, 0x4, 0x6, 0xc07, 0xfffd, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x0, 0xffffffffffffffff, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32], 0x48)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
close(r4)
close(r2)
r5 = openat$cgroup_procs(r4, 0x0, 0x2, 0x0)
r6 = gettid()
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_pid(r5, &(0x7f00000002c0)=r6, 0x12)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef434000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cd", 0x64}], 0x1}, 0x0)

kernel console output (not intermixed with test programs):

name failslab, interval 1, probability 0, space 0, times 0
[ 1755.827382][T31544] CPU: 1 PID: 31544 Comm: syz.4.8476 Not tainted syzkaller #0
[ 1755.834923][T31544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1755.845021][T31544] Call Trace:
[ 1755.848350][T31544]  <TASK>
[ 1755.851322][T31544]  dump_stack_lvl+0x188/0x24e
[ 1755.856062][T31544]  ? show_regs_print_info+0x12/0x12
[ 1755.861335][T31544]  ? load_image+0x410/0x410
[ 1755.865887][T31544]  ? __might_sleep+0xd0/0xd0
[ 1755.870519][T31544]  ? __lock_acquire+0x7c40/0x7c40
[ 1755.875595][T31544]  should_fail_ex+0x390/0x4c0
[ 1755.880343][T31544]  should_failslab+0x5/0x20
[ 1755.884889][T31544]  slab_pre_alloc_hook+0x59/0x300
[ 1755.889956][T31544]  ? call_usermodehelper_setup+0x8a/0x260
[ 1755.895725][T31544]  __kmem_cache_alloc_node+0x4f/0x270
[ 1755.901142][T31544]  ? call_usermodehelper_setup+0x8a/0x260
[ 1755.906919][T31544]  kmalloc_trace+0x26/0xe0
[ 1755.911392][T31544]  call_usermodehelper_setup+0x8a/0x260
[ 1755.916995][T31544]  ? __request_module+0xa00/0xa00
[ 1755.922080][T31544]  __request_module+0x406/0xa00
[ 1755.926997][T31544]  ? copy_regset_to_user+0x1f0/0x1f0
[ 1755.932367][T31544]  ? __lock_acquire+0x7c40/0x7c40
[ 1755.937447][T31544]  ? rcu_read_unlock+0x8c/0xa0
[ 1755.942266][T31544]  inet_create+0x3a1/0xf60
[ 1755.946721][T31544]  ? inet_create+0x9e/0xf60
[ 1755.951271][T31544]  __sock_create+0x49a/0x940
[ 1755.955921][T31544]  __sys_socket+0xc4/0x190
[ 1755.960388][T31544]  __x64_sys_socket+0x76/0x80
[ 1755.965111][T31544]  do_syscall_64+0x4c/0xa0
[ 1755.969574][T31544]  ? clear_bhb_loop+0x60/0xb0
[ 1755.974297][T31544]  ? clear_bhb_loop+0x60/0xb0
[ 1755.979023][T31544]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1755.984963][T31544] RIP: 0033:0x7fe48cd9e0d9
[ 1755.989416][T31544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1756.009073][T31544] RSP: 002b:00007fe48aff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[ 1756.017564][T31544] RAX: ffffffffffffffda RBX: 00007fe48d025fa0 RCX: 00007fe48cd9e0d9
[ 1756.025578][T31544] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000002
[ 1756.033589][T31544] RBP: 00007fe48aff6090 R08: 0000000000000000 R09: 0000000000000000
[ 1756.041600][T31544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1756.049633][T31544] R13: 00007fe48d026038 R14: 00007fe48d025fa0 R15: 00007ffdb10f00d8
[ 1756.057670][T31544]  </TASK>
[ 1756.586235][T31556] netlink: 'syz.4.8480': attribute type 10 has an invalid length.
[ 1756.609505][T31556] netlink: 55 bytes leftover after parsing attributes in process `syz.4.8480'.
[ 1756.971112][T31568] netlink: 'syz.0.8485': attribute type 10 has an invalid length.
[ 1757.228891][T31580] netlink: 65185 bytes leftover after parsing attributes in process `syz.0.8489'.
[ 1757.602194][T31590] FAULT_INJECTION: forcing a failure.
[ 1757.602194][T31590] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1757.651989][T31590] CPU: 1 PID: 31590 Comm: syz.1.8493 Not tainted syzkaller #0
[ 1757.662152][T31590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1757.672260][T31590] Call Trace:
[ 1757.675623][T31590]  <TASK>
[ 1757.678608][T31590]  dump_stack_lvl+0x188/0x24e
[ 1757.683358][T31590]  ? show_regs_print_info+0x12/0x12
[ 1757.688611][T31590]  ? load_image+0x410/0x410
[ 1757.693278][T31590]  ? __lock_acquire+0x7c40/0x7c40
[ 1757.698363][T31590]  should_fail_ex+0x390/0x4c0
[ 1757.703100][T31590]  _copy_from_user+0x2c/0x170
[ 1757.707830][T31590]  kstrtouint_from_user+0xda/0x170
[ 1757.713011][T31590]  ? kstrtol_from_user+0x190/0x190
[ 1757.718204][T31590]  proc_fail_nth_write+0x8b/0x200
[ 1757.723284][T31590]  ? proc_fail_nth_read+0x220/0x220
[ 1757.728533][T31590]  ? common_file_perm+0x171/0x1c0
[ 1757.733627][T31590]  ? proc_fail_nth_read+0x220/0x220
[ 1757.738876][T31590]  vfs_write+0x2dc/0x9a0
[ 1757.743179][T31590]  ? file_end_write+0x250/0x250
[ 1757.748091][T31590]  ? __fget_files+0x28/0x460
[ 1757.752744][T31590]  ? __fget_files+0x3fc/0x460
[ 1757.757501][T31590]  ? __fdget_pos+0x2ae/0x360
[ 1757.762147][T31590]  ? ksys_write+0x70/0x260
[ 1757.766633][T31590]  ksys_write+0x14d/0x260
[ 1757.771029][T31590]  ? __ia32_sys_read+0x80/0x80
[ 1757.775854][T31590]  ? lockdep_hardirqs_on+0x94/0x140
[ 1757.781108][T31590]  do_syscall_64+0x4c/0xa0
[ 1757.785583][T31590]  ? clear_bhb_loop+0x60/0xb0
[ 1757.790320][T31590]  ? clear_bhb_loop+0x60/0xb0
[ 1757.795053][T31590]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1757.801005][T31590] RIP: 0033:0x7fa5f515e90e
[ 1757.805470][T31590] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1757.825162][T31590] RSP: 002b:00007fa5f33f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1757.833641][T31590] RAX: ffffffffffffffda RBX: 00007fa5f33f66c0 RCX: 00007fa5f515e90e
[ 1757.841661][T31590] RDX: 0000000000000001 RSI: 00007fa5f33f60a0 RDI: 0000000000000006
[ 1757.849680][T31590] RBP: 00007fa5f33f6090 R08: 0000000000000000 R09: 0000000000000000
[ 1757.857696][T31590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1757.865714][T31590] R13: 00007fa5f5426038 R14: 00007fa5f5425fa0 R15: 00007ffe0412c518
[ 1757.873788][T31590]  </TASK>
[ 1758.286717][T31606] netlink: 'syz.3.8497': attribute type 10 has an invalid length.
[ 1758.295546][T31606] netlink: 55 bytes leftover after parsing attributes in process `syz.3.8497'.
[ 1758.541776][T31613] netlink: 'syz.1.8499': attribute type 10 has an invalid length.
[ 1758.725717][T31616] netlink: 'syz.2.8501': attribute type 39 has an invalid length.
[ 1758.753881][T31616] device macvlan0 entered promiscuous mode
[ 1758.835905][T31619] netlink: 65185 bytes leftover after parsing attributes in process `syz.3.8502'.
[ 1759.014556][T31624] netlink: 'syz.2.8505': attribute type 4 has an invalid length.
[ 1759.029125][T31624] netlink: 168 bytes leftover after parsing attributes in process `syz.2.8505'.
[ 1759.522079][T31635] netlink: 'syz.4.8507': attribute type 2 has an invalid length.
[ 1759.724571][T31635] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.8507'.
[ 1760.405265][T31648] netlink: 16054 bytes leftover after parsing attributes in process `syz.4.8508'.
[ 1760.669027][T31654] netlink: 65185 bytes leftover after parsing attributes in process `syz.2.8511'.
[ 1760.778318][T31659] netlink: 'syz.4.8513': attribute type 10 has an invalid length.
[ 1760.794349][T31659] netlink: 55 bytes leftover after parsing attributes in process `syz.4.8513'.
[ 1761.801863][T31664] netlink: 'syz.0.8514': attribute type 10 has an invalid length.
[ 1761.817717][T31667] netlink: 'syz.4.8516': attribute type 28 has an invalid length.
[ 1761.831372][T31667] netlink: 'syz.4.8516': attribute type 4 has an invalid length.
[ 1761.842479][T31667] netlink: 136 bytes leftover after parsing attributes in process `syz.4.8516'.
[ 1761.899011][T31667] netlink: 'syz.4.8516': attribute type 10 has an invalid length.
[ 1761.981906][T31667] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[ 1762.264009][T31682] netlink: 65185 bytes leftover after parsing attributes in process `syz.4.8521'.
[ 1762.346884][T31685] netlink: 'syz.2.8522': attribute type 3 has an invalid length.
[ 1762.387889][T31685] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8522'.
[ 1763.441353][T31709] netlink: 'syz.4.8527': attribute type 10 has an invalid length.
[ 1763.479343][T31709] __nla_validate_parse: 1 callbacks suppressed
[ 1763.479364][T31709] netlink: 55 bytes leftover after parsing attributes in process `syz.4.8527'.
[ 1763.731646][T31713] netlink: 65185 bytes leftover after parsing attributes in process `syz.1.8529'.
[ 1763.741272][T31713] bridge0: received packet on bridge_slave_1 with own address as source address (addr:0a:0a:da:1b:40:d8, vlan:0)
[ 1763.764258][T31713] bridge0: received packet on bridge_slave_1 with own address as source address (addr:0a:0a:da:1b:40:d8, vlan:1)
[ 1764.263391][T31719] netlink: 'syz.0.8531': attribute type 10 has an invalid length.
[ 1764.751905][T31728] netlink: 'syz.4.8532': attribute type 28 has an invalid length.
[ 1764.803199][T31728] netlink: 'syz.4.8532': attribute type 4 has an invalid length.
[ 1764.847121][T31728] netlink: 136 bytes leftover after parsing attributes in process `syz.4.8532'.
[ 1765.634142][T31746] À: port 1(vlan0) entered blocking state
[ 1765.749963][T31746] À: port 1(vlan0) entered disabled state
[ 1765.819856][T31746] device vlan0 entered promiscuous mode
[ 1765.854442][T31744] netlink: 65185 bytes leftover after parsing attributes in process `syz.2.8538'.
[ 1767.273989][T31771] netlink: 65185 bytes leftover after parsing attributes in process `syz.4.8548'.
[ 1767.329716][T31775] validate_nla: 2 callbacks suppressed
[ 1767.329735][T31775] netlink: 'syz.3.8550': attribute type 19 has an invalid length.
[ 1767.357462][T31775] netlink: 55 bytes leftover after parsing attributes in process `syz.3.8550'.
[ 1768.147109][T23144] Bluetooth: hci0: command 0x0406 tx timeout
[ 1770.382667][T31820] netlink: 'syz.0.8565': attribute type 3 has an invalid length.
[ 1770.423191][T31820] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8565'.
[ 1770.497888][T31822] netlink: 'syz.3.8566': attribute type 3 has an invalid length.
[ 1770.516781][T31822] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8566'.
[ 1770.773318][T31835] FAULT_INJECTION: forcing a failure.
[ 1770.773318][T31835] name failslab, interval 1, probability 0, space 0, times 0
[ 1770.798574][T31835] CPU: 0 PID: 31835 Comm: syz.1.8571 Not tainted syzkaller #0
[ 1770.806123][T31835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1770.816231][T31835] Call Trace:
[ 1770.819551][T31835]  <TASK>
[ 1770.822521][T31835]  dump_stack_lvl+0x188/0x24e
[ 1770.827260][T31835]  ? show_regs_print_info+0x12/0x12
[ 1770.832515][T31835]  ? load_image+0x410/0x410
[ 1770.837077][T31835]  ? __lock_acquire+0x7c40/0x7c40
[ 1770.842153][T31835]  ? sock_close+0xbf/0x210
[ 1770.846624][T31835]  should_fail_ex+0x390/0x4c0
[ 1770.851432][T31835]  should_failslab+0x5/0x20
[ 1770.856001][T31835]  slab_pre_alloc_hook+0x59/0x300
[ 1770.861080][T31835]  kmem_cache_alloc_node+0x5a/0x310
[ 1770.866331][T31835]  ? __alloc_skb+0xf9/0x7d0
[ 1770.870894][T31835]  __alloc_skb+0xf9/0x7d0
[ 1770.875286][T31835]  sctp_packet_transmit+0x2ec/0x2960
[ 1770.880632][T31835]  ? sctp_outq_flush+0xb72/0x3140
[ 1770.885726][T31835]  sctp_outq_flush+0xeb6/0x3140
[ 1770.890639][T31835]  ? sctp_ulpq_tail_event+0x459/0xad0
[ 1770.896059][T31835]  ? sctp_outq_flush+0xb72/0x3140
[ 1770.901137][T31835]  ? sctp_ulpevent_make_assoc_change+0x182/0xa50
[ 1770.907602][T31835]  ? sctp_validate_data+0x220/0x220
[ 1770.912848][T31835]  ? sctp_outq_tail+0x8a0/0x8a0
[ 1770.917752][T31835]  ? sctp_ulpevent_make_assoc_change+0x653/0xa50
[ 1770.924143][T31835]  ? sctp_outq_uncork+0x49/0xa0
[ 1770.929055][T31835]  sctp_do_sm+0x129d/0x5610
[ 1770.933627][T31835]  ? sctp_generate_t3_rtx_event+0x340/0x340
[ 1770.939614][T31835]  ? skb_put+0x10e/0x200
[ 1770.943911][T31835]  ? skb_put+0x10e/0x200
[ 1770.948204][T31835]  ? memcpy+0x3c/0x60
[ 1770.952248][T31835]  ? sctp_addto_chunk+0xf4/0x220
[ 1770.957240][T31835]  sctp_primitive_ABORT+0x94/0xc0
[ 1770.962320][T31835]  sctp_close+0x2b0/0x890
[ 1770.966807][T31835]  ? __sctp_write_space+0x530/0x530
[ 1770.972065][T31835]  ? rwsem_write_trylock+0x135/0x1c0
[ 1770.977403][T31835]  ? clear_nonspinnable+0x60/0x60
[ 1770.982488][T31835]  inet_release+0x139/0x180
[ 1770.987040][T31835]  sock_close+0xbf/0x210
[ 1770.991336][T31835]  ? sock_mmap+0x90/0x90
[ 1770.995623][T31835]  __fput+0x20a/0x8b0
[ 1770.999665][T31835]  task_work_run+0x1d0/0x260
[ 1771.004363][T31835]  ? task_work_cancel+0x220/0x220
[ 1771.009447][T31835]  ? exit_to_user_mode_loop+0x3b/0x110
[ 1771.014970][T31835]  exit_to_user_mode_loop+0xe6/0x110
[ 1771.020316][T31835]  exit_to_user_mode_prepare+0xee/0x180
[ 1771.025917][T31835]  syscall_exit_to_user_mode+0x16/0x40
[ 1771.031426][T31835]  do_syscall_64+0x58/0xa0
[ 1771.035989][T31835]  ? clear_bhb_loop+0x60/0xb0
[ 1771.040718][T31835]  ? clear_bhb_loop+0x60/0xb0
[ 1771.045455][T31835]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1771.051406][T31835] RIP: 0033:0x7fa5f519e0d9
[ 1771.055862][T31835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1771.075525][T31835] RSP: 002b:00007fa5f33f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[ 1771.084016][T31835] RAX: 0000000000000000 RBX: 00007fa5f5425fa0 RCX: 00007fa5f519e0d9
[ 1771.092039][T31835] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[ 1771.100052][T31835] RBP: 00007fa5f33f6090 R08: 0000000000000000 R09: 0000000000000000
[ 1771.108072][T31835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1771.116124][T31835] R13: 00007fa5f5426038 R14: 00007fa5f5425fa0 R15: 00007ffe0412c518
[ 1771.124172][T31835]  </TASK>
[ 1771.463305][T31840] netlink: 'syz.0.8572': attribute type 3 has an invalid length.
[ 1771.471449][T31840] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.8572'.
[ 1771.574535][T31844] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.8574'.
[ 1771.673990][T31847] netlink: 65185 bytes leftover after parsing attributes in process `syz.3.8575'.
[ 1773.048510][T31870] device lo entered promiscuous mode
[ 1773.406467][T31879] netlink: 'syz.1.8582': attribute type 10 has an invalid length.
[ 1773.415744][T31879] netlink: 55 bytes leftover after parsing attributes in process `syz.1.8582'.
[ 1773.586664][T31883] netlink: 'syz.4.8583': attribute type 3 has an invalid length.
[ 1773.780636][T31883] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8583'.
[ 1774.032963][T31894] FAULT_INJECTION: forcing a failure.
[ 1774.032963][T31894] name failslab, interval 1, probability 0, space 0, times 0
[ 1774.050127][T31894] CPU: 0 PID: 31894 Comm: syz.3.8588 Not tainted syzkaller #0
[ 1774.057669][T31894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1774.067773][T31894] Call Trace:
[ 1774.071090][T31894]  <TASK>
[ 1774.074044][T31894]  dump_stack_lvl+0x188/0x24e
[ 1774.078768][T31894]  ? show_regs_print_info+0x12/0x12
[ 1774.084004][T31894]  ? load_image+0x410/0x410
[ 1774.088542][T31894]  ? __might_sleep+0xd0/0xd0
[ 1774.093155][T31894]  ? __lock_acquire+0x7c40/0x7c40
[ 1774.098215][T31894]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 1774.104230][T31894]  should_fail_ex+0x390/0x4c0
[ 1774.108946][T31894]  should_failslab+0x5/0x20
[ 1774.113471][T31894]  slab_pre_alloc_hook+0x59/0x300
[ 1774.118523][T31894]  ? sctp_association_new+0x86/0x2520
[ 1774.123934][T31894]  __kmem_cache_alloc_node+0x4f/0x270
[ 1774.129334][T31894]  ? sctp_v6_to_sk_saddr+0xfc/0x1c0
[ 1774.134562][T31894]  ? sctp_association_new+0x86/0x2520
[ 1774.139979][T31894]  kmalloc_trace+0x26/0xe0
[ 1774.144431][T31894]  sctp_association_new+0x86/0x2520
[ 1774.149669][T31894]  sctp_connect_new_asoc+0x2da/0x6a0
[ 1774.154999][T31894]  ? __sctp_connect+0xd80/0xd80
[ 1774.159892][T31894]  ? bpf_lsm_sctp_bind_connect+0x5/0x10
[ 1774.165467][T31894]  ? security_sctp_bind_connect+0x85/0xb0
[ 1774.171218][T31894]  sctp_sendmsg+0x1686/0x2940
[ 1774.175944][T31894]  ? sctp_getsockopt+0x8a0/0x8a0
[ 1774.180915][T31894]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1774.187113][T31894]  ? lockdep_hardirqs_on+0x94/0x140
[ 1774.192345][T31894]  ? sctp_getsockopt+0x8a0/0x8a0
[ 1774.197314][T31894]  ? inet_send_prepare+0x250/0x250
[ 1774.202447][T31894]  ____sys_sendmsg+0x5ed/0x9a0
[ 1774.207255][T31894]  ? __sys_sendmsg_sock+0x30/0x30
[ 1774.212313][T31894]  ? __import_iovec+0x306/0x510
[ 1774.217207][T31894]  ? import_iovec+0x6f/0xa0
[ 1774.221746][T31894]  ___sys_sendmsg+0x2a2/0x360
[ 1774.226466][T31894]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1774.231266][T31894]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 1774.237296][T31894]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1774.243509][T31894]  ? lockdep_hardirqs_on+0x94/0x140
[ 1774.248856][T31894]  ? __se_sys_sendmsg+0xee/0x2b0
[ 1774.253837][T31894]  ? kasan_check_range+0x84/0x290
[ 1774.258907][T31894]  __se_sys_sendmsg+0x1c3/0x2b0
[ 1774.263798][T31894]  ? __x64_sys_sendmsg+0x80/0x80
[ 1774.268868][T31894]  ? syscall_enter_from_user_mode+0x2a/0x80
[ 1774.274809][T31894]  do_syscall_64+0x4c/0xa0
[ 1774.279257][T31894]  ? clear_bhb_loop+0x60/0xb0
[ 1774.283969][T31894]  ? clear_bhb_loop+0x60/0xb0
[ 1774.288690][T31894]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1774.294620][T31894] RIP: 0033:0x7fcf1e99e0d9
[ 1774.299062][T31894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1774.318692][T31894] RSP: 002b:00007fcf1f807028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1774.327150][T31894] RAX: ffffffffffffffda RBX: 00007fcf1ec25fa0 RCX: 00007fcf1e99e0d9
[ 1774.335146][T31894] RDX: 0000000000000041 RSI: 0000200000000600 RDI: 0000000000000006
[ 1774.343145][T31894] RBP: 00007fcf1f807090 R08: 0000000000000000 R09: 0000000000000000
[ 1774.351144][T31894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1774.359138][T31894] R13: 00007fcf1ec26038 R14: 00007fcf1ec25fa0 R15: 00007ffdc18cb568
[ 1774.367150][T31894]  </TASK>
[ 1774.936264][T31906] netlink: 'syz.4.8593': attribute type 10 has an invalid length.
[ 1775.673697][T31921] netlink: 'syz.3.8597': attribute type 10 has an invalid length.
[ 1776.554522][T31922] delete_channel: no stack
[ 1776.722636][T31943] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.8604'.
[ 1777.731591][T31967] netlink: 'syz.0.8610': attribute type 10 has an invalid length.
[ 1777.892539][T31972] netlink: 'syz.3.8609': attribute type 1 has an invalid length.
[ 1777.900525][T31972] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.8609'.
[ 1780.512990][T32000] FAULT_INJECTION: forcing a failure.
[ 1780.512990][T32000] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1780.568830][T32000] CPU: 0 PID: 32000 Comm: syz.0.8623 Not tainted syzkaller #0
[ 1780.576395][T32000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1780.586500][T32000] Call Trace:
[ 1780.589829][T32000]  <TASK>
[ 1780.592799][T32000]  dump_stack_lvl+0x188/0x24e
[ 1780.597545][T32000]  ? show_regs_print_info+0x12/0x12
[ 1780.602807][T32000]  ? load_image+0x410/0x410
[ 1780.607377][T32000]  ? __lock_acquire+0x7c40/0x7c40
[ 1780.612454][T32000]  ? perf_trace_lock+0xf8/0x390
[ 1780.617362][T32000]  should_fail_ex+0x390/0x4c0
[ 1780.622196][T32000]  _copy_from_user+0x2c/0x170
[ 1780.626954][T32000]  ___sys_recvmsg+0x170/0x590
[ 1780.631697][T32000]  ? __sys_recvmsg+0x2a0/0x2a0
[ 1780.636536][T32000]  ? common_file_perm+0x171/0x1c0
[ 1780.641626][T32000]  ? __fget_files+0x3fc/0x460
[ 1780.646391][T32000]  __x64_sys_recvmsg+0x20d/0x2e0
[ 1780.651401][T32000]  ? ___sys_recvmsg+0x590/0x590
[ 1780.656355][T32000]  ? lockdep_hardirqs_on+0x94/0x140
[ 1780.661613][T32000]  do_syscall_64+0x4c/0xa0
[ 1780.666083][T32000]  ? clear_bhb_loop+0x60/0xb0
[ 1780.670815][T32000]  ? clear_bhb_loop+0x60/0xb0
[ 1780.675546][T32000]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1780.681497][T32000] RIP: 0033:0x7feb1279e0d9
[ 1780.685970][T32000] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1780.705621][T32000] RSP: 002b:00007feb13601028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[ 1780.714086][T32000] RAX: ffffffffffffffda RBX: 00007feb12a25fa0 RCX: 00007feb1279e0d9
[ 1780.722110][T32000] RDX: 0000000000002082 RSI: 0000200000000300 RDI: 0000000000000003
[ 1780.730472][T32000] RBP: 00007feb13601090 R08: 0000000000000000 R09: 0000000000000000
[ 1780.738488][T32000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1780.746501][T32000] R13: 00007feb12a26038 R14: 00007feb12a25fa0 R15: 00007ffe313f7e08
[ 1780.754537][T32000]  </TASK>
[ 1781.550406][T32014] netlink: 14 bytes leftover after parsing attributes in process `syz.0.8626'.
[ 1781.750619][T32016] netlink: 'syz.1.8627': attribute type 10 has an invalid length.
[ 1781.779840][T32016] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.8627'.
[ 1781.836678][T32015] delete_channel: no stack
[ 1781.885266][T32023] netlink: 'syz.4.8629': attribute type 3 has an invalid length.
[ 1781.950909][T32023] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8629'.
[ 1782.947112][T32036] netlink: 65185 bytes leftover after parsing attributes in process `syz.1.8634'.
[ 1782.956430][T32036] bridge0: received packet on bridge_slave_1 with own address as source address (addr:0a:0a:da:1b:40:d8, vlan:0)
[ 1783.008200][T32036] bridge0: received packet on bridge_slave_1 with own address as source address (addr:0a:0a:da:1b:40:d8, vlan:1)
[ 1783.517597][T23144] Bluetooth: hci2: command 0x0406 tx timeout
[ 1784.201983][T32064] netlink: 14 bytes leftover after parsing attributes in process `syz.2.8641'.
[ 1784.787683][T32084] netlink: 'syz.2.8646': attribute type 3 has an invalid length.
[ 1784.795847][T32084] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8646'.
[ 1785.107720][T32085] delete_channel: no stack
[ 1786.052303][T32111] netlink: 14 bytes leftover after parsing attributes in process `syz.4.8657'.
[ 1786.101541][T32117] netlink: 'syz.1.8659': attribute type 1 has an invalid length.
[ 1786.147113][T32117] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8659'.
[ 1786.853502][T32119] mac80211_hwsim hwsim62 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1787.790045][T32140] netlink: 65185 bytes leftover after parsing attributes in process `syz.1.8667'.
[ 1787.816509][T32140] bridge0: received packet on bridge_slave_1 with own address as source address (addr:0a:0a:da:1b:40:d8, vlan:0)
[ 1787.868065][T32140] bridge0: received packet on bridge_slave_1 with own address as source address (addr:0a:0a:da:1b:40:d8, vlan:1)
[ 1788.402288][T32155] netlink: 14 bytes leftover after parsing attributes in process `syz.0.8671'.
[ 1788.421926][T32155] openvswitch: netlink: Flow key attr not present in new flow.
[ 1788.752502][T32162] netlink: 'syz.2.8674': attribute type 10 has an invalid length.
[ 1788.798120][T32162] netlink: 55 bytes leftover after parsing attributes in process `syz.2.8674'.
[ 1789.046896][T32170] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.8679'.
[ 1789.146193][T32170] sysfs: cannot create duplicate filename '/class/ieee80211/.!
'
[ 1789.247375][T32170] CPU: 0 PID: 32170 Comm: syz.4.8679 Not tainted syzkaller #0
[ 1789.254968][T32170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1789.265203][T32170] Call Trace:
[ 1789.268556][T32170]  <TASK>
[ 1789.271562][T32170]  dump_stack_lvl+0x188/0x24e
[ 1789.276346][T32170]  ? show_regs_print_info+0x12/0x12
[ 1789.281627][T32170]  ? load_image+0x410/0x410
[ 1789.286260][T32170]  sysfs_warn_dup+0x8a/0xa0
[ 1789.290854][T32170]  sysfs_do_create_link_sd+0xc0/0x110
[ 1789.296345][T32170]  device_add+0x83b/0x1050
[ 1789.300892][T32170]  wiphy_register+0x1d8b/0x2aa0
[ 1789.305903][T32170]  ? cfg80211_event_work+0x40/0x40
[ 1789.311105][T32170]  ? minstrel_ht_alloc+0x894/0xa20
[ 1789.316334][T32170]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[ 1789.322510][T32170]  ieee80211_register_hw+0x2d48/0x39f0
[ 1789.328100][T32170]  ? ieee80211_register_hw+0xee1/0x39f0
[ 1789.333727][T32170]  ? ieee80211_register_hw+0xee1/0x39f0
[ 1789.339391][T32170]  ? ieee80211_tasklet_handler+0x20/0x20
[ 1789.345107][T32170]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 1789.351102][T32170]  ? __debug_object_init+0xed/0x440
[ 1789.356421][T32170]  ? memset+0x1e/0x40
[ 1789.360496][T32170]  ? __hrtimer_init+0x189/0x270
[ 1789.365444][T32170]  mac80211_hwsim_new_radio+0x2927/0x4cd0
[ 1789.371294][T32170]  ? memcpy+0x3c/0x60
[ 1789.375377][T32170]  hwsim_new_radio_nl+0xab7/0xc90
[ 1789.380561][T32170]  genl_family_rcv_msg_doit+0x22f/0x350
[ 1789.386196][T32170]  ? end_current_label_crit_section+0x170/0x170
[ 1789.392541][T32170]  ? trace_call_bpf+0xbf/0x6b0
[ 1789.397396][T32170]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[ 1789.403506][T32170]  ? bpf_lsm_capable+0x5/0x10
[ 1789.408262][T32170]  ? security_capable+0x85/0xb0
[ 1789.413231][T32170]  genl_rcv_msg+0x601/0x790
[ 1789.417855][T32170]  ? genl_bind+0x360/0x360
[ 1789.422348][T32170]  ? hwsim_tx_info_frame_received_nl+0xe30/0xe30
[ 1789.428830][T32170]  netlink_rcv_skb+0x1ef/0x440
[ 1789.433684][T32170]  ? genl_bind+0x360/0x360
[ 1789.438183][T32170]  ? netlink_ack+0x1160/0x1160
[ 1789.443078][T32170]  ? down_read+0x1a8/0x2d0
[ 1789.447592][T32170]  genl_rcv+0x24/0x40
[ 1789.451644][T32170]  netlink_unicast+0x7ad/0x920
[ 1789.456548][T32170]  netlink_sendmsg+0x8ad/0xbd0
[ 1789.461462][T32170]  ? netlink_getsockopt+0x550/0x550
[ 1789.466775][T32170]  ? apparmor_socket_sendmsg+0x8a/0x330
[ 1789.472415][T32170]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1789.477783][T32170]  ? security_socket_sendmsg+0x7c/0xa0
[ 1789.483316][T32170]  ? netlink_getsockopt+0x550/0x550
[ 1789.488617][T32170]  ____sys_sendmsg+0x5ed/0x9a0
[ 1789.493574][T32170]  ? __sys_sendmsg_sock+0x30/0x30
[ 1789.498718][T32170]  ? __import_iovec+0x306/0x510
[ 1789.503710][T32170]  ? import_iovec+0x6f/0xa0
[ 1789.508338][T32170]  ___sys_sendmsg+0x2a2/0x360
[ 1789.513130][T32170]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1789.518185][T32170]  __se_sys_sendmsg+0x1c3/0x2b0
[ 1789.523146][T32170]  ? __x64_sys_sendmsg+0x80/0x80
[ 1789.528239][T32170]  ? lockdep_hardirqs_on+0x94/0x140
[ 1789.533557][T32170]  do_syscall_64+0x4c/0xa0
[ 1789.538080][T32170]  ? clear_bhb_loop+0x60/0xb0
[ 1789.542836][T32170]  ? clear_bhb_loop+0x60/0xb0
[ 1789.547608][T32170]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1789.553586][T32170] RIP: 0033:0x7fe48cd9e0d9
[ 1789.558087][T32170] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1789.577782][T32170] RSP: 002b:00007fe48aff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1789.586281][T32170] RAX: ffffffffffffffda RBX: 00007fe48d025fa0 RCX: 00007fe48cd9e0d9
[ 1789.594335][T32170] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[ 1789.602387][T32170] RBP: 00007fe48ce35024 R08: 0000000000000000 R09: 0000000000000000
[ 1789.610446][T32170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1789.618498][T32170] R13: 00007fe48d026038 R14: 00007fe48d025fa0 R15: 00007ffdb10f00d8
[ 1789.626638][T32170]  </TASK>
[ 1790.831943][T32208] netlink: 'syz.3.8692': attribute type 10 has an invalid length.
[ 1790.860082][T32208] netlink: 55 bytes leftover after parsing attributes in process `syz.3.8692'.
[ 1791.767882][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[ 1791.775137][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[ 1792.038794][T32225] netlink: 'syz.3.8695': attribute type 1 has an invalid length.
[ 1792.067894][T32225] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8695'.
[ 1792.813057][T32234] mac80211_hwsim hwsim75 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1793.188559][T32248] netlink: 'syz.3.8706': attribute type 10 has an invalid length.
[ 1793.217344][T32248] netlink: 55 bytes leftover after parsing attributes in process `syz.3.8706'.
[ 1793.451904][T32257] FAULT_INJECTION: forcing a failure.
[ 1793.451904][T32257] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1793.493132][T32257] CPU: 0 PID: 32257 Comm: syz.2.8710 Not tainted syzkaller #0
[ 1793.500705][T32257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1793.510809][T32257] Call Trace:
[ 1793.514123][T32257]  <TASK>
[ 1793.517090][T32257]  dump_stack_lvl+0x188/0x24e
[ 1793.521831][T32257]  ? show_regs_print_info+0x12/0x12
[ 1793.527083][T32257]  ? load_image+0x410/0x410
[ 1793.531639][T32257]  ? __lock_acquire+0x7c40/0x7c40
[ 1793.536729][T32257]  should_fail_ex+0x390/0x4c0
[ 1793.541466][T32257]  _copy_from_user+0x2c/0x170
[ 1793.546196][T32257]  __sys_bpf+0x2ea/0x780
[ 1793.550496][T32257]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1793.555943][T32257]  ? lock_chain_count+0x20/0x20
[ 1793.560863][T32257]  __x64_sys_bpf+0x78/0x90
[ 1793.565337][T32257]  do_syscall_64+0x4c/0xa0
[ 1793.569802][T32257]  ? clear_bhb_loop+0x60/0xb0
[ 1793.574527][T32257]  ? clear_bhb_loop+0x60/0xb0
[ 1793.579261][T32257]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1793.585205][T32257] RIP: 0033:0x7f2c8919e0d9
[ 1793.589662][T32257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1793.609312][T32257] RSP: 002b:00007f2c8a15d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1793.617777][T32257] RAX: ffffffffffffffda RBX: 00007f2c89425fa0 RCX: 00007f2c8919e0d9
[ 1793.625795][T32257] RDX: 0000000000000010 RSI: 0000200000000340 RDI: 000000000000000f
[ 1793.633807][T32257] RBP: 00007f2c8a15d090 R08: 0000000000000000 R09: 0000000000000000
[ 1793.641825][T32257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1793.649835][T32257] R13: 00007f2c89426038 R14: 00007f2c89425fa0 R15: 00007ffe6fb73408
[ 1793.657868][T32257]  </TASK>
[ 1794.867570][T30389] wlan1: Trigger new scan to find an IBSS to join
[ 1794.882260][T32293] netlink: 'syz.3.8722': attribute type 10 has an invalid length.
[ 1794.897327][T32293] netlink: 55 bytes leftover after parsing attributes in process `syz.3.8722'.
[ 1795.442079][T32309] netlink: 65185 bytes leftover after parsing attributes in process `syz.0.8728'.
[ 1796.625604][T32333] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 1796.632877][T32333] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 1796.645628][T32335] netlink: 'syz.2.8733': attribute type 3 has an invalid length.
[ 1796.687072][T32335] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8733'.
[ 1796.765622][T32339] netlink: 'syz.3.8736': attribute type 10 has an invalid length.
[ 1796.790988][T32339] netlink: 55 bytes leftover after parsing attributes in process `syz.3.8736'.
[ 1796.864492][T32342] netlink: 'syz.1.8737': attribute type 10 has an invalid length.
[ 1797.874225][T32367] netlink: 65185 bytes leftover after parsing attributes in process `syz.3.8746'.
[ 1798.051868][T32374] netlink: 'syz.0.8749': attribute type 15 has an invalid length.
[ 1798.060829][T32374] netlink: 'syz.0.8749': attribute type 7 has an invalid length.
[ 1798.075404][T32374] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8749'.
[ 1798.529866][T32379] netlink: 'syz.1.8750': attribute type 10 has an invalid length.
[ 1798.619317][T32379] netlink: 55 bytes leftover after parsing attributes in process `syz.1.8750'.
[ 1799.193515][T32385] netlink: 'syz.0.8752': attribute type 10 has an invalid length.
[ 1799.625838][T32392] netlink: 'syz.4.8753': attribute type 3 has an invalid length.
[ 1799.802174][T32392] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8753'.
[ 1799.838644][T24186] wlan1: Trigger new scan to find an IBSS to join
[ 1801.036716][T24186] wlan1: Creating new IBSS network, BSSID 16:f9:2b:ca:48:3c
[ 1801.637039][T32416] netlink: 'syz.4.8759': attribute type 3 has an invalid length.
[ 1801.781081][T32416] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8759'.
[ 1802.195346][T32435] netlink: 'syz.1.8765': attribute type 3 has an invalid length.
[ 1802.213258][T32437] netlink: 204484 bytes leftover after parsing attributes in process `syz.3.8766'.
[ 1802.243747][T32435] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8765'.
[ 1802.872042][T32451] netlink: 'syz.0.8769': attribute type 3 has an invalid length.
[ 1802.917914][T32451] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8769'.
[ 1804.247311][T32481] netlink: 65185 bytes leftover after parsing attributes in process `syz.0.8778'.
[ 1804.412902][T32486] netlink: 'syz.1.8779': attribute type 3 has an invalid length.
[ 1804.486575][T32486] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8779'.
[ 1806.664104][T32518] netlink: 'syz.3.8787': attribute type 3 has an invalid length.
[ 1806.684202][T32518] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8787'.
[ 1807.501460][T32530] netlink: 'syz.4.8793': attribute type 10 has an invalid length.
[ 1807.615342][T32535] netlink: 'syz.2.8794': attribute type 3 has an invalid length.
[ 1807.654364][T32535] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8794'.
[ 1809.790561][T32571] netlink: 'syz.0.8808': attribute type 10 has an invalid length.
[ 1810.303996][T32578] netlink: 'syz.1.8809': attribute type 3 has an invalid length.
[ 1810.347402][T32578] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8809'.
[ 1811.837877][T32592] netlink: 'syz.0.8812': attribute type 3 has an invalid length.
[ 1811.977406][T32597] netlink: 'syz.3.8813': attribute type 3 has an invalid length.
[ 1811.986560][T32592] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8812'.
[ 1812.022785][T32597] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8813'.
[ 1812.320523][T32609] netlink: 65185 bytes leftover after parsing attributes in process `syz.2.8819'.
[ 1812.941881][T32619] netlink: 'syz.1.8822': attribute type 10 has an invalid length.
[ 1814.209001][T32653] netlink: 65185 bytes leftover after parsing attributes in process `syz.1.8835'.
[ 1814.253190][T32655] netlink: 'syz.2.8833': attribute type 3 has an invalid length.
[ 1814.265690][T32653] bridge0: received packet on bridge_slave_1 with own address as source address (addr:0a:0a:da:1b:40:d8, vlan:0)
[ 1814.291312][T32655] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8833'.
[ 1814.392604][T32653] bridge0: received packet on bridge_slave_1 with own address as source address (addr:0a:0a:da:1b:40:d8, vlan:1)
[ 1814.871812][T32667] netlink: 'syz.3.8837': attribute type 10 has an invalid length.
[ 1815.882264][T32681] netlink: 'syz.3.8844': attribute type 4 has an invalid length.
[ 1815.988846][T32681] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8844'.
[ 1816.363277][T32687] netlink: 128 bytes leftover after parsing attributes in process `syz.3.8844'.
[ 1816.387347][T32687] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1816.658121][T32695] netlink: 'syz.1.8848': attribute type 10 has an invalid length.
[ 1816.980925][T32697] netlink: 4735 bytes leftover after parsing attributes in process `syz.3.8844'.
[ 1817.432483][T32714] netlink: 65185 bytes leftover after parsing attributes in process `syz.2.8853'.
[ 1817.465899][T32711] netlink: 'syz.1.8852': attribute type 3 has an invalid length.
[ 1817.494897][T32709] netlink: 'syz.4.8850': attribute type 10 has an invalid length.
[ 1817.648678][T32711] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8852'.
[ 1817.669790][T32717] netlink: 'syz.0.8855': attribute type 12 has an invalid length.
[ 1817.755279][T32717] netlink: 'syz.0.8855': attribute type 15 has an invalid length.
[ 1821.504361][T32748] FAULT_INJECTION: forcing a failure.
[ 1821.504361][T32748] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1821.548208][T32748] CPU: 0 PID: 32748 Comm: syz.0.8865 Not tainted syzkaller #0
[ 1821.555768][T32748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1821.565897][T32748] Call Trace:
[ 1821.569215][T32748]  <TASK>
[ 1821.572193][T32748]  dump_stack_lvl+0x188/0x24e
[ 1821.576931][T32748]  ? show_regs_print_info+0x12/0x12
[ 1821.582208][T32748]  ? load_image+0x410/0x410
[ 1821.586767][T32748]  ? __lock_acquire+0x7c40/0x7c40
[ 1821.591846][T32748]  ? snprintf+0xe5/0x140
[ 1821.596139][T32748]  should_fail_ex+0x390/0x4c0
[ 1821.600875][T32748]  _copy_to_user+0x2c/0x130
[ 1821.605429][T32748]  simple_read_from_buffer+0xe3/0x150
[ 1821.610855][T32748]  proc_fail_nth_read+0x1a6/0x220
[ 1821.615935][T32748]  ? proc_fault_inject_write+0x310/0x310
[ 1821.621600][T32748]  ? fsnotify_perm+0x248/0x550
[ 1821.626392][T32748]  ? proc_fault_inject_write+0x310/0x310
[ 1821.632056][T32748]  vfs_read+0x2db/0x960
[ 1821.636281][T32748]  ? kernel_read+0x1e0/0x1e0
[ 1821.640912][T32748]  ? __fget_files+0x28/0x460
[ 1821.645539][T32748]  ? __fget_files+0x3fc/0x460
[ 1821.650254][T32748]  ? __fdget_pos+0x2ae/0x360
[ 1821.654881][T32748]  ? ksys_read+0x70/0x260
[ 1821.659249][T32748]  ksys_read+0x14d/0x260
[ 1821.663542][T32748]  ? vfs_write+0x9a0/0x9a0
[ 1821.667995][T32748]  ? lockdep_hardirqs_on+0x94/0x140
[ 1821.673229][T32748]  do_syscall_64+0x4c/0xa0
[ 1821.677683][T32748]  ? clear_bhb_loop+0x60/0xb0
[ 1821.682389][T32748]  ? clear_bhb_loop+0x60/0xb0
[ 1821.687109][T32748]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1821.693036][T32748] RIP: 0033:0x7feb1275e90e
[ 1821.697476][T32748] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1821.717110][T32748] RSP: 002b:00007feb135dffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1821.725578][T32748] RAX: ffffffffffffffda RBX: 00007feb135e06c0 RCX: 00007feb1275e90e
[ 1821.733608][T32748] RDX: 000000000000000f RSI: 00007feb135e00a0 RDI: 0000000000000005
[ 1821.741611][T32748] RBP: 00007feb135e0090 R08: 0000000000000000 R09: 0000000000000000
[ 1821.749636][T32748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1821.757726][T32748] R13: 00007feb12a26128 R14: 00007feb12a26090 R15: 00007ffe313f7e08
[ 1821.765751][T32748]  </TASK>
[ 1821.779778][T32750] netlink: 'syz.3.8864': attribute type 10 has an invalid length.
[ 1821.808167][T32750] netlink: 55 bytes leftover after parsing attributes in process `syz.3.8864'.
[ 1822.259378][T32753] netlink: 'syz.3.8868': attribute type 10 has an invalid length.
[ 1822.865330][  T302] netlink: 'syz.4.8872': attribute type 3 has an invalid length.
[ 1822.879111][  T304] netlink: 65185 bytes leftover after parsing attributes in process `syz.0.8874'.
[ 1822.914370][  T302] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8872'.
[ 1823.558256][  T318] netlink: 'syz.2.8878': attribute type 10 has an invalid length.
[ 1823.566214][  T318] netlink: 55 bytes leftover after parsing attributes in process `syz.2.8878'.
[ 1824.168239][  T326] netlink: 'syz.4.8880': attribute type 30 has an invalid length.
[ 1824.377758][  T329] netlink: 144 bytes leftover after parsing attributes in process `syz.0.8881'.
[ 1824.785453][  T338] netlink: 'syz.4.8885': attribute type 10 has an invalid length.
[ 1825.735533][  T361] netlink: 'syz.1.8891': attribute type 3 has an invalid length.
[ 1825.843452][  T361] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8891'.
[ 1825.874189][  T367] netlink: 65185 bytes leftover after parsing attributes in process `syz.4.8893'.
[ 1825.970639][  T362] tipc: Started in network mode
[ 1826.016485][  T362] tipc: Node identity 9215a268, cluster identity 4711
[ 1826.102674][  T362] tipc: Node number set to 2450891368
[ 1826.248002][  T372] netlink: 'syz.2.8892': attribute type 10 has an invalid length.
[ 1826.256130][  T372] netlink: 55 bytes leftover after parsing attributes in process `syz.2.8892'.
[ 1828.771720][  T391] netlink: 'syz.0.8899': attribute type 9 has an invalid length.
[ 1828.838390][  T397] netlink: 'syz.1.8900': attribute type 10 has an invalid length.
[ 1829.410909][  T406] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.8903'.
[ 1829.438951][  T411] netlink: 65185 bytes leftover after parsing attributes in process `syz.3.8906'.
[ 1829.628637][  T406] sysfs: cannot create duplicate filename '/class/ieee80211/.!
'
[ 1829.697706][  T406] CPU: 0 PID: 406 Comm: syz.1.8903 Not tainted syzkaller #0
[ 1829.705098][  T406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1829.715211][  T406] Call Trace:
[ 1829.718540][  T406]  <TASK>
[ 1829.721520][  T406]  dump_stack_lvl+0x188/0x24e
[ 1829.726276][  T406]  ? show_regs_print_info+0x12/0x12
[ 1829.731531][  T406]  ? load_image+0x410/0x410
[ 1829.736105][  T406]  sysfs_warn_dup+0x8a/0xa0
[ 1829.740672][  T406]  sysfs_do_create_link_sd+0xc0/0x110
[ 1829.746111][  T406]  device_add+0x83b/0x1050
[ 1829.750597][  T406]  wiphy_register+0x1d8b/0x2aa0
[ 1829.755527][  T406]  ? cfg80211_event_work+0x40/0x40
[ 1829.760699][  T406]  ? minstrel_ht_alloc+0x894/0xa20
[ 1829.765921][  T406]  ? kasan_quarantine_reduce+0x1/0x160
[ 1829.771453][  T406]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[ 1829.777581][  T406]  ieee80211_register_hw+0x2d48/0x39f0
[ 1829.783104][  T406]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1829.789333][  T406]  ? ieee80211_register_hw+0xee1/0x39f0
[ 1829.794935][  T406]  ? ieee80211_register_hw+0xee1/0x39f0
[ 1829.800550][  T406]  ? ieee80211_tasklet_handler+0x20/0x20
[ 1829.806241][  T406]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 1829.812191][  T406]  ? __debug_object_init+0xed/0x440
[ 1829.817466][  T406]  ? memset+0x1e/0x40
[ 1829.821502][  T406]  ? __hrtimer_init+0x189/0x270
[ 1829.826410][  T406]  mac80211_hwsim_new_radio+0x2927/0x4cd0
[ 1829.832198][  T406]  ? memcpy+0x3c/0x60
[ 1829.836245][  T406]  hwsim_new_radio_nl+0xab7/0xc90
[ 1829.841344][  T406]  genl_family_rcv_msg_doit+0x22f/0x350
[ 1829.846947][  T406]  ? end_current_label_crit_section+0x170/0x170
[ 1829.853264][  T406]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[ 1829.859225][  T406]  ? bpf_lsm_capable+0x5/0x10
[ 1829.863961][  T406]  ? security_capable+0x85/0xb0
[ 1829.868893][  T406]  genl_rcv_msg+0x601/0x790
[ 1829.873467][  T406]  ? genl_bind+0x360/0x360
[ 1829.877932][  T406]  ? hwsim_tx_info_frame_received_nl+0xe30/0xe30
[ 1829.884345][  T406]  netlink_rcv_skb+0x1ef/0x440
[ 1829.889174][  T406]  ? genl_bind+0x360/0x360
[ 1829.893649][  T406]  ? netlink_ack+0x1160/0x1160
[ 1829.898497][  T406]  ? lockdep_hardirqs_on+0x94/0x140
[ 1829.903766][  T406]  ? down_read+0x1a8/0x2d0
[ 1829.908243][  T406]  genl_rcv+0x24/0x40
[ 1829.912272][  T406]  netlink_unicast+0x7ad/0x920
[ 1829.917147][  T406]  netlink_sendmsg+0x8ad/0xbd0
[ 1829.922009][  T406]  ? netlink_getsockopt+0x550/0x550
[ 1829.927287][  T406]  ? netlink_getsockopt+0x550/0x550
[ 1829.932591][  T406]  ____sys_sendmsg+0x5ed/0x9a0
[ 1829.937427][  T406]  ? __sys_sendmsg_sock+0x30/0x30
[ 1829.942511][  T406]  ? __import_iovec+0x306/0x510
[ 1829.947432][  T406]  ? import_iovec+0x6f/0xa0
[ 1829.952000][  T406]  ___sys_sendmsg+0x2a2/0x360
[ 1829.956740][  T406]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1829.961591][  T406]  ? ktime_get+0x7b/0x270
[ 1829.966013][  T406]  __se_sys_sendmsg+0x1c3/0x2b0
[ 1829.970930][  T406]  ? __x64_sys_sendmsg+0x80/0x80
[ 1829.975949][  T406]  ? lockdep_hardirqs_on+0x94/0x140
[ 1829.981205][  T406]  do_syscall_64+0x4c/0xa0
[ 1829.985677][  T406]  ? clear_bhb_loop+0x60/0xb0
[ 1829.990417][  T406]  ? clear_bhb_loop+0x60/0xb0
[ 1829.995152][  T406]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1830.001113][  T406] RIP: 0033:0x7fa5f519e0d9
[ 1830.005580][  T406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1830.025251][  T406] RSP: 002b:00007fa5f33f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1830.033735][  T406] RAX: ffffffffffffffda RBX: 00007fa5f5425fa0 RCX: 00007fa5f519e0d9
[ 1830.041761][  T406] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006
[ 1830.049786][  T406] RBP: 00007fa5f5235024 R08: 0000000000000000 R09: 0000000000000000
[ 1830.057805][  T406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1830.065829][  T406] R13: 00007fa5f5426038 R14: 00007fa5f5425fa0 R15: 00007ffe0412c518
[ 1830.073879][  T406]  </TASK>
[ 1830.520216][  T423] netlink: 'syz.4.8907': attribute type 3 has an invalid length.
[ 1830.555884][  T423] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8907'.
[ 1830.947659][  T430] netlink: 65185 bytes leftover after parsing attributes in process `syz.3.8909'.
[ 1831.092762][T25446] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1831.847696][  T448] netlink: 'syz.4.8914': attribute type 10 has an invalid length.
[ 1833.409796][  T460] netlink: 65185 bytes leftover after parsing attributes in process `syz.1.8921'.
[ 1833.467191][  T460] bridge0: received packet on bridge_slave_1 with own address as source address (addr:0a:0a:da:1b:40:d8, vlan:0)
[ 1833.496635][  T460] bridge0: received packet on bridge_slave_1 with own address as source address (addr:0a:0a:da:1b:40:d8, vlan:1)
[ 1840.640466][  T485] netlink: 'syz.4.8929': attribute type 10 has an invalid length.
[ 1840.651333][  T504] netlink: 'syz.3.8935': attribute type 39 has an invalid length.
[ 1840.824826][  T520] netlink: 'syz.2.8940': attribute type 3 has an invalid length.
[ 1840.834778][  T520] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8940'.
[ 1841.170709][  T523] netlink: 'syz.1.8941': attribute type 3 has an invalid length.
[ 1841.261135][  T523] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8941'.
[ 1841.556410][  T525] netlink: 'syz.4.8942': attribute type 39 has an invalid length.
[ 1842.475178][  T552] netlink: 65185 bytes leftover after parsing attributes in process `syz.2.8950'.
[ 1842.587368][  T554] netlink: 'syz.1.8951': attribute type 10 has an invalid length.
[ 1842.997077][  T564] netlink: 'syz.1.8955': attribute type 3 has an invalid length.
[ 1843.031242][  T564] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8955'.
[ 1843.097193][  T565] netlink: 'syz.4.8954': attribute type 16 has an invalid length.
[ 1843.105830][  T565] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8954'.
[ 1843.245617][  T572] netlink: 65185 bytes leftover after parsing attributes in process `syz.3.8957'.
[ 1843.541184][  T574] netlink: 'syz.1.8958': attribute type 10 has an invalid length.
[ 1845.043652][  T595] netlink: 'syz.0.8962': attribute type 3 has an invalid length.
[ 1845.134893][  T595] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8962'.
[ 1845.568570][  T609] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8968'.
[ 1845.920155][  T611] validate_nla: 2 callbacks suppressed
[ 1845.920225][  T611] netlink: 'syz.1.8970': attribute type 3 has an invalid length.
[ 1845.935438][  T611] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.8970'.
[ 1846.132801][  T620] netlink: 65185 bytes leftover after parsing attributes in process `syz.0.8974'.
[ 1846.185047][  T622] netlink: 'syz.4.8977': attribute type 10 has an invalid length.
[ 1846.207440][  T622] netlink: 55 bytes leftover after parsing attributes in process `syz.4.8977'.
[ 1846.879500][  T630] netlink: 'syz.1.8988': attribute type 10 has an invalid length.
[ 1846.944222][  T630] netlink: 55 bytes leftover after parsing attributes in process `syz.1.8988'.
[ 1847.301398][  T639] netlink: 'syz.0.8981': attribute type 10 has an invalid length.
[ 1847.360045][  T643] syzkaller0: tun_chr_ioctl cmd 1074025677
[ 1847.368663][  T643] syzkaller0: linktype set to 8
[ 1847.472629][  T646] netlink: 'syz.3.8984': attribute type 3 has an invalid length.
[ 1847.507727][  T646] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8984'.
[ 1848.220373][  T671] netlink: 65185 bytes leftover after parsing attributes in process `syz.1.8993'.
[ 1848.251167][  T671] bridge0: received packet on bridge_slave_1 with own address as source address (addr:0a:0a:da:1b:40:d8, vlan:0)
[ 1848.273630][  T671] bridge0: received packet on bridge_slave_1 with own address as source address (addr:0a:0a:da:1b:40:d8, vlan:1)
[ 1849.283656][  T682] netlink: 'syz.4.8995': attribute type 10 has an invalid length.
[ 1849.304029][  T682] netlink: 55 bytes leftover after parsing attributes in process `syz.4.8995'.
[ 1849.314193][  T684] netlink: 'syz.2.8998': attribute type 10 has an invalid length.
[ 1850.091035][  T698] netlink: 'syz.2.9004': attribute type 3 has an invalid length.
[ 1850.127951][  T698] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.9004'.
[ 1850.881441][  T721] netlink: 'syz.4.9011': attribute type 10 has an invalid length.
[ 1850.892382][  T721] netlink: 55 bytes leftover after parsing attributes in process `syz.4.9011'.
[ 1851.463974][  T756] netlink: 'syz.3.9023': attribute type 2 has an invalid length.
[ 1851.882267][  T769] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9027'.
[ 1852.012089][  T770] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9027'.
[ 1852.104333][  T773] netlink: 'syz.3.9028': attribute type 10 has an invalid length.
[ 1852.129270][  T773] netlink: 55 bytes leftover after parsing attributes in process `syz.3.9028'.
[ 1852.166146][  T775] netlink: 'syz.0.9029': attribute type 3 has an invalid length.
[ 1852.201944][  T775] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.9029'.
[ 1853.110614][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[ 1853.117153][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[ 1853.509120][  T801] netlink: 'syz.3.9038': attribute type 10 has an invalid length.
[ 1853.811010][  T807] netlink: 'syz.1.9040': attribute type 10 has an invalid length.
[ 1853.862557][  T810] netlink: 'syz.2.9041': attribute type 10 has an invalid length.
[ 1853.888754][  T810] netlink: 55 bytes leftover after parsing attributes in process `syz.2.9041'.
[ 1854.011272][  T815] FAULT_INJECTION: forcing a failure.
[ 1854.011272][  T815] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1854.076970][  T815] CPU: 1 PID: 815 Comm: syz.0.9043 Not tainted syzkaller #0
[ 1854.084354][  T815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1854.094439][  T815] Call Trace:
[ 1854.097745][  T815]  <TASK>
[ 1854.100792][  T815]  dump_stack_lvl+0x188/0x24e
[ 1854.105519][  T815]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1854.111707][  T815]  ? show_regs_print_info+0x12/0x12
[ 1854.116938][  T815]  ? load_image+0x410/0x410
[ 1854.121490][  T815]  should_fail_ex+0x390/0x4c0
[ 1854.126210][  T815]  _copy_from_user+0x2c/0x170
[ 1854.130918][  T815]  bpf_test_init+0xde/0x140
[ 1854.135457][  T815]  bpf_prog_test_run_xdp+0x488/0xf80
[ 1854.140796][  T815]  ? __lock_acquire+0x7c40/0x7c40
[ 1854.145867][  T815]  ? dev_put+0x80/0x80
[ 1854.149972][  T815]  ? dev_put+0x80/0x80
[ 1854.154075][  T815]  bpf_prog_test_run+0x31c/0x390
[ 1854.159047][  T815]  __sys_bpf+0x62b/0x780
[ 1854.163498][  T815]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1854.168925][  T815]  ? lock_chain_count+0x20/0x20
[ 1854.173820][  T815]  __x64_sys_bpf+0x78/0x90
[ 1854.178273][  T815]  do_syscall_64+0x4c/0xa0
[ 1854.182724][  T815]  ? clear_bhb_loop+0x60/0xb0
[ 1854.187447][  T815]  ? clear_bhb_loop+0x60/0xb0
[ 1854.192156][  T815]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1854.198077][  T815] RIP: 0033:0x7feb1279e0d9
[ 1854.202520][  T815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1854.222180][  T815] RSP: 002b:00007feb13601028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1854.230619][  T815] RAX: ffffffffffffffda RBX: 00007feb12a25fa0 RCX: 00007feb1279e0d9
[ 1854.238635][  T815] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a
[ 1854.246633][  T815] RBP: 00007feb13601090 R08: 0000000000000000 R09: 0000000000000000
[ 1854.254626][  T815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1854.262620][  T815] R13: 00007feb12a26038 R14: 00007feb12a25fa0 R15: 00007ffe313f7e08
[ 1854.270634][  T815]  </TASK>
[ 1854.302903][  T817] netlink: 65185 bytes leftover after parsing attributes in process `syz.1.9044'.
[ 1854.332813][  T817] bridge0: received packet on bridge_slave_1 with own address as source address (addr:0a:0a:da:1b:40:d8, vlan:0)
[ 1854.357888][  T817] bridge0: received packet on bridge_slave_1 with own address as source address (addr:0a:0a:da:1b:40:d8, vlan:1)
[ 1854.711118][  T828] FAULT_INJECTION: forcing a failure.
[ 1854.711118][  T828] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1854.756241][  T828] CPU: 0 PID: 828 Comm: syz.3.9048 Not tainted syzkaller #0
[ 1854.763625][  T828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1854.773813][  T828] Call Trace:
[ 1854.777140][  T828]  <TASK>
[ 1854.780115][  T828]  dump_stack_lvl+0x188/0x24e
[ 1854.784854][  T828]  ? show_regs_print_info+0x12/0x12
[ 1854.790139][  T828]  ? load_image+0x410/0x410
[ 1854.794697][  T828]  ? __lock_acquire+0x7c40/0x7c40
[ 1854.799790][  T828]  should_fail_ex+0x390/0x4c0
[ 1854.804537][  T828]  _copy_to_user+0x2c/0x130
[ 1854.809093][  T828]  bpf_test_finish+0x4a2/0x600
[ 1854.813908][  T828]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1854.820124][  T828]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1854.826333][  T828]  ? convert_skb_to___skb+0x420/0x420
[ 1854.831756][  T828]  ? convert_skb_to___skb+0x15/0x420
[ 1854.837134][  T828]  ? convert_skb_to___skb+0x27d/0x420
[ 1854.842558][  T828]  bpf_prog_test_run_skb+0x1129/0x18e0
[ 1854.848098][  T828]  ? cpu_online+0xa0/0xa0
[ 1854.852486][  T828]  bpf_prog_test_run+0x31c/0x390
[ 1854.857484][  T828]  __sys_bpf+0x62b/0x780
[ 1854.861779][  T828]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1854.867216][  T828]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1854.873444][  T828]  __x64_sys_bpf+0x78/0x90
[ 1854.877920][  T828]  do_syscall_64+0x4c/0xa0
[ 1854.882384][  T828]  ? clear_bhb_loop+0x60/0xb0
[ 1854.887116][  T828]  ? clear_bhb_loop+0x60/0xb0
[ 1854.891842][  T828]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1854.897781][  T828] RIP: 0033:0x7fcf1e99e0d9
[ 1854.902239][  T828] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1854.921891][  T828] RSP: 002b:00007fcf1f807028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1854.930390][  T828] RAX: ffffffffffffffda RBX: 00007fcf1ec25fa0 RCX: 00007fcf1e99e0d9
[ 1854.938406][  T828] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a
[ 1854.946432][  T828] RBP: 00007fcf1f807090 R08: 0000000000000000 R09: 0000000000000000
[ 1854.954453][  T828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1854.962479][  T828] R13: 00007fcf1ec26038 R14: 00007fcf1ec25fa0 R15: 00007ffdc18cb568
[ 1854.970518][  T828]  </TASK>
[ 1855.169999][  T833] netlink: 'syz.2.9050': attribute type 10 has an invalid length.
[ 1855.732033][  T842] netlink: 'syz.0.9063': attribute type 10 has an invalid length.
[ 1855.906474][  T849] netlink: 'syz.0.9055': attribute type 10 has an invalid length.
[ 1855.936092][  T849] netlink: 55 bytes leftover after parsing attributes in process `syz.0.9055'.
[ 1856.197544][  T854] netlink: 'syz.3.9056': attribute type 10 has an invalid length.
[ 1856.946782][  T873] netlink: 'syz.0.9066': attribute type 10 has an invalid length.
[ 1857.320800][  T888] netlink: 'syz.0.9070': attribute type 10 has an invalid length.
[ 1857.332369][  T891] netlink: 'syz.4.9069': attribute type 3 has an invalid length.
[ 1857.344756][  T888] netlink: 55 bytes leftover after parsing attributes in process `syz.0.9070'.
[ 1857.346422][  T891] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9069'.
[ 1857.460825][  T895] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9072'.
[ 1857.687205][  T903] device syzkaller0 entered promiscuous mode
[ 1857.760002][T25441] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[ 1858.949195][  T948] netlink: 65185 bytes leftover after parsing attributes in process `syz.1.9084'.
[ 1858.967141][  T948] bridge0: received packet on bridge_slave_1 with own address as source address (addr:0a:0a:da:1b:40:d8, vlan:0)
[ 1859.000438][  T947] netlink: 'syz.3.9085': attribute type 3 has an invalid length.
[ 1859.010856][  T948] bridge0: received packet on bridge_slave_1 with own address as source address (addr:0a:0a:da:1b:40:d8, vlan:1)
[ 1859.023288][  T947] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9085'.
[ 1859.201638][  T950] netlink: 'syz.2.9081': attribute type 10 has an invalid length.
[ 1859.777052][  T960] netlink: 65185 bytes leftover after parsing attributes in process `syz.3.9086'.
[ 1861.372001][  T981] device veth1_macvtap left promiscuous mode
[ 1862.173915][ T1002] netlink: 'syz.3.9096': attribute type 10 has an invalid length.
[ 1862.192396][ T1002] netlink: 55 bytes leftover after parsing attributes in process `syz.3.9096'.
[ 1862.765429][ T1014] netlink: 'syz.3.9101': attribute type 27 has an invalid length.
[ 1864.492733][T23144] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1864.504526][T23144] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1864.523607][T23144] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1864.533916][T23144] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1864.540023][ T1052] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9108'.
[ 1864.559696][T23144] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[ 1864.567419][T23144] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1864.634126][ T1052] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9108'.
[ 1864.953537][ T1062] FAULT_INJECTION: forcing a failure.
[ 1864.953537][ T1062] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1864.980395][ T1062] CPU: 1 PID: 1062 Comm: syz.1.9113 Not tainted syzkaller #0
[ 1864.987926][ T1062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1864.998049][ T1062] Call Trace:
[ 1865.001370][ T1062]  <TASK>
[ 1865.004344][ T1062]  dump_stack_lvl+0x188/0x24e
[ 1865.009087][ T1062]  ? show_regs_print_info+0x12/0x12
[ 1865.014342][ T1062]  ? load_image+0x410/0x410
[ 1865.018906][ T1062]  ? __lock_acquire+0x7c40/0x7c40
[ 1865.023991][ T1062]  should_fail_ex+0x390/0x4c0
[ 1865.028724][ T1062]  _copy_from_user+0x2c/0x170
[ 1865.033474][ T1062]  __sys_bpf+0x2ea/0x780
[ 1865.037775][ T1062]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1865.043217][ T1062]  ? lock_chain_count+0x20/0x20
[ 1865.048223][ T1062]  __x64_sys_bpf+0x78/0x90
[ 1865.052699][ T1062]  do_syscall_64+0x4c/0xa0
[ 1865.057187][ T1062]  ? clear_bhb_loop+0x60/0xb0
[ 1865.061917][ T1062]  ? clear_bhb_loop+0x60/0xb0
[ 1865.066628][ T1062]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1865.072552][ T1062] RIP: 0033:0x7fa5f519e0d9
[ 1865.077087][ T1062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1865.096754][ T1062] RSP: 002b:00007fa5f33f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1865.105194][ T1062] RAX: ffffffffffffffda RBX: 00007fa5f5425fa0 RCX: 00007fa5f519e0d9
[ 1865.113198][ T1062] RDX: 0000000000000021 RSI: 0000200000000140 RDI: 0000000000000005
[ 1865.121194][ T1062] RBP: 00007fa5f33f6090 R08: 0000000000000000 R09: 0000000000000000
[ 1865.129184][ T1062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1865.137184][ T1062] R13: 00007fa5f5426038 R14: 00007fa5f5425fa0 R15: 00007ffe0412c518
[ 1865.145197][ T1062]  </TASK>
[ 1865.266615][ T1063] netlink: 'syz.2.9111': attribute type 10 has an invalid length.
[ 1865.307109][ T1063] netlink: 55 bytes leftover after parsing attributes in process `syz.2.9111'.
[ 1865.391101][ T1070] netlink: 65185 bytes leftover after parsing attributes in process `syz.1.9115'.
[ 1865.417439][ T1070] bridge0: received packet on bridge_slave_1 with own address as source address (addr:0a:0a:da:1b:40:d8, vlan:0)
[ 1865.429810][ T1070] bridge0: received packet on bridge_slave_1 with own address as source address (addr:0a:0a:da:1b:40:d8, vlan:1)
[ 1865.486402][ T1048] chnl_net:caif_netlink_parms(): no params data found
[ 1865.772948][ T1048] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1865.784542][ T1048] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1865.793652][ T1048] device bridge_slave_0 entered promiscuous mode
[ 1865.850027][ T1080] netlink: 65185 bytes leftover after parsing attributes in process `syz.2.9116'.
[ 1865.954548][ T1048] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1865.970669][ T1048] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1866.056244][ T1048] device bridge_slave_1 entered promiscuous mode
[ 1866.353225][ T1048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1866.391834][ T1048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1866.462224][ T1048] team0: Port device team_slave_0 added
[ 1866.496099][ T1048] team0: Port device team_slave_1 added
[ 1866.581214][ T1048] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1866.588598][ T1048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1866.616819][ T1048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1866.628274][T29629] Bluetooth: hci5: command 0x0409 tx timeout
[ 1866.657170][ T1048] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1866.664423][ T1048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1866.701314][ T1048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1866.818093][ T1048] device hsr_slave_0 entered promiscuous mode
[ 1866.835547][ T1048] device hsr_slave_1 entered promiscuous mode
[ 1866.872445][ T1048] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1866.890112][ T1048] Cannot create hsr debugfs directory
[ 1867.582875][ T1105] netlink: 'syz.3.9124': attribute type 33 has an invalid length.
[ 1867.610780][ T1105] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9124'.
[ 1867.738266][ T1109] netlink: 'syz.1.9125': attribute type 10 has an invalid length.
[ 1867.758621][ T1109] netlink: 55 bytes leftover after parsing attributes in process `syz.1.9125'.
[ 1867.995850][ T1112] device batadv0 entered promiscuous mode
[ 1868.151256][ T1116] netlink: 65185 bytes leftover after parsing attributes in process `syz.4.9129'.
[ 1868.259707][ T1048] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1868.286116][ T1048] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1868.341211][ T1048] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1868.418038][ T1048] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1868.717397][T29629] Bluetooth: hci5: command 0x041b tx timeout
[ 1868.728128][ T1128] netlink: 'syz.3.9132': attribute type 29 has an invalid length.
[ 1869.245042][ T1128] netlink: 'syz.3.9132': attribute type 29 has an invalid length.
[ 1869.632006][ T1048] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1869.654316][T25441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1869.671823][ T1142] FAULT_INJECTION: forcing a failure.
[ 1869.671823][ T1142] name failslab, interval 1, probability 0, space 0, times 0
[ 1869.686004][T25441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1869.701089][ T1142] CPU: 1 PID: 1142 Comm: syz.1.9136 Not tainted syzkaller #0
[ 1869.708564][ T1142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1869.718690][ T1142] Call Trace:
[ 1869.722025][ T1142]  <TASK>
[ 1869.725013][ T1142]  dump_stack_lvl+0x188/0x24e
[ 1869.729771][ T1142]  ? show_regs_print_info+0x12/0x12
[ 1869.735037][ T1142]  ? load_image+0x410/0x410
[ 1869.739655][ T1142]  ? __might_sleep+0xd0/0xd0
[ 1869.744305][ T1142]  ? __lock_acquire+0x7c40/0x7c40
[ 1869.749417][ T1142]  should_fail_ex+0x390/0x4c0
[ 1869.754175][ T1142]  should_failslab+0x5/0x20
[ 1869.758726][ T1142]  slab_pre_alloc_hook+0x59/0x300
[ 1869.763813][ T1142]  ? tcp_sendmsg_fastopen+0x1d5/0x600
[ 1869.769267][ T1142]  __kmem_cache_alloc_node+0x4f/0x270
[ 1869.774707][ T1142]  ? tcp_sendmsg_fastopen+0x1d5/0x600
[ 1869.780145][ T1142]  kmalloc_trace+0x26/0xe0
[ 1869.784639][ T1142]  tcp_sendmsg_fastopen+0x1d5/0x600
[ 1869.789915][ T1142]  tcp_sendmsg_locked+0x356b/0x39e0
[ 1869.795187][ T1142]  ? trace_event_raw_event_lock_acquire+0x290/0x290
[ 1869.801847][ T1142]  ? perf_trace_run_bpf_submit+0xf3/0x1c0
[ 1869.807662][ T1142]  ? mark_lock+0x94/0x320
[ 1869.812073][ T1142]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 1869.818129][ T1142]  ? lock_chain_count+0x20/0x20
[ 1869.823059][ T1142]  ? tcp_set_state+0x520/0x520
[ 1869.827924][ T1142]  tcp_sendmsg+0x2b/0x40
[ 1869.832237][ T1142]  ? inet6_compat_ioctl+0x3c0/0x3c0
[ 1869.837511][ T1142]  ____sys_sendmsg+0x5ed/0x9a0
[ 1869.842350][ T1142]  ? __lock_acquire+0x7c40/0x7c40
[ 1869.847465][ T1142]  ? __sys_sendmsg_sock+0x30/0x30
[ 1869.852553][ T1142]  ? __import_iovec+0x306/0x510
[ 1869.857548][ T1142]  ? import_iovec+0x6f/0xa0
[ 1869.862130][ T1142]  ___sys_sendmsg+0x2a2/0x360
[ 1869.866892][ T1142]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1869.871774][ T1142]  ? __lock_acquire+0x7c40/0x7c40
[ 1869.876911][ T1142]  __se_sys_sendmsg+0x1c3/0x2b0
[ 1869.881838][ T1142]  ? __x64_sys_sendmsg+0x80/0x80
[ 1869.886873][ T1142]  ? lockdep_hardirqs_on+0x94/0x140
[ 1869.892131][ T1142]  do_syscall_64+0x4c/0xa0
[ 1869.896611][ T1142]  ? clear_bhb_loop+0x60/0xb0
[ 1869.901347][ T1142]  ? clear_bhb_loop+0x60/0xb0
[ 1869.906087][ T1142]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1869.912034][ T1142] RIP: 0033:0x7fa5f519e0d9
[ 1869.916502][ T1142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1869.936351][ T1142] RSP: 002b:00007fa5f33f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1869.944831][ T1142] RAX: ffffffffffffffda RBX: 00007fa5f5425fa0 RCX: 00007fa5f519e0d9
[ 1869.952867][ T1142] RDX: 0000000020000001 RSI: 0000200000000780 RDI: 0000000000000004
[ 1869.960905][ T1142] RBP: 00007fa5f33f6090 R08: 0000000000000000 R09: 0000000000000000
[ 1869.968940][ T1142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1869.976963][ T1142] R13: 00007fa5f5426038 R14: 00007fa5f5425fa0 R15: 00007ffe0412c518
[ 1869.985022][ T1142]  </TASK>
[ 1870.006488][ T1048] 8021q: adding VLAN 0 to HW filter on device team0
[ 1870.022685][T25441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1870.033875][T25441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1870.043507][T25441] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1870.050691][T25441] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1870.116719][T25441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1870.133709][T25441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1870.151577][T25441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1870.166113][T25441] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1870.173369][T25441] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1870.188065][T25441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1870.229054][ T1149] tap0: tun_chr_ioctl cmd 35111
[ 1870.245732][ T1145] netlink: 'syz.3.9137': attribute type 10 has an invalid length.
[ 1870.260852][ T1145] netlink: 55 bytes leftover after parsing attributes in process `syz.3.9137'.
[ 1870.308494][T25441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1870.351310][T25441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1870.371248][T25441] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1870.413152][T25441] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1870.485072][T25441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1870.673381][T25441] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1870.674335][ T1158] FAULT_INJECTION: forcing a failure.
[ 1870.674335][ T1158] name failslab, interval 1, probability 0, space 0, times 0
[ 1870.683863][T25441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1870.703332][T25441] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1870.720396][ T1048] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1870.731314][ T1158] CPU: 1 PID: 1158 Comm: syz.1.9140 Not tainted syzkaller #0
[ 1870.738742][ T1158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1870.748867][ T1158] Call Trace:
[ 1870.752198][ T1158]  <TASK>
[ 1870.755175][ T1158]  dump_stack_lvl+0x188/0x24e
[ 1870.759913][ T1158]  ? show_regs_print_info+0x12/0x12
[ 1870.765162][ T1158]  ? load_image+0x410/0x410
[ 1870.769695][ T1158]  ? verify_lock_unused+0x140/0x140
[ 1870.774938][ T1158]  should_fail_ex+0x390/0x4c0
[ 1870.779655][ T1158]  should_failslab+0x5/0x20
[ 1870.784185][ T1158]  slab_pre_alloc_hook+0x59/0x300
[ 1870.789243][ T1158]  kmem_cache_alloc+0x56/0x2f0
[ 1870.794039][ T1158]  ? skb_clone+0x1e7/0x370
[ 1870.798489][ T1158]  skb_clone+0x1e7/0x370
[ 1870.802775][ T1158]  __netlink_deliver_tap+0x3e4/0x7e0
[ 1870.808103][ T1158]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1870.813335][ T1158]  netlink_deliver_tap+0x19c/0x1b0
[ 1870.818481][ T1158]  netlink_unicast+0x777/0x920
[ 1870.823302][ T1158]  netlink_sendmsg+0x8ad/0xbd0
[ 1870.828127][ T1158]  ? netlink_getsockopt+0x550/0x550
[ 1870.833389][ T1158]  ? apparmor_socket_sendmsg+0x8a/0x330
[ 1870.838985][ T1158]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1870.844305][ T1158]  ? security_socket_sendmsg+0x7c/0xa0
[ 1870.849827][ T1158]  ? netlink_getsockopt+0x550/0x550
[ 1870.855062][ T1158]  ____sys_sendmsg+0x5ed/0x9a0
[ 1870.859873][ T1158]  ? __sys_sendmsg_sock+0x30/0x30
[ 1870.864940][ T1158]  ? __import_iovec+0x306/0x510
[ 1870.869834][ T1158]  ? import_iovec+0x6f/0xa0
[ 1870.874397][ T1158]  ___sys_sendmsg+0x2a2/0x360
[ 1870.879144][ T1158]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1870.883978][ T1158]  ? __lock_acquire+0x7c40/0x7c40
[ 1870.889074][ T1158]  __se_sys_sendmsg+0x1c3/0x2b0
[ 1870.893984][ T1158]  ? __x64_sys_sendmsg+0x80/0x80
[ 1870.898983][ T1158]  ? lockdep_hardirqs_on+0x94/0x140
[ 1870.904225][ T1158]  do_syscall_64+0x4c/0xa0
[ 1870.908685][ T1158]  ? clear_bhb_loop+0x60/0xb0
[ 1870.913405][ T1158]  ? clear_bhb_loop+0x60/0xb0
[ 1870.918126][ T1158]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1870.924065][ T1158] RIP: 0033:0x7fa5f519e0d9
[ 1870.928518][ T1158] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1870.948248][ T1158] RSP: 002b:00007fa5f33f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1870.956712][ T1158] RAX: ffffffffffffffda RBX: 00007fa5f5425fa0 RCX: 00007fa5f519e0d9
[ 1870.964719][ T1158] RDX: 0000000000004044 RSI: 00002000000001c0 RDI: 0000000000000003
[ 1870.972724][ T1158] RBP: 00007fa5f33f6090 R08: 0000000000000000 R09: 0000000000000000
[ 1870.980731][ T1158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1870.988740][ T1158] R13: 00007fa5f5426038 R14: 00007fa5f5425fa0 R15: 00007ffe0412c518
[ 1870.996763][ T1158]  </TASK>
[ 1871.001810][T29629] Bluetooth: hci5: command 0x040f tx timeout
[ 1871.013489][ T1048] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1871.055844][ T1158] netlink: 'syz.1.9140': attribute type 27 has an invalid length.
[ 1871.076100][T25441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1871.086193][T25441] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1871.434375][ T1171] netlink: 'syz.4.9143': attribute type 3 has an invalid length.
[ 1871.460021][ T1171] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.9143'.
[ 1872.109405][T24186] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1872.135208][T24186] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1872.242970][ T1189] netlink: 'syz.3.9146': attribute type 1 has an invalid length.
[ 1872.417298][ T1189] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9146'.
[ 1872.455138][ T1048] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1872.499154][T25446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1872.528928][T25446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1872.608316][ T1195] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.9149'.
[ 1872.652504][ T1048] device veth0_vlan entered promiscuous mode
[ 1872.660913][T24186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1872.678538][T24186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1872.703382][T24186] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1872.718975][T24186] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1872.728537][ T1048] device veth1_vlan entered promiscuous mode
[ 1872.762246][T24186] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1872.773100][T24186] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1872.782173][T24186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1872.792842][T24186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1872.805919][ T1048] device veth0_macvtap entered promiscuous mode
[ 1872.832482][ T1048] device veth1_macvtap entered promiscuous mode
[ 1872.863329][ T1048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1872.874524][ T1048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1872.885553][ T1048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1872.901586][ T1048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1872.913717][ T1048] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1872.921610][T24186] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1872.932648][T24186] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1872.942556][T24186] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1872.956333][T24186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1872.974327][ T1048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1872.989626][ T1048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1873.007771][ T1048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1873.020207][ T1048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1873.031011][T29629] Bluetooth: hci5: command 0x0419 tx timeout
[ 1873.039441][ T1048] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1873.074676][T24186] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1873.091675][T24186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1873.104717][ T1048] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1873.117980][ T1048] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1873.132764][ T1048] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1873.142321][ T1048] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1873.300371][ T1198] netlink: 'syz.2.9150': attribute type 27 has an invalid length.
[ 1873.572958][ T1198] bond0: (slave bond_slave_0): Releasing backup interface
[ 1873.793855][ T1200] netlink: 'syz.3.9151': attribute type 10 has an invalid length.
[ 1873.802470][ T1200] netlink: 55 bytes leftover after parsing attributes in process `syz.3.9151'.
[ 1873.812129][ T1204] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.9152'.
[ 1873.838622][ T1206] netlink: 'syz.4.9153': attribute type 10 has an invalid length.
[ 1873.857711][T25446] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1873.874302][T25446] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1873.886397][T25448] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1873.965417][T24186] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1873.984154][T24186] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1874.009190][T25446] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1874.231726][ T1217] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9155'.
[ 1874.254781][ T1218] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9155'.
[ 1874.642775][ T1223] netlink: 'syz.2.9157': attribute type 3 has an invalid length.
[ 1874.689385][ T1223] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9157'.
[ 1874.753503][ T1226] netlink: 'syz.4.9158': attribute type 3 has an invalid length.
[ 1874.771865][ T1226] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9158'.
[ 1875.578676][ T1244] netlink: 'syz.4.9163': attribute type 10 has an invalid length.
[ 1875.611764][ T1244] netlink: 55 bytes leftover after parsing attributes in process `syz.4.9163'.
[ 1876.461432][ T1257] netlink: 'syz.4.9166': attribute type 3 has an invalid length.
[ 1876.501202][ T1257] netlink: 'syz.4.9166': attribute type 1 has an invalid length.
[ 1876.536834][ T1257] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9166'.
[ 1876.694022][ T1267] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.9170'.
[ 1876.998886][ T1271] netlink: 'syz.2.9171': attribute type 29 has an invalid length.
[ 1877.018809][ T1271] netlink: 'syz.2.9171': attribute type 29 has an invalid length.
[ 1877.144048][ T1278] device aaaaaaaaaaaaaaa entered promiscuous mode
[ 1877.235417][ T1286] netlink: 55 bytes leftover after parsing attributes in process `syz.0.9176'.
[ 1877.964169][ T1293] netlink: 65185 bytes leftover after parsing attributes in process `syz.4.9179'.
[ 1881.705693][ T1325] validate_nla: 2 callbacks suppressed
[ 1881.705734][ T1325] netlink: 'syz.2.9187': attribute type 10 has an invalid length.
[ 1881.896525][ T1328] netlink: 'syz.1.9189': attribute type 29 has an invalid length.
[ 1881.958214][ T1328] netlink: 'syz.1.9189': attribute type 29 has an invalid length.
[ 1883.038171][ T1340] netlink: 'syz.2.9192': attribute type 10 has an invalid length.
[ 1883.046245][ T1340] netlink: 55 bytes leftover after parsing attributes in process `syz.2.9192'.
[ 1883.208700][ T1348] netlink: 'syz.0.9207': attribute type 10 has an invalid length.
[ 1883.225075][ T1348] netlink: 55 bytes leftover after parsing attributes in process `syz.0.9207'.
[ 1886.391513][ T1371] netlink: 'syz.2.9202': attribute type 15 has an invalid length.
[ 1886.403533][ T1371] netlink: 'syz.2.9202': attribute type 7 has an invalid length.
[ 1886.416318][ T1371] netlink: 'syz.2.9202': attribute type 39 has an invalid length.
[ 1887.239799][ T1380] netlink: 'syz.1.9204': attribute type 10 has an invalid length.
[ 1887.458031][ T1387] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.9205'.
[ 1888.212174][ T1399] netlink: 'syz.2.9210': attribute type 10 has an invalid length.
[ 1888.480918][ T1399] team0 (unregistering): Port device team_slave_0 removed
[ 1888.512569][ T1399] team0 (unregistering): Port device team_slave_1 removed
[ 1888.532161][ T1399] team0 (unregistering): Port device geneve1 removed
[ 1888.572340][ T1402] netlink: 'syz.0.9211': attribute type 10 has an invalid length.
[ 1888.590956][ T1402] netlink: 55 bytes leftover after parsing attributes in process `syz.0.9211'.
[ 1889.376626][ T1427] netlink: 'syz.2.9220': attribute type 3 has an invalid length.
[ 1889.386249][ T1423] netlink: 'syz.4.9219': attribute type 10 has an invalid length.
[ 1889.430719][ T1428] netlink: 'syz.3.9221': attribute type 3 has an invalid length.
[ 1889.441308][ T1427] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9220'.
[ 1889.461974][ T1428] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9221'.
[ 1889.685384][ T1434] netlink: 'syz.0.9222': attribute type 10 has an invalid length.
[ 1889.946957][ T1434] team0: Port device geneve1 added
[ 1889.984049][ T1436] netlink: 'syz.4.9223': attribute type 10 has an invalid length.
[ 1890.206871][ T1449] netlink: 'syz.0.9228': attribute type 10 has an invalid length.
[ 1890.229895][ T1449] netlink: 55 bytes leftover after parsing attributes in process `syz.0.9228'.
[ 1890.277606][T23144] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1890.288593][T23144] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1890.297118][T23144] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1890.308848][ T4286] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1890.316385][ T4286] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1890.324219][ T4286] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1890.369258][T25448] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1890.603753][T25448] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1890.704028][ T1459] netlink: 'syz.0.9241': attribute type 10 has an invalid length.
[ 1890.735791][ T1459] netlink: 55 bytes leftover after parsing attributes in process `syz.0.9241'.
[ 1890.966471][T25448] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1891.251946][T25448] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1891.291242][ T1469] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9234'.
[ 1891.910651][ T1477] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9236'.
[ 1891.923907][T25448] tipc: Left network mode
[ 1892.370478][ T1450] chnl_net:caif_netlink_parms(): no params data found
[ 1892.391436][T29629] Bluetooth: hci3: command 0x0409 tx timeout
[ 1892.455088][ T1484] validate_nla: 2 callbacks suppressed
[ 1892.455104][ T1484] netlink: 'syz.4.9238': attribute type 3 has an invalid length.
[ 1892.518178][ T1484] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.9238'.
[ 1892.531697][ T1483] netlink: 'syz.2.9239': attribute type 10 has an invalid length.
[ 1893.018127][ T1491] netlink: 'syz.0.9240': attribute type 10 has an invalid length.
[ 1893.240217][ T1498] netlink: 'syz.2.9242': attribute type 21 has an invalid length.
[ 1893.446925][ T1450] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1893.455033][ T1450] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1893.485917][ T1450] device bridge_slave_0 entered promiscuous mode
[ 1893.576196][ T1450] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1893.597730][ T1450] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1893.656718][ T1450] device bridge_slave_1 entered promiscuous mode
[ 1893.698193][ T1517] netlink: 'syz.3.9245': attribute type 10 has an invalid length.
[ 1893.717211][ T1517] netlink: 55 bytes leftover after parsing attributes in process `syz.3.9245'.
[ 1894.469748][T29629] Bluetooth: hci3: command 0x041b tx timeout
[ 1896.547255][T29629] Bluetooth: hci3: command 0x040f tx timeout
[ 1896.759057][ T1450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1896.828795][ T1450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1897.043683][ T1450] team0: Port device team_slave_0 added
[ 1897.075377][ T1544] netlink: 'syz.4.9250': attribute type 3 has an invalid length.
[ 1897.119726][ T1544] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9250'.
[ 1897.968685][ T1450] team0: Port device team_slave_1 added
[ 1898.169581][ T1450] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1898.219569][ T1450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1898.344930][ T1450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1898.366922][ T1565] netlink: 'syz.3.9252': attribute type 10 has an invalid length.
[ 1898.435796][ T1566] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.9253'.
[ 1898.462277][ T1450] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1898.479939][ T1450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1898.607037][ T1450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1898.627208][T29629] Bluetooth: hci3: command 0x0419 tx timeout
[ 1898.974807][ T1584] netlink: 'syz.2.9257': attribute type 10 has an invalid length.
[ 1898.995063][ T1450] device hsr_slave_0 entered promiscuous mode
[ 1899.008285][ T1450] device hsr_slave_1 entered promiscuous mode
[ 1899.022549][ T1450] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1899.033892][ T1450] Cannot create hsr debugfs directory
[ 1899.614608][ T1600] netlink: 'syz.0.9261': attribute type 3 has an invalid length.
[ 1899.648670][ T1596] netlink: 'syz.2.9262': attribute type 29 has an invalid length.
[ 1899.658318][ T1600] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9261'.
[ 1899.731549][ T1596] netlink: 'syz.2.9262': attribute type 29 has an invalid length.
[ 1899.827772][T25448] device hsr_slave_0 left promiscuous mode
[ 1899.846642][T25448] device hsr_slave_1 left promiscuous mode
[ 1899.865227][T25448] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1899.974346][T25448] device bridge_slave_0 left promiscuous mode
[ 1899.995861][T25448] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1900.226598][ T1611] netlink: 'syz.2.9264': attribute type 3 has an invalid length.
[ 1900.259120][ T1611] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9264'.
[ 1900.714740][T25448] device veth0_macvtap left promiscuous mode
[ 1901.612974][ T1630] netlink: 'syz.0.9266': attribute type 3 has an invalid length.
[ 1901.621314][ T1630] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.9266'.
[ 1902.488304][ T1634] netlink: 'syz.0.9268': attribute type 10 has an invalid length.
[ 1903.134101][ T1648] netlink: 'syz.2.9274': attribute type 29 has an invalid length.
[ 1903.256888][ T1648] netlink: 'syz.2.9274': attribute type 29 has an invalid length.
[ 1903.766088][ T1450] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1903.807494][ T1450] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1903.864749][ T1450] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1903.908959][ T1450] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1903.969301][T25448] tipc: Left network mode
[ 1906.790818][ T1678] netlink: 'syz.3.9282': attribute type 10 has an invalid length.
[ 1906.944282][ T1450] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1907.104261][T25441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1907.163357][T25441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1907.228776][ T1450] 8021q: adding VLAN 0 to HW filter on device team0
[ 1907.425039][ T1717] netlink: 'syz.4.9287': attribute type 29 has an invalid length.
[ 1908.414052][ T1717] netlink: 'syz.4.9287': attribute type 29 has an invalid length.
[ 1908.525649][T30389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1908.546636][T30389] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1908.565645][T30389] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1908.572915][T30389] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1908.601282][T30389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1908.636009][T30389] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1908.658859][T30389] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1908.666080][T30389] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1908.775073][T30389] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1908.835560][T30389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1908.849673][ T1745] netlink: 'syz.4.9292': attribute type 2 has an invalid length.
[ 1909.092049][ T1745] device 0 entered promiscuous mode
[ 1909.256257][T30389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1909.285028][T30389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1909.322446][T30389] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1909.338939][T30389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1909.373691][T30389] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1909.393371][ T1750] netlink: 'syz.3.9294': attribute type 10 has an invalid length.
[ 1909.605052][ T1450] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1909.671048][ T1450] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1909.717282][T30389] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1909.734846][T30389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1909.756694][T30389] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1909.772096][T30389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1909.782467][T30389] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1909.802797][T30389] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1911.369540][ T1789] netlink: 'syz.4.9300': attribute type 10 has an invalid length.
[ 1911.521607][ T1791] netlink: 'syz.2.9301': attribute type 29 has an invalid length.
[ 1912.470334][ T1791] netlink: 'syz.2.9301': attribute type 29 has an invalid length.
[ 1912.828312][ T1814] netlink: 'syz.2.9307': attribute type 10 has an invalid length.
[ 1912.996883][T25447] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1913.014071][T25447] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1914.549827][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[ 1914.556313][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[ 1914.946452][ T1450] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1914.969710][ T1823] netlink: 'syz.2.9308': attribute type 2 has an invalid length.
[ 1915.036233][ T1823] device 0 entered promiscuous mode
[ 1915.174216][T25448] device vlan0 left promiscuous mode
[ 1915.185059][T25448] À: port 1(vlan0) entered disabled state
[ 1915.243768][T25448] device hsr_slave_0 left promiscuous mode
[ 1915.255787][T25448] device hsr_slave_1 left promiscuous mode
[ 1915.280777][T25448] bridge0: port 3(dummy0) entered disabled state
[ 1915.304555][T25448] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1915.335173][T25448] device bridge_slave_0 left promiscuous mode
[ 1915.354475][T25448] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1915.458769][T25448] device veth1_macvtap left promiscuous mode
[ 1915.464943][T25448] device veth0_macvtap left promiscuous mode
[ 1915.513163][T25448] device veth1_vlan left promiscuous mode
[ 1915.537398][T25448] device veth0_vlan left promiscuous mode
[ 1916.779850][ T1851] netlink: 'syz.3.9314': attribute type 29 has an invalid length.
[ 1916.873592][T25448] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface
[ 1916.999331][T25448] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1917.298528][T25448] bond0 (unregistering): Released all slaves
[ 1917.397104][T24186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1917.414454][T24186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1917.440668][ T1851] netlink: 'syz.3.9314': attribute type 29 has an invalid length.
[ 1917.465170][ T1450] device veth0_vlan entered promiscuous mode
[ 1917.476014][T30389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1917.491010][T30389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1917.506896][ T1852] netlink: 'syz.3.9314': attribute type 29 has an invalid length.
[ 1917.521343][T30389] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1917.539385][T30389] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1917.552966][ T1450] device veth1_vlan entered promiscuous mode
[ 1917.576557][ T1853] netlink: 'syz.3.9314': attribute type 29 has an invalid length.
[ 1917.665242][T25445] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1917.697869][T25445] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1917.723278][T25445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1917.785243][T25445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1917.898343][ T1450] device veth0_macvtap entered promiscuous mode
[ 1917.918092][ T1862] netlink: 'syz.0.9324': attribute type 2 has an invalid length.
[ 1917.924747][ T1857] netlink: 'syz.2.9316': attribute type 29 has an invalid length.
[ 1917.943381][ T1450] device veth1_macvtap entered promiscuous mode
[ 1917.994309][ T1857] netlink: 'syz.2.9316': attribute type 29 has an invalid length.
[ 1918.068981][ T1862] device 0 entered promiscuous mode
[ 1918.141224][ T1450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1918.199897][ T1450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1918.275205][ T1450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1918.375978][ T1450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1918.423969][ T1450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1918.467103][ T1450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1918.481569][ T1450] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1918.596305][ T1866] netlink: 'syz.3.9317': attribute type 2 has an invalid length.
[ 1918.618446][ T1866] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9317'.
[ 1918.673601][T25442] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1918.703519][T25442] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1918.994282][T25442] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1919.003359][T25442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1919.015758][ T1450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1919.034090][ T1450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1919.044913][ T1450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1919.056089][ T1450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1919.066079][ T1450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1919.076851][ T1450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1919.090431][ T1450] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1923.447648][T25445] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1923.468006][T25445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1923.491171][ T1450] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1923.517041][ T1450] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1923.525851][ T1450] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1923.571821][ T1450] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1923.765658][T25442] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1923.797089][T25442] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1923.840402][T25447] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1923.859024][T25442] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1923.868217][T25442] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1923.876859][T25442] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1924.887349][ T1923] netlink: 'syz.3.9333': attribute type 29 has an invalid length.
[ 1924.901763][ T1923] netlink: 'syz.3.9333': attribute type 29 has an invalid length.
[ 1925.250546][ T1937] netlink: 'syz.1.9338': attribute type 10 has an invalid length.
[ 1925.396040][ T1937] team0: Port device geneve1 added
[ 1925.803809][ T1957] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.9345'.
[ 1925.950605][ T1958] netlink: 'syz.0.9344': attribute type 29 has an invalid length.
[ 1926.100621][ T1954] netlink: 'syz.1.9343': attribute type 2 has an invalid length.
[ 1926.197099][ T1954] netlink: 10 bytes leftover after parsing attributes in process `syz.1.9343'.
[ 1926.228464][T23144] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1926.239165][T23144] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1926.247389][T23144] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1926.255650][T23144] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1926.264064][T23144] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 1926.272835][T23144] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1926.350319][ T1958] netlink: 'syz.0.9344': attribute type 29 has an invalid length.
[ 1926.820448][ T1974] netlink: 'syz.2.9349': attribute type 29 has an invalid length.
[ 1927.119560][ T1974] netlink: 'syz.2.9349': attribute type 29 has an invalid length.
[ 1927.457688][ T1982] netlink: 'syz.3.9353': attribute type 10 has an invalid length.
[ 1927.740702][ T1989] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.9351'.
[ 1927.765565][ T1962] chnl_net:caif_netlink_parms(): no params data found
[ 1927.804801][T25446] device 0 left promiscuous mode
[ 1927.835664][ T1994] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.9355'.
[ 1927.869426][ T1994] netlink: 43 bytes leftover after parsing attributes in process `syz.2.9355'.
[ 1928.235338][ T2004] netlink: 'syz.2.9359': attribute type 21 has an invalid length.
[ 1928.314728][T23144] Bluetooth: hci1: command 0x0409 tx timeout
[ 1928.519705][ T1962] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1928.547833][ T1962] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1928.556159][ T1962] device bridge_slave_0 entered promiscuous mode
[ 1928.803956][ T2024] netlink: 10 bytes leftover after parsing attributes in process `syz.0.9360'.
[ 1928.832113][ T1962] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1928.851745][ T1962] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1928.942171][ T1962] device bridge_slave_1 entered promiscuous mode
[ 1929.935585][ T1962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1929.974253][ T1962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1930.242615][ T2051] validate_nla: 6 callbacks suppressed
[ 1930.242630][ T2051] netlink: 'syz.2.9365': attribute type 1 has an invalid length.
[ 1930.377256][ T2055] netlink: 'syz.1.9366': attribute type 10 has an invalid length.
[ 1930.387548][T23144] Bluetooth: hci1: command 0x041b tx timeout
[ 1930.829229][ T1962] team0: Port device team_slave_0 added
[ 1930.879645][ T1962] team0: Port device team_slave_1 added
[ 1931.114075][ T2068] netlink: 'syz.1.9370': attribute type 1 has an invalid length.
[ 1931.173477][ T2068] netlink: 144 bytes leftover after parsing attributes in process `syz.1.9370'.
[ 1931.243920][ T1962] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1931.266104][ T1962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1931.347066][ T1962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1931.561166][ T2077] netlink: 'syz.3.9372': attribute type 29 has an invalid length.
[ 1931.686753][ T1962] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1931.702276][ T1962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1931.768632][ T1962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1931.898126][ T2077] netlink: 'syz.3.9372': attribute type 29 has an invalid length.
[ 1932.001075][ T1962] device hsr_slave_0 entered promiscuous mode
[ 1932.019567][ T1962] device hsr_slave_1 entered promiscuous mode
[ 1932.026446][ T1962] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1932.097355][ T1962] Cannot create hsr debugfs directory
[ 1932.176464][ T2092] netlink: 'syz.2.9374': attribute type 2 has an invalid length.
[ 1932.237535][ T2092] netlink: 10 bytes leftover after parsing attributes in process `syz.2.9374'.
[ 1932.467712][T23144] Bluetooth: hci1: command 0x040f tx timeout
[ 1933.116510][ T2113] netlink: 'syz.0.9380': attribute type 10 has an invalid length.
[ 1934.053343][T25446] device hsr_slave_0 left promiscuous mode
[ 1934.217193][T25446] device hsr_slave_1 left promiscuous mode
[ 1934.247981][T25446] device bridge_slave_1 left promiscuous mode
[ 1934.254418][T25446] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1934.300435][T25446] device bridge_slave_0 left promiscuous mode
[ 1934.363755][T25446] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1934.547932][T23144] Bluetooth: hci1: command 0x0419 tx timeout
[ 1934.575819][T25446] device veth1_macvtap left promiscuous mode
[ 1934.624429][T25446] device veth0_macvtap left promiscuous mode
[ 1934.967972][ T2129] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.9382'.
[ 1935.429989][T25446] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface
[ 1935.563158][T25446] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1935.821904][T25446] bond0 (unregistering): Released all slaves
[ 1935.915094][ T2125] netlink: 'syz.0.9393': attribute type 10 has an invalid length.
[ 1936.785245][ T1962] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1936.819335][ T1962] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1936.860012][ T1962] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1936.966348][ T1962] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1937.342976][ T1962] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1937.451179][ T1962] 8021q: adding VLAN 0 to HW filter on device team0
[ 1937.483565][T25441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1937.515767][T25441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1937.542001][ T2173] netlink: 'syz.0.9395': attribute type 29 has an invalid length.
[ 1937.597712][T25441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1937.626785][T25441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1937.655130][T25441] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1937.662393][T25441] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1937.688999][ T2173] netlink: 'syz.0.9395': attribute type 29 has an invalid length.
[ 1937.715496][T25441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1937.734790][T25441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1937.746770][T25441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1937.778033][T25441] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1937.785362][T25441] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1937.827983][ T2178] netlink: 'syz.1.9397': attribute type 10 has an invalid length.
[ 1937.860250][T25441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1937.884636][T25441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1937.957311][T25441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1937.971988][T25441] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1938.020640][T25441] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1938.049142][T25441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1938.121695][T25441] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1938.185749][T25448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1938.225287][T25448] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1938.285698][ T1962] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1938.325602][ T1962] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1938.374501][T24186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1938.395251][T24186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1939.499238][ T2219] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1939.914668][T24186] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1939.926158][T24186] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1939.965856][ T1962] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1941.163028][ T2269] netlink: 'syz.0.9419': attribute type 10 has an invalid length.
[ 1941.561678][T25446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1941.596644][T25446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1941.682444][T25446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1941.724472][T25446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1941.773015][ T1962] device veth0_vlan entered promiscuous mode
[ 1941.791108][T25446] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1941.823911][T25446] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1941.863466][ T1962] device veth1_vlan entered promiscuous mode
[ 1941.916258][T25447] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1941.935013][T25447] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1941.944018][T25447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1941.962982][T25447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1942.089493][ T1962] device veth0_macvtap entered promiscuous mode
[ 1942.139732][ T1962] device veth1_macvtap entered promiscuous mode
[ 1942.298542][ T1962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1942.360468][ T1962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1942.407338][ T1962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1942.457204][ T1962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1942.502560][ T1962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1942.523347][ T1962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1942.587844][ T1962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1942.614878][ T1962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1942.666586][ T2307] netlink: 'syz.1.9429': attribute type 29 has an invalid length.
[ 1942.680151][ T1962] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1942.698141][T25447] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1942.738749][T25447] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1942.833240][T25447] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1942.850351][T25447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1942.889266][ T1962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1942.907716][ T1962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1942.932792][ T1962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1942.956070][ T1962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1942.979424][ T1962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1943.018860][ T1962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1943.049461][ T1962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1943.086849][ T1962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1943.113126][ T2310] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.9426'.
[ 1943.149354][ T1962] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1943.157306][ T2307] netlink: 'syz.1.9429': attribute type 29 has an invalid length.
[ 1943.178520][T25447] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1943.197620][T25447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1943.292314][ T1962] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1943.302513][ T1962] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1943.317226][ T1962] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1943.326668][ T1962] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1943.523782][T24186] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1943.565918][T24186] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1943.627042][T30389] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1943.650942][T25446] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1943.665814][T25446] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1943.685984][T30389] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1943.748460][ T2326] netlink: 'syz.3.9433': attribute type 10 has an invalid length.
[ 1943.933000][ T2331] netlink: 'syz.4.9336': attribute type 3 has an invalid length.
[ 1943.952989][ T2331] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.9336'.
[ 1944.443574][ T2351] FAULT_INJECTION: forcing a failure.
[ 1944.443574][ T2351] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1944.459546][ T2351] CPU: 1 PID: 2351 Comm: syz.2.9441 Not tainted syzkaller #0
[ 1944.467085][ T2351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1944.477182][ T2351] Call Trace:
[ 1944.480498][ T2351]  <TASK>
[ 1944.483469][ T2351]  dump_stack_lvl+0x188/0x24e
[ 1944.488206][ T2351]  ? show_regs_print_info+0x12/0x12
[ 1944.493450][ T2351]  ? load_image+0x410/0x410
[ 1944.497973][ T2351]  ? __lock_acquire+0x7c40/0x7c40
[ 1944.503034][ T2351]  should_fail_ex+0x390/0x4c0
[ 1944.507737][ T2351]  _copy_from_user+0x2c/0x170
[ 1944.512432][ T2351]  ___sys_sendmsg+0x1c3/0x360
[ 1944.517143][ T2351]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1944.521989][ T2351]  ? __lock_acquire+0x7c40/0x7c40
[ 1944.527097][ T2351]  __se_sys_sendmsg+0x1c3/0x2b0
[ 1944.532001][ T2351]  ? ct_nmi_exit+0x145/0x1c0
[ 1944.536632][ T2351]  ? __x64_sys_sendmsg+0x80/0x80
[ 1944.541620][ T2351]  ? lockdep_hardirqs_on+0x94/0x140
[ 1944.546862][ T2351]  do_syscall_64+0x4c/0xa0
[ 1944.551319][ T2351]  ? clear_bhb_loop+0x60/0xb0
[ 1944.556046][ T2351]  ? clear_bhb_loop+0x60/0xb0
[ 1944.560820][ T2351]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1944.566732][ T2351] RIP: 0033:0x7f2c8919e0d9
[ 1944.571172][ T2351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1944.590832][ T2351] RSP: 002b:00007f2c8a15d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1944.599290][ T2351] RAX: ffffffffffffffda RBX: 00007f2c89425fa0 RCX: 00007f2c8919e0d9
[ 1944.607293][ T2351] RDX: 0000000020004080 RSI: 0000200000000040 RDI: 0000000000000003
[ 1944.615300][ T2351] RBP: 00007f2c8a15d090 R08: 0000000000000000 R09: 0000000000000000
[ 1944.623297][ T2351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1944.631296][ T2351] R13: 00007f2c89426038 R14: 00007f2c89425fa0 R15: 00007ffe6fb73408
[ 1944.639303][ T2351]  </TASK>
[ 1945.346599][ T2361] netlink: 'syz.2.9445': attribute type 4 has an invalid length.
[ 1945.387250][ T2361] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.9445'.
[ 1946.082010][ T2371] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.9446'.
[ 1946.622308][ T2378] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.9449'.
[ 1948.653978][ T2383] netlink: 'syz.1.9450': attribute type 15 has an invalid length.
[ 1948.677103][ T2383] netlink: 'syz.1.9450': attribute type 7 has an invalid length.
[ 1948.684924][ T2383] netlink: 52 bytes leftover after parsing attributes in process `syz.1.9450'.
[ 1948.753297][ T2378] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.9449'.
[ 1949.746694][ T2415] netlink: 'syz.3.9456': attribute type 3 has an invalid length.
[ 1949.802344][ T2415] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.9456'.
[ 1950.576843][ T2421] device wlan1 entered promiscuous mode
[ 1950.676004][ T2423] FAULT_INJECTION: forcing a failure.
[ 1950.676004][ T2423] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1950.746843][ T2423] CPU: 1 PID: 2423 Comm: syz.2.9460 Not tainted syzkaller #0
[ 1950.754341][ T2423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1950.764442][ T2423] Call Trace:
[ 1950.767761][ T2423]  <TASK>
[ 1950.770731][ T2423]  dump_stack_lvl+0x188/0x24e
[ 1950.775464][ T2423]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1950.781673][ T2423]  ? show_regs_print_info+0x12/0x12
[ 1950.786965][ T2423]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1950.793191][ T2423]  should_fail_ex+0x390/0x4c0
[ 1950.797962][ T2423]  _copy_from_user+0x2c/0x170
[ 1950.802696][ T2423]  __sys_bpf+0x2ea/0x780
[ 1950.806999][ T2423]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1950.812447][ T2423]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1950.818680][ T2423]  __x64_sys_bpf+0x78/0x90
[ 1950.823153][ T2423]  do_syscall_64+0x4c/0xa0
[ 1950.827619][ T2423]  ? clear_bhb_loop+0x60/0xb0
[ 1950.832342][ T2423]  ? clear_bhb_loop+0x60/0xb0
[ 1950.837066][ T2423]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1950.843004][ T2423] RIP: 0033:0x7f2c8919e0d9
[ 1950.847465][ T2423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1950.867202][ T2423] RSP: 002b:00007f2c8a15d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1950.875647][ T2423] RAX: ffffffffffffffda RBX: 00007f2c89425fa0 RCX: 00007f2c8919e0d9
[ 1950.883643][ T2423] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[ 1950.891635][ T2423] RBP: 00007f2c8a15d090 R08: 0000000000000000 R09: 0000000000000000
[ 1950.899631][ T2423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1950.907628][ T2423] R13: 00007f2c89426038 R14: 00007f2c89425fa0 R15: 00007ffe6fb73408
[ 1950.915645][ T2423]  </TASK>
[ 1950.961415][ T2437] sctp: [Deprecated]: syz.1.9464 (pid 2437) Use of int in max_burst socket option deprecated.
[ 1950.961415][ T2437] Use struct sctp_assoc_value instead
[ 1951.292311][ T2436] delete_channel: no stack
[ 1951.686875][ T2458] netlink: 'syz.2.9468': attribute type 29 has an invalid length.
[ 1951.818040][ T2458] netlink: 'syz.2.9468': attribute type 29 has an invalid length.
[ 1951.857089][ T2463] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9469'.
[ 1952.883478][ T2487] netlink: 'syz.0.9475': attribute type 10 has an invalid length.
[ 1953.043555][ T2487] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9475'.
[ 1953.731483][ T2487] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1953.798175][ T2487] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1953.837136][ T2487] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1953.846126][ T2487] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1953.908021][ T2487] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1953.938372][ T2487] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1953.951297][ T2487] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1953.960585][ T2487] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1954.006496][ T2487] team0: Port device geneve0 added
[ 1954.302545][ T2503] netlink: 'syz.3.9481': attribute type 10 has an invalid length.
[ 1955.589615][ T2518] netlink: 'syz.1.9484': attribute type 29 has an invalid length.
[ 1955.642706][ T2518] netlink: 'syz.1.9484': attribute type 29 has an invalid length.
[ 1955.740632][ T2527] netlink: 'syz.3.9485': attribute type 7 has an invalid length.
[ 1955.868267][ T2527] netlink: 191184 bytes leftover after parsing attributes in process `syz.3.9485'.
[ 1956.004360][ T2530] IPv6: Can't replace route, no match found
[ 1956.120667][ T2532] netlink: 'syz.0.9487': attribute type 10 has an invalid length.
[ 1956.280828][ T2532] device macvlan0 entered promiscuous mode
[ 1956.739987][ T2532] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[ 1957.913022][ T2560] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9494'.
[ 1958.225901][ T2564] IPv6: Can't replace route, no match found
[ 1958.715777][ T2584] IPv6: Can't replace route, no match found
[ 1959.112832][ T2596] netlink: 'syz.1.9505': attribute type 10 has an invalid length.
[ 1959.388851][ T2606] netlink: 'syz.3.9508': attribute type 10 has an invalid length.
[ 1959.575649][ T2614] netlink: 'syz.1.9511': attribute type 29 has an invalid length.
[ 1959.609041][ T2614] netlink: 'syz.1.9511': attribute type 29 has an invalid length.
[ 1959.949404][ T2628] IPv6: Can't replace route, no match found
[ 1960.226807][ T2634] netlink: 'syz.4.9519': attribute type 10 has an invalid length.
[ 1960.267774][ T2634] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9519'.
[ 1960.298690][ T2634] device team0 entered promiscuous mode
[ 1960.304343][ T2634] device team_slave_0 entered promiscuous mode
[ 1960.365392][ T2640] netlink: 'syz.4.9519': attribute type 11 has an invalid length.
[ 1960.503148][ T2634] device team_slave_1 entered promiscuous mode
[ 1960.517073][ T2640] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.9519'.
[ 1960.554234][ T2634] bridge0: port 3(team0) entered blocking state
[ 1960.562635][ T2642] netlink: 'syz.4.9519': attribute type 11 has an invalid length.
[ 1960.593370][ T2634] bridge0: port 3(team0) entered disabled state
[ 1960.612463][ T2642] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.9519'.
[ 1960.658910][ T2631] FAULT_INJECTION: forcing a failure.
[ 1960.658910][ T2631] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1960.685329][ T2631] CPU: 1 PID: 2631 Comm: syz.1.9517 Not tainted syzkaller #0
[ 1960.692826][ T2631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1960.701389][ T2634] bridge0: port 3(team0) entered blocking state
[ 1960.703280][ T2631] Call Trace:
[ 1960.703297][ T2631]  <TASK>
[ 1960.710042][ T2634] bridge0: port 3(team0) entered forwarding state
[ 1960.713215][ T2631]  dump_stack_lvl+0x188/0x24e
[ 1960.727426][ T2631]  ? show_regs_print_info+0x12/0x12
[ 1960.732722][ T2631]  ? load_image+0x410/0x410
[ 1960.737310][ T2631]  ? __lock_acquire+0x7c40/0x7c40
[ 1960.742406][ T2631]  ? snprintf+0xe5/0x140
[ 1960.746703][ T2631]  should_fail_ex+0x390/0x4c0
[ 1960.751449][ T2631]  _copy_to_user+0x2c/0x130
[ 1960.756004][ T2631]  simple_read_from_buffer+0xe3/0x150
[ 1960.761458][ T2631]  proc_fail_nth_read+0x1a6/0x220
[ 1960.766536][ T2631]  ? proc_fault_inject_write+0x310/0x310
[ 1960.772225][ T2631]  ? fsnotify_perm+0x248/0x550
[ 1960.777047][ T2631]  ? proc_fault_inject_write+0x310/0x310
[ 1960.782742][ T2631]  vfs_read+0x2db/0x960
[ 1960.786986][ T2631]  ? kernel_read+0x1e0/0x1e0
[ 1960.791650][ T2631]  ? __fget_files+0x28/0x460
[ 1960.796297][ T2631]  ? __fget_files+0x3fc/0x460
[ 1960.801055][ T2631]  ? __fdget_pos+0x2ae/0x360
[ 1960.805694][ T2631]  ? ksys_read+0x70/0x260
[ 1960.810088][ T2631]  ksys_read+0x14d/0x260
[ 1960.814394][ T2631]  ? vfs_write+0x9a0/0x9a0
[ 1960.818878][ T2631]  ? lockdep_hardirqs_on+0x94/0x140
[ 1960.824132][ T2631]  do_syscall_64+0x4c/0xa0
[ 1960.828599][ T2631]  ? clear_bhb_loop+0x60/0xb0
[ 1960.833334][ T2631]  ? clear_bhb_loop+0x60/0xb0
[ 1960.838204][ T2631]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1960.844143][ T2631] RIP: 0033:0x7f5437d5e90e
[ 1960.848605][ T2631] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1960.868254][ T2631] RSP: 002b:00007f5438c27fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1960.876718][ T2631] RAX: ffffffffffffffda RBX: 00007f5438c286c0 RCX: 00007f5437d5e90e
[ 1960.884757][ T2631] RDX: 000000000000000f RSI: 00007f5438c280a0 RDI: 0000000000000005
[ 1960.892789][ T2631] RBP: 00007f5438c28090 R08: 0000000000000000 R09: 0000000000000000
[ 1960.900800][ T2631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1960.908821][ T2631] R13: 00007f5438026038 R14: 00007f5438025fa0 R15: 00007ffe23ba31d8
[ 1960.916878][ T2631]  </TASK>
[ 1961.080052][ T2634] netlink: 164 bytes leftover after parsing attributes in process `syz.4.9519'.
[ 1961.117294][ T2634] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9519'.
[ 1961.202315][ T2633] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1961.285946][ T2657] netlink: 'syz.2.9521': attribute type 10 has an invalid length.
[ 1961.426948][ T2657] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[ 1961.464116][ T2661] netlink: 'syz.1.9523': attribute type 39 has an invalid length.
[ 1961.980873][ T2688] netlink: 'syz.1.9528': attribute type 29 has an invalid length.
[ 1962.047531][ T2688] netlink: 'syz.1.9528': attribute type 29 has an invalid length.
[ 1962.290781][ T2691] netlink: 'syz.2.9532': attribute type 10 has an invalid length.
[ 1962.553440][ T2691] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9532'.
[ 1962.578338][ T2704] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.9534'.
[ 1962.972460][ T2721] netlink: 'syz.1.9539': attribute type 10 has an invalid length.
[ 1963.028972][ T2721] device macvlan0 entered promiscuous mode
[ 1963.166330][ T2721] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[ 1964.385367][ T2773] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.9557'.
[ 1964.916128][ T2802] validate_nla: 3 callbacks suppressed
[ 1964.916151][ T2802] netlink: 'syz.1.9561': attribute type 10 has an invalid length.
[ 1964.935095][ T2805] netlink: 'syz.0.9563': attribute type 29 has an invalid length.
[ 1964.957290][ T2802] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9561'.
[ 1964.974675][ T2802] device team0 entered promiscuous mode
[ 1964.980876][ T2802] device team_slave_0 entered promiscuous mode
[ 1964.995908][ T2802] device team_slave_1 entered promiscuous mode
[ 1965.003242][ T2802] device geneve1 entered promiscuous mode
[ 1965.019079][ T2802] bridge0: port 3(team0) entered blocking state
[ 1965.025713][ T2802] bridge0: port 3(team0) entered disabled state
[ 1965.041128][ T2802] bridge0: port 3(team0) entered blocking state
[ 1965.047603][ T2802] bridge0: port 3(team0) entered forwarding state
[ 1965.056010][ T2805] netlink: 'syz.0.9563': attribute type 29 has an invalid length.
[ 1965.074982][ T2810] netlink: 65185 bytes leftover after parsing attributes in process `syz.4.9564'.
[ 1965.099544][ T2802] netlink: 'syz.1.9561': attribute type 11 has an invalid length.
[ 1965.120178][ T2802] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.9561'.
[ 1965.160498][ T2802] netlink: 'syz.1.9561': attribute type 11 has an invalid length.
[ 1965.178889][ T2802] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.9561'.
[ 1965.253520][ T2802] netlink: 164 bytes leftover after parsing attributes in process `syz.1.9561'.
[ 1965.313109][ T2817] netlink: 'syz.0.9565': attribute type 28 has an invalid length.
[ 1965.321196][ T2817] netlink: 'syz.0.9565': attribute type 4 has an invalid length.
[ 1965.340755][ T2801] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1965.363319][ T2817] netlink: 'syz.0.9565': attribute type 10 has an invalid length.
[ 1965.374626][ T2817] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1965.414301][ T2817] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1965.470844][ T2817] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[ 1965.541281][ T2821] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[ 1965.614562][ T2821] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1967.128581][ T2863] netlink: 'syz.2.9582': attribute type 28 has an invalid length.
[ 1967.136487][ T2863] netlink: 'syz.2.9582': attribute type 4 has an invalid length.
[ 1967.164998][ T2860] IPv6: Can't replace route, no match found
[ 1967.186469][ T2860] netlink: 'syz.3.9581': attribute type 6 has an invalid length.
[ 1967.196164][ T2860] __nla_validate_parse: 2 callbacks suppressed
[ 1967.196209][ T2860] netlink: 1034 bytes leftover after parsing attributes in process `syz.3.9581'.
[ 1967.221125][ T2863] netlink: 136 bytes leftover after parsing attributes in process `syz.2.9582'.
[ 1967.243669][ T2863] netlink: 'syz.2.9582': attribute type 10 has an invalid length.
[ 1967.256595][ T2863] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1967.292660][ T2863] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1967.364809][ T2863] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[ 1968.558671][ T2902] netlink: 10 bytes leftover after parsing attributes in process `syz.4.9594'.
[ 1968.879475][ T2908] netlink: 15487 bytes leftover after parsing attributes in process `syz.1.9595'.
[ 1971.755592][ T2924] netlink: 65185 bytes leftover after parsing attributes in process `syz.2.9601'.
[ 1971.825692][ T2929] validate_nla: 7 callbacks suppressed
[ 1971.825713][ T2929] netlink: 'syz.3.9602': attribute type 29 has an invalid length.
[ 1971.917048][ T2929] netlink: 'syz.3.9602': attribute type 29 has an invalid length.
[ 1972.307641][ T2941] netlink: 'syz.3.9607': attribute type 29 has an invalid length.
[ 1972.315846][ T2941] netlink: 'syz.3.9607': attribute type 29 has an invalid length.
[ 1972.597242][    C1] 
[ 1972.597251][    C1] ================================
[ 1972.597257][    C1] WARNING: inconsistent lock state
[ 1972.597279][    C1] syzkaller #0 Not tainted
[ 1972.597290][    C1] --------------------------------
[ 1972.597295][    C1] inconsistent {INITIAL USE} -> {IN-NMI} usage.
[ 1972.597304][    C1] syz.4.9609/2943 [HC1[1]:SC0[0]:HE0:SE1] takes:
[ 1972.597326][    C1] ffff888058a2ca38 (&trie->lock){....}-{2:2}, at: trie_delete_elem+0x8e/0x620
[ 1972.597387][    C1] {INITIAL USE} state was registered at:
[ 1972.597394][    C1]   lock_acquire+0x1bb/0x4a0
[ 1972.597422][    C1]   _raw_spin_lock_irqsave+0xb0/0x100
[ 1972.597443][    C1]   trie_delete_elem+0x8e/0x620
[ 1972.597469][    C1]   0xffffffffa0002624
[ 1972.597482][    C1]   __bpf_prog_test_run_raw_tp+0x364/0x430
[ 1972.597505][    C1]   bpf_prog_test_run_raw_tp+0x45a/0x680
[ 1972.597527][    C1]   bpf_prog_test_run+0x31c/0x390
[ 1972.597554][    C1]   __sys_bpf+0x62b/0x780
[ 1972.597578][    C1]   __x64_sys_bpf+0x78/0x90
[ 1972.597602][    C1]   do_syscall_64+0x4c/0xa0
[ 1972.597627][    C1]   entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1972.597657][    C1] irq event stamp: 1176
[ 1972.597664][    C1] hardirqs last  enabled at (1175): [<ffffffff814f3b66>] __local_bh_enable_ip+0x136/0x1c0
[ 1972.597691][    C1] hardirqs last disabled at (1176): [<ffffffff8a2febae>] exc_debug+0x6e/0x130
[ 1972.597723][    C1] softirqs last  enabled at (1174): [<ffffffff886cee5d>] netlink_insert+0x101d/0x13b0
[ 1972.597757][    C1] softirqs last disabled at (1172): [<ffffffff882cbb5b>] release_sock+0x2b/0x1b0
[ 1972.597782][    C1] 
[ 1972.597782][    C1] other info that might help us debug this:
[ 1972.597788][    C1]  Possible unsafe locking scenario:
[ 1972.597788][    C1] 
[ 1972.597793][    C1]        CPU0
[ 1972.597797][    C1]        ----
[ 1972.597800][    C1]   lock(&trie->lock);
[ 1972.597812][    C1]   <Interrupt>
[ 1972.597816][    C1]     lock(&trie->lock);
[ 1972.597828][    C1] 
[ 1972.597828][    C1]  *** DEADLOCK ***
[ 1972.597828][    C1] 
[ 1972.597832][    C1] no locks held by syz.4.9609/2943.
[ 1972.597840][    C1] 
[ 1972.597840][    C1] stack backtrace:
[ 1972.597847][    C1] CPU: 1 PID: 2943 Comm: syz.4.9609 Not tainted syzkaller #0
[ 1972.597865][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1972.597877][    C1] Call Trace:
[ 1972.597883][    C1]  <#DB>
[ 1972.597956][    C1]  dump_stack_lvl+0x188/0x24e
[ 1972.597986][    C1]  ? show_regs_print_info+0x12/0x12
[ 1972.598017][    C1]  ? print_usage_bug+0x42a/0x690
[ 1972.598046][    C1]  ? verify_lock_unused+0x15/0x140
[ 1972.598076][    C1]  lock_acquire+0x2df/0x4a0
[ 1972.598102][    C1]  ? perf_output_begin_forward+0xa7/0xa70
[ 1972.598138][    C1]  ? trie_delete_elem+0x8e/0x620
[ 1972.598166][    C1]  ? read_lock_is_recursive+0x10/0x10
[ 1972.598194][    C1]  ? rcu_is_watching+0x11/0xa0
[ 1972.598223][    C1]  ? lock_release+0xcf/0x920
[ 1972.598249][    C1]  ? look_up_lock_class+0x75/0x140
[ 1972.598269][    C1]  ? verify_lock_unused+0x15/0x140
[ 1972.598298][    C1]  _raw_spin_lock_irqsave+0xb0/0x100
[ 1972.598320][    C1]  ? trie_delete_elem+0x8e/0x620
[ 1972.598347][    C1]  ? _raw_spin_lock+0x40/0x40
[ 1972.598369][    C1]  ? bpf_overflow_handler+0xd9/0x790
[ 1972.598394][    C1]  trie_delete_elem+0x8e/0x620
[ 1972.598420][    C1]  ? perf_event_output_forward+0x282/0x2f0
[ 1972.598450][    C1]  ? perf_event_output_forward+0xbe/0x2f0
[ 1972.598481][    C1]  bpf_prog_2c29ac5cdc6b1842+0x3a/0x3e
[ 1972.598501][    C1]  bpf_overflow_handler+0x50b/0x790
[ 1972.598524][    C1]  ? perf_get_page_size+0x430/0x430
[ 1972.598553][    C1]  ? bpf_overflow_handler+0xd9/0x790
[ 1972.598575][    C1]  ? perf_swevent_overflow+0x230/0x230
[ 1972.598602][    C1]  ? __perf_event_account_interrupt+0x187/0x280
[ 1972.598632][    C1]  __perf_event_overflow+0x457/0x630
[ 1972.598662][    C1]  ? perf_swevent_overflow+0x20c/0x230
[ 1972.598687][    C1]  perf_swevent_event+0x315/0x570
[ 1972.598718][    C1]  ? perf_tp_event+0xc10/0xc10
[ 1972.598747][    C1]  ? __bpf_trace_bpf_trace_printk+0x20/0x20
[ 1972.598781][    C1]  perf_bp_event+0x311/0x3f0
[ 1972.598810][    C1]  ? perf_trace_run_bpf_submit+0x124/0x1c0
[ 1972.598843][    C1]  ? perf_event_free_bpf_prog+0x120/0x120
[ 1972.598872][    C1]  ? perf_trace_lock+0xf8/0x390
[ 1972.598908][    C1]  ? atomic_notifier_call_chain+0x2c/0x2b0
[ 1972.598933][    C1]  ? read_lock_is_recursive+0x10/0x10
[ 1972.598958][    C1]  hw_breakpoint_exceptions_notify+0x14d/0x470
[ 1972.598991][    C1]  atomic_notifier_call_chain+0x17a/0x2b0
[ 1972.599014][    C1]  ? atomic_notifier_call_chain+0x2c/0x2b0
[ 1972.599047][    C1]  notify_die+0x141/0x1a0
[ 1972.599071][    C1]  ? srcu_init_notifier_head+0x90/0x90
[ 1972.599100][    C1]  notify_debug+0x20/0x30
[ 1972.599136][    C1]  exc_debug+0xd9/0x130
[ 1972.599165][    C1]  asm_exc_debug+0x1a/0x40
[ 1972.599200][    C1] RIP: 0010:copy_user_short_string+0xd/0x40
[ 1972.599230][    C1] Code: 74 0a 89 d1 f3 a4 89 c8 0f 01 ca c3 89 d0 0f 01 ca c3 01 ca eb e7 90 90 90 90 90 90 90 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a
[ 1972.599246][    C1] RSP: 0018:ffffc900038d7788 EFLAGS: 00040203
[ 1972.599263][    C1] RAX: ffffffff8413b101 RBX: 0000000000000014 RCX: 0000000000000002
[ 1972.599278][    C1] RDX: 0000000000000004 RSI: 0000200000000300 RDI: ffff888018b2dc00
[ 1972.599292][    C1] RBP: 0000000000000000 R08: 6c0b002700000014 R09: 1ffff11003165b82
[ 1972.599306][    C1] R10: dffffc0000000000 R11: ffffed1003165b83 R12: 00007fffffffefec
[ 1972.599321][    C1] R13: 0000000000000000 R14: 0000200000000300 R15: ffff888018b2dc00
[ 1972.599339][    C1]  ? copyin+0xc1/0x120
[ 1972.599368][    C1]  </#DB>
[ 1972.599374][    C1]  <TASK>
[ 1972.599380][    C1]  copyin+0xe7/0x120
[ 1972.599423][    C1]  _copy_from_iter+0x447/0x1130
[ 1972.599453][    C1]  ? copyout_mc+0x110/0x110
[ 1972.599478][    C1]  ? __virt_addr_valid+0x188/0x540
[ 1972.599505][    C1]  ? __virt_addr_valid+0x188/0x540
[ 1972.599533][    C1]  ? __virt_addr_valid+0x467/0x540
[ 1972.599560][    C1]  ? __phys_addr_symbol+0x2b/0x70
[ 1972.599587][    C1]  ? __check_object_size+0x4f6/0xa70
[ 1972.599611][    C1]  netlink_sendmsg+0x755/0xbd0
[ 1972.599646][    C1]  ? netlink_getsockopt+0x550/0x550
[ 1972.599685][    C1]  ? apparmor_socket_sendmsg+0x8a/0x330
[ 1972.599714][    C1]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1972.599734][    C1]  ? security_socket_sendmsg+0x7c/0xa0
[ 1972.599760][    C1]  ? netlink_getsockopt+0x550/0x550
[ 1972.599790][    C1]  ____sys_sendmsg+0x5ed/0x9a0
[ 1972.599822][    C1]  ? __sys_sendmsg_sock+0x30/0x30
[ 1972.599850][    C1]  ? __import_iovec+0x306/0x510
[ 1972.599881][    C1]  ? import_iovec+0x6f/0xa0
[ 1972.599910][    C1]  ___sys_sendmsg+0x2a2/0x360
[ 1972.599941][    C1]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1972.599992][    C1]  __se_sys_sendmsg+0x1c3/0x2b0
[ 1972.600020][    C1]  ? ct_nmi_exit+0x145/0x1c0
[ 1972.600041][    C1]  ? __x64_sys_sendmsg+0x80/0x80
[ 1972.600076][    C1]  ? lockdep_hardirqs_on+0x94/0x140
[ 1972.600097][    C1]  do_syscall_64+0x4c/0xa0
[ 1972.600131][    C1]  ? clear_bhb_loop+0x60/0xb0
[ 1972.600157][    C1]  ? clear_bhb_loop+0x60/0xb0
[ 1972.600184][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1972.600209][    C1] RIP: 0033:0x7fe04699e0d9
[ 1972.600225][    C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1972.600241][    C1] RSP: 002b:00007fe0477fd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1972.600261][    C1] RAX: ffffffffffffffda RBX: 00007fe046c25fa0 RCX: 00007fe04699e0d9
[ 1972.600275][    C1] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000a
[ 1972.600288][    C1] RBP: 00007fe046a35024 R08: 0000000000000000 R09: 0000000000000000
[ 1972.600301][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1972.600313][    C1] R13: 00007fe046c26038 R14: 00007fe046c25fa0 R15: 00007ffdb5ec2378
[ 1972.600335][    C1]  </TASK>
[ 1975.998663][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[ 1976.005010][ T1280] ieee802154 phy1 wpan1: encryption failed: -22