last executing test programs:

3.827988275s ago: executing program 4 (id=4734):
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3ff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0xd, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001100)=[{0x0}], 0x1}, 0x10000)
r2 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d487277b9b100b4ab50a", @ANYRES32, @ANYRES8=r2], 0xfe33)

3.505414329s ago: executing program 4 (id=4738):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6c69f68dc1cf3e78, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$kcm(0x11, 0x2, 0x300)
r2 = socket$kcm(0x10, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000040), &(0x7f0000000080)=r3}, 0x20)
sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8", 0x1}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0), 0x2}, 0x10c002, 0xac5d, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffa}, [@call={0x85, 0x0, 0x0, 0x2c}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r4, 0x27, 0xf, 0x0, &(0x7f0000000140)="f9ad48cc42cb29fc99d41a08320a4b", 0x0, 0x1400, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)

3.272187782s ago: executing program 4 (id=4741):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="5c00000012006b8c373be35c6e17aa31046a876c1d0000007ea60864160af26508001dc0c3000200340031009ee517d34460bc24eab556a705251e618294ff0051f60a84c9f472736f67c5e73bb9e5c446fa30be62cbd4938037e7", 0x5b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x1c, &(0x7f0000000300)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1019, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00, 0x10000000}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0xffff0000, 0xf0, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48)
mkdir(&(0x7f0000000080)='./cgroup/../file0\x00', 0xb4)
r6 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r6, &(0x7f00000005c0)=r4, 0x12)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c80)={0x0, &(0x7f0000000bc0)=""/136, 0x0, 0x88, 0x0, 0x9, 0x10000, @value=r3}, 0x28)
r9 = openat$cgroup_ro(r8, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0)
write$cgroup_int(r9, &(0x7f0000000040)=0x1, 0x12)
r10 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r11 = openat$cgroup_ro(r7, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0)
write$cgroup_int(r11, &(0x7f0000000040)=0x1, 0x12)

3.219923093s ago: executing program 3 (id=4742):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2, 0x3, 0x5, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(0xffffffffffffffff)
socket$kcm(0xa, 0x2, 0x73)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="038c448e18e97c1e0000000000000000000300000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="120000007f00000004"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3, <r4=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r4, &(0x7f0000000500), 0x0}, 0x20)
r5 = socket$kcm(0xa, 0x2, 0x0)
close(r5)
r6 = socket$kcm(0xa, 0x1, 0x0)
recvmsg(r0, &(0x7f0000000900)={&(0x7f00000001c0)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000540)=""/104, 0x68}, {&(0x7f00000005c0)=""/196, 0xc4}, {&(0x7f00000006c0)=""/144, 0x90}, {&(0x7f0000000780)}], 0x4, &(0x7f0000000800)=""/204, 0xcc}, 0x100)
sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x1a, 0x3}, 0x80, 0x0}, 0x26004055)
setsockopt$sock_attach_bpf(r5, 0x0, 0x4, 0x0, 0x0)

2.805677987s ago: executing program 2 (id=4744):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd00000000000004000000850000002a00000095"], &(0x7f0000000000)='GPL\x00'}, 0x90)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20)
sendmsg$unix(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="e687", 0x2}], 0x1, 0x0, 0x0, 0x44190}, 0x2004c001)

2.741675478s ago: executing program 3 (id=4745):
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x1c, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000840), 0x8}, 0x10c006, 0xac5d}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x2}, 0x0, 0x0, 0xfffffffd, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0)
socket$kcm(0x11, 0x20000000000000a, 0x300)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xe, 0x0, &(0x7f0000000040)="ffff53f2081e87f89b60160b08ff", 0x0, 0x63, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3f}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff003, 0x66, 0x7f, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x69, 0x10, 0x12}}, &(0x7f0000000480)='GPL\x00'}, 0x80)
r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r4, 0xe0, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', r5, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, r4, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8946, &(0x7f0000000080))
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x356}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0xd0e4, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffa, 0x4, @perf_bp={0x0, 0x6}, 0x19183, 0x1, 0x5, 0xb, 0xa, 0x904813a5, 0x4, 0x0, 0x0, 0x0, 0xffffffffffff0000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
sendmsg$tipc(r7, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000880)="b89d5bcc5690d71b571a979fcca62b1260a6d80781e1907a8d55fb37b6dfc1f085188b24fc4625742c39235cbd20b30c09f5a77a97cbd031b1fe388ffa7a162c61edb2ec2e2e6efaeb09aa473f53d96d24751460a3317ee0535a1333e3d7d359487333da03fb4d3bfb3f3fa73665ed035431a10393cdc18dfbf8e5c9637dbd282e0a64cbe6", 0x85}], 0x1, &(0x7f0000000980)="72345cf5f10e4e3609973feaaeb610ebf314ff262b0aea13", 0x18, 0x804}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_lsm={0x1d, 0x1b, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfaa}, {}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @alu={0x7, 0x0, 0xd, 0x1, 0x3, 0x80, 0x1}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffd}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000440)='syzkaller\x00', 0x10000, 0xffffffffffffff7a, &(0x7f0000000540)=""/61, 0x40f00, 0x20, '\x00', 0x0, 0x1b, r2, 0x8, &(0x7f00000005c0)={0x0, 0x5}, 0xfffffdf8, 0x10, &(0x7f00000006c0)={0x0, 0xa, 0x4, 0x200}, 0x10, r6, 0x0, 0x3, &(0x7f0000000700)=[r1, r1, r0, r1, r1, r1], &(0x7f0000000740)=[{0x0, 0x1, 0xc}, {0x0, 0x2, 0xc}, {0x0, 0x5, 0x3}], 0x10, 0x1}, 0x94)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x6}, 0x10c002, 0x89, 0x0, 0x6, 0x8000000, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000080), &(0x7f0000000240)='%ps    \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r1}, 0x4)

2.60924123s ago: executing program 2 (id=4746):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000d30000000800000002"], 0x48)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000c80)={@fallback=<r1=>r0, 0x7, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000f000000850000001500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f030006a5377aae2f", 0x0, 0x12f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$kcm(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1, &(0x7f0000000680)=[{0x28, 0x104, 0x9, "71a34203ae58f3922f62929cea7f8c21e9"}, {0x108, 0x118, 0x4, "0097dce35d611a0351a77494f7f3cd469cd5c191b0e7bfca31c4f05554f3531a4230e4d7e07ff10ebfb2b13b4c3c2a6ecbb503d31c94bc3cd2ec082d566904b805702d6f1f1ee05eaee7b875472bdef237ee2ac9ecc6825cbb88fd7ae7e8cfc751c28f919eff427b158e587df415a21c4cd0774699f349fe8c38829231e8d31731ff2fa18c8ffc34c7e6f2d596d6e25d5a2463c416e4c8a52973390b0edef94a0361cd1752e195145a9ad5812817d7bd8bb5749902cfd0801f593595bb9ef90bbc0cadec0f68c9d164cd2d57ae8c9c5449ab6292c8b2348451c5187f1c92ecdc0a60c678533b775c43fc292a9556c05bad8fdc"}, {0x40, 0x11, 0xb, "d1b58f0d5d8a13dc7d4d2661a61b780ef26ad34e7e9c47ec48fbf082ccf16da601272374941027bf8e88a8177dc45a24"}], 0x170}, 0x0)

2.526474521s ago: executing program 4 (id=4748):
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(&(0x7f00000001c0)={0x6, 0x80, 0x4, 0x0, 0xe4, 0x0, 0x0, 0x6, 0x1040, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x9848}, 0x800c, 0x2736, 0x7, 0x8, 0x1, 0x6, 0xb, 0x0, 0x8, 0x0, 0x200}, 0xffffffffffffffff, 0x7, r0, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, r0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x2, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0)
r2 = socket$kcm(0x28, 0x1, 0x0)
setsockopt$sock_attach_bpf(r2, 0x28, 0x3c, 0x0, 0x0)
close(r2)
close(r1)
r3 = socket$kcm(0xa, 0x2, 0x88)
setsockopt$sock_attach_bpf(r3, 0x88, 0xa, &(0x7f0000000000), 0x4)
sendmsg$kcm(r3, &(0x7f0000000280)={&(0x7f00000000c0)=@in6={0xa, 0x4e23, 0x10, @remote, 0x5}, 0x80, 0x0}, 0x40)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xa4, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport}, 0x94)
socketpair(0x22, 0x5, 0x26, 0x0)
bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00', 0x800})
socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080))

2.289778513s ago: executing program 0 (id=4750):
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3ff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0xd, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001100)=[{0x0}], 0x1}, 0x10000)
r2 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d487277b9b100b4ab50a", @ANYRES32, @ANYRES8=r2], 0xfe33)

1.959828988s ago: executing program 2 (id=4752):
socket$kcm(0x15, 0x5, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x2000000064ba0300, &(0x7f0000000980)=@base={0x6, 0x4, 0x37ad, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x50)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x7, &(0x7f0000000000), 0x4)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000040000000600000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@cgroup, 0xb, 0x1, 0x41, &(0x7f0000000080)=[0x0], 0x1, 0x0, 0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)}, 0x40)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)}], 0x1}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x4020940d, &(0x7f0000000540)={'\x00', @link_local})
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)=ANY=[], 0x20)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r0, 0x58, &(0x7f0000000040)}, 0x10)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20)

1.946941087s ago: executing program 0 (id=4753):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1c0000001e007f109e", 0x2a}, {&(0x7f0000000140)="78cafb73fc02010700000000ef02258f2e440ab8f9e6aaeb1ae2f6e8bcb5ee52dc06b6c9ad11cb5dbc249798093c5102a1bca0b6050000004f6e6b788b3219c233e60ddc36024a99a63e7238fe9f9b06f96137c8af12b6", 0x98}], 0x2}, 0x4000000)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120a0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2b8, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x40305828, &(0x7f0000000340)={'lo\x00', @random="3f2f94c100"})
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0xffffffffffffffff, 0x8, 0x8}, 0xc)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0xa, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x30, &(0x7f0000000340)=[{}, {}], 0x10, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0xe8, 0x8, 0x8, &(0x7f0000000400)}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0xf, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='syzkaller\x00'}, 0x94)
r2 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r2, 0x84, 0xb, &(0x7f0000000000), 0xe)
sendmsg$inet(r2, &(0x7f00000007c0)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000080)="92", 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x158}, 0x40)
close(r2)

1.794320779s ago: executing program 3 (id=4754):
socket$kcm(0x2, 0x5, 0x84)
bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, 0x0, &(0x7f0000000180)}, 0x20)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x5, 0x0, 0x0, &(0x7f0000000c00)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1a}, 0x94)
r0 = socket$kcm(0x10, 0x2, 0x4)
r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r1)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r2 = syz_open_procfs$namespace(0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xf, 0x8}, 0x2000, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x10)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000340)={r1}, 0x8)
close(r3)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94)
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000002c0)=ANY=[@ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x4d, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000012006b04000000d86e6c1d000a887ea6ea65670000000000000090f9c3dc90f8f41f8ecff32c6e020075e300250045586c8da718ad4b4460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x9c60dee8b1d5354b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7, @perf_bp={0x0, 0x4}, 0x2820, 0x2, 0x4, 0x0, 0x200, 0x94e, 0xf0d, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0x10, 0xffffffffffffffff, 0x8)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, 0x0}, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x33fe0)

1.71387824s ago: executing program 2 (id=4756):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000380)={0x4, 0xffffff7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe802, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x10, 0xc8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8102032908fe8000000000000000000000ac14140a000000000000000200000000ac1414aa"], 0xfdef)

1.71294757s ago: executing program 4 (id=4757):
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r0=>0x0, 0x0})
close(r0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r1=>0x0, <r2=>0x0})
close(r1)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000ff"], 0x48)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000027c0)=[{0x0}], 0x1}, 0x10100)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x12, 0x104, 0x8, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4, <r5=>0xffffffffffffffff}, &(0x7f0000001d80), &(0x7f0000001d40)=r3}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r5, &(0x7f0000000340), 0x0}, 0x20)
setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={<r6=>0x0, <r7=>0x0})
close(r6)
perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f0000000180), 0x127)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x40001)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={<r8=>0x0, <r9=>0x0})
close(r8)
setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendmsg$tipc(r0, &(0x7f0000005680)={&(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x0, {0xe6e83e926a5c61c7}}, 0x10, &(0x7f0000005580)=[{&(0x7f0000002800)="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", 0x1000}, {&(0x7f0000003800)="3036d25c8b01572341a93a455c3cc0964edcca370b62fa", 0x17}, {&(0x7f0000003840)="035b29af774b487db988bbfeb70b341c81511b50a1b8e4a104e98a8b9e06671921536fb320e928a2961d45ecc807a08f38f368c7641630e0c22129eda9d1be27d480cf72052210eba63e9b2d77dd8958cf994209ca9c42632b1f1b45556269f011fd56f0bc381f8ad3eb0a634aaeb16cc606e9311d3eec1172cb6b38de68e6e1ced1f076c883bc921d4cac782f79671d7a9d1cd362b0211f217e68710de58dbcb0f3578b9f5f78dfe2a29195c597d30d8585d8147246ea3f166531c9bd9546e0aea5440c8152bc99e5c5e0532a7b0f52a7be1f53c597a15598c68cd298d80a566bfabf", 0xe3}, {&(0x7f0000003940)="a33e6429bba26230aedd87482dcfca6a81543d227765ceb154a42930c2ca5bec581e2a7f36aa05b933383d29e4f9f6", 0x2f}, {&(0x7f0000003980)="f46fffa0dbe9b16489047a2c0966e32fc2b3de0313a9804b8048fb745c15ad", 0x1f}, {&(0x7f00000039c0)="19a644a21ced10ef4d112679fcfa46e98c1f7ee68b2f69bd92757f76ecc140ad0b6c724b970215341f8f4a629cdf3108ccdf0990ccf663680464a277f6678ae0f36e8087e217146af48227bac6553f2cecc23dde01427cdf4a2d54cf1bb66138f1e1b08eb57d901960bbf5dd211659c84529d776f3ef7d15421a624b5e33cd2466fa9345e9dac9b028aef2a0", 0x8c}, {&(0x7f0000004480)="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", 0x1000}, {&(0x7f0000005480)="40ef1b4be406c7d50eed6c3dafda9fe69498f883cf2d848a74b4640bf7fc762e4c6048da8990e987f580257fffe721ff6f3089404825167f649445a9ab4be667fd5525350a6a46ba55040cc20130abbfa64429c3b129cf86d8f0319039fa0de80877087339fa926d17d78af3824fc96fbbb5a5cc73a285849a797606da636781d597160edb8bc65e2f36", 0x8a}, {&(0x7f0000005540)="c83861a9c58403084fc09639974c76bf63d81b1b0dc83851c9832f7d8eed386e3b1696fe0bf993e5b3cc7507ec98b70652a02dca434630f8f88663b3d09939b1", 0x40}], 0x9, &(0x7f0000005640)="95334f82e02e69b9b787688848c11891a4dee77caa733431e32f7aab33", 0x1d, 0x4008015}, 0x60004040)
sendmsg$tipc(r10, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0xffffffffffffffff, 0x2000, 0x64656461}}, 0x10, 0x0}, 0x0)
r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedc0790700117df37538e486dd6317ce220005"], 0xfdef)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

1.653275861s ago: executing program 1 (id=4758):
r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [<r1=>0xffffffffffffffff]}}], 0x18}, 0x42)
bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1e000000a2020000050000000400000000040000", @ANYRES32=r1, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32=<r2=>r0, @ANYBLOB="0200009fe532fe000400ff0000000000000080000000000000100000"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYRES64=r2], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xdeacc20f91d7c4d3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) (async)
r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0xffff0000, 0xf0, 0xe200, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) (async, rerun: 32)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x8) (async, rerun: 32)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x1, 0x336c, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x3}, 0x50) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, <r6=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)=r3}, 0x20) (async)
r7 = openat$cgroup_ro(r3, &(0x7f00000007c0)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{0x1, <r8=>0xffffffffffffffff}, &(0x7f0000000880), &(0x7f00000008c0)=r3}, 0x20) (async)
r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000980)=@o_path={&(0x7f0000000940)='./file0\x00', 0x0, 0x10, r4}, 0x18)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_lsm={0x1d, 0x29, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @generic={0x3, 0x8, 0x0, 0x2, 0x9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @printk={@li}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000680)='GPL\x00', 0x4, 0xc2, &(0x7f00000006c0)=""/194, 0x40f00, 0x61, '\x00', 0x0, 0x1b, r7, 0x8, &(0x7f0000000800)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x3, 0x4, 0x3}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000009c0)=[r8, 0xffffffffffffffff, r3, r9], &(0x7f0000000a00)=[{0x0, 0x5, 0xa, 0x9}, {0x4, 0x5, 0xf, 0x9}, {0x2, 0x4, 0x2, 0xa}], 0x10, 0x8}, 0x94)

1.602958751s ago: executing program 0 (id=4759):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb)
r1 = socket$kcm(0x2, 0x5, 0x84)
socketpair(0x1, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4200003, 0x0, 0x95b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xc2b6, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, <r4=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20)
r5 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x23, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @cb_func={0x18, 0x5}, @jmp={0x5, 0x0, 0xd, 0xb, 0x0, 0x6}, @map_fd={0x18, 0x1}, @call={0x85, 0x0, 0x0, 0x20}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='GPL\x00', 0xc8, 0x32, &(0x7f0000000500)=""/50, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x3, 0x3, 0x80, 0x5}, 0x10, 0x0, 0x0, 0x8, &(0x7f00000005c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000600)=[{0x2, 0x5, 0x6, 0x9}, {0x4, 0x2, 0x5, 0x2}, {0x2, 0x2, 0x2, 0xf}, {0x1, 0x2, 0x9, 0xa}, {0x4, 0x1, 0x7, 0x9}, {0x0, 0x4, 0xe, 0xb}, {0x4, 0x2, 0xb, 0xb}, {0x3, 0x1, 0xf, 0xb}], 0x10, 0xfe80}, 0x94)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000440)={0x2, &(0x7f0000000400)=[{0x3d5b, 0x30, 0x3, 0x37}, {0x0, 0x5, 0x1, 0x9}]})
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x12, 0x18, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5c}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_idx={0x18, 0x8, 0x5, 0x0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @generic={0x1, 0x3, 0x7, 0x7, 0xffff}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @ldst={0x1, 0x0, 0x6, 0x2, 0x5, 0xfffffffffffffff0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback=0x1f, r5, 0x8, &(0x7f0000000300)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0x10, 0x3, 0x4f02}, 0x10, 0x0, r6, 0x6, &(0x7f0000000740)=[r7, r0], &(0x7f0000000780)=[{0x3, 0x4, 0x3, 0x1}, {0x4, 0x4, 0xd, 0x7}, {0x1, 0x5, 0xb}, {0x1, 0x4, 0x10, 0xa}, {0x1, 0x1, 0x9, 0x6}, {0x0, 0x2, 0xa, 0x1}], 0x10, 0x7ff}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
r8 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r8, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
close(0xffffffffffffffff)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
sendmsg$inet(r1, 0x0, 0x200400c4)
setsockopt$sock_attach_bpf(r1, 0x84, 0x23, &(0x7f0000000000), 0x8)

1.497849533s ago: executing program 2 (id=4760):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100808, 0x0, 0x8000, 0x0, 0x0, 0x3, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @random="010000201000"})
socket$kcm(0x2b, 0x1, 0x0)
sendmsg(r0, &(0x7f0000000680)={&(0x7f00000003c0)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7}, [@default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x80, &(0x7f0000000580)=[{0x0}, {&(0x7f0000000540)="9d3e5408e08b46f54cd3ebf5d68e6e100b6bf584b69590", 0x17}], 0x2, &(0x7f0000000a00)=[{0xd0, 0x10f, 0x4, "ce4b53db1b7923a01b73f2cc952fa06eec61824b95bd87c9198b787b7cc853782e29fffbe20ffbe7068e966f4ab45b72fe3aac02b9fb994e548d063c55dc1e98dfae5bbf1391c7782c097694fef00bec737a1387b345cd48749365e24898dac16034b5d91cb37c02c5943b5d1c30f5b34bbd710d2c3583e1f55aa62d730df39cf9f85de24493b525901ce06fdfcff7a577135f942ec660951593d1a773152be5f3fa56bb93bf407b5ed03dbad2fcbee93a4b8ee39fa68d2b2f3246c8f45c05"}, {0x78, 0x110, 0x80000000, "d78a121ad1387526e403207cfd43e52bc6eba055511ce7dcf9064d147b2de23f1c5a2c983c91727758c254e4d8fcb1f75e6b9dc228269bbfd1dd0d0613de8710b0c80470401423c22d25a6433482bc52ad4b658b3acab04fa3e3c7f33a0d4b92b689cb0bf2"}, {0x60, 0x6, 0x9, "bd7fd82b767b60a77c6aa44c226d9e4c3dab4d89f8027e7d301751c21aa4779ccd85cbe175e8bf33663d61a9db4ab824dac5351a35cbd001a287e3990fadb956d53e98506adf229c8cb600"}, {0x40, 0x118, 0x3, "7d5d55e6eb01a6de77d743e8210a550af01921eccf4af6bb17f13813079e5b26a3689a41a7ff2554b494ef"}, {0x70, 0x115, 0x10000, "85266b4b7d5cf9cc5f2601139f39423101ff651ad4762aeb6aa4cf37402dedf2d9e2fd0a3536dcc61b7fc4f23eaf3b31c36dd912ba1b2c5be371e6f04ad61c2cf45e86e5a4548da06f33094a9d5f7d7f4d569dd2df75212d12d177"}], 0x258}, 0x20000040)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f97e24fc6004030e000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x74000000}, 0x0)
r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x208, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xc8, 0x80001, 0x1, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r5)
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r6=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce8186762900fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af00000000000000000021a688b2d7007fcc4b59f719afb0b3b7e0aee306ca70fe42bf4984a68f40e1fc043a03a17e4744359b87dc27c82d51cbeb64e52a28daeb6a78d6fe06181ecc840000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
close(r8)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r7)
r9 = socket$kcm(0x10, 0x100000000002, 0x4)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42)
setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000040)=r10, 0x4)
sendmsg$kcm(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0)

1.419105254s ago: executing program 3 (id=4761):
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5d31, 0x80040, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={0xffffffffffffffff, 0x0, 0xf2, 0x0, &(0x7f0000000680)="896cd87ee9bde15ccd06bd6ca2857985c831dd62a19fbd201601d991e4f5a977af733fdfcea5c70b6029b7096e6404f34fad18d4f922b9085b7cee518a0c7df37810841bcabcc276b4f708d14977a9e8d19c6cadd013eb4866a39ff1ffce14b86f9e11302d28308f1c08f6f9ffa9e6d35f75ad167137ca0d7d3d48a84fdd54dc6c74d4de7d1ae237abae0b40a53b8bd08cf1946a5f3ff54452a6629bad323b20704d26aa8a4956495ddf78821a50799853fdf15614a99c23dd683c8a4036b124cff0f401d8038850b562c96a1983cd074c754d0fc571512880dca9b22617f215e7a0a133512f5e06df8c9ac65e7ca45ea730", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x800}, 0x50)
r1 = socket$kcm(0x2, 0x2, 0x73)
sendmsg$inet(r1, &(0x7f0000000540)={&(0x7f00000000c0)={0x2, 0x4e25}, 0x10, &(0x7f00000004c0)}, 0x14000054)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, @perf_config_ext, 0x2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x8, &(0x7f00000000c0), 0x4)
socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
sendmsg$tipc(r2, 0x0, 0x20050)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002600)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c000140060404000004000031007a46e3988285dcdf12f21308", 0x66}], 0x1}, 0x4004000)
r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r5, 0x0, 0x0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYRESOCT=r3], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xba, &(0x7f00000008c0)=""/186, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r6 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x80, 0xfffffffe, 0x0, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000480)={0x0, r4}, 0x8)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b00))
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0)
socket$kcm(0xa, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYRES64=r6], &(0x7f00000001c0)='syzkaller\x00'}, 0x94)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x4907}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)

1.357611724s ago: executing program 1 (id=4762):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x10, &(0x7f00000015c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1001}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8009}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfff0, 0x4000}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.187370656s ago: executing program 1 (id=4763):
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r0, 0x0, 0x3000c085)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80040, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r1, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x7}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = socket$kcm(0x2, 0x2, 0x73)
sendmsg$inet(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x8001)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x98}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48)

645.473833ms ago: executing program 0 (id=4764):
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3ff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0xd, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001100)=[{0x0}], 0x1}, 0x10000)
r2 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d487277b9b100b4ab50a", @ANYRES32, @ANYRES8=r2], 0xfe33)

620.269663ms ago: executing program 4 (id=4765):
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x1000000000000002, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x5, 0x4, 0x8, 0xb}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000800000085000000b000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x58}, 0x10)
socketpair(0x1, 0x805, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000300000000000000000000001801000020a0702500000000008000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000000400000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000040)=r6, 0x4)
write$cgroup_subtree(r4, 0x0, 0x0)
r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="8510000004000000950080000000000018000000000000000000000000000002950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r7, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r8=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0)
ioctl$TUNSETIFINDEX(r9, 0x400454da, &(0x7f0000000300)=r8)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x9, 0x3, 0x9, 0x5900, r0, 0x7f, '\x00', r8, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0xc}, 0x50)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r10}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r11, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

543.636394ms ago: executing program 2 (id=4766):
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x1c, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000840), 0x8}, 0x10c006, 0xac5d}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x2}, 0x0, 0x0, 0xfffffffd, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0)
socket$kcm(0x11, 0x20000000000000a, 0x300)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xe, 0x0, &(0x7f0000000040)="ffff53f2081e87f89b60160b08ff", 0x0, 0x63, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3f}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff003, 0x66, 0x7f, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x69, 0x10, 0x12}}, &(0x7f0000000480)='GPL\x00'}, 0x80)
r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r4, 0xe0, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', r5, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, r4, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8946, &(0x7f0000000080))
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x356}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0xd0e4, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffa, 0x4, @perf_bp={0x0, 0x6}, 0x19183, 0x1, 0x5, 0xb, 0xa, 0x904813a5, 0x4, 0x0, 0x0, 0x0, 0xffffffffffff0000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
sendmsg$tipc(r7, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000880)="b89d5bcc5690d71b571a979fcca62b1260a6d80781e1907a8d55fb37b6dfc1f085188b24fc4625742c39235cbd20b30c09f5a77a97cbd031b1fe388ffa7a162c61edb2ec2e2e6efaeb09aa473f53d96d24751460a3317ee0535a1333e3d7d359487333da03fb4d3bfb3f3fa73665ed035431a10393cdc18dfbf8e5c9637dbd282e0a64cbe6", 0x85}], 0x1, &(0x7f0000000980)="72345cf5f10e4e3609973feaaeb610ebf314ff262b0aea13", 0x18, 0x804}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_lsm={0x1d, 0x1b, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfaa}, {}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @alu={0x7, 0x0, 0xd, 0x1, 0x3, 0x80, 0x1}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffd}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000440)='syzkaller\x00', 0x10000, 0xffffffffffffff7a, &(0x7f0000000540)=""/61, 0x40f00, 0x20, '\x00', 0x0, 0x1b, r2, 0x8, &(0x7f00000005c0)={0x0, 0x5}, 0xfffffdf8, 0x10, &(0x7f00000006c0)={0x0, 0xa, 0x4, 0x200}, 0x10, r6, 0x0, 0x3, &(0x7f0000000700)=[r1, r1, r0, r1, r1, r1], &(0x7f0000000740)=[{0x0, 0x1, 0xc}, {0x0, 0x2, 0xc}, {0x0, 0x5, 0x3}], 0x10, 0x1}, 0x94)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x6}, 0x10c002, 0x89, 0x0, 0x6, 0x8000000, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000080), &(0x7f0000000240)='%ps    \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r1}, 0x4)

542.509514ms ago: executing program 1 (id=4776):
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r0, 0x0, 0x3000c085)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80040, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r1, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x7}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = socket$kcm(0x2, 0x2, 0x73)
sendmsg$inet(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x8001)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x98}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48)

481.334985ms ago: executing program 3 (id=4767):
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(&(0x7f00000001c0)={0x6, 0x80, 0x4, 0x0, 0xe4, 0x0, 0x0, 0x6, 0x1040, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x9848}, 0x800c, 0x2736, 0x7, 0x8, 0x1, 0x6, 0xb, 0x0, 0x8, 0x0, 0x200}, 0xffffffffffffffff, 0x7, r0, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, r0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x2, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0)
r2 = socket$kcm(0x28, 0x1, 0x0)
setsockopt$sock_attach_bpf(r2, 0x28, 0x3c, 0x0, 0x0)
close(r2)
close(r1)
r3 = socket$kcm(0xa, 0x2, 0x88)
setsockopt$sock_attach_bpf(r3, 0x88, 0xa, &(0x7f0000000000), 0x4)
sendmsg$kcm(r3, &(0x7f0000000280)={&(0x7f00000000c0)=@in6={0xa, 0x4e23, 0x10, @remote, 0x5}, 0x80, 0x0}, 0x40)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xa4, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport}, 0x94)
socketpair(0x22, 0x5, 0x26, 0x0)
bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00', 0x800})
socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080))

389.003956ms ago: executing program 0 (id=4768):
socket$kcm(0xa, 0x3, 0x73)
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0x3, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000fb0000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], 0x0}, 0x94)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x200048cc)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0, 0x8}, 0x21, 0x0, 0x0, 0x4, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe80, 0x602f, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000021000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48)
perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x7, 0xc272}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0x0, 0xffd0}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0x0, 0x10000000}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff99, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x0, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc)
close(r1)
socketpair(0x1, 0x801, 0x0, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001e00)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a118000600014002020a600e41b0000900ac00040211000000160012000a00ff020048035c4c61c1d67f6f94007133cf6efb8000a007a290457f01a7cee4090000001fb7d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de61fccd40dd6e4edef3d93452a9247c47870ae1d092665c07a81ead0f98a952c795c0e9703920723f9000000", 0xcb}], 0x1}, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x5452, 0x0)
close(0xffffffffffffffff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)

334.791107ms ago: executing program 1 (id=4769):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1c0000001e007f109e", 0x2a}, {&(0x7f0000000140)="78cafb73fc02010700000000ef02258f2e440ab8f9e6aaeb1ae2f6e8bcb5ee52dc06b6c9ad11cb5dbc249798093c5102a1bca0b6050000004f6e6b788b3219c233e60ddc36024a99a63e7238fe9f9b06f96137c8af12b6", 0x98}], 0x2}, 0x4000000)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120a0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2b8, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x40305828, &(0x7f0000000340)={'lo\x00', @random="3f2f94c100"})
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0xffffffffffffffff, 0x8, 0x8}, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0xf, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='syzkaller\x00'}, 0x94)
r2 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r2, 0x84, 0xb, &(0x7f0000000000), 0xe)
sendmsg$inet(r2, &(0x7f00000007c0)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000080)="92", 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x158}, 0x40)
close(r2)

266.429637ms ago: executing program 3 (id=4770):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xb6123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xfff, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x1b, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800000075000000000000000500000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000300000085000000cd00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000030000008500000006000000180100002020692500000000002020207b1af8ff00000000bfe79c000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0xfd, &(0x7f0000000100)=""/253, 0x0, 0x4}, 0x23)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00f80ecdb4cb9f207c804a020000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xb6123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xfff, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) (async)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
socket$kcm(0x10, 0x2, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x1b, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800000075000000000000000500000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000300000085000000cd00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000030000008500000006000000180100002020692500000000002020207b1af8ff00000000bfe79c000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0xfd, &(0x7f0000000100)=""/253, 0x0, 0x4}, 0x23) (async)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00f80ecdb4cb9f207c804a020000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) (async)

13.46679ms ago: executing program 0 (id=4771):
r0 = socket$kcm(0x2, 0x1, 0x84)
sendmsg$inet(r0, &(0x7f00000024c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)='U', 0x1}], 0x1}, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, &(0x7f0000000380), 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000fd0000230000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000400)={0x0, r1}, 0x8)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r1, 0x0, 0xe, 0x0, &(0x7f0000000340)="348b4d157b8ab1d21f8218e3c736", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x53, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x1, @perf_config_ext={0x3d95, 0xffffffffffffffff}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x4000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x41)
r3 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x8, 0x56, 0x1, 0x8, 0x0, 0xe42, 0xc0000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000440), 0xc}, 0x8002, 0x2, 0x10001, 0x1, 0x80000000, 0xfff, 0x4, 0x0, 0x3, 0x0, 0x8}, 0xffffffffffffffff, 0x5, r2, 0x9)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, &(0x7f0000000640)=ANY=[@ANYBLOB="050000000000eee56b7f00000000000000000000000000000000000040bde27b4f19f672b8e8a623aebf11ae70c96c883c74e704e6885189a8e786e6ba81c1200474d23dd408db6ce747a2fbe3658411079da0da7dceb922a4e427875a3158f8cac18cc69f6013baab3ad54c9922a2107973f2761ac3126bc929572967eb34ed978478a3cfc47e484177d8a1d311"])
setsockopt$sock_attach_bpf(r0, 0x84, 0x7c, &(0x7f0000000000), 0xc)

0s ago: executing program 1 (id=4772):
r0 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000640)="25b2", 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x6000000000000000)

kernel console output (not intermixed with test programs):

[ T6547] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  570.822112][T13121] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  570.981751][T13267] CPU: 1 PID: 13267 Comm: syz.3.3006 Not tainted syzkaller #0
[  570.989321][T13267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  570.999553][T13267] Call Trace:
[  571.002880][T13267]  <TASK>
[  571.005849][T13267]  dump_stack_lvl+0x188/0x24e
[  571.010591][T13267]  ? cpuset_print_current_mems_allowed+0x1b/0x360
[  571.017069][T13267]  ? show_regs_print_info+0x12/0x12
[  571.022328][T13267]  ? load_image+0x400/0x400
[  571.026893][T13267]  ? cpuset_print_current_mems_allowed+0x1b/0x360
[  571.033375][T13267]  ? cpuset_print_current_mems_allowed+0x2e3/0x360
[  571.039942][T13267]  warn_alloc+0x242/0x330
[  571.044349][T13267]  ? __get_vm_area_node+0x122/0x330
[  571.049654][T13267]  ? zone_watermark_ok_safe+0x270/0x270
[  571.055346][T13267]  ? rcu_is_watching+0x11/0xa0
[  571.060187][T13267]  ? __get_vm_area_node+0x318/0x330
[  571.065448][T13267]  ? __local_bh_enable_ip+0x136/0x1c0
[  571.070879][T13267]  __vmalloc_node_range+0x37c/0x13b0
[  571.076226][T13267]  ? netlink_insert+0x1034/0x13c0
[  571.081324][T13267]  ? free_vm_area+0x50/0x50
[  571.085888][T13267]  ? netlink_sendmsg+0x5ec/0xbd0
[  571.090890][T13267]  vmalloc+0x75/0x80
[  571.094841][T13267]  ? netlink_sendmsg+0x5ec/0xbd0
[  571.099838][T13267]  netlink_sendmsg+0x5ec/0xbd0
[  571.104672][T13267]  ? netlink_getsockopt+0x550/0x550
[  571.109935][T13267]  ? aa_file_perm+0x3ea/0xf00
[  571.114672][T13267]  ? aa_file_perm+0x112/0xf00
[  571.119405][T13267]  ? aa_sock_msg_perm+0x94/0x150
[  571.124400][T13267]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  571.129737][T13267]  ? security_socket_sendmsg+0x7c/0xa0
[  571.135357][T13267]  sock_write_iter+0x2d9/0x3e0
[  571.140169][T13267]  ? sock_read_iter+0x3a0/0x3a0
[  571.145082][T13267]  ? common_file_perm+0x171/0x1c0
[  571.150175][T13267]  vfs_write+0x4b1/0xa30
[  571.154483][T13267]  ? file_end_write+0x250/0x250
[  571.159399][T13267]  ? __fget_files+0x43d/0x4b0
[  571.164144][T13267]  ? __fdget_pos+0x1d4/0x360
[  571.168789][T13267]  ? ksys_write+0x71/0x250
[  571.173264][T13267]  ksys_write+0x14c/0x250
[  571.177654][T13267]  ? __ia32_sys_read+0x80/0x80
[  571.182483][T13267]  ? lockdep_hardirqs_on+0x94/0x140
[  571.187735][T13267]  do_syscall_64+0x4c/0xa0
[  571.192216][T13267]  ? clear_bhb_loop+0x60/0xb0
[  571.196946][T13267]  ? clear_bhb_loop+0x60/0xb0
[  571.201687][T13267]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  571.207633][T13267] RIP: 0033:0x7f4e3b59cdd9
[  571.212096][T13267] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  571.231760][T13267] RSP: 002b:00007f4e3c4bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  571.240226][T13267] RAX: ffffffffffffffda RBX: 00007f4e3b815fa0 RCX: 00007f4e3b59cdd9
[  571.248241][T13267] RDX: 000000000000fe33 RSI: 0000200000000040 RDI: 0000000000000004
[  571.256358][T13267] RBP: 00007f4e3c4bb090 R08: 0000000000000000 R09: 0000000000000000
[  571.264392][T13267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  571.272423][T13267] R13: 00007f4e3b816038 R14: 00007f4e3b815fa0 R15: 00007ffc95616288
[  571.280458][T13267]  </TASK>
[  571.300758][T13270] netlink: 15743 bytes leftover after parsing attributes in process `syz.0.3007'.
[  571.673376][T13267] Mem-Info:
[  571.676595][T13267] active_anon:19600 inactive_anon:0 isolated_anon:0
[  571.676595][T13267]  active_file:20442 inactive_file:40149 isolated_file:0
[  571.676595][T13267]  unevictable:768 dirty:246 writeback:0
[  571.676595][T13267]  slab_reclaimable:21432 slab_unreclaimable:99445
[  571.676595][T13267]  mapped:35962 shmem:7678 pagetables:642
[  571.676595][T13267]  sec_pagetables:0 bounce:0
[  571.676595][T13267]  kernel_misc_reclaimable:0
[  571.676595][T13267]  free:1298051 free_pcp:9988 free_cma:0
[  571.782827][T13267] Node 0 active_anon:79000kB inactive_anon:0kB active_file:81768kB inactive_file:160392kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:144548kB dirty:984kB writeback:0kB shmem:29776kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10096kB pagetables:2568kB sec_pagetables:0kB all_unreclaimable? no
[  571.810372][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  571.868520][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  571.884148][T13121] 8021q: adding VLAN 0 to HW filter on device batadv0
[  571.886057][T13267] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  571.962915][T13267] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  572.008083][T13291] netlink: 'syz.4.3012': attribute type 10 has an invalid length.
[  572.038475][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  572.053803][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  572.107978][T13267] lowmem_reserve[]: 0 2527 2528 2528 2528
[  572.113855][T13267] Node 0 DMA32 free:1276356kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:81740kB inactive_anon:0kB active_file:81768kB inactive_file:160392kB unevictable:1536kB writepending:984kB present:3129332kB managed:2592964kB mlocked:0kB bounce:0kB free_pcp:18856kB local_pcp:1168kB free_cma:0kB
[  572.178460][   T49] Bluetooth: hci1: command 0x0419 tx timeout
[  572.191031][ T6547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  572.254284][ T6547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  572.298380][T13121] device veth0_vlan entered promiscuous mode
[  572.331587][ T6547] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  572.359742][T13267] lowmem_reserve[]: 0 0 1 1 1
[  572.364574][T13267] Node 0 Normal free:12kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:8kB free_cma:0kB
[  572.394252][ T6547] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  572.421456][T13121] device veth1_vlan entered promiscuous mode
[  572.457106][T13267] lowmem_reserve[]: 0 0 0 0 0
[  572.492430][T13295] delete_channel: no stack
[  572.504261][T13267] Node 1 Normal free:3896948kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:20172kB local_pcp:6208kB free_cma:0kB
[  572.521426][T13295] delete_channel: no stack
[  572.549191][ T6547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  572.568979][ T6547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  572.606719][T13121] device veth0_macvtap entered promiscuous mode
[  572.618425][T13267] lowmem_reserve[]: 0 0 0 0 0
[  572.623226][T13267] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  572.664345][T13121] device veth1_macvtap entered promiscuous mode
[  572.678249][T13267] Node 0 DMA32: 3*4kB (UME) 3*8kB (UME) 3*16kB (UME) 571*32kB (M) 1220*64kB (UM) 474*128kB (UM) 124*256kB (UM) 58*512kB (UME) 23*1024kB (UME) 8*2048kB (ME) 247*4096kB (UM) = 1270196kB
[  572.729011][T13121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  572.754812][T13267] Node 0 Normal: 3*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB
[  572.767202][T13121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  572.767295][T13121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  572.825866][T13267] Node 1 Normal: 263*4kB (UME) 55*8kB (UME) 38*16kB (UE) 26*32kB (UME) 16*64kB (UME) 12*128kB (UME) 5*256kB (UME) 2*512kB (ME) 0*1024kB 1*2048kB (E) 949*4096kB (UM) = 3896948kB
[  572.858066][T13267] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  572.868457][T13121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  572.888095][T13267] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  572.907811][T13121] batman_adv: batadv0: Interface activated: batadv_slave_0
[  572.915842][T13267] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  572.936034][ T6549] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  572.943946][T13267] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  572.952663][ T6549] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  572.974312][T13267] 71060 total pagecache pages
[  572.980253][ T6549] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  572.984829][T13267] 0 pages in swap cache
[  573.000596][ T6549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  573.015488][T13267] Free swap  = 124996kB
[  573.020715][T13121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  573.022532][T13267] Total swap = 124996kB
[  573.041243][T13121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  573.053006][T13121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  573.066529][T13267] 2097051 pages RAM
[  573.075707][T13121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  573.077031][T13267] 0 pages HighMem/MovableOnly
[  573.090740][T13121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  573.105169][T13121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  573.116730][T13267] 415209 pages reserved
[  573.135796][T13121] batman_adv: batadv0: Interface activated: batadv_slave_1
[  573.156771][ T6549] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  573.168188][T13267] 0 pages cma reserved
[  573.188947][ T6549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  573.233959][T13121] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  573.258281][T13121] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  573.271686][T13121] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  573.281869][T13121] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  573.434807][ T6549] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  573.475469][ T6549] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  573.537848][ T6549] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  573.572831][ T6548] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  573.612352][ T6548] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  573.637296][ T6547] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  573.726649][T13325] netlink: 'syz.1.3022': attribute type 5 has an invalid length.
[  575.044762][T13347] netlink: 'syz.0.3029': attribute type 3 has an invalid length.
[  575.068151][T13347] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3029'.
[  577.040583][T13402] netlink: 'syz.0.3044': attribute type 21 has an invalid length.
[  577.114341][T13406] FAULT_INJECTION: forcing a failure.
[  577.114341][T13406] name failslab, interval 1, probability 0, space 0, times 0
[  577.168145][T13406] CPU: 1 PID: 13406 Comm: syz.2.3047 Not tainted syzkaller #0
[  577.175707][T13406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  577.185824][T13406] Call Trace:
[  577.189185][T13406]  <TASK>
[  577.192161][T13406]  dump_stack_lvl+0x188/0x24e
[  577.196899][T13406]  ? sctp_sendmsg+0x15b0/0x2940
[  577.201818][T13406]  ? ___sys_sendmsg+0x2a2/0x360
[  577.206730][T13406]  ? show_regs_print_info+0x12/0x12
[  577.211994][T13406]  ? load_image+0x400/0x400
[  577.216568][T13406]  should_fail_ex+0x399/0x4d0
[  577.221304][T13406]  should_failslab+0x5/0x20
[  577.225853][T13406]  slab_pre_alloc_hook+0x59/0x310
[  577.230929][T13406]  ? sctp_add_bind_addr+0x89/0x350
[  577.236102][T13406]  __kmem_cache_alloc_node+0x4f/0x260
[  577.241531][T13406]  ? sctp_add_bind_addr+0x89/0x350
[  577.246791][T13406]  kmalloc_trace+0x26/0xe0
[  577.251268][T13406]  sctp_add_bind_addr+0x89/0x350
[  577.256276][T13406]  sctp_copy_local_addr_list+0x311/0x4e0
[  577.261965][T13406]  ? sctp_copy_local_addr_list+0xa1/0x4e0
[  577.267742][T13406]  ? sctp_do_8_2_transport_strike+0x8a0/0x8a0
[  577.273891][T13406]  ? sctp_v4_is_any+0x31/0x50
[  577.278621][T13406]  ? sctp_copy_one_addr+0x93/0x660
[  577.283775][T13406]  sctp_bind_addr_copy+0xaf/0x3c0
[  577.288839][T13406]  ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190
[  577.295197][T13406]  sctp_connect_new_asoc+0x2f5/0x6a0
[  577.300518][T13406]  ? __sctp_connect+0xd80/0xd80
[  577.305396][T13406]  ? __local_bh_enable_ip+0x136/0x1c0
[  577.310800][T13406]  ? _local_bh_enable+0xa0/0xa0
[  577.315679][T13406]  ? sctp_endpoint_lookup_assoc+0x77/0x260
[  577.321507][T13406]  ? sctp_endpoint_lookup_assoc+0x77/0x260
[  577.327340][T13406]  ? bpf_lsm_sctp_bind_connect+0x5/0x10
[  577.332922][T13406]  ? security_sctp_bind_connect+0x85/0xb0
[  577.338673][T13406]  sctp_sendmsg+0x15b0/0x2940
[  577.343397][T13406]  ? aa_sk_perm+0x771/0x950
[  577.347938][T13406]  ? sctp_getsockopt+0x8a0/0x8a0
[  577.352917][T13406]  ? __might_fault+0xa6/0x120
[  577.357650][T13406]  ? aa_af_perm+0x340/0x340
[  577.362181][T13406]  ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0
[  577.368644][T13406]  ? inet_sendmsg+0x78/0x2f0
[  577.373268][T13406]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  577.378581][T13406]  ? security_socket_sendmsg+0x7c/0xa0
[  577.384081][T13406]  ? inet_send_prepare+0x260/0x260
[  577.389222][T13406]  ____sys_sendmsg+0x5be/0x970
[  577.394034][T13406]  ? __sys_sendmsg_sock+0x30/0x30
[  577.399116][T13406]  ? __import_iovec+0x315/0x500
[  577.404005][T13406]  ? import_iovec+0x6f/0xa0
[  577.408717][T13406]  ___sys_sendmsg+0x2a2/0x360
[  577.413696][T13406]  ? __sys_sendmsg+0x290/0x290
[  577.418520][T13406]  ? __lock_acquire+0x7d10/0x7d10
[  577.423596][T13406]  __se_sys_sendmsg+0x1bb/0x2a0
[  577.428573][T13406]  ? __x64_sys_sendmsg+0x80/0x80
[  577.433556][T13406]  ? lockdep_hardirqs_on+0x94/0x140
[  577.438789][T13406]  do_syscall_64+0x4c/0xa0
[  577.443239][T13406]  ? clear_bhb_loop+0x60/0xb0
[  577.448069][T13406]  ? clear_bhb_loop+0x60/0xb0
[  577.452786][T13406]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  577.458715][T13406] RIP: 0033:0x7f35e639cdd9
[  577.463166][T13406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  577.482803][T13406] RSP: 002b:00007f35e7192028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  577.491273][T13406] RAX: ffffffffffffffda RBX: 00007f35e6615fa0 RCX: 00007f35e639cdd9
[  577.499281][T13406] RDX: 0000000000000480 RSI: 0000200000003480 RDI: 0000000000000003
[  577.507279][T13406] RBP: 00007f35e7192090 R08: 0000000000000000 R09: 0000000000000000
[  577.516059][T13406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  577.524057][T13406] R13: 00007f35e6616038 R14: 00007f35e6615fa0 R15: 00007ffef8743568
[  577.532081][T13406]  </TASK>
[  577.637615][T13402] netlink: 'syz.0.3044': attribute type 6 has an invalid length.
[  577.654896][T13402] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3044'.
[  578.015186][   T49] Bluetooth: hci3: ISO packet for unknown connection handle 7
[  581.587675][T13490] netlink: 'syz.3.3073': attribute type 28 has an invalid length.
[  581.648191][T13490] netlink: 'syz.3.3073': attribute type 29 has an invalid length.
[  581.687581][T13490] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3073'.
[  581.845709][T13495] FAULT_INJECTION: forcing a failure.
[  581.845709][T13495] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  581.892981][T13495] CPU: 0 PID: 13495 Comm: syz.2.3078 Not tainted syzkaller #0
[  581.900534][T13495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  581.910643][T13495] Call Trace:
[  581.913967][T13495]  <TASK>
[  581.916951][T13495]  dump_stack_lvl+0x188/0x24e
[  581.921706][T13495]  ? show_regs_print_info+0x12/0x12
[  581.926969][T13495]  ? load_image+0x400/0x400
[  581.931526][T13495]  ? __lock_acquire+0x7d10/0x7d10
[  581.936587][T13495]  ? __virt_addr_valid+0x188/0x540
[  581.941777][T13495]  should_fail_ex+0x399/0x4d0
[  581.946517][T13495]  _copy_from_user+0x2c/0x170
[  581.951258][T13495]  bpf_test_init+0xde/0x140
[  581.955965][T13495]  bpf_prog_test_run_xdp+0x484/0xf10
[  581.961324][T13495]  ? dev_put+0x80/0x80
[  581.965432][T13495]  ? dev_put+0x80/0x80
[  581.969806][T13495]  bpf_prog_test_run+0x31e/0x390
[  581.974832][T13495]  __sys_bpf+0x62b/0x780
[  581.979152][T13495]  ? bpf_link_show_fdinfo+0x380/0x380
[  581.984611][T13495]  ? lock_chain_count+0x20/0x20
[  581.989543][T13495]  __x64_sys_bpf+0x78/0x90
[  581.994016][T13495]  do_syscall_64+0x4c/0xa0
[  581.998501][T13495]  ? clear_bhb_loop+0x60/0xb0
[  582.003232][T13495]  ? clear_bhb_loop+0x60/0xb0
[  582.007962][T13495]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  582.013916][T13495] RIP: 0033:0x7f35e639cdd9
[  582.018375][T13495] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  582.038036][T13495] RSP: 002b:00007f35e7192028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  582.046511][T13495] RAX: ffffffffffffffda RBX: 00007f35e6615fa0 RCX: 00007f35e639cdd9
[  582.054586][T13495] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[  582.062613][T13495] RBP: 00007f35e7192090 R08: 0000000000000000 R09: 0000000000000000
[  582.070640][T13495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  582.078663][T13495] R13: 00007f35e6616038 R14: 00007f35e6615fa0 R15: 00007ffef8743568
[  582.086705][T13495]  </TASK>
[  582.164628][T13499] netlink: 'syz.4.3077': attribute type 39 has an invalid length.
[  582.451031][T13512] netlink: 'syz.4.3084': attribute type 28 has an invalid length.
[  582.473860][T13512] netlink: 'syz.4.3084': attribute type 3 has an invalid length.
[  582.534266][T13512] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3084'.
[  582.560221][T13517] netlink: 'syz.1.3085': attribute type 10 has an invalid length.
[  582.660459][T13517] team0: Device xfrm0 is of different type
[  583.743084][T12756] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  583.762718][ T4289] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  583.776278][ T4289] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  583.801797][ T4289] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  583.809668][ T4289] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  583.817079][ T4289] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  584.520147][   T47] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  584.746293][   T47] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  584.841304][T13538] chnl_net:caif_netlink_parms(): no params data found
[  584.924504][   T47] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  585.096099][   T47] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  585.414758][T13538] bridge0: port 1(bridge_slave_0) entered blocking state
[  585.471070][T13538] bridge0: port 1(bridge_slave_0) entered disabled state
[  585.536111][T13538] device bridge_slave_0 entered promiscuous mode
[  585.546450][T13538] bridge0: port 2(bridge_slave_1) entered blocking state
[  585.554185][T13538] bridge0: port 2(bridge_slave_1) entered disabled state
[  585.574289][T13538] device bridge_slave_1 entered promiscuous mode
[  585.599769][T13587] netlink: 'syz.2.3105': attribute type 39 has an invalid length.
[  585.730121][T13592] netlink: 'syz.3.3107': attribute type 39 has an invalid length.
[  585.761725][T13538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  585.805700][T13538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  585.938264][   T49] Bluetooth: hci4: command 0x0409 tx timeout
[  586.016440][T13538] team0: Port device team_slave_0 added
[  586.076849][T13538] team0: Port device team_slave_1 added
[  586.163036][   T47] tipc: Left network mode
[  586.198113][T13538] batman_adv: batadv0: Adding interface: batadv_slave_0
[  586.238029][T13538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  586.339761][T13538] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  586.690113][T13606] netlink: 'syz.1.3111': attribute type 27 has an invalid length.
[  586.718228][T13538] batman_adv: batadv0: Adding interface: batadv_slave_1
[  586.725304][T13538] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  586.767154][T13538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  586.890892][T13622] netlink: 'syz.0.3116': attribute type 10 has an invalid length.
[  586.976237][T13538] device hsr_slave_0 entered promiscuous mode
[  587.012856][T13538] device hsr_slave_1 entered promiscuous mode
[  587.058453][T13538] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  587.066114][T13538] Cannot create hsr debugfs directory
[  587.108850][T13622] netlink: 'syz.0.3116': attribute type 6 has an invalid length.
[  587.414110][T13635] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.3119'.
[  588.030905][   T49] Bluetooth: hci4: command 0x041b tx timeout
[  588.098857][T13636] netlink: 'syz.3.3118': attribute type 19 has an invalid length.
[  588.107894][T13636] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3118'.
[  588.638534][T13655] netlink: 'syz.1.3122': attribute type 10 has an invalid length.
[  589.363889][   T47] bond0: (slave wlan1): Releasing backup interface
[  589.383052][T13675] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3131'.
[  589.889896][   T47] device veth1_macvtap left promiscuous mode
[  589.896364][   T47] device veth0_macvtap left promiscuous mode
[  589.939158][   T47] device veth1_vlan left promiscuous mode
[  589.945362][   T47] device veth0_vlan left promiscuous mode
[  590.098252][   T49] Bluetooth: hci4: command 0x040f tx timeout
[  590.114525][T13694] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.3137'.
[  591.202749][T13711] netlink: 'syz.2.3139': attribute type 3 has an invalid length.
[  591.249755][T13711] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3139'.
[  591.561526][   T47] device macvlan0 left promiscuous mode
[  591.599816][   T47] team0 (unregistering): Port device macvlan0 removed
[  592.188305][   T49] Bluetooth: hci4: command 0x0419 tx timeout
[  593.068504][   T47] device team_slave_1 left promiscuous mode
[  593.090726][   T47] team0 (unregistering): Port device team_slave_1 removed
[  593.228999][   T47] device team_slave_0 left promiscuous mode
[  593.273348][   T47] team0 (unregistering): Port device team_slave_0 removed
[  593.401600][   T47] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  593.414441][T13729] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3143'.
[  595.285688][   T47] bond0 (unregistering): Released all slaves
[  595.397262][T13692] netlink: 'syz.1.3136': attribute type 2 has an invalid length.
[  595.415618][T13696] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3136'.
[  595.679633][T13747] netlink: 'syz.3.3148': attribute type 10 has an invalid length.
[  595.690251][T13538] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  595.801671][T13749] netlink: 'syz.0.3149': attribute type 21 has an invalid length.
[  595.842063][T13749] IPv6: NLM_F_CREATE should be specified when creating new route
[  596.043915][T13755] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.3150'.
[  596.268977][T13538] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  596.330548][T13538] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  596.424618][T13538] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  597.982965][ T4335] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  598.078651][T13538] 8021q: adding VLAN 0 to HW filter on device bond0
[  598.198799][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  598.207659][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  598.257002][T13538] 8021q: adding VLAN 0 to HW filter on device team0
[  598.360224][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  598.397532][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  598.435726][ T4299] bridge0: port 1(bridge_slave_0) entered blocking state
[  598.443056][ T4299] bridge0: port 1(bridge_slave_0) entered forwarding state
[  598.541728][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  598.552085][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  598.640318][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  598.670457][ T4299] bridge0: port 2(bridge_slave_1) entered blocking state
[  598.677736][ T4299] bridge0: port 2(bridge_slave_1) entered forwarding state
[  598.721596][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  598.760003][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  598.848516][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  598.872085][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  598.904322][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  598.939548][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  598.969689][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  599.014921][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  599.075630][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  599.121848][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  599.149658][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  599.185667][T13538] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  599.669812][T13789] netlink: 'syz.2.3162': attribute type 29 has an invalid length.
[  599.773496][T13789] netlink: 'syz.2.3162': attribute type 29 has an invalid length.
[  600.135657][T13789] Ÿë
: port 1(gretap0) entered blocking state
[  600.180270][T13789] Ÿë
: port 1(gretap0) entered disabled state
[  600.301960][T13789] device gretap0 entered promiscuous mode
[  600.567668][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  600.599648][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  600.732860][T13796] netlink: 'syz.0.3161': attribute type 3 has an invalid length.
[  600.772751][T13796] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3161'.
[  600.795915][T13538] 8021q: adding VLAN 0 to HW filter on device batadv0
[  610.029939][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  610.063497][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  610.973989][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  611.030601][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  611.094014][T13538] device veth0_vlan entered promiscuous mode
[  611.131531][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  611.166567][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  611.311672][T13538] device veth1_vlan entered promiscuous mode
[  611.610733][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  611.656103][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  611.725168][T13538] device veth0_macvtap entered promiscuous mode
[  611.791307][T13538] device veth1_macvtap entered promiscuous mode
[  611.944290][T13538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  611.997988][T13538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  612.038023][T13538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  612.077983][T13538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  612.118049][T13538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  612.178358][T13538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  612.220469][T13538] batman_adv: batadv0: Interface activated: batadv_slave_0
[  612.234335][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  612.261650][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  612.305971][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  612.369454][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  612.409491][T13538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  612.458178][T13538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  612.494442][T13538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  612.567969][T13538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  612.618161][T13538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  612.653933][T13538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  612.682997][T13538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  612.714265][T13538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  612.760371][T13538] batman_adv: batadv0: Interface activated: batadv_slave_1
[  612.948142][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  612.957503][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  613.102500][T13538] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  613.221757][T13538] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  613.329601][T13538] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  613.394922][T13538] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  615.937116][ T4335] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  615.993453][ T4335] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  616.039219][ T6547] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  616.102262][   T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  616.115994][   T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  616.197425][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  616.624081][T13869] netlink: 'syz.1.3180': attribute type 3 has an invalid length.
[  616.731459][T13873] netlink: 'syz.4.3087': attribute type 3 has an invalid length.
[  616.758159][T13869] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3180'.
[  616.800963][T13873] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3087'.
[  616.999166][T13879] netlink: 'syz.0.3182': attribute type 2 has an invalid length.
[  622.042595][   T49] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  622.052512][   T49] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  622.061518][   T49] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  622.080256][   T49] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  622.088787][   T49] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  622.102728][   T49] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  622.543976][T13927] chnl_net:caif_netlink_parms(): no params data found
[  622.963686][T13940] netlink: 'syz.1.3201': attribute type 27 has an invalid length.
[  623.003463][T13927] bridge0: port 1(bridge_slave_0) entered blocking state
[  623.018506][T13927] bridge0: port 1(bridge_slave_0) entered disabled state
[  623.049547][T13927] device bridge_slave_0 entered promiscuous mode
[  623.105043][T13927] bridge0: port 2(bridge_slave_1) entered blocking state
[  623.127625][T13927] bridge0: port 2(bridge_slave_1) entered disabled state
[  623.157460][T13927] device bridge_slave_1 entered promiscuous mode
[  623.287225][T13927] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  623.324516][T13927] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  623.426746][T13955] netlink: 'syz.2.3204': attribute type 2 has an invalid length.
[  623.487466][T13927] team0: Port device team_slave_0 added
[  623.515390][T13927] team0: Port device team_slave_1 added
[  623.538177][T13954] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.3205'.
[  623.697664][T13927] batman_adv: batadv0: Adding interface: batadv_slave_0
[  623.710744][T13927] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  623.795247][T13927] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  623.822372][T13954] netlink: 'syz.1.3205': attribute type 4 has an invalid length.
[  623.959721][T13927] batman_adv: batadv0: Adding interface: batadv_slave_1
[  623.973430][T13927] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  624.087518][T13927] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  624.178574][ T4289] Bluetooth: hci3: command 0x0409 tx timeout
[  624.444482][T13927] device hsr_slave_0 entered promiscuous mode
[  624.464151][T13927] device hsr_slave_1 entered promiscuous mode
[  624.518679][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  624.525047][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  624.556782][T13927] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  624.605796][T13927] Cannot create hsr debugfs directory
[  624.685144][T13969] netlink: 'syz.2.3209': attribute type 10 has an invalid length.
[  624.787468][T13971] netlink: 'syz.2.3209': attribute type 6 has an invalid length.
[  624.919800][ T6547] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  625.690295][ T6547] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  625.795023][ T6547] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  626.276677][ T4289] Bluetooth: hci3: command 0x041b tx timeout
[  626.772906][ T6547] device netdevsim0 left promiscuous mode
[  626.810191][ T6547] team0: Port device netdevsim0 removed
[  626.838685][ T6547] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  626.912429][T14002] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3221'.
[  626.967767][T14008] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.3223'.
[  627.020612][T14008] netlink: 'syz.0.3223': attribute type 4 has an invalid length.
[  627.325428][T14014] netlink: 'syz.4.3226': attribute type 4 has an invalid length.
[  628.340170][ T4289] Bluetooth: hci3: command 0x040f tx timeout
[  628.756224][T14042] netlink: 'syz.4.3230': attribute type 3 has an invalid length.
[  628.776075][T14042] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3230'.
[  628.983330][ T4335] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  629.576981][T13927] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  629.752852][T13927] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  629.907962][T13927] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  630.025608][T13927] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  630.428016][ T4289] Bluetooth: hci3: command 0x0419 tx timeout
[  630.499796][T13927] 8021q: adding VLAN 0 to HW filter on device bond0
[  630.852022][ T6547] bond0: (slave wlan1): Releasing backup interface
[  630.959322][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  630.989058][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  631.060251][T14095] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3245'.
[  631.062870][T13927] 8021q: adding VLAN 0 to HW filter on device team0
[  631.485251][ T6548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  631.509270][ T6548] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  631.546821][ T6548] bridge0: port 1(bridge_slave_0) entered blocking state
[  631.554148][ T6548] bridge0: port 1(bridge_slave_0) entered forwarding state
[  631.670830][ T6548] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  631.699372][ T6548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  631.732291][ T6548] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  631.765887][ T6548] bridge0: port 2(bridge_slave_1) entered blocking state
[  631.773231][ T6548] bridge0: port 2(bridge_slave_1) entered forwarding state
[  631.818249][ T6547] device hsr_slave_0 left promiscuous mode
[  631.824901][ T6547] device hsr_slave_1 left promiscuous mode
[  631.832999][ T6547] bridge0: port 3(team0) entered disabled state
[  631.847755][ T6547] device bridge_slave_1 left promiscuous mode
[  631.857187][ T6547] bridge0: port 2(bridge_slave_1) entered disabled state
[  631.870226][ T6547] device bridge_slave_0 left promiscuous mode
[  631.882963][ T6547] bridge0: port 1(bridge_slave_0) entered disabled state
[  631.985598][ T6547] device veth1_macvtap left promiscuous mode
[  632.002185][ T6547] device veth0_macvtap left promiscuous mode
[  632.036525][ T6547] device veth1_vlan left promiscuous mode
[  632.058126][ T6547] device veth0_vlan left promiscuous mode
[  633.380905][ T6547] device team_slave_1 left promiscuous mode
[  633.392742][ T6547] team0 (unregistering): Port device team_slave_1 removed
[  633.440946][ T6547] device team_slave_0 left promiscuous mode
[  633.448277][ T6547] team0 (unregistering): Port device team_slave_0 removed
[  633.501924][ T6547] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  633.554411][ T6547] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  633.830564][ T6547] bond0 (unregistering): Released all slaves
[  633.961177][ T6548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  633.970418][ T6548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  633.979716][ T6548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  633.991356][ T6548] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  634.002169][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  634.060621][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  634.097240][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  634.214375][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  634.226816][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  634.263773][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  634.345865][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  634.381946][T13927] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  634.594678][T14155] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.3260'.
[  634.950793][T14169] delete_channel: no stack
[  634.956019][T14169] delete_channel: no stack
[  635.672826][T14190] netlink: 'syz.0.3268': attribute type 1 has an invalid length.
[  635.820665][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  635.858592][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  636.071846][T14196] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.3270'.
[  636.235257][T13927] 8021q: adding VLAN 0 to HW filter on device batadv0
[  636.356266][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  636.379551][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  636.497650][ T6549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  636.519655][ T6549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  636.593584][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  636.622450][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  636.675701][T13927] device veth0_vlan entered promiscuous mode
[  636.890924][T13927] device veth1_vlan entered promiscuous mode
[  636.957648][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  636.987107][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  637.015798][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  637.086676][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  637.134732][T13927] device veth0_macvtap entered promiscuous mode
[  637.166061][T13927] device veth1_macvtap entered promiscuous mode
[  637.258849][T14217] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  637.283846][T14217] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  637.334477][T13927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  637.355416][T13927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  637.386839][T13927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  637.448086][T13927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  637.491866][T13927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  637.507430][T13927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  637.534227][T13927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  637.560613][T13927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  637.586886][T13927] batman_adv: batadv0: Interface activated: batadv_slave_0
[  637.601934][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  637.613727][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  637.629781][T13927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  637.650447][T13927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  637.669495][T13927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  637.707946][T13927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  637.729381][T13927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  637.762545][T13927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  637.800062][T14236] netlink: 'syz.0.3282': attribute type 3 has an invalid length.
[  637.824163][T13927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  637.856097][T14236] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3282'.
[  637.872680][T13927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  637.907950][T13927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  637.929340][T13927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  637.988274][T13927] batman_adv: batadv0: Interface activated: batadv_slave_1
[  640.892125][ T6547] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  640.931538][ T6547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  640.972601][T13927] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  641.002389][T13927] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  641.011271][T13927] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  641.020073][T13927] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  641.338751][ T4299] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  641.346681][ T4299] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  641.373874][T14217] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  641.404762][ T4335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  641.413404][ T4335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  641.447090][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  643.004112][T14298] netlink: 'syz.0.3301': attribute type 3 has an invalid length.
[  643.178380][T14298] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3301'.
[  643.257034][T14292] tipc: Started in network mode
[  643.283946][T14292] tipc: Node identity 9215a268, cluster identity 4711
[  643.328090][T14292] tipc: Node number set to 2450891368
[  643.581739][T14304] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3305'.
[  643.617308][T14304] netlink: 'syz.1.3305': attribute type 25 has an invalid length.
[  643.653422][T14304] netlink: 'syz.1.3305': attribute type 28 has an invalid length.
[  645.183870][T14351] netlink: 'syz.0.3317': attribute type 3 has an invalid length.
[  645.253593][T14351] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3317'.
[  645.839746][   T46] tipc: Left network mode
[  646.013623][T14360] netlink: 'syz.1.3323': attribute type 3 has an invalid length.
[  646.128195][T14360] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3323'.
[  648.111901][T14394] netlink: 'syz.4.3335': attribute type 3 has an invalid length.
[  648.132818][T14394] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3335'.
[  648.777370][   T46] bond0: (slave wlan1): Releasing backup interface
[  650.546890][   T46] device hsr_slave_0 left promiscuous mode
[  650.586029][   T46] device hsr_slave_1 left promiscuous mode
[  650.604061][   T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  650.628310][   T46] batman_adv: batadv0: Removing interface: batadv_slave_1
[  650.654435][   T46] device bridge_slave_1 left promiscuous mode
[  650.672615][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[  650.733310][   T46] device bridge_slave_0 left promiscuous mode
[  650.743836][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[  650.886814][   T46] device veth1_macvtap left promiscuous mode
[  650.920901][   T46] device veth0_macvtap left promiscuous mode
[  650.955527][   T46] device veth1_vlan left promiscuous mode
[  650.984222][   T46] device veth0_vlan left promiscuous mode
[  651.485824][   T46] team0 (unregistering): Port device geneve1 removed
[  651.524817][T14449] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.3358'.
[  652.074401][   T46] team0 (unregistering): Port device macvlan0 removed
[  653.220370][T14472] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3366'.
[  653.484720][   T46] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface
[  653.547579][   T46] team0 (unregistering): Port device team_slave_1 removed
[  653.612098][   T46] team0 (unregistering): Port device team_slave_0 removed
[  653.667750][   T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  653.724645][   T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  653.953267][   T46] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  654.055693][   T46] bond0 (unregistering): Released all slaves
[  654.153765][T14430] netlink: 'syz.3.3349': attribute type 10 has an invalid length.
[  654.174083][T14430] team0: Device xfrm0 is of different type
[  654.208121][T14452] netlink: 'syz.2.3359': attribute type 22 has an invalid length.
[  654.219576][T14465] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3366'.
[  654.240668][T14468] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3366'.
[  654.265204][T14472] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3366'.
[  654.645960][T14486] netlink: 'syz.3.3373': attribute type 27 has an invalid length.
[  654.738780][T14492] cgroup: fork rejected by pids controller in /syz4
[  655.134043][T14504] netlink: 'syz.3.3379': attribute type 39 has an invalid length.
[  656.041110][T14513] netlink: 'syz.0.3383': attribute type 10 has an invalid length.
[  656.165842][T14513] team0: Device xfrm0 is of different type
[  656.362424][T14525] netlink: 'syz.2.3384': attribute type 3 has an invalid length.
[  656.381279][T14525] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3384'.
[  656.404148][T14521] netlink: 'syz.1.3386': attribute type 10 has an invalid length.
[  656.430611][T14524] netlink: 'syz.1.3386': attribute type 6 has an invalid length.
[  656.651082][   T46] tipc: Left network mode
[  657.414728][ T4289] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  657.426481][ T4289] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  657.445618][ T4289] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  657.484476][ T4289] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  657.507063][ T4289] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  657.523969][ T4289] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  657.740835][T14535] netlink: 'syz.2.3390': attribute type 4 has an invalid length.
[  657.926749][T14540] netlink: 'syz.3.3393': attribute type 10 has an invalid length.
[  657.954493][T14540] team0: Device netdevsim0 is up. Set it down before adding it as a team port
[  658.590085][T14557] team0: Device xfrm0 is of different type
[  659.456945][T14564] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3401'.
[  659.475967][T14537] chnl_net:caif_netlink_parms(): no params data found
[  659.619517][   T49] Bluetooth: hci2: command 0x0409 tx timeout
[  659.676988][T14537] bridge0: port 1(bridge_slave_0) entered blocking state
[  659.687977][T14537] bridge0: port 1(bridge_slave_0) entered disabled state
[  659.696571][T14537] device bridge_slave_0 entered promiscuous mode
[  659.710583][T14537] bridge0: port 2(bridge_slave_1) entered blocking state
[  659.717827][T14537] bridge0: port 2(bridge_slave_1) entered disabled state
[  659.727664][T14537] device bridge_slave_1 entered promiscuous mode
[  659.820783][T14537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  659.855317][T14537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  660.055559][T14537] team0: Port device team_slave_0 added
[  660.112855][T14217] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  660.210957][   T46] bond0: (slave wlan1): Releasing backup interface
[  660.235139][T14537] team0: Port device team_slave_1 added
[  660.329797][T14537] batman_adv: batadv0: Adding interface: batadv_slave_0
[  660.348680][T14537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  660.468298][T14537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  661.485088][T14537] batman_adv: batadv0: Adding interface: batadv_slave_1
[  661.497973][T14537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  661.615721][T14537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  661.639642][T14618] validate_nla: 1 callbacks suppressed
[  661.639662][T14618] netlink: 'syz.0.3421': attribute type 10 has an invalid length.
[  661.675103][T14618] bridge0: port 2(bridge_slave_1) entered disabled state
[  661.682737][T14618] bridge0: port 1(bridge_slave_0) entered disabled state
[  661.698399][ T4289] Bluetooth: hci2: command 0x041b tx timeout
[  661.774534][   T46] device bridge_slave_1 left promiscuous mode
[  661.798644][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[  661.807613][   T46] device bridge_slave_0 left promiscuous mode
[  661.825121][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[  662.035340][   T46] device veth1_macvtap left promiscuous mode
[  662.067552][   T46] device veth0_macvtap left promiscuous mode
[  662.099285][   T46] device veth1_vlan left promiscuous mode
[  662.105308][   T46] device veth0_vlan left promiscuous mode
[  662.528278][ T4289] Bluetooth: hci5: command 0x0406 tx timeout
[  663.407514][   T46] team0 (unregistering): Port device macvlan0 removed
[  663.767558][T14646] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.3430'.
[  663.778140][   T49] Bluetooth: hci2: command 0x040f tx timeout
[  663.962656][   T46] team0 (unregistering): Port device team_slave_1 removed
[  664.016807][   T46] team0 (unregistering): Port device team_slave_0 removed
[  664.093628][   T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  664.151325][   T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  664.527779][   T46] bond0 (unregistering): Released all slaves
[  664.794806][T14537] device hsr_slave_0 entered promiscuous mode
[  664.811244][T14537] device hsr_slave_1 entered promiscuous mode
[  665.643216][T14667] delete_channel: no stack
[  665.654628][T14667] delete_channel: no stack
[  665.858251][   T49] Bluetooth: hci2: command 0x0419 tx timeout
[  666.195502][T14537] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  666.345570][T14678] netlink: 'syz.3.3440': attribute type 9 has an invalid length.
[  666.374542][T14678] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.3440'.
[  666.423030][T14537] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  666.543699][T14682] netlink: 'syz.3.3440': attribute type 3 has an invalid length.
[  666.564099][T14682] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3440'.
[  666.620809][T14685] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.3440'.
[  666.650911][T14537] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  666.718463][   T46] tipc: Left network mode
[  666.802065][T14537] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  666.816457][T14691] netlink: 'syz.0.3442': attribute type 3 has an invalid length.
[  666.826232][T14691] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3442'.
[  667.569472][T14537] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  667.592202][T14537] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  668.499378][T14537] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  668.561226][T14537] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  668.792925][T14716] netlink: 'syz.0.3449': attribute type 3 has an invalid length.
[  668.867941][T14716] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3449'.
[  669.069705][T14715] netlink: 35343 bytes leftover after parsing attributes in process `syz.0.3449'.
[  669.105912][T14715] tc_dump_action: action bad kind
[  669.228333][T14537] 8021q: adding VLAN 0 to HW filter on device bond0
[  669.621730][T14620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  669.645070][T14620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  669.684750][T14537] 8021q: adding VLAN 0 to HW filter on device team0
[  669.749255][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  669.761667][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  669.771128][   T47] bridge0: port 1(bridge_slave_0) entered blocking state
[  669.778347][   T47] bridge0: port 1(bridge_slave_0) entered forwarding state
[  669.901019][T14731] netlink: 'syz.1.3456': attribute type 3 has an invalid length.
[  669.945298][T14731] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3456'.
[  670.036107][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  670.050462][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  670.093480][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  670.753664][   T47] bridge0: port 2(bridge_slave_1) entered blocking state
[  670.760928][   T47] bridge0: port 2(bridge_slave_1) entered forwarding state
[  670.804190][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  671.248337][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  671.279400][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  671.329072][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  671.346842][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  671.447542][   T46] device bridge_slave_1 left promiscuous mode
[  671.458279][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[  671.482079][   T46] device bridge_slave_0 left promiscuous mode
[  671.523727][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[  671.647382][   T46] device veth1_macvtap left promiscuous mode
[  671.670577][   T46] device veth0_macvtap left promiscuous mode
[  671.698562][   T46] device veth1_vlan left promiscuous mode
[  671.718391][   T46] device veth0_vlan left promiscuous mode
[  672.768963][T14770] FAULT_INJECTION: forcing a failure.
[  672.768963][T14770] name failslab, interval 1, probability 0, space 0, times 0
[  672.797942][T14770] CPU: 0 PID: 14770 Comm: syz.0.3469 Not tainted syzkaller #0
[  672.805491][T14770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  672.815600][T14770] Call Trace:
[  672.818928][T14770]  <TASK>
[  672.821957][T14770]  dump_stack_lvl+0x188/0x24e
[  672.826701][T14770]  ? sctp_sendmsg+0x15b0/0x2940
[  672.831617][T14770]  ? ___sys_sendmsg+0x2a2/0x360
[  672.836510][T14770]  ? show_regs_print_info+0x12/0x12
[  672.841767][T14770]  ? load_image+0x400/0x400
[  672.846310][T14770]  should_fail_ex+0x399/0x4d0
[  672.851018][T14770]  should_failslab+0x5/0x20
[  672.855542][T14770]  slab_pre_alloc_hook+0x59/0x310
[  672.860686][T14770]  ? sctp_add_bind_addr+0x89/0x350
[  672.865840][T14770]  __kmem_cache_alloc_node+0x4f/0x260
[  672.871244][T14770]  ? sctp_add_bind_addr+0x89/0x350
[  672.876390][T14770]  kmalloc_trace+0x26/0xe0
[  672.880851][T14770]  sctp_add_bind_addr+0x89/0x350
[  672.885827][T14770]  sctp_copy_local_addr_list+0x311/0x4e0
[  672.891505][T14770]  ? sctp_copy_local_addr_list+0xa1/0x4e0
[  672.897256][T14770]  ? sctp_do_8_2_transport_strike+0x8a0/0x8a0
[  672.903359][T14770]  ? sctp_v4_is_any+0x31/0x50
[  672.908073][T14770]  ? sctp_copy_one_addr+0x93/0x660
[  672.913238][T14770]  sctp_bind_addr_copy+0xaf/0x3c0
[  672.918311][T14770]  ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190
[  672.924682][T14770]  sctp_connect_new_asoc+0x2f5/0x6a0
[  672.929999][T14770]  ? __sctp_connect+0xd80/0xd80
[  672.934870][T14770]  ? __local_bh_enable_ip+0x136/0x1c0
[  672.940294][T14770]  ? _local_bh_enable+0xa0/0xa0
[  672.945189][T14770]  ? sctp_endpoint_lookup_assoc+0x77/0x260
[  672.951038][T14770]  ? sctp_endpoint_lookup_assoc+0x77/0x260
[  672.956881][T14770]  ? bpf_lsm_sctp_bind_connect+0x5/0x10
[  672.962457][T14770]  ? security_sctp_bind_connect+0x85/0xb0
[  672.968207][T14770]  sctp_sendmsg+0x15b0/0x2940
[  672.972931][T14770]  ? aa_sk_perm+0x771/0x950
[  672.977463][T14770]  ? sctp_getsockopt+0x8a0/0x8a0
[  672.982455][T14770]  ? __might_fault+0xa6/0x120
[  672.987165][T14770]  ? aa_af_perm+0x340/0x340
[  672.991708][T14770]  ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0
[  672.998261][T14770]  ? inet_sendmsg+0x78/0x2f0
[  673.002879][T14770]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  673.008197][T14770]  ? security_socket_sendmsg+0x7c/0xa0
[  673.013697][T14770]  ? inet_send_prepare+0x260/0x260
[  673.018841][T14770]  ____sys_sendmsg+0x5be/0x970
[  673.023657][T14770]  ? __sys_sendmsg_sock+0x30/0x30
[  673.028733][T14770]  ? __import_iovec+0x315/0x500
[  673.033616][T14770]  ? import_iovec+0x6f/0xa0
[  673.038154][T14770]  ___sys_sendmsg+0x2a2/0x360
[  673.042876][T14770]  ? __sys_sendmsg+0x290/0x290
[  673.047703][T14770]  ? __lock_acquire+0x7d10/0x7d10
[  673.052794][T14770]  __se_sys_sendmsg+0x1bb/0x2a0
[  673.057683][T14770]  ? __x64_sys_sendmsg+0x80/0x80
[  673.062670][T14770]  ? lockdep_hardirqs_on+0x94/0x140
[  673.067913][T14770]  do_syscall_64+0x4c/0xa0
[  673.072364][T14770]  ? clear_bhb_loop+0x60/0xb0
[  673.077078][T14770]  ? clear_bhb_loop+0x60/0xb0
[  673.081792][T14770]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  673.087732][T14770] RIP: 0033:0x7f43c7d9cdd9
[  673.092181][T14770] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  673.111823][T14770] RSP: 002b:00007f43c8c26028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  673.120263][T14770] RAX: ffffffffffffffda RBX: 00007f43c8015fa0 RCX: 00007f43c7d9cdd9
[  673.128269][T14770] RDX: 0000000000000480 RSI: 0000200000003480 RDI: 0000000000000003
[  673.136271][T14770] RBP: 00007f43c8c26090 R08: 0000000000000000 R09: 0000000000000000
[  673.144275][T14770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  673.152275][T14770] R13: 00007f43c8016038 R14: 00007f43c8015fa0 R15: 00007fff3ae7f928
[  673.160295][T14770]  </TASK>
[  674.506711][T14785] netlink: 'syz.1.3473': attribute type 3 has an invalid length.
[  674.557306][T14785] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3473'.
[  674.794436][   T46] team0 (unregistering): Port device team_slave_1 removed
[  674.843023][   T46] team0 (unregistering): Port device team_slave_0 removed
[  674.893804][   T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  674.942583][   T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  675.194623][   T46] bond0 (unregistering): Released all slaves
[  675.312466][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  675.322459][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  675.331460][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  675.341116][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  675.370665][T14620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  675.419250][T14620] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  675.475433][T14537] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  675.557653][T14787] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  676.778281][ T6549] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  676.799510][ T6549] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  676.837586][T14537] 8021q: adding VLAN 0 to HW filter on device batadv0
[  677.789308][ T4289] Bluetooth: hci0: command 0x0406 tx timeout
[  677.841437][T14821] FAULT_INJECTION: forcing a failure.
[  677.841437][T14821] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  677.855291][T14821] CPU: 0 PID: 14821 Comm: syz.2.3485 Not tainted syzkaller #0
[  677.862812][T14821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  677.872917][T14821] Call Trace:
[  677.876236][T14821]  <TASK>
[  677.879195][T14821]  dump_stack_lvl+0x188/0x24e
[  677.883919][T14821]  ? show_regs_print_info+0x12/0x12
[  677.889167][T14821]  ? load_image+0x400/0x400
[  677.893708][T14821]  ? __lock_acquire+0x7d10/0x7d10
[  677.898868][T14821]  ? snprintf+0xe5/0x140
[  677.903141][T14821]  should_fail_ex+0x399/0x4d0
[  677.907859][T14821]  _copy_to_user+0x2c/0x130
[  677.912408][T14821]  simple_read_from_buffer+0xe3/0x150
[  677.917810][T14821]  proc_fail_nth_read+0x1a6/0x220
[  677.922896][T14821]  ? proc_fault_inject_write+0x310/0x310
[  677.928585][T14821]  ? fsnotify_perm+0x248/0x550
[  677.933405][T14821]  ? proc_fault_inject_write+0x310/0x310
[  677.939083][T14821]  vfs_read+0x2de/0xa00
[  677.943292][T14821]  ? kernel_read+0x1e0/0x1e0
[  677.947930][T14821]  ? __fget_files+0x28/0x4b0
[  677.952557][T14821]  ? __fget_files+0x28/0x4b0
[  677.957183][T14821]  ? __fget_files+0x43d/0x4b0
[  677.961960][T14821]  ? __fdget_pos+0x2ae/0x360
[  677.966598][T14821]  ? ksys_read+0x71/0x250
[  677.970974][T14821]  ksys_read+0x14c/0x250
[  677.975285][T14821]  ? vfs_write+0xa30/0xa30
[  677.979754][T14821]  ? syscall_enter_from_user_mode+0x2a/0x80
[  677.985699][T14821]  do_syscall_64+0x4c/0xa0
[  677.990159][T14821]  ? clear_bhb_loop+0x60/0xb0
[  677.994877][T14821]  ? clear_bhb_loop+0x60/0xb0
[  677.999585][T14821]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  678.005511][T14821] RIP: 0033:0x7f35e635d60e
[  678.009973][T14821] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  678.029611][T14821] RSP: 002b:00007f35e7191fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  678.038057][T14821] RAX: ffffffffffffffda RBX: 00007f35e71926c0 RCX: 00007f35e635d60e
[  678.046153][T14821] RDX: 000000000000000f RSI: 00007f35e71920a0 RDI: 000000000000000a
[  678.054242][T14821] RBP: 00007f35e7192090 R08: 0000000000000000 R09: 0000000000000000
[  678.062277][T14821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  678.070272][T14821] R13: 00007f35e6616038 R14: 00007f35e6615fa0 R15: 00007ffef8743568
[  678.078288][T14821]  </TASK>
[  678.961688][ T6548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  678.988441][T14860] netlink: 'syz.2.3497': attribute type 28 has an invalid length.
[  679.004875][ T6548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  679.014666][T14860] netlink: 'syz.2.3497': attribute type 29 has an invalid length.
[  679.049532][T14860] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3497'.
[  679.070244][T14217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  679.100475][T14217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  679.123798][T14537] device veth0_vlan entered promiscuous mode
[  679.139548][T14217] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  679.162957][T14217] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  679.206812][T14537] device veth1_vlan entered promiscuous mode
[  679.430509][ T6548] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  679.452303][ T6548] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  679.489064][ T6548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  679.527251][ T6548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  679.591403][T14537] device veth0_macvtap entered promiscuous mode
[  679.601592][ T6548] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  679.616024][T14537] device veth1_macvtap entered promiscuous mode
[  679.642230][T14537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  679.654342][T14537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  679.674941][T14537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  679.689067][T14537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  679.714284][T14537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  679.731233][T14537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  679.756275][T14537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  679.801855][T14537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  679.853935][T14537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  679.889023][T14537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  679.965727][T14537] batman_adv: batadv0: Interface activated: batadv_slave_0
[  680.009083][T14620] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  680.030035][T14620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  680.085694][T14537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  680.116901][T14537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  680.154487][T14537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  680.203661][T14537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  680.233263][T14537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  680.274250][T14537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  680.318467][T14537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  680.354968][T14537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  680.411279][T14537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  680.460195][T14537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  680.511270][T14537] batman_adv: batadv0: Interface activated: batadv_slave_1
[  680.568458][ T6548] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  680.586121][ T6548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  680.632569][T14537] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  680.670645][T14537] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  680.703108][T14537] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  680.716951][T14537] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  680.996724][T14885] netlink: 'syz.2.3505': attribute type 3 has an invalid length.
[  681.071005][T14885] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3505'.
[  681.097694][ T6548] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  681.123210][ T6548] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  682.043433][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  682.087016][   T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  682.096909][   T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  682.113279][T14217] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  683.313288][T14898] netlink: 'syz.2.3510': attribute type 2 has an invalid length.
[  683.336338][T14901] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3510'.
[  683.451950][T14909] netlink: 'syz.2.3510': attribute type 10 has an invalid length.
[  683.501781][T14909] bridge0: port 2(bridge_slave_1) entered disabled state
[  683.579515][T14909] device bridge_slave_1 left promiscuous mode
[  683.586621][T14909] bridge0: port 2(bridge_slave_1) entered disabled state
[  683.612004][T14909] team0: Port device bridge_slave_1 added
[  683.632177][T14913] netlink: 'syz.0.3512': attribute type 39 has an invalid length.
[  683.691069][T14916] netlink: 'syz.4.3514': attribute type 10 has an invalid length.
[  683.854425][T14916] team0: Device xfrm0 is of different type
[  685.014160][T14938] netlink: 176 bytes leftover after parsing attributes in process `syz.3.3521'.
[  685.156242][T14943] netlink: 'syz.2.3520': attribute type 3 has an invalid length.
[  685.180093][T14943] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3520'.
[  685.640079][T14956] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.3527'.
[  685.725853][T14956] netlink: 'syz.4.3527': attribute type 4 has an invalid length.
[  685.810408][T14953] netlink: 'syz.1.3526': attribute type 2 has an invalid length.
[  686.060341][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  686.066814][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  686.126932][T14953] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3526'.
[  686.250222][T14957] netlink: 'syz.1.3526': attribute type 10 has an invalid length.
[  686.327225][T14957] bridge0: port 2(bridge_slave_1) entered disabled state
[  686.384804][T14957] device bridge_slave_1 left promiscuous mode
[  686.411854][T14957] bridge0: port 2(bridge_slave_1) entered disabled state
[  686.450863][T14957] team0: Port device bridge_slave_1 added
[  688.032824][   T49] Bluetooth: hci1: command 0x0406 tx timeout
[  688.080481][T14997] netlink: 'syz.2.3538': attribute type 3 has an invalid length.
[  688.123445][T14997] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3538'.
[  688.442768][T14987] netlink: 'syz.3.3537': attribute type 27 has an invalid length.
[  688.926118][T15014] netlink: 'syz.3.3544': attribute type 10 has an invalid length.
[  688.958640][T15014] team0: Device xfrm0 is of different type
[  689.025570][T15016] netlink: 'syz.0.3552': attribute type 3 has an invalid length.
[  689.052085][T15016] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3552'.
[  689.800629][T15022] netlink: 'syz.4.3545': attribute type 39 has an invalid length.
[  689.992554][T15028] netlink: 'syz.2.3548': attribute type 39 has an invalid length.
[  690.993846][T15045] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3554'.
[  691.020740][T15044] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.3553'.
[  691.216256][T15037] device syzkaller0 entered promiscuous mode
[  691.365903][T15053] netlink: 'syz.1.3556': attribute type 10 has an invalid length.
[  691.379707][T15055] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3557'.
[  691.390789][T15060] netlink: 'syz.4.3558': attribute type 4 has an invalid length.
[  691.399369][T15061] netlink: 'syz.1.3556': attribute type 6 has an invalid length.
[  692.042356][T15069] netlink: 'syz.3.3560': attribute type 3 has an invalid length.
[  692.064530][T15069] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3560'.
[  695.109221][T15080] netlink: 'syz.1.3564': attribute type 10 has an invalid length.
[  695.127328][T15085] netlink: 'syz.4.3567': attribute type 2 has an invalid length.
[  695.136426][T15087] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3567'.
[  695.330287][T15088] netlink: 'syz.4.3567': attribute type 10 has an invalid length.
[  695.418350][T15088] bridge0: port 2(bridge_slave_1) entered disabled state
[  695.450638][T15088] device bridge_slave_1 left promiscuous mode
[  695.467510][T15088] bridge0: port 2(bridge_slave_1) entered disabled state
[  695.496914][T15088] team0: Port device bridge_slave_1 added
[  696.669554][T15128] netlink: 'syz.2.3581': attribute type 3 has an invalid length.
[  696.686827][T15128] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3581'.
[  698.077363][T15166] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.3596'.
[  698.785550][T15182] netlink: 'syz.0.3599': attribute type 3 has an invalid length.
[  698.801184][T15182] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3599'.
[  699.035823][T15185] delete_channel: no stack
[  699.346652][T15194] device bond_slave_1 entered promiscuous mode
[  699.553933][T15195] device syzkaller0 entered promiscuous mode
[  700.008731][T15215] delete_channel: no stack
[  700.013387][T15215] delete_channel: no stack
[  701.509969][T15226] delete_channel: no stack
[  701.516357][T15226] delete_channel: no stack
[  701.880842][T15232] netlink: 'syz.3.3617': attribute type 3 has an invalid length.
[  701.908171][T15232] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3617'.
[  703.687811][T15237] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3628'.
[  704.982311][T15272] netlink: 'syz.1.3631': attribute type 29 has an invalid length.
[  705.037094][T15272] netlink: 'syz.1.3631': attribute type 29 has an invalid length.
[  705.299385][T15272] netlink: 'syz.1.3631': attribute type 29 has an invalid length.
[  705.558932][T15283] syzkaller1: tun_chr_ioctl cmd 2147767521
[  705.585640][T15283] syzkaller1: tun_chr_ioctl cmd 1074025677
[  705.643606][T15278] netlink: 'syz.4.3632': attribute type 3 has an invalid length.
[  705.654049][T15278] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3632'.
[  705.676123][T15283] syzkaller1: linktype set to 786
[  706.311532][T15299] netlink: 'syz.3.3642': attribute type 5 has an invalid length.
[  706.336904][T15299] netlink: 176 bytes leftover after parsing attributes in process `syz.3.3642'.
[  707.305199][T15310] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app
[  708.390538][T15334] netlink: 'syz.0.3653': attribute type 3 has an invalid length.
[  708.408335][T15334] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3653'.
[  711.108819][T15384] netlink: 'syz.3.3669': attribute type 3 has an invalid length.
[  711.116654][T15384] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3669'.
[  711.179175][T15391] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3672'.
[  711.829640][T15411] FAULT_INJECTION: forcing a failure.
[  711.829640][T15411] name failslab, interval 1, probability 0, space 0, times 0
[  711.912224][T15411] CPU: 0 PID: 15411 Comm: syz.4.3679 Not tainted syzkaller #0
[  711.919961][T15411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  711.930068][T15411] Call Trace:
[  711.933406][T15411]  <TASK>
[  711.936385][T15411]  dump_stack_lvl+0x188/0x24e
[  711.941136][T15411]  ? sctp_sendmsg+0x15b0/0x2940
[  711.946064][T15411]  ? ___sys_sendmsg+0x2a2/0x360
[  711.951000][T15411]  ? show_regs_print_info+0x12/0x12
[  711.956270][T15411]  ? load_image+0x400/0x400
[  711.960839][T15411]  should_fail_ex+0x399/0x4d0
[  711.965573][T15411]  should_failslab+0x5/0x20
[  711.970122][T15411]  slab_pre_alloc_hook+0x59/0x310
[  711.975244][T15411]  ? sctp_add_bind_addr+0x89/0x350
[  711.980433][T15411]  __kmem_cache_alloc_node+0x4f/0x260
[  711.985903][T15411]  ? sctp_add_bind_addr+0x89/0x350
[  711.991089][T15411]  kmalloc_trace+0x26/0xe0
[  711.995573][T15411]  sctp_add_bind_addr+0x89/0x350
[  712.000580][T15411]  sctp_copy_local_addr_list+0x311/0x4e0
[  712.006279][T15411]  ? sctp_copy_local_addr_list+0xa1/0x4e0
[  712.012062][T15411]  ? sctp_do_8_2_transport_strike+0x8a0/0x8a0
[  712.018202][T15411]  ? sctp_v4_is_any+0x31/0x50
[  712.022959][T15411]  ? sctp_copy_one_addr+0x93/0x660
[  712.028141][T15411]  sctp_bind_addr_copy+0xaf/0x3c0
[  712.033232][T15411]  ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190
[  712.039618][T15411]  sctp_connect_new_asoc+0x2f5/0x6a0
[  712.044965][T15411]  ? __sctp_connect+0xd80/0xd80
[  712.049866][T15411]  ? __local_bh_enable_ip+0x136/0x1c0
[  712.055293][T15411]  ? _local_bh_enable+0xa0/0xa0
[  712.060208][T15411]  ? sctp_endpoint_lookup_assoc+0x77/0x260
[  712.066068][T15411]  ? sctp_endpoint_lookup_assoc+0x77/0x260
[  712.071924][T15411]  ? bpf_lsm_sctp_bind_connect+0x5/0x10
[  712.077526][T15411]  ? security_sctp_bind_connect+0x85/0xb0
[  712.083394][T15411]  sctp_sendmsg+0x15b0/0x2940
[  712.088270][T15411]  ? aa_sk_perm+0x771/0x950
[  712.092840][T15411]  ? sctp_getsockopt+0x8a0/0x8a0
[  712.097836][T15411]  ? __might_fault+0xa6/0x120
[  712.102933][T15411]  ? aa_af_perm+0x340/0x340
[  712.107512][T15411]  ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0
[  712.113999][T15411]  ? inet_sendmsg+0x78/0x2f0
[  712.118632][T15411]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  712.123968][T15411]  ? security_socket_sendmsg+0x7c/0xa0
[  712.129521][T15411]  ? inet_send_prepare+0x260/0x260
[  712.134680][T15411]  ____sys_sendmsg+0x5be/0x970
[  712.139527][T15411]  ? __sys_sendmsg_sock+0x30/0x30
[  712.144616][T15411]  ? __import_iovec+0x315/0x500
[  712.149531][T15411]  ? import_iovec+0x6f/0xa0
[  712.154091][T15411]  ___sys_sendmsg+0x2a2/0x360
[  712.159014][T15411]  ? __sys_sendmsg+0x290/0x290
[  712.163874][T15411]  ? __lock_acquire+0x7d10/0x7d10
[  712.168999][T15411]  __se_sys_sendmsg+0x1bb/0x2a0
[  712.173918][T15411]  ? __x64_sys_sendmsg+0x80/0x80
[  712.178933][T15411]  ? lockdep_hardirqs_on+0x94/0x140
[  712.184193][T15411]  do_syscall_64+0x4c/0xa0
[  712.188671][T15411]  ? clear_bhb_loop+0x60/0xb0
[  712.193410][T15411]  ? clear_bhb_loop+0x60/0xb0
[  712.198149][T15411]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  712.204108][T15411] RIP: 0033:0x7f26c9b9cdd9
[  712.208573][T15411] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  712.228319][T15411] RSP: 002b:00007f26ca9c5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  712.236802][T15411] RAX: ffffffffffffffda RBX: 00007f26c9e15fa0 RCX: 00007f26c9b9cdd9
[  712.244836][T15411] RDX: 0000000000000480 RSI: 0000200000003480 RDI: 0000000000000003
[  712.252861][T15411] RBP: 00007f26ca9c5090 R08: 0000000000000000 R09: 0000000000000000
[  712.260880][T15411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  712.268897][T15411] R13: 00007f26c9e16038 R14: 00007f26c9e15fa0 R15: 00007ffcff5dee38
[  712.276942][T15411]  </TASK>
[  712.648727][T15420] netlink: 'syz.1.3681': attribute type 21 has an invalid length.
[  712.691990][T15420] netlink: 'syz.1.3681': attribute type 6 has an invalid length.
[  712.704135][T15420] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3681'.
[  713.332270][T15435] netlink: 'syz.4.3686': attribute type 3 has an invalid length.
[  713.415242][T15435] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3686'.
[  713.892627][T15444] : port 1(ip6gretap0) entered blocking state
[  713.950134][T15444] : port 1(ip6gretap0) entered disabled state
[  713.975709][T15444] device ip6gretap0 entered promiscuous mode
[  713.994136][T15445] device ip6gretap0 left promiscuous mode
[  714.030852][T15445] : port 1(ip6gretap0) entered disabled state
[  714.825121][T15460] device syzkaller0 entered promiscuous mode
[  715.925697][T15468] tipc: Started in network mode
[  715.930821][T15468] tipc: Node identity 9215a268, cluster identity 4711
[  715.961154][T15468] tipc: Node number set to 2450891368
[  716.854199][T15494] netlink: 'syz.4.3704': attribute type 3 has an invalid length.
[  716.863107][T15494] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3704'.
[  719.741550][T15513] device syzkaller0 entered promiscuous mode
[  719.779622][T15510] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487
[  719.882920][T15513] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3711'.
[  719.993583][T15513] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3711'.
[  720.784509][T15541] netlink: 'syz.3.3717': attribute type 3 has an invalid length.
[  720.814049][T15541] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3717'.
[  721.325217][T15556] netlink: 'syz.3.3724': attribute type 3 has an invalid length.
[  721.393279][T15556] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3724'.
[  721.488185][T15539] device syzkaller0 entered promiscuous mode
[  724.051002][T15597] netlink: 'syz.0.3738': attribute type 29 has an invalid length.
[  726.289089][T15568] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3726'.
[  726.299495][T15568] device hsr_slave_0 left promiscuous mode
[  726.323331][T15568] device hsr_slave_1 left promiscuous mode
[  726.429034][T15597] netlink: 'syz.0.3738': attribute type 29 has an invalid length.
[  726.437469][T15598] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3738'.
[  727.690800][T15626] netlink: 'syz.1.3748': attribute type 27 has an invalid length.
[  728.573071][T15644] netlink: 'syz.4.3753': attribute type 4 has an invalid length.
[  729.763838][T15673] netlink: 15743 bytes leftover after parsing attributes in process `syz.1.3762'.
[  730.275244][T15693] netlink: 'syz.3.3770': attribute type 21 has an invalid length.
[  730.298779][T15693] netlink: 'syz.3.3770': attribute type 11 has an invalid length.
[  730.319692][T15695] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3771'.
[  730.356352][T15693] netlink: 'syz.3.3770': attribute type 1 has an invalid length.
[  730.378105][T15693] netlink: 131740 bytes leftover after parsing attributes in process `syz.3.3770'.
[  732.188601][T15735] netlink: 'syz.2.3781': attribute type 10 has an invalid length.
[  732.229284][T15735] netlink: 'syz.2.3781': attribute type 6 has an invalid length.
[  733.451542][T15766] netlink: 'syz.2.3792': attribute type 10 has an invalid length.
[  733.498951][T15766] bridge0: port 1(bridge_slave_0) entered disabled state
[  733.533930][T15761] delete_channel: no stack
[  733.585517][T15761] delete_channel: no stack
[  734.108519][T15782] netlink: 'syz.4.3798': attribute type 21 has an invalid length.
[  734.113393][T15784] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.3799'.
[  734.161722][T15785] netlink: 'syz.4.3798': attribute type 1 has an invalid length.
[  734.167018][T15782] netlink: 'syz.4.3798': attribute type 11 has an invalid length.
[  734.208097][T15785] netlink: 131740 bytes leftover after parsing attributes in process `syz.4.3798'.
[  734.770818][T15797] netlink: 'syz.1.3803': attribute type 10 has an invalid length.
[  735.114183][T15797] team0: Device wg1 is of different type
[  735.966407][T15830] netlink: 'syz.1.3815': attribute type 17 has an invalid length.
[  736.030142][T15830] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3815'.
[  736.923490][T15847] pim6reg: tun_chr_ioctl cmd 1074025677
[  736.929564][T15847] pim6reg: linktype set to 823
[  737.025530][T15852] netlink: 'syz.3.3821': attribute type 5 has an invalid length.
[  737.045845][T15852] netlink: 176 bytes leftover after parsing attributes in process `syz.3.3821'.
[  737.662005][T15860] FAULT_INJECTION: forcing a failure.
[  737.662005][T15860] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  737.715460][T15862] netlink: 'syz.2.3825': attribute type 13 has an invalid length.
[  737.758459][T15860] CPU: 0 PID: 15860 Comm: syz.1.3824 Not tainted syzkaller #0
[  737.766027][T15860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  737.776138][T15860] Call Trace:
[  737.779544][T15860]  <TASK>
[  737.782514][T15860]  dump_stack_lvl+0x188/0x24e
[  737.787249][T15860]  ? show_regs_print_info+0x12/0x12
[  737.792505][T15860]  ? load_image+0x400/0x400
[  737.797055][T15860]  ? __lock_acquire+0x7d10/0x7d10
[  737.802134][T15860]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  737.808350][T15860]  should_fail_ex+0x399/0x4d0
[  737.813075][T15860]  _copy_from_user+0x2c/0x170
[  737.817813][T15860]  __sys_bpf+0x2ea/0x780
[  737.822108][T15860]  ? bpf_link_show_fdinfo+0x380/0x380
[  737.827549][T15860]  ? lock_chain_count+0x20/0x20
[  737.832456][T15860]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  737.838510][T15860]  __x64_sys_bpf+0x78/0x90
[  737.842978][T15860]  do_syscall_64+0x4c/0xa0
[  737.847449][T15860]  ? clear_bhb_loop+0x60/0xb0
[  737.852178][T15860]  ? clear_bhb_loop+0x60/0xb0
[  737.856913][T15860]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  737.862857][T15860] RIP: 0033:0x7f25fd79cdd9
[  737.867324][T15860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  737.886986][T15860] RSP: 002b:00007f25fe6d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  737.895553][T15860] RAX: ffffffffffffffda RBX: 00007f25fda15fa0 RCX: 00007f25fd79cdd9
[  737.903567][T15860] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a
[  737.911587][T15860] RBP: 00007f25fe6d5090 R08: 0000000000000000 R09: 0000000000000000
[  737.920127][T15860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  737.928144][T15860] R13: 00007f25fda16038 R14: 00007f25fda15fa0 R15: 00007ffdc50437c8
[  737.936173][T15860]  </TASK>
[  737.965428][T15862] netlink: 'syz.2.3825': attribute type 14 has an invalid length.
[  738.003601][T15862] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3825'.
[  738.250254][T15867] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3827'.
[  743.758523][T15900] netlink: 'syz.4.3838': attribute type 5 has an invalid length.
[  743.760518][T15899] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[  743.838084][T15899] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[  743.847767][T15899] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  744.337965][ T4289] Bluetooth: hci3: command 0x0406 tx timeout
[  744.433619][T15929] netlink: 'syz.2.3848': attribute type 21 has an invalid length.
[  744.492096][T15929] netlink: 'syz.2.3848': attribute type 11 has an invalid length.
[  745.069688][T15937] netlink: 'syz.4.3850': attribute type 15 has an invalid length.
[  745.077586][T15937] netlink: 'syz.4.3850': attribute type 7 has an invalid length.
[  745.290147][T15937] netlink: 'syz.4.3850': attribute type 10 has an invalid length.
[  745.389060][T15937] netlink: 55 bytes leftover after parsing attributes in process `syz.4.3850'.
[  746.061757][T15963] netlink: 'syz.3.3859': attribute type 28 has an invalid length.
[  746.070783][T15963] netlink: 'syz.3.3859': attribute type 29 has an invalid length.
[  746.116127][T15963] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3859'.
[  747.404749][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  747.411178][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  747.691328][T15977] netlink: 'syz.0.3863': attribute type 28 has an invalid length.
[  747.701790][T15977] netlink: 'syz.0.3863': attribute type 29 has an invalid length.
[  747.709963][T15977] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3863'.
[  748.153776][T15983] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3866'.
[  749.240089][T16008] validate_nla: 1 callbacks suppressed
[  749.240128][T16008] netlink: 'syz.2.3873': attribute type 1 has an invalid length.
[  749.347653][T16008] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.3873'.
[  749.834815][T16027] netlink: 'syz.1.3880': attribute type 15 has an invalid length.
[  749.875551][T16027] netlink: 'syz.1.3880': attribute type 7 has an invalid length.
[  749.940817][T16027] netlink: 'syz.1.3880': attribute type 10 has an invalid length.
[  749.988129][T16027] netlink: 55 bytes leftover after parsing attributes in process `syz.1.3880'.
[  751.604769][T16061] netlink: 'syz.3.3894': attribute type 3 has an invalid length.
[  751.623045][T16061] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3894'.
[  751.944600][T16066] netlink: 'syz.1.3895': attribute type 1 has an invalid length.
[  752.009111][T16066] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.3895'.
[  753.415862][T16100] pimreg: tun_chr_ioctl cmd 1074025694
[  753.905576][T16104] netlink: 'syz.1.3910': attribute type 10 has an invalid length.
[  753.928639][T16104] netlink: 55 bytes leftover after parsing attributes in process `syz.1.3910'.
[  754.649685][T16113] netlink: 'syz.0.3913': attribute type 29 has an invalid length.
[  755.565315][T16121] netlink: 'syz.2.3924': attribute type 29 has an invalid length.
[  755.580011][T16113] netlink: 'syz.0.3913': attribute type 29 has an invalid length.
[  755.829835][T16127] netlink: 'syz.4.3914': attribute type 1 has an invalid length.
[  755.856247][T16127] netlink: 112865 bytes leftover after parsing attributes in process `syz.4.3914'.
[  759.534447][T16121] netlink: 'syz.2.3924': attribute type 29 has an invalid length.
[  759.705270][ T6548] tipc: Left network mode
[  760.003958][T16172] netlink: 'syz.3.3932': attribute type 4 has an invalid length.
[  760.113596][T16170] netlink: 'syz.4.3931': attribute type 27 has an invalid length.
[  760.322690][T16183] netlink: 'syz.3.3936': attribute type 39 has an invalid length.
[  760.525003][T16186] netlink: 14975 bytes leftover after parsing attributes in process `syz.1.3937'.
[  760.778835][T16188] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3938'.
[  761.082983][T16188] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  761.155096][T16188] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  761.200778][T16188] bond0 (unregistering): Released all slaves
[  761.282978][T16192] netlink: 'syz.3.3939': attribute type 10 has an invalid length.
[  761.297434][T16192] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3939'.
[  761.308273][T16192] bridge0: port 3(veth0_vlan) entered blocking state
[  761.315472][T16192] bridge0: port 3(veth0_vlan) entered disabled state
[  761.325495][T16192] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  761.380460][T16194] netlink: 'syz.1.3940': attribute type 10 has an invalid length.
[  761.523034][T16198] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3941'.
[  761.606580][T16204] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.3943'.
[  761.740306][T16200] netlink: 'syz.0.3942': attribute type 1 has an invalid length.
[  761.792124][T16200] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.3942'.
[  763.699194][ T6548] device hsr_slave_0 left promiscuous mode
[  763.812850][ T6548] device hsr_slave_1 left promiscuous mode
[  763.980172][ T6548] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  764.042386][ T6548] batman_adv: batadv0: Removing interface: batadv_slave_0
[  764.636754][ T6548] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  764.680511][ T6548] batman_adv: batadv0: Removing interface: batadv_slave_1
[  764.708998][ T6548] device bridge_slave_1 left promiscuous mode
[  764.715321][ T6548] bridge0: port 2(bridge_slave_1) entered disabled state
[  764.799952][ T6548] device bridge_slave_0 left promiscuous mode
[  764.813201][ T6548] bridge0: port 1(bridge_slave_0) entered disabled state
[  764.920243][ T6548] device veth1_macvtap left promiscuous mode
[  764.930003][ T6548] device veth0_macvtap left promiscuous mode
[  764.944685][T16272] netlink: 14975 bytes leftover after parsing attributes in process `syz.4.3966'.
[  764.972874][ T6548] device veth1_vlan left promiscuous mode
[  764.984288][ T6548] device veth0_vlan left promiscuous mode
[  765.081409][T16274] netlink: 'syz.1.3967': attribute type 29 has an invalid length.
[  766.729201][ T6548] team0 (unregistering): Port device team_slave_1 removed
[  766.792637][ T6548] team0 (unregistering): Port device team_slave_0 removed
[  766.846650][ T6548] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  766.898849][ T6548] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  767.286699][ T6548] bond0 (unregistering): Released all slaves
[  767.392284][T16274] netlink: 'syz.1.3967': attribute type 29 has an invalid length.
[  767.626891][T16283] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.3970'.
[  767.949481][T16293] delete_channel: no stack
[  767.980329][T16297] netlink: 'syz.1.3974': attribute type 3 has an invalid length.
[  768.016653][T16293] delete_channel: no stack
[  768.128377][T16297] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3974'.
[  768.639503][T16304] netlink: 'syz.2.3975': attribute type 3 has an invalid length.
[  768.685417][T16304] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3975'.
[  769.326520][T16324] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.3983'.
[  769.517140][T16329] netlink: 'syz.4.3984': attribute type 5 has an invalid length.
[  769.536146][T16329] netlink: 176 bytes leftover after parsing attributes in process `syz.4.3984'.
[  769.875909][T16352] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3989'.
[  769.945969][T16357] netlink: 'syz.4.3988': attribute type 3 has an invalid length.
[  769.965548][T16357] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3988'.
[  770.448639][T16365] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.3996'.
[  771.201441][T16387] netlink: 'syz.2.4006': attribute type 13 has an invalid length.
[  771.240934][T16387] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4006'.
[  771.280928][T16394] netlink: 'syz.1.4007': attribute type 3 has an invalid length.
[  771.318132][T16394] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4007'.
[  771.385042][T16387] syz_tun: refused to change device tx_queue_len
[  771.414854][T16387] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  772.997390][T16435] netlink: 'syz.0.4019': attribute type 21 has an invalid length.
[  773.074580][T16435] netlink: 'syz.0.4019': attribute type 6 has an invalid length.
[  773.226123][T16435] __nla_validate_parse: 2 callbacks suppressed
[  773.226143][T16435] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4019'.
[  773.278285][T16430] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.4017'.
[  773.542023][T16441] netlink: 'syz.1.4022': attribute type 5 has an invalid length.
[  773.675056][T16448] netlink: 14975 bytes leftover after parsing attributes in process `syz.4.4024'.
[  774.128902][T16464] netlink: 'syz.0.4028': attribute type 3 has an invalid length.
[  774.164224][T16464] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4028'.
[  774.297463][T16468] netlink: 'syz.3.4031': attribute type 3 has an invalid length.
[  774.345031][T16468] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4031'.
[  774.469707][T16477] netlink: 'syz.1.4030': attribute type 3 has an invalid length.
[  774.543018][T16477] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4030'.
[  775.255827][T16491] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4039'.
[  775.298080][T16495] netlink: 'syz.1.4041': attribute type 3 has an invalid length.
[  775.306748][T16495] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4041'.
[  775.656826][T16507] netlink: 'syz.0.4046': attribute type 1 has an invalid length.
[  775.673948][T16507] netlink: 131740 bytes leftover after parsing attributes in process `syz.0.4046'.
[  775.725401][T16512] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4044'.
[  776.923526][T16541] validate_nla: 1 callbacks suppressed
[  776.923545][T16541] netlink: 'syz.0.4052': attribute type 3 has an invalid length.
[  778.356915][T16556] device veth1_macvtap left promiscuous mode
[  778.384466][T16556] device macsec0 entered promiscuous mode
[  778.887777][T16570] netlink: 'syz.2.4066': attribute type 39 has an invalid length.
[  778.941775][T16579] __nla_validate_parse: 3 callbacks suppressed
[  778.941793][T16579] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4068'.
[  779.076176][T16581] netlink: 14975 bytes leftover after parsing attributes in process `syz.3.4067'.
[  780.114240][T16599] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4074'.
[  780.187870][   T49] Bluetooth: hci2: command 0x0406 tx timeout
[  780.875465][T16610] netlink: 'syz.0.4080': attribute type 3 has an invalid length.
[  780.914573][T16610] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4080'.
[  781.106905][T16612] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4081'.
[  781.745687][T16622] device veth1_macvtap left promiscuous mode
[  781.769334][T16622] device macsec0 entered promiscuous mode
[  783.297281][T16658] netlink: 14975 bytes leftover after parsing attributes in process `syz.2.4097'.
[  784.120724][T16671] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.4103'.
[  784.185288][T16671] debugfs: Directory '!!!' with parent 'ieee80211' already present!
[  784.369606][T16682] netlink: 14975 bytes leftover after parsing attributes in process `syz.3.4107'.
[  786.095519][T16712] netlink: 14975 bytes leftover after parsing attributes in process `syz.0.4115'.
[  786.274952][T16714] netlink: 'syz.4.4117': attribute type 4 has an invalid length.
[  786.292541][T16714] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4117'.
[  787.042938][T16726] netlink: 14975 bytes leftover after parsing attributes in process `syz.1.4122'.
[  787.099141][T16724] netlink: 'syz.3.4121': attribute type 4 has an invalid length.
[  787.475681][T16731] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  788.490971][T16746] netlink: 172 bytes leftover after parsing attributes in process `syz.0.4129'.
[  789.857612][T16772] netlink: 14975 bytes leftover after parsing attributes in process `syz.2.4136'.
[  790.100007][T16778] netlink: 'syz.1.4139': attribute type 28 has an invalid length.
[  790.124632][T16780] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4140'.
[  790.246033][T16776] netlink: 'syz.4.4137': attribute type 27 has an invalid length.
[  791.239073][T16803] netlink: 'syz.4.4145': attribute type 3 has an invalid length.
[  791.256266][T16803] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.4145'.
[  791.282834][T16808] netlink: 'syz.1.4147': attribute type 3 has an invalid length.
[  791.292101][T16808] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4147'.
[  792.193561][T16836] netlink: 'syz.0.4158': attribute type 10 has an invalid length.
[  792.441011][T16844] netlink: 14975 bytes leftover after parsing attributes in process `syz.4.4161'.
[  793.939797][T16870] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.4172'.
[  794.006965][T16873] netlink: 'syz.4.4170': attribute type 2 has an invalid length.
[  794.104733][T16873] device 0 entered promiscuous mode
[  794.168559][T16875] netlink: 'syz.0.4173': attribute type 2 has an invalid length.
[  794.527692][T16889] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.4177'.
[  795.002539][T16906] netlink: 'syz.4.4183': attribute type 5 has an invalid length.
[  795.027094][T16906] netlink: 176 bytes leftover after parsing attributes in process `syz.4.4183'.
[  795.290272][T16913] netlink: 'syz.4.4187': attribute type 3 has an invalid length.
[  795.325363][T16913] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.4187'.
[  795.685876][T16928] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.4191'.
[  795.912311][T16935] netlink: 'syz.1.4195': attribute type 3 has an invalid length.
[  795.973409][T16936] netlink: 4079 bytes leftover after parsing attributes in process `syz.1.4195'.
[  796.030401][T16935] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4195'.
[  799.850012][T16963] FAULT_INJECTION: forcing a failure.
[  799.850012][T16963] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  800.008577][T16963] CPU: 1 PID: 16963 Comm: syz.3.4204 Not tainted syzkaller #0
[  800.016241][T16963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  800.026383][T16963] Call Trace:
[  800.029731][T16963]  <TASK>
[  800.032729][T16963]  dump_stack_lvl+0x188/0x24e
[  800.037503][T16963]  ? show_regs_print_info+0x12/0x12
[  800.042788][T16963]  ? load_image+0x400/0x400
[  800.047383][T16963]  ? __lock_acquire+0x7d10/0x7d10
[  800.052608][T16963]  should_fail_ex+0x399/0x4d0
[  800.057381][T16963]  _copy_from_user+0x2c/0x170
[  800.062143][T16963]  kstrtouint_from_user+0xda/0x170
[  800.067352][T16963]  ? kstrtol_from_user+0x190/0x190
[  800.072611][T16963]  proc_fail_nth_write+0x8b/0x200
[  800.077714][T16963]  ? proc_fail_nth_read+0x220/0x220
[  800.083081][T16963]  ? common_file_perm+0x171/0x1c0
[  800.088206][T16963]  ? proc_fail_nth_read+0x220/0x220
[  800.093497][T16963]  vfs_write+0x2e6/0xa30
[  800.097846][T16963]  ? file_end_write+0x250/0x250
[  800.102801][T16963]  ? __fget_files+0x28/0x4b0
[  800.107466][T16963]  ? __fget_files+0x28/0x4b0
[  800.112141][T16963]  ? __fget_files+0x43d/0x4b0
[  800.116949][T16963]  ? __fdget_pos+0x2ae/0x360
[  800.121619][T16963]  ? ksys_write+0x71/0x250
[  800.126132][T16963]  ksys_write+0x14c/0x250
[  800.130557][T16963]  ? __ia32_sys_read+0x80/0x80
[  800.135424][T16963]  ? lockdep_hardirqs_on+0x94/0x140
[  800.140721][T16963]  do_syscall_64+0x4c/0xa0
[  800.145220][T16963]  ? clear_bhb_loop+0x60/0xb0
[  800.149976][T16963]  ? clear_bhb_loop+0x60/0xb0
[  800.154737][T16963]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  800.160714][T16963] RIP: 0033:0x7efd69b5d60e
[  800.165208][T16963] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  800.184896][T16963] RSP: 002b:00007efd6ab0afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  800.193495][T16963] RAX: ffffffffffffffda RBX: 00007efd6ab0b6c0 RCX: 00007efd69b5d60e
[  800.201541][T16963] RDX: 0000000000000001 RSI: 00007efd6ab0b0a0 RDI: 0000000000000004
[  800.209589][T16963] RBP: 00007efd6ab0b090 R08: 0000000000000000 R09: 0000000000000000
[  800.217636][T16963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  800.225677][T16963] R13: 00007efd69e16038 R14: 00007efd69e15fa0 R15: 00007ffd0c7ad498
[  800.233875][T16963]  </TASK>
[  800.244511][T16967] netlink: 'syz.2.4205': attribute type 2 has an invalid length.
[  800.287925][T16967] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4205'.
[  801.786473][T16982] netlink: 144 bytes leftover after parsing attributes in process `syz.4.4209'.
[  802.648927][T17002] netlink: 'syz.1.4219': attribute type 21 has an invalid length.
[  802.714258][T17004] netlink: 15231 bytes leftover after parsing attributes in process `syz.3.4218'.
[  802.789846][T17002] netlink: 'syz.1.4219': attribute type 6 has an invalid length.
[  802.839559][T17002] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4219'.
[  802.927007][T17009] netlink: 'syz.0.4221': attribute type 1 has an invalid length.
[  804.116658][T17043] netlink: 14975 bytes leftover after parsing attributes in process `syz.1.4235'.
[  804.784645][T17066] netlink: 'syz.2.4243': attribute type 4 has an invalid length.
[  805.130002][T17081] netlink: 14975 bytes leftover after parsing attributes in process `syz.0.4250'.
[  805.479211][T17089] netlink: 'syz.3.4252': attribute type 28 has an invalid length.
[  805.509543][T17089] netlink: 'syz.3.4252': attribute type 29 has an invalid length.
[  805.537363][T17089] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4252'.
[  806.273248][T17097] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4256'.
[  807.425533][T17127] netlink: 15231 bytes leftover after parsing attributes in process `syz.3.4266'.
[  807.564663][T17128] netlink: 'syz.1.4267': attribute type 3 has an invalid length.
[  807.584083][T17128] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4267'.
[  807.833181][T17140] delete_channel: no stack
[  807.844224][T17138] netlink: 'syz.3.4271': attribute type 10 has an invalid length.
[  807.846064][T17140] delete_channel: no stack
[  807.890902][T17138] team0: Device xfrm0 is of different type
[  808.827737][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  808.834158][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  809.155262][T17160] netlink: 15231 bytes leftover after parsing attributes in process `syz.2.4279'.
[  809.394566][T17167] netlink: 'syz.0.4282': attribute type 3 has an invalid length.
[  809.417712][T17167] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4282'.
[  809.615529][T17171] netlink: 'syz.4.4285': attribute type 3 has an invalid length.
[  809.632586][T17171] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.4285'.
[  811.051411][T17204] netlink: 15231 bytes leftover after parsing attributes in process `syz.0.4297'.
[  811.574658][T17217] netlink: 'syz.4.4302': attribute type 3 has an invalid length.
[  811.594487][T17217] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.4302'.
[  811.844524][T17224] netlink: 'syz.0.4306': attribute type 3 has an invalid length.
[  811.865725][T17224] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4306'.
[  812.271674][T17243] netlink: 15231 bytes leftover after parsing attributes in process `syz.2.4313'.
[  813.049691][T17252] : port 1(ip6gretap0) entered blocking state
[  813.071274][T17252] : port 1(ip6gretap0) entered disabled state
[  813.163264][T17252] device ip6gretap0 entered promiscuous mode
[  813.650363][T17263] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.4324'.
[  813.691164][T17271] netlink: 'syz.4.4324': attribute type 4 has an invalid length.
[  814.114722][T17284] netlink: 15231 bytes leftover after parsing attributes in process `syz.3.4331'.
[  814.176192][T17288] netlink: 'syz.0.4333': attribute type 4 has an invalid length.
[  815.178444][T17297] netlink: 14719 bytes leftover after parsing attributes in process `syz.2.4336'.
[  817.146542][T17319] netlink: 15231 bytes leftover after parsing attributes in process `syz.2.4344'.
[  817.999461][T17304] netlink: 'syz.0.4339': attribute type 10 has an invalid length.
[  818.007397][T17304] team0: Device netdevsim0 is up. Set it down before adding it as a team port
[  819.239270][T17370] pimreg: tun_chr_ioctl cmd 2147767520
[  819.294167][T17356] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4357'.
[  819.312734][T17356] netlink: 60035 bytes leftover after parsing attributes in process `syz.3.4357'.
[  821.623943][T17397] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.4371'.
[  821.857016][T17407] netlink: 'syz.1.4374': attribute type 5 has an invalid length.
[  821.910077][T17407] netlink: 176 bytes leftover after parsing attributes in process `syz.1.4374'.
[  822.175444][T17414] netlink: 'syz.0.4377': attribute type 10 has an invalid length.
[  822.981530][T17414] team0: Device wg1 is of different type
[  823.445357][T17449] netlink: 'syz.1.4388': attribute type 21 has an invalid length.
[  823.485264][T17449] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4388'.
[  823.509276][T17449] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4388'.
[  824.164259][T17467] delete_channel: no stack
[  824.181807][T17467] delete_channel: no stack
[  824.949369][T17481] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4399'.
[  825.246311][T17485] netlink: 'syz.3.4401': attribute type 3 has an invalid length.
[  825.285606][T17485] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4401'.
[  826.306898][T17517] netlink: 'syz.0.4411': attribute type 21 has an invalid length.
[  826.350137][T17517] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4411'.
[  826.889006][T17536] netlink: 'syz.4.4417': attribute type 21 has an invalid length.
[  826.897643][T17536] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4417'.
[  826.952473][T17536] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4417'.
[  827.003969][T17541] netlink: 'syz.3.4418': attribute type 5 has an invalid length.
[  828.415029][T17576] netlink: 'syz.4.4428': attribute type 3 has an invalid length.
[  828.439753][T17576] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.4428'.
[  828.602238][T17582] netlink: 'syz.3.4430': attribute type 21 has an invalid length.
[  828.658633][T17582] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4430'.
[  828.738919][T17582] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4430'.
[  828.832172][T17570] can: request_module (can-proto-0) failed.
[  830.527171][T17603] netlink: 'syz.1.4437': attribute type 21 has an invalid length.
[  830.912228][T17601] tipc: Started in network mode
[  830.918963][T17601] tipc: Node identity 9215a268, cluster identity 4711
[  830.974959][T17601] tipc: Node number set to 2450891368
[  831.789729][T17624] netlink: 'syz.3.4445': attribute type 21 has an invalid length.
[  831.798863][T17624] netlink: 'syz.3.4445': attribute type 5 has an invalid length.
[  832.603299][T17644] FAULT_INJECTION: forcing a failure.
[  832.603299][T17644] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  832.645107][T17644] CPU: 1 PID: 17644 Comm: syz.4.4452 Not tainted syzkaller #0
[  832.652697][T17644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  832.663072][T17644] Call Trace:
[  832.666403][T17644]  <TASK>
[  832.669411][T17644]  dump_stack_lvl+0x188/0x24e
[  832.674166][T17644]  ? show_regs_print_info+0x12/0x12
[  832.679471][T17644]  ? load_image+0x400/0x400
[  832.684037][T17644]  ? __lock_acquire+0x7d10/0x7d10
[  832.689124][T17644]  ? mark_lock+0x94/0x320
[  832.693522][T17644]  should_fail_ex+0x399/0x4d0
[  832.698256][T17644]  _copy_from_user+0x2c/0x170
[  832.702985][T17644]  kstrtouint_from_user+0xda/0x170
[  832.708147][T17644]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  832.714366][T17644]  ? kstrtol_from_user+0x190/0x190
[  832.719546][T17644]  ? proc_fail_nth_write+0x6b/0x200
[  832.724805][T17644]  proc_fail_nth_write+0x8b/0x200
[  832.729891][T17644]  ? proc_fail_nth_read+0x220/0x220
[  832.735183][T17644]  ? proc_fail_nth_read+0x220/0x220
[  832.740581][T17644]  vfs_write+0x2e6/0xa30
[  832.744910][T17644]  ? file_end_write+0x250/0x250
[  832.749841][T17644]  ? __fget_files+0x28/0x4b0
[  832.754928][T17644]  ? __fget_files+0x28/0x4b0
[  832.759683][T17644]  ? __fget_files+0x43d/0x4b0
[  832.764446][T17644]  ? __fdget_pos+0x2ae/0x360
[  832.769111][T17644]  ? ksys_write+0x71/0x250
[  832.773775][T17644]  ksys_write+0x14c/0x250
[  832.778175][T17644]  ? __ia32_sys_read+0x80/0x80
[  832.783098][T17644]  ? syscall_enter_from_user_mode+0x2a/0x80
[  832.789054][T17644]  do_syscall_64+0x4c/0xa0
[  832.793621][T17644]  ? clear_bhb_loop+0x60/0xb0
[  832.798466][T17644]  ? clear_bhb_loop+0x60/0xb0
[  832.803224][T17644]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  832.809185][T17644] RIP: 0033:0x7f26c9b5d60e
[  832.813652][T17644] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  832.833668][T17644] RSP: 002b:00007f26ca9c4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  832.842278][T17644] RAX: ffffffffffffffda RBX: 00007f26ca9c56c0 RCX: 00007f26c9b5d60e
[  832.850599][T17644] RDX: 0000000000000001 RSI: 00007f26ca9c50a0 RDI: 000000000000000c
[  832.858984][T17644] RBP: 00007f26ca9c5090 R08: 0000000000000000 R09: 0000000000000000
[  832.867379][T17644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  832.875834][T17644] R13: 00007f26c9e16038 R14: 00007f26c9e15fa0 R15: 00007ffcff5dee38
[  832.883877][T17644]  </TASK>
[  833.557376][T17659] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.4456'.
[  833.635470][T17662] netlink: 'syz.1.4455': attribute type 3 has an invalid length.
[  833.648006][T17662] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4455'.
[  834.672842][T17670] netlink: 'syz.0.4459': attribute type 10 has an invalid length.
[  834.716988][T17670] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4459'.
[  834.778264][T17670] device vlan1 entered promiscuous mode
[  834.794224][T17670] batman_adv: batadv0: Adding interface: vlan1
[  834.818734][T17670] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  834.887398][T17670] batman_adv: batadv0: Interface activated: vlan1
[  834.906194][T17670] netlink: 'syz.0.4459': attribute type 10 has an invalid length.
[  834.938591][T17670] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4459'.
[  834.967745][T17670] netlink: 'syz.0.4459': attribute type 10 has an invalid length.
[  834.976187][T17670] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4459'.
[  835.003468][T17670] netlink: 'syz.0.4459': attribute type 10 has an invalid length.
[  835.032153][T17670] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4459'.
[  835.076611][T17670] netlink: 'syz.0.4459': attribute type 10 has an invalid length.
[  835.126258][T17670] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4459'.
[  835.186317][T17670] netlink: 'syz.0.4459': attribute type 10 has an invalid length.
[  835.214838][T17670] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4459'.
[  835.268772][T17670] netlink: 'syz.0.4459': attribute type 10 has an invalid length.
[  835.287066][T17670] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4459'.
[  835.358516][T17670] netlink: 'syz.0.4459': attribute type 10 has an invalid length.
[  835.379307][T17670] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4459'.
[  835.442238][T17670] netlink: 'syz.0.4459': attribute type 10 has an invalid length.
[  835.471517][T17670] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4459'.
[  835.614707][T17691] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4467'.
[  836.266860][T17720] bridge0: port 1(bridge_slave_0) entered forwarding state
[  837.316347][T17737] ÿÿÿÿÿÿ: renamed from vlan1
[  838.560758][T17764] bridge0: port 1(bridge_slave_0) entered forwarding state
[  839.222879][T17795] validate_nla: 7 callbacks suppressed
[  839.222897][T17795] netlink: 'syz.4.4502': attribute type 39 has an invalid length.
[  839.359943][T17797] netlink: 'syz.1.4503': attribute type 3 has an invalid length.
[  840.027386][T17805] __nla_validate_parse: 4 callbacks suppressed
[  840.027426][T17805] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.4508'.
[  840.097667][T17811] netlink: 'syz.2.4510': attribute type 39 has an invalid length.
[  841.111410][T17816] netlink: 'syz.4.4511': attribute type 25 has an invalid length.
[  841.137948][T17816] netlink: 'syz.4.4511': attribute type 1 has an invalid length.
[  841.186813][T17816] bridge0: port 1(bridge_slave_0) entered forwarding state
[  843.718043][T17878] netlink: 'syz.0.4534': attribute type 10 has an invalid length.
[  845.801951][T17915] netlink: 'syz.2.4546': attribute type 5 has an invalid length.
[  845.859149][T17915] netlink: 176 bytes leftover after parsing attributes in process `syz.2.4546'.
[  846.119617][T17925] IPv6: Can't replace route, no match found
[  849.888488][T17989] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.4577'.
[  849.978533][T17989] debugfs: Directory '!!!' with parent 'ieee80211' already present!
[  850.418163][T18009] netlink: 'syz.4.4581': attribute type 21 has an invalid length.
[  850.786165][T18018] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.4582'.
[  850.819629][T18016] netlink: 'syz.0.4592': attribute type 3 has an invalid length.
[  850.827657][T18016] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4592'.
[  852.442279][T18048] netlink: 'syz.0.4594': attribute type 21 has an invalid length.
[  853.561495][T18064] netlink: 'syz.2.4599': attribute type 3 has an invalid length.
[  853.587930][T18064] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4599'.
[  855.459463][T18103] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  856.460144][T18126] netlink: 'syz.4.4616': attribute type 3 has an invalid length.
[  856.542397][T18126] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.4616'.
[  856.671954][T18129] netlink: 'syz.0.4618': attribute type 28 has an invalid length.
[  856.715860][T18129] netlink: 'syz.0.4618': attribute type 29 has an invalid length.
[  856.765144][T18129] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4618'.
[  858.927713][T18163] IPv6: Can't replace route, no match found
[  859.002550][T18170] netlink: 'syz.1.4631': attribute type 21 has an invalid length.
[  859.069571][T18170] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4631'.
[  859.128076][T18170] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4631'.
[  859.275435][T18174] netlink: 'syz.0.4632': attribute type 1 has an invalid length.
[  859.308218][T18174] netlink: 'syz.0.4632': attribute type 4 has an invalid length.
[  859.458013][T18174] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.4632'.
[  859.960631][T18183] netlink: 'syz.3.4637': attribute type 39 has an invalid length.
[  860.525201][T18199] netlink: 'syz.4.4643': attribute type 29 has an invalid length.
[  860.619074][T18202] netlink: 'syz.3.4644': attribute type 3 has an invalid length.
[  860.659393][T18202] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4644'.
[  861.042311][T18210] netlink: 'syz.4.4646': attribute type 3 has an invalid length.
[  861.053737][T18210] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4646'.
[  861.134102][T18204] device syzkaller0 entered promiscuous mode
[  861.162952][T18208] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4647'.
[  861.481698][T18217] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.4650'.
[  864.324740][T18231] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.4653'.
[  864.350692][T18236] netlink: 'syz.2.4657': attribute type 29 has an invalid length.
[  864.672137][T18245] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.4669'.
[  864.749354][T18245] netlink: 'syz.2.4669': attribute type 4 has an invalid length.
[  865.624492][T18262] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.4664'.
[  865.875905][T18273] netlink: 'syz.1.4670': attribute type 29 has an invalid length.
[  866.481341][T18289] netlink: 'syz.4.4675': attribute type 2 has an invalid length.
[  866.504901][T18289] device 1 entered promiscuous mode
[  866.984416][T18302] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.4680'.
[  869.267402][T18309] bridge0: port 2(bridge_slave_1) entered disabled state
[  869.275160][T18309] bridge0: port 1(bridge_slave_0) entered disabled state
[  869.442363][T18318] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4685'.
[  869.625482][T18323] netlink: 'syz.0.4688': attribute type 39 has an invalid length.
[  869.887638][T18330] netlink: 'syz.4.4689': attribute type 3 has an invalid length.
[  869.918685][T18330] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.4689'.
[  870.266485][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  870.272999][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  870.304568][T18340] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.4693'.
[  871.391161][T18376] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.4707'.
[  872.532877][T18409] netlink: 'syz.3.4719': attribute type 2 has an invalid length.
[  872.622604][T18416] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.4722'.
[  872.722722][T18409] device 0 entered promiscuous mode
[  873.090109][T18428] netlink: 14463 bytes leftover after parsing attributes in process `syz.2.4725'.
[  873.179175][T18430] netlink: 154020 bytes leftover after parsing attributes in process `syz.0.4726'.
[  873.200005][T18430] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16)
[  873.254816][T18433] netlink: 'syz.0.4726': attribute type 4 has an invalid length.
[  873.282771][T18433] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4726'.
[  873.534187][T18433] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  873.724116][T18446] netlink: 15999 bytes leftover after parsing attributes in process `syz.4.4734'.
[  873.827590][T18449] netlink: 'syz.3.4733': attribute type 3 has an invalid length.
[  873.898263][T18449] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4733'.
[  875.299830][T18493] __nla_validate_parse: 1 callbacks suppressed
[  875.299849][T18493] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.4750'.
[  876.138446][T18517] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.4760'.
[  876.869094][T18530] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.4764'.
[  877.441718][T18547] ==================================================================
[  877.449859][T18547] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6c9/0x920
[  877.457722][T18547] Write of size 104 at addr ffff888059621310 by task syz.3.4770/18547
[  877.465919][T18547] 
[  877.468283][T18547] CPU: 1 PID: 18547 Comm: syz.3.4770 Not tainted syzkaller #0
[  877.475784][T18547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  877.485884][T18547] Call Trace:
[  877.489197][T18547]  <TASK>
[  877.492167][T18547]  dump_stack_lvl+0x188/0x24e
[  877.496902][T18547]  ? __lock_acquire+0x7d10/0x7d10
[  877.502004][T18547]  ? show_regs_print_info+0x12/0x12
[  877.507273][T18547]  ? load_image+0x400/0x400
[  877.511836][T18547]  ? __virt_addr_valid+0x465/0x540
[  877.517016][T18547]  ? __bpf_get_stackid+0x6c9/0x920
[  877.522180][T18547]  print_report+0xa8/0x210
[  877.526656][T18547]  kasan_report+0x10b/0x140
[  877.531223][T18547]  ? __bpf_get_stackid+0x6c9/0x920
[  877.536394][T18547]  kasan_check_range+0x235/0x290
[  877.541393][T18547]  ? __bpf_get_stackid+0x6c9/0x920
[  877.546567][T18547]  memcpy+0x3c/0x60
[  877.550431][T18547]  __bpf_get_stackid+0x6c9/0x920
[  877.555438][T18547]  bpf_get_stackid_pe+0x33f/0x400
[  877.560530][T18547]  bpf_prog_ceda4e53fcf21ae1+0x28/0x40
[  877.566046][T18547]  bpf_overflow_handler+0x522/0x7c0
[  877.571300][T18547]  ? bpf_overflow_handler+0xd9/0x7c0
[  877.576634][T18547]  ? perf_swevent_overflow+0x230/0x230
[  877.582151][T18547]  ? ct_irq_exit_irqson+0x113/0x170
[  877.587409][T18547]  ? __perf_event_account_interrupt+0x187/0x280
[  877.593722][T18547]  __perf_event_overflow+0x448/0x610
[  877.599073][T18547]  perf_swevent_event+0x315/0x570
[  877.604163][T18547]  ? perf_tp_event+0xc30/0xc30
[  877.608991][T18547]  ___perf_sw_event+0x49e/0x6e0
[  877.613903][T18547]  ? ___perf_sw_event+0x180/0x6e0
[  877.618986][T18547]  ? perf_swevent_put_recursion_context+0xb0/0xb0
[  877.625466][T18547]  ? __lock_acquire+0x13cf/0x7d10
[  877.630587][T18547]  ? verify_lock_unused+0x140/0x140
[  877.635862][T18547]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  877.641905][T18547]  ? lock_chain_count+0x20/0x20
[  877.646822][T18547]  __perf_sw_event+0x135/0x260
[  877.651648][T18547]  do_user_addr_fault+0xaea/0xb10
[  877.656742][T18547]  ? trace_hardirqs_off_finish+0x86/0x180
[  877.662533][T18547]  exc_page_fault+0x60/0x100
[  877.667188][T18547]  asm_exc_page_fault+0x22/0x30
[  877.672096][T18547] RIP: 0010:copy_user_short_string+0x24/0x40
[  877.678137][T18547] Code: 90 90 90 90 90 90 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a 06 <88> 07 48 ff c6 48 ff c7 ff c9 75 f2 31 c0 0f 01 ca c3 8d 14 ca eb
[  877.697879][T18547] RSP: 0018:ffffc9000d83ef88 EFLAGS: 00050206
[  877.704003][T18547] RAX: ffffffff84114b30 RBX: 0000000000000003 RCX: 0000000000000003
[  877.712025][T18547] RDX: 0000000000000003 RSI: ffff8880593d066c RDI: 0000000000000100
[  877.720056][T18547] RBP: 0000000000000000 R08: ffff8880593d066e R09: 1ffff1100b27a0cd
[  877.728085][T18547] R10: dffffc0000000000 R11: ffffed100b27a0ce R12: 00007fffffffeffd
[  877.736110][T18547] R13: 0000000000000003 R14: 0000000000000100 R15: ffff8880593d066c
[  877.744224][T18547]  ? _copy_to_user+0xd0/0x130
[  877.748970][T18547]  _copy_to_user+0xea/0x130
[  877.753547][T18547]  bpf_verifier_vlog+0x172/0x390
[  877.758558][T18547]  verbose+0x1f2/0x2b0
[  877.762683][T18547]  ? check_func_arg_reg_off+0x280/0x280
[  877.768293][T18547]  print_insn_state+0x125/0x1b0
[  877.773203][T18547]  do_check_common+0x5597/0xc6d0
[  877.778228][T18547]  ? push_insn+0x670/0x670
[  877.782698][T18547]  ? check_func_arg_reg_off+0x280/0x280
[  877.788290][T18547]  ? print_verifier_state+0x1fd0/0x1fd0
[  877.793891][T18547]  ? do_check_subprogs+0x345/0x390
[  877.799059][T18547]  bpf_check+0xb08f/0x10db0
[  877.803630][T18547]  ? mark_lock+0x94/0x320
[  877.808019][T18547]  ? mark_lock+0x94/0x320
[  877.812412][T18547]  ? bpf_get_btf_vmlinux+0x10/0x10
[  877.817582][T18547]  ? mark_lock+0x94/0x320
[  877.821973][T18547]  ? __lock_acquire+0x12f4/0x7d10
[  877.827071][T18547]  ? mark_lock+0x94/0x320
[  877.831458][T18547]  ? __lock_acquire+0x13cf/0x7d10
[  877.836565][T18547]  ? verify_lock_unused+0x140/0x140
[  877.841826][T18547]  ? perf_trace_lock+0xf8/0x390
[  877.846731][T18547]  ? trace_event_raw_event_lock+0x250/0x250
[  877.852654][T18547]  ? perf_trace_lock+0xf8/0x390
[  877.857552][T18547]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  877.863586][T18547]  ? lock_chain_count+0x20/0x20
[  877.868493][T18547]  ? seqcount_lockdep_reader_access+0x127/0x1d0
[  877.874790][T18547]  ? lockdep_hardirqs_on+0x94/0x140
[  877.880115][T18547]  ? ktime_get_with_offset+0xff/0x320
[  877.885528][T18547]  ? seqcount_lockdep_reader_access+0x18d/0x1d0
[  877.891805][T18547]  ? ktime_get_real_ts64+0x440/0x440
[  877.897121][T18547]  ? do_raw_spin_unlock+0x11d/0x230
[  877.902349][T18547]  ? __might_fault+0xc2/0x120
[  877.907152][T18547]  ? memset+0x1e/0x40
[  877.911165][T18547]  ? bpf_obj_name_cpy+0x190/0x1d0
[  877.916254][T18547]  bpf_prog_load+0x101a/0x1560
[  877.921079][T18547]  ? map_freeze+0x390/0x390
[  877.925626][T18547]  ? __might_fault+0xa6/0x120
[  877.930337][T18547]  ? __might_fault+0xa6/0x120
[  877.935048][T18547]  ? __might_fault+0xc2/0x120
[  877.939759][T18547]  ? __might_fault+0xa6/0x120
[  877.944473][T18547]  ? bpf_lsm_bpf+0x5/0x10
[  877.948831][T18547]  ? security_bpf+0x7a/0xa0
[  877.953369][T18547]  __sys_bpf+0x5b8/0x780
[  877.957643][T18547]  ? bpf_link_show_fdinfo+0x380/0x380
[  877.963059][T18547]  ? lock_chain_count+0x20/0x20
[  877.967950][T18547]  __x64_sys_bpf+0x78/0x90
[  877.972397][T18547]  do_syscall_64+0x4c/0xa0
[  877.976844][T18547]  ? clear_bhb_loop+0x60/0xb0
[  877.981654][T18547]  ? clear_bhb_loop+0x60/0xb0
[  877.986381][T18547]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  877.992310][T18547] RIP: 0033:0x7efd69b9cdd9
[  877.996759][T18547] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  878.016484][T18547] RSP: 002b:00007efd6ab0b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  878.024938][T18547] RAX: ffffffffffffffda RBX: 00007efd69e15fa0 RCX: 00007efd69b9cdd9
[  878.032942][T18547] RDX: 0000000000000023 RSI: 0000200000000340 RDI: 0000000000000005
[  878.040934][T18547] RBP: 00007efd69c32d69 R08: 0000000000000000 R09: 0000000000000000
[  878.048926][T18547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  878.056921][T18547] R13: 00007efd69e16038 R14: 00007efd69e15fa0 R15: 00007ffd0c7ad498
[  878.064929][T18547]  </TASK>
[  878.067969][T18547] 
[  878.070316][T18547] Allocated by task 18547:
[  878.074833][T18547]  kasan_set_track+0x4b/0x70
[  878.079455][T18547]  __kasan_kmalloc+0x8e/0xa0
[  878.084073][T18547]  __kmalloc_node+0xb0/0x240
[  878.088700][T18547]  bpf_map_area_alloc+0x47/0xe0
[  878.093572][T18547]  prealloc_elems_and_freelist+0x86/0x1c0
[  878.099408][T18547]  stack_map_alloc+0x390/0x520
[  878.104199][T18547]  map_create+0x534/0x1000
[  878.108735][T18547]  __sys_bpf+0x38b/0x780
[  878.113003][T18547]  __x64_sys_bpf+0x78/0x90
[  878.117470][T18547]  do_syscall_64+0x4c/0xa0
[  878.121920][T18547]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  878.127843][T18547] 
[  878.130189][T18547] Last potentially related work creation:
[  878.135916][T18547]  kasan_save_stack+0x3a/0x60
[  878.140624][T18547]  __kasan_record_aux_stack+0xb2/0xc0
[  878.146023][T18547]  call_rcu+0x14f/0x990
[  878.150211][T18547]  __nf_register_net_hook+0x788/0x910
[  878.155610][T18547]  nf_register_net_hook+0xae/0x190
[  878.160750][T18547]  nf_register_net_hooks+0x40/0x1a0
[  878.165975][T18547]  nf_ct_netns_do_get+0x3bc/0x5b0
[  878.171027][T18547]  nf_ct_netns_inet_get+0x1f/0x150
[  878.176162][T18547]  nf_conncount_init+0x123/0x380
[  878.181135][T18547]  ovs_ct_init+0x312/0x480
[  878.185584][T18547]  ovs_init_net+0x1e2/0x240
[  878.190113][T18547]  ops_init+0x355/0x5f0
[  878.194295][T18547]  setup_net+0x4f2/0xbd0
[  878.198566][T18547]  copy_net_ns+0x348/0x5b0
[  878.203016][T18547]  create_new_namespaces+0x3d3/0x6f0
[  878.208325][T18547]  copy_namespaces+0x3b0/0x410
[  878.213113][T18547]  copy_process+0x19c2/0x4030
[  878.217818][T18547]  kernel_clone+0x24b/0x900
[  878.222359][T18547]  __x64_sys_clone+0x1a7/0x220
[  878.227145][T18547]  do_syscall_64+0x4c/0xa0
[  878.231594][T18547]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  878.237518][T18547] 
[  878.239856][T18547] Second to last potentially related work creation:
[  878.246454][T18547]  kasan_save_stack+0x3a/0x60
[  878.251159][T18547]  __kasan_record_aux_stack+0xb2/0xc0
[  878.256565][T18547]  call_rcu+0x14f/0x990
[  878.260758][T18547]  nf_unregister_net_hooks+0xc7/0x130
[  878.266164][T18547]  nf_defrag_ipv4_disable+0x91/0xe0
[  878.271391][T18547]  nf_ct_netns_put+0x2d6/0x510
[  878.276183][T18547]  nf_conncount_destroy+0x3d/0x150
[  878.281324][T18547]  ovs_ct_exit+0x98/0x200
[  878.285691][T18547]  ovs_exit_net+0xe9/0x7a0
[  878.290130][T18547]  cleanup_net+0x706/0xba0
[  878.294574][T18547]  process_one_work+0x8a2/0x1160
[  878.299533][T18547]  worker_thread+0xaa2/0x1270
[  878.304233][T18547]  kthread+0x29d/0x330
[  878.308326][T18547]  ret_from_fork+0x1f/0x30
[  878.312768][T18547] 
[  878.315111][T18547] The buggy address belongs to the object at ffff888059621300
[  878.315111][T18547]  which belongs to the cache kmalloc-cg-64 of size 64
[  878.329275][T18547] The buggy address is located 16 bytes inside of
[  878.329275][T18547]  64-byte region [ffff888059621300, ffff888059621340)
[  878.342397][T18547] 
[  878.344740][T18547] The buggy address belongs to the physical page:
[  878.351179][T18547] page:ffffea0001658840 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888059621580 pfn:0x59621
[  878.362659][T18547] memcg:ffff888078b3ea01
[  878.366915][T18547] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff)
[  878.374483][T18547] raw: 00fff00000000200 ffffea0001771e40 dead000000000005 ffff888017442780
[  878.383088][T18547] raw: ffff888059621580 000000008020001a 00000001ffffffff ffff888078b3ea01
[  878.391687][T18547] page dumped because: kasan: bad access detected
[  878.398128][T18547] page_owner tracks the page as allocated
[  878.403855][T18547] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 47, tgid 47 (kworker/u4:4), ts 303596007719, free_ts 303495924926
[  878.421944][T18547]  post_alloc_hook+0x173/0x1a0
[  878.426784][T18547]  get_page_from_freelist+0x1a1e/0x1ab0
[  878.432369][T18547]  __alloc_pages+0x1ec/0x4f0
[  878.436992][T18547]  alloc_slab_page+0x5d/0x160
[  878.441702][T18547]  new_slab+0x87/0x2c0
[  878.445792][T18547]  ___slab_alloc+0xbc6/0x1240
[  878.450490][T18547]  __kmem_cache_alloc_node+0x1a0/0x260
[  878.455974][T18547]  __kmalloc_node+0xa0/0x240
[  878.460597][T18547]  kvmalloc_node+0x6c/0x180
[  878.465137][T18547]  __nf_hook_entries_try_shrink+0x310/0x6d0
[  878.471053][T18547]  __nf_unregister_net_hook+0x4e1/0x6e0
[  878.476623][T18547]  nf_unregister_net_hooks+0xc7/0x130
[  878.482026][T18547]  nf_ct_netns_put+0x2ce/0x510
[  878.486812][T18547]  nf_conncount_destroy+0x3d/0x150
[  878.491968][T18547]  ovs_ct_exit+0x98/0x200
[  878.496332][T18547]  ovs_exit_net+0xe9/0x7a0
[  878.500773][T18547] page last free stack trace:
[  878.505466][T18547]  free_unref_page_prepare+0x8b4/0x9a0
[  878.510988][T18547]  free_unref_page_list+0xbb/0x8e0
[  878.516125][T18547]  release_pages+0x1fa6/0x2220
[  878.520915][T18547]  tlb_flush_mmu+0x105/0x220
[  878.525534][T18547]  tlb_finish_mmu+0xf5/0x220
[  878.530154][T18547]  exit_mmap+0x384/0x960
[  878.534509][T18547]  __mmput+0x118/0x3c0
[  878.538595][T18547]  exit_mm+0x1fe/0x2d0
[  878.542704][T18547]  do_exit+0x905/0x2480
[  878.546888][T18547]  do_group_exit+0x217/0x2d0
[  878.551507][T18547]  get_signal+0x1272/0x1350
[  878.556053][T18547]  arch_do_signal_or_restart+0xc4/0x1350
[  878.561721][T18547]  exit_to_user_mode_loop+0x70/0x110
[  878.567033][T18547]  exit_to_user_mode_prepare+0xee/0x180
[  878.572604][T18547]  syscall_exit_to_user_mode+0x16/0x40
[  878.578088][T18547]  do_syscall_64+0x58/0xa0
[  878.582536][T18547] 
[  878.584876][T18547] Memory state around the buggy address:
[  878.590551][T18547]  ffff888059621200: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  878.598628][T18547]  ffff888059621280: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc
[  878.606716][T18547] >ffff888059621300: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc
[  878.614796][T18547]                                   ^
[  878.620181][T18547]  ffff888059621380: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  878.628260][T18547]  ffff888059621400: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  878.636338][T18547] ==================================================================
[  878.644426][T18547] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  878.651650][T18547] CPU: 1 PID: 18547 Comm: syz.3.4770 Not tainted syzkaller #0
[  878.659147][T18547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  878.669219][T18547] Call Trace:
[  878.672544][T18547]  <TASK>
[  878.675510][T18547]  dump_stack_lvl+0x188/0x24e
[  878.680229][T18547]  ? memcpy+0x3c/0x60
[  878.684323][T18547]  ? show_regs_print_info+0x12/0x12
[  878.689553][T18547]  ? load_image+0x400/0x400
[  878.694087][T18547]  panic+0x2e5/0x730
[  878.698187][T18547]  ? bpf_jit_dump+0xd0/0xd0
[  878.702718][T18547]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  878.708644][T18547]  ? _raw_spin_unlock+0x40/0x40
[  878.713518][T18547]  ? print_memory_metadata+0x314/0x400
[  878.719011][T18547]  check_panic_on_warn+0x80/0xa0
[  878.723981][T18547]  ? __bpf_get_stackid+0x6c9/0x920
[  878.729118][T18547]  end_report+0x66/0x110
[  878.733387][T18547]  kasan_report+0x118/0x140
[  878.737921][T18547]  ? __bpf_get_stackid+0x6c9/0x920
[  878.743060][T18547]  kasan_check_range+0x235/0x290
[  878.748028][T18547]  ? __bpf_get_stackid+0x6c9/0x920
[  878.753161][T18547]  memcpy+0x3c/0x60
[  878.756988][T18547]  __bpf_get_stackid+0x6c9/0x920
[  878.761951][T18547]  bpf_get_stackid_pe+0x33f/0x400
[  878.767092][T18547]  bpf_prog_ceda4e53fcf21ae1+0x28/0x40
[  878.772665][T18547]  bpf_overflow_handler+0x522/0x7c0
[  878.777892][T18547]  ? bpf_overflow_handler+0xd9/0x7c0
[  878.783202][T18547]  ? perf_swevent_overflow+0x230/0x230
[  878.788686][T18547]  ? ct_irq_exit_irqson+0x113/0x170
[  878.793920][T18547]  ? __perf_event_account_interrupt+0x187/0x280
[  878.800192][T18547]  __perf_event_overflow+0x448/0x610
[  878.805529][T18547]  perf_swevent_event+0x315/0x570
[  878.810584][T18547]  ? perf_tp_event+0xc30/0xc30
[  878.815408][T18547]  ___perf_sw_event+0x49e/0x6e0
[  878.820296][T18547]  ? ___perf_sw_event+0x180/0x6e0
[  878.825348][T18547]  ? perf_swevent_put_recursion_context+0xb0/0xb0
[  878.831793][T18547]  ? __lock_acquire+0x13cf/0x7d10
[  878.836858][T18547]  ? verify_lock_unused+0x140/0x140
[  878.842194][T18547]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  878.848293][T18547]  ? lock_chain_count+0x20/0x20
[  878.853174][T18547]  __perf_sw_event+0x135/0x260
[  878.858008][T18547]  do_user_addr_fault+0xaea/0xb10
[  878.863076][T18547]  ? trace_hardirqs_off_finish+0x86/0x180
[  878.868831][T18547]  exc_page_fault+0x60/0x100
[  878.873446][T18547]  asm_exc_page_fault+0x22/0x30
[  878.878324][T18547] RIP: 0010:copy_user_short_string+0x24/0x40
[  878.884335][T18547] Code: 90 90 90 90 90 90 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a 06 <88> 07 48 ff c6 48 ff c7 ff c9 75 f2 31 c0 0f 01 ca c3 8d 14 ca eb
[  878.903980][T18547] RSP: 0018:ffffc9000d83ef88 EFLAGS: 00050206
[  878.910069][T18547] RAX: ffffffff84114b30 RBX: 0000000000000003 RCX: 0000000000000003
[  878.918069][T18547] RDX: 0000000000000003 RSI: ffff8880593d066c RDI: 0000000000000100
[  878.926060][T18547] RBP: 0000000000000000 R08: ffff8880593d066e R09: 1ffff1100b27a0cd
[  878.934059][T18547] R10: dffffc0000000000 R11: ffffed100b27a0ce R12: 00007fffffffeffd
[  878.942186][T18547] R13: 0000000000000003 R14: 0000000000000100 R15: ffff8880593d066c
[  878.950193][T18547]  ? _copy_to_user+0xd0/0x130
[  878.954914][T18547]  _copy_to_user+0xea/0x130
[  878.959446][T18547]  bpf_verifier_vlog+0x172/0x390
[  878.964421][T18547]  verbose+0x1f2/0x2b0
[  878.968515][T18547]  ? check_func_arg_reg_off+0x280/0x280
[  878.974088][T18547]  print_insn_state+0x125/0x1b0
[  878.978965][T18547]  do_check_common+0x5597/0xc6d0
[  878.983954][T18547]  ? push_insn+0x670/0x670
[  878.988392][T18547]  ? check_func_arg_reg_off+0x280/0x280
[  878.993958][T18547]  ? print_verifier_state+0x1fd0/0x1fd0
[  878.999529][T18547]  ? do_check_subprogs+0x345/0x390
[  879.005269][T18547]  bpf_check+0xb08f/0x10db0
[  879.009799][T18547]  ? mark_lock+0x94/0x320
[  879.014207][T18547]  ? mark_lock+0x94/0x320
[  879.018566][T18547]  ? bpf_get_btf_vmlinux+0x10/0x10
[  879.023698][T18547]  ? mark_lock+0x94/0x320
[  879.028058][T18547]  ? __lock_acquire+0x12f4/0x7d10
[  879.033130][T18547]  ? mark_lock+0x94/0x320
[  879.037496][T18547]  ? __lock_acquire+0x13cf/0x7d10
[  879.042561][T18547]  ? verify_lock_unused+0x140/0x140
[  879.047793][T18547]  ? perf_trace_lock+0xf8/0x390
[  879.052674][T18547]  ? trace_event_raw_event_lock+0x250/0x250
[  879.058596][T18547]  ? perf_trace_lock+0xf8/0x390
[  879.063480][T18547]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  879.069495][T18547]  ? lock_chain_count+0x20/0x20
[  879.074370][T18547]  ? seqcount_lockdep_reader_access+0x127/0x1d0
[  879.080640][T18547]  ? lockdep_hardirqs_on+0x94/0x140
[  879.085861][T18547]  ? ktime_get_with_offset+0xff/0x320
[  879.091262][T18547]  ? seqcount_lockdep_reader_access+0x18d/0x1d0
[  879.097531][T18547]  ? ktime_get_real_ts64+0x440/0x440
[  879.102850][T18547]  ? do_raw_spin_unlock+0x11d/0x230
[  879.108072][T18547]  ? __might_fault+0xc2/0x120
[  879.112774][T18547]  ? memset+0x1e/0x40
[  879.116777][T18547]  ? bpf_obj_name_cpy+0x190/0x1d0
[  879.121839][T18547]  bpf_prog_load+0x101a/0x1560
[  879.126644][T18547]  ? map_freeze+0x390/0x390
[  879.131172][T18547]  ? __might_fault+0xa6/0x120
[  879.135881][T18547]  ? __might_fault+0xa6/0x120
[  879.140581][T18547]  ? __might_fault+0xc2/0x120
[  879.145276][T18547]  ? __might_fault+0xa6/0x120
[  879.149980][T18547]  ? bpf_lsm_bpf+0x5/0x10
[  879.154336][T18547]  ? security_bpf+0x7a/0xa0
[  879.158862][T18547]  __sys_bpf+0x5b8/0x780
[  879.163140][T18547]  ? bpf_link_show_fdinfo+0x380/0x380
[  879.168559][T18547]  ? lock_chain_count+0x20/0x20
[  879.173469][T18547]  __x64_sys_bpf+0x78/0x90
[  879.177913][T18547]  do_syscall_64+0x4c/0xa0
[  879.182451][T18547]  ? clear_bhb_loop+0x60/0xb0
[  879.187185][T18547]  ? clear_bhb_loop+0x60/0xb0
[  879.191894][T18547]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  879.197834][T18547] RIP: 0033:0x7efd69b9cdd9
[  879.202275][T18547] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  879.221902][T18547] RSP: 002b:00007efd6ab0b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  879.230348][T18547] RAX: ffffffffffffffda RBX: 00007efd69e15fa0 RCX: 00007efd69b9cdd9
[  879.238432][T18547] RDX: 0000000000000023 RSI: 0000200000000340 RDI: 0000000000000005
[  879.246426][T18547] RBP: 00007efd69c32d69 R08: 0000000000000000 R09: 0000000000000000
[  879.254420][T18547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  879.262419][T18547] R13: 00007efd69e16038 R14: 00007efd69e15fa0 R15: 00007ffd0c7ad498
[  879.270422][T18547]  </TASK>
[  879.274025][T18547] Kernel Offset: disabled
[  879.278371][T18547] Rebooting in 86400 seconds..