last executing test programs:

5.479589443s ago: executing program 2 (id=2671):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x1ff)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0)
r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20006, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1000d7, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000240)='a\x00')
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000000000000000000000000000000000000184380da4535c4cbd9b50de24dec268420b00ed98c1caa76", @ANYBLOB="0200000003000000020000000a00"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0xe, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000400), 0x8, 0x10, &(0x7f0000000440), 0x10}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1008d2}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0xfffffffffffffff8}]}, &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

5.325266239s ago: executing program 2 (id=2672):
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffd6d}, 0xfe)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x275a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000001a80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
openat$tun(0xffffffffffffff9c, &(0x7f0000001ac0), 0x1c1842, 0x0) (async)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001ac0), 0x1c1842, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x140)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x4020940d, 0x0) (async)
ioctl$SIOCSIFHWADDR(r2, 0x4020940d, 0x0)
r3 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r3, 0x0, 0x2000481c)
sendmsg$sock(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0}, 0x4000081)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001b40)={'syzkaller0\x00', 0x7101}) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001b40)={'syzkaller0\x00', 0x7101})
write$cgroup_devices(r0, &(0x7f0000001b80)=ANY=[@ANYRES8=r0, @ANYRES16=r0, @ANYRES32], 0xffdd)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a11800152c280014", 0x1f}], 0x1}, 0x0) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a11800152c280014", 0x1f}], 0x1}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300))
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={<r4=>0xffffffffffffffff})
recvmsg(r4, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x10001)
r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f0000000640)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) (async)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0xc, &(0x7f0000000900)=ANY=[], &(0x7f0000001bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000001c00)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0xb}, 0x1c1c0, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000001c00)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0xb}, 0x1c1c0, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

5.140364418s ago: executing program 3 (id=2673):
r0 = socket$kcm(0x10, 0x5, 0x10)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x22010, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x37fb9f24, 0x40000}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x22, 0x0, &(0x7f00000003c0)="001122334455001122334456080045000028000000004006f8ce030000000a000002", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b15d25a806c8c6394f90324fc60100000000a000200053582c137153e37000c0a80fc0b1000f835", 0x33fe0}], 0x1}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0)
r3 = syz_clone(0x20900000, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$cgroup_procs(r4, &(0x7f00000006c0)='cgroup.procs\x00', 0x2, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001700)={r3, 0xffffffffffffffff, 0x0, 0x1b, &(0x7f0000001740)='/proc/t/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee\x00\x00'}, 0x30)
perf_event_open(&(0x7f0000001780)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x6, 0x5, &(0x7f00000018c0)=ANY=[@ANYBLOB="18020000fbffffff0000000000000000850000002c000000850000002300000095"], &(0x7f0000001900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001940)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000019c0)={0x3, 0x8, &(0x7f0000001a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32, @ANYBLOB="0000000081000000b703000023000000850000000d000000b70000000000000095"], &(0x7f0000001ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000001b00)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x404, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001b80)={0x0, 0x0, 0x26}, 0x28)
socket$kcm(0x2, 0x2, 0x73)
perf_event_open(&(0x7f0000001bc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001c40)={&(0x7f0000001c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @multicast1}, 0x2}}, 0x80, 0x0}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001d00)={&(0x7f0000001d40)=ANY=[@ANYBLOB="9feb010018000000000000000c0000"], 0x0, 0x29, 0x0, 0x1, 0x2}, 0x28)
r6 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r6, &(0x7f0000001d80)=ANY=[@ANYBLOB="1cc300005e0007"], 0xfe33)
socket$kcm(0xf, 0x3, 0x2)
socket$kcm(0xf, 0x3, 0x2)
socket$kcm(0x11, 0x200000000000002, 0x300)
r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001dc0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001e00)={0x3, 0x8, &(0x7f0000001ec0)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000001f00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001f40)={r8, 0x86dd, 0x12, 0x0, &(0x7f0000001fc0)="c1dfb080cd21d308098ee6888035", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

4.771146785s ago: executing program 1 (id=2674):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd040, 0x10000}, 0x14403, 0xfffc, 0x0, 0x5, 0x582, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0x5, 0xffffffffffffffff, 0x2)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28)
r4 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
socketpair(0x1f, 0x800, 0x5, &(0x7f0000000600))
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0100000004000000080000000100000001000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="010000000300000000000000000000000000000000000000001c874333bca0e3e49078974abac1e015e8b8256ae711bafa16dab9304fca4e2be9deccb0"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380), &(0x7f00000003c0), 0x4, r6, 0x4}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x16c5, r6}, 0x38)
r7 = socket$kcm(0xa, 0x2, 0x88)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240), 0x200002, 0x0)
r9 = openat$cgroup_devices(r8, &(0x7f0000000440)='devices.allow\x00', 0x2, 0x0)
close(r2)
write$cgroup_devices(r9, &(0x7f0000000640)=ANY=[@ANYBLOB='b *:4\tw', @ANYRES8=r8], 0xa)
sendmsg$kcm(r7, &(0x7f0000000480)={&(0x7f0000000a40)=@in6={0xa, 0x4e23, 0x4411, @local, 0x4}, 0x80, 0x0}, 0x40814)

2.036671053s ago: executing program 0 (id=2676):
r0 = socket$kcm(0x2, 0x922000000001, 0x106)
setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000040), 0xff7b)
close(r0)

2.036067853s ago: executing program 3 (id=2677):
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x15}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r3, 0x27, 0x3f, 0x0, &(0x7f0000000d00)="f8ad1dcc02cb29dcc8003200810066a286dd", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)
setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000009c0)=r2, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x3, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r4 = socket$kcm(0x10, 0x3, 0x10)
r5 = socket$kcm(0x2, 0x3, 0x2)
ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, 0x0)
r6 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x29, 0x1, 0x4, 0x0, 0x0, 0xb, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7a, 0x2, @perf_config_ext={0x80000000, 0x7fffffff}, 0x400, 0x32, 0x43a1bd74, 0x7, 0x5, 0x5, 0x2, 0x0, 0x2, 0x0, 0x2008}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r7 = perf_event_open(&(0x7f0000000d40)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x5, 0x5, &(0x7f0000000e80)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000ec0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8)
socketpair(0x6, 0x3, 0x1, &(0x7f0000000f00))
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x16, 0xc, &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000380), 0x4)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r9 = socket$kcm(0x10, 0x2, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000440)={'pim6reg\x00', 0x1})
r10 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
close(0xffffffffffffffff)
sendmsg$inet(r10, &(0x7f0000000480)={&(0x7f00000004c0)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000680)='0', 0x1}], 0x1}, 0x54f4e10222cdd2ec)
sendmsg$inet(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000740)="ea", 0x1}], 0x1}, 0x40)
setsockopt$sock_attach_bpf(r10, 0x84, 0x19, &(0x7f0000000780), 0x8)
sendmsg$kcm(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000840)="2e000000120081a2040f46ecdb4cb9d8a7480ef410000000e3bd6e00000000000b0029002d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0)
sendmsg$kcm(r4, &(0x7f0000000880)={0x0, 0xd18c9b25, &(0x7f00000008c0)=[{&(0x7f0000000900)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c188001ac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0)

2.034687093s ago: executing program 2 (id=2678):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28)
r2 = perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x108b84, 0x4, 0x10, 0x1, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0x5, &(0x7f0000000900)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000540)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b703000000000000a500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r4, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(0x3)
bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0)
close(0x3)

1.976644569s ago: executing program 1 (id=2679):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r1}, &(0x7f0000000a00), &(0x7f0000000a40)=r0}, 0x20)
recvmsg$unix(r0, 0x0, 0x2001)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
socket$kcm(0x11, 0xa, 0x300)
perf_event_open(&(0x7f0000002080)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r3, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0f000000040000"], 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000004c0)=ANY=[], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r4, <r5=>0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r6 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x2, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x1, 0x7, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000980)={r5, 0x58, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r8=>0x0}}, 0x10)
ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f00000009c0)=r8)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffc)

1.932489203s ago: executing program 0 (id=2680):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x1ff)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0)
r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20006, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1000d7, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000240)='a\x00')
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000000000000000000000000000000000000184380da4535c4cbd9b50de24dec268420b00ed98c1caa76", @ANYBLOB="0200000003000000020000000a00"], 0x50)
socket$kcm(0x2, 0x3, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1008d2}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0xfffffffffffffff8}]}, &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.856916611s ago: executing program 2 (id=2681):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0x5, &(0x7f0000000900)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94)
perf_event_open(&(0x7f0000000980)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000001d40)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x394b, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x2, 0x1, 0x84)
sendmsg$inet(r2, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001e40)='\x00', 0x1}], 0x1, &(0x7f0000001e80)=ANY=[@ANYBLOB="20000000000000008400000002000000050040"], 0x20}, 0x4011)
perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x4a, 0xf, 0x0, 0x0, 0x0, 0x0, 0x402, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
perf_event_open(&(0x7f0000000ac0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000b40)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0xa4, 0x101, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fd, 0x0, @perf_config_ext, 0x0, 0x201, 0x0, 0x7, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x2)
socket$kcm(0x10, 0x400000002, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000c40)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
recvmsg$kcm(r4, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000d00)=""/4096, 0x1000}], 0x1}, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r5, &(0x7f0000001d00)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab070011000523a608463a", @ANYRES16=r5], 0xfe33)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r6, <r7=>0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)='%+9llu \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r7, <r8=>0xffffffffffffffff}, 0x4)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0x1d, &(0x7f00000002c0)=@framed={{0x18, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffff7}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}]}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r9, 0xfffff000, 0xe, 0x0, &(0x7f0000000500)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
recvmsg$unix(r0, &(0x7f0000000000)={&(0x7f0000002d40), 0xfffffd17, 0x0}, 0x2102)
syz_clone(0x20201000, &(0x7f0000000bc0), 0x0, 0x0, 0x0, 0x0)
sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000800)
perf_event_open$cgroup(&(0x7f0000000540)={0x2, 0x80, 0x8e, 0x4, 0x7, 0x3, 0x0, 0xc, 0x5948f, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000003, 0x1, @perf_config_ext={0x1, 0x7ffd}, 0x18320, 0x100000000, 0xffffffff, 0x3, 0xf0, 0x7fff, 0x7, 0x0, 0x7, 0x0, 0x9c97}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8)

1.819187975s ago: executing program 1 (id=2682):
r0 = socket$kcm(0xa, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[], 0x48)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000d80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x5, 0x90, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0xa, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2)
r2 = socket$kcm(0x22, 0x2, 0x21)
recvmsg(r2, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x2001)
perf_event_open(&(0x7f00000008c0)={0x5, 0x80, 0x2, 0x0, 0x0, 0xd, 0x0, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
perf_event_open(&(0x7f0000000940)={0x5, 0x80, 0xec, 0x7, 0x3d, 0x7, 0x0, 0x0, 0xd299, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x2}, 0x100882, 0x7ff, 0x3, 0x0, 0x648, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000009c0)={0x5, 0x80, 0x0, 0xfe, 0xff, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x1590, 0x0, 0x8, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000a40)={0x5, 0x80, 0xec, 0x7, 0x40, 0x8, 0x0, 0x0, 0xd000, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x986, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x81, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x2, 0x4, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x342cf}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x52, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
recvmsg$unix(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x4c, &(0x7f0000000200)=r4, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001140)={r4, 0xe0, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000e80)=[0x0, 0x0, 0x0], ""/16, <r5=>0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000ec0)=[0x0, 0x0, 0x0], &(0x7f0000000f00)=[0x0], 0x0, 0xf3, &(0x7f0000000f40)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000f80), &(0x7f0000000fc0), 0x8, 0x9b, 0x8, 0x8, &(0x7f0000001000)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x1f, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffff20f}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @func={0x85, 0x0, 0x1, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x5c, '\x00', r5, @fallback, r4, 0x6, 0x0, 0xfffffffffffffea9}, 0x94)

1.741386913s ago: executing program 0 (id=2683):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xffff0000, 0xa00, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f00000003c0)='\x00', 0x0, 0x0, 0x0, 0xffff0000}, 0x48) (async)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x9e4, 0x5, 0x200008, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x806, 0x10000, 0x0, 0x8, 0x1, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000082000000007a3d0000ffff0095"], 0x0}, 0x94) (async, rerun: 32)
ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x0) (rerun: 32)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) (async)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f39138e486dd6349080006"], 0xfdef)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="0763707573740153646370750806"], 0x12) (async)
r3 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r3, 0x0, 0x22, 0x0, 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

1.069197971s ago: executing program 1 (id=2684):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x2, @perf_bp={0x0, 0x9}, 0x0, 0x32, 0x43a1bd76, 0x6, 0x9, 0x2, 0x812, 0x0, 0x0, 0x0, 0x22009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0xa, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1224, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xd)
socket$kcm(0xa, 0x5, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x644b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x2}, 0x100000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x1}, 0x100000, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b7000000000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r2, 0x0, 0xe, 0x0, &(0x7f0000000600)="ffffffffffffffff098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'lo\x00', @random="01320136b1ff"})

885.113ms ago: executing program 3 (id=2685):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x48)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xffff, 0xffffffffffff23ab}, 0x404, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000a00)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000a40)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0}}, 0x10)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x119, 0x119, 0xb, [@fwd={0xa}, @datasec={0x8, 0x2, 0x0, 0xf, 0x1, [{0x5, 0x5, 0x6}, {0x3, 0xc4, 0x10000000}], "a7"}, @typedef={0xb, 0x0, 0x0, 0x8, 0x1}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xc, 0x1}, {0xb, 0x1}, {0x5, 0x2}]}, @func={0x7, 0x0, 0x0, 0xc, 0x3}, @decl_tag={0x2, 0x0, 0x0, 0x11, 0x1, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3, 0xfd}}, @union={0x6, 0x7, 0x0, 0x5, 0x1, 0x8, [{0x9, 0x0, 0x8}, {0x7, 0x5, 0x1}, {0x2, 0x1, 0x427d6b7d}, {0xa, 0x1}, {0x8, 0x1}, {0xb, 0x1, 0x2c}, {0xa, 0x0, 0x81}]}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x8, 0x4}, {0x3, 0x5}, {0x5, 0x2}]}]}, {0x0, [0x61, 0x0, 0x0, 0x5f, 0x30, 0x61, 0x7f, 0x61, 0x30]}}, &(0x7f0000000680)=""/16, 0x13f, 0x10, 0x1, 0x3, 0x10000}, 0x28)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000780)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x401c5820, &(0x7f00000007c0)=0x8)
ioctl$SIOCSIFHWADDR(r5, 0x40305839, &(0x7f0000000800)={'lo\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_tracing={0x1a, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000050000000000000072e8ffff18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001801000020836c2500000000810020207b1af8ff00000000bfa100000000b50007010000f8ffffffb702000008000000b77df800e30a00008500000006000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x2ad, 0x0, 0x0, 0x40f00, 0x22, '\x00', r3, 0x1a, r4, 0x8, &(0x7f0000000700)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000740)={0x1, 0xd, 0x6, 0x9}, 0x10, 0x1bd4a, r0, 0x5, &(0x7f0000000840)=[r5, 0xffffffffffffffff], &(0x7f0000000880)=[{0x5, 0x1, 0xe, 0xb}, {0x3, 0x2, 0x6, 0x7}, {0x5, 0x5, 0x9, 0x4}, {0x1, 0x1, 0x9, 0x9}, {0x1, 0x5, 0x4, 0x2}], 0x10, 0x5}, 0x94)

787.45955ms ago: executing program 0 (id=2686):
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000005d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x8806, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, r0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x4, &(0x7f00000005c0)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa8}, [@ldst={0x7}]}, &(0x7f0000000600)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000840)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000940), 0x22e, 0x10, &(0x7f0000000980), 0x1dd}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fdffffff00000000010000008507000000000000000000000000000029b1cb686cdbf1ad2a7945fc473873f968cf1969f23e7adbf17cb6d6073d3027318418ede7f7a03c51c981d6facc128fd289643c80f9931a785dccecaeaf835d2883f3d9253f1838773c5fb177ec808bd42822eedf10c6d62cadb538d9c81f056ab09dd7274fa1ef1a5749a625557e9a00eb5cec9e75795280f965430e9c6d1c892c9a547a98325cc68d3fb5ea1d907a3a"], &(0x7f00000000c0)='syzkaller\x00', 0x1}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f00)={0x6, 0x18, &(0x7f0000000a00)=@raw=[@generic={0x5, 0x7, 0x5, 0x40, 0x101}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, @tail_call, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfeaa}}, @map_fd={0x18, 0x1}, @alu={0x7, 0x1, 0x6, 0x9, 0x1, 0x50, 0xfffffffffffffff0}], &(0x7f0000000380)='syzkaller\x00', 0x1ff, 0x0, 0x0, 0x41000, 0x60}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0}, 0x4100, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x2, 0x16, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x11}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd}, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffe00}, {}, {}, {}, {0x85, 0x0, 0x0, 0xc5}}, @alu={0x7, 0x0, 0x7, 0x9, 0x5, 0xffffffffffffffe0, 0xfffffffffffffffc}, @ldst={0x2, 0x3, 0x6, 0x2, 0x9, 0x0, 0x4}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x1}, @map_fd]}, &(0x7f0000000300)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20003}, 0x94)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x7c, 0x0, 0x6}]})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x400000, 0x0)
ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000340))
write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="62202a3a340977770a89"], 0xa)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_config_ext, 0x800, 0x0, 0x20, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2ff}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080))
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x301100, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x18)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080))

591.12915ms ago: executing program 2 (id=2687):
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(&(0x7f0000000200)={0x5, 0x80, 0x2, 0x1, 0x8, 0xc9, 0x0, 0x1, 0x8, 0xb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0xffffffffffffffff, 0x9}, 0x10000, 0x1, 0x9, 0x5, 0x12f1b12a, 0x8001, 0x9, 0x0, 0x198e42, 0x0, 0x8000}, 0xffffffffffffffff, 0xd, r0, 0x1d)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x5, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x6, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000040000000001000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000043d163ed2bbe21b7f6ec88ecb146a2f5be9096c8284c25840ebbf62e04f50be6edcf3eab1f3573994510aeb9b94ce23088652a4f5946"], 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xe, 0x4, 0x8, 0x7}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x1, 0x4, 0x1, 0x100, 0x83a, 0x0, 0x3b8000, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x40c41, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000005c0)={'pimreg0\x00', 0x7c2})
ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000d40)=ANY=[@ANYBLOB="00000900bbbbbbbbbbbbffffffffffff0180c2000002aaaaaaaaaaaaaaaaaaaaaa2baaaaaaaaaaaaab66e41ac7740ce51603121fd39fa3eaffffffff29937863a5e721d7cfffffaaaaaaaaaabb6bf1b0fab15ad61fd7e43b3c9aa5c1efbc7a21a4e23341a26061fa97a315ddc662c858565d0befe429250dfadb397cc6215a6e7f93c99abb4851ac79794fee96b7e2e25be7"])
bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x14, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x14, &(0x7f0000000bc0)=ANY=[], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000c40)={r6}, 0xc)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x541b, &(0x7f0000000500))
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto, @volatile={0x3000000, 0x0, 0x0, 0xa, 0x5}]}}, 0x0, 0x32}, 0x28)
r7 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8916, 0x0)
r8 = socket$kcm(0x1e, 0x5, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2)
r9 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$kcm(r9, &(0x7f0000000600)={&(0x7f0000000640)=@generic={0xa, "8ab77fa26849ff263ef30c98b353011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0x0)
sendmsg$kcm(r8, &(0x7f00000006c0)={&(0x7f0000000700)=@nfc_llcp={0x27, 0x0, 0xffffffffffffffff, 0x2, 0x7, 0x19, "87de2191da3f031f6db23daf43e1bcbd3ce73220e6667eede2573826ccf26c258c61532fc7e786aeec8e0e3297fbd01d554a105ee6b2bac79e0946485d5dca", 0x24}, 0x80, 0x0}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef)
r10 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r10, &(0x7f0000000080)={&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xfffffffffffffffd}, 0x1, 0x5c4}, 0x80, &(0x7f0000000140)=[{&(0x7f00000003c0)="89", 0x1}], 0x1}, 0xc9)

524.674417ms ago: executing program 3 (id=2688):
r0 = socket$kcm(0x2, 0x922000000001, 0x106)
setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000040), 0xff7b)
close(r0)

509.472078ms ago: executing program 1 (id=2689):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28)
r2 = perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x108b84, 0x4, 0x10, 0x1, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0x5, &(0x7f0000000900)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000540)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair(0x1d, 0x2, 0x2, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.swap.events\x00', 0x26e1, 0x0)
close(r5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000980))
ioctl$SIOCSIFHWADDR(r5, 0x8b1a, &(0x7f00000009c0)={'wlan1\x00', @random="0000230c1100"})
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000a00)={0x0, 0xfffffffe, &(0x7f0000000a40)=[{&(0x7f0000000a80)="2e00000064008188040f80ec59acbc0413a1f848290000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = socket$kcm(0x21, 0x2, 0x2)
setsockopt$sock_attach_bpf(r7, 0x110, 0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="050000000000000071117500000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000180)='GPL\x00', 0x5, 0x29e, &(0x7f00000001c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b703000000000000a500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r4, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(0x3)
bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000700)=@generic={0x0, r8}, 0x18)
close(0x3)

454.974983ms ago: executing program 3 (id=2690):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r1}, &(0x7f0000000a00), &(0x7f0000000a40)=r0}, 0x20)
recvmsg$unix(r0, 0x0, 0x2001)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
socket$kcm(0x11, 0xa, 0x300)
perf_event_open(&(0x7f0000002080)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r3, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0f000000040000"], 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000004c0)=ANY=[], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r4, <r5=>0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r6 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x2, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x1, 0x7, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000980)={r5, 0x58, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r8=>0x0}}, 0x10)
ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f00000009c0)=r8)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffc)

256.612263ms ago: executing program 0 (id=2691):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x1ff)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0)
r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20006, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1000d7, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000240)='a\x00')
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000000000000000000000000000000000000184380da4535c4cbd9b50de24dec268420b00ed98c1caa76", @ANYBLOB="0200000003000000020000000a00"], 0x50)
socket$kcm(0x2, 0x3, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1008d2}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0xfffffffffffffff8}]}, &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

191.45622ms ago: executing program 2 (id=2692):
r0 = socket$kcm(0xa, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[], 0x48)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000d80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x5, 0x90, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0xa, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2)
r2 = socket$kcm(0x22, 0x2, 0x21)
recvmsg(r2, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x2001)
perf_event_open(&(0x7f00000008c0)={0x5, 0x80, 0x2, 0x0, 0x0, 0xd, 0x0, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
perf_event_open(&(0x7f0000000940)={0x5, 0x80, 0xec, 0x7, 0x3d, 0x7, 0x0, 0x0, 0xd299, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x2}, 0x100882, 0x7ff, 0x3, 0x0, 0x648, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000009c0)={0x5, 0x80, 0x0, 0xfe, 0xff, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x1590, 0x0, 0x8, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000a40)={0x5, 0x80, 0xec, 0x7, 0x40, 0x8, 0x0, 0x0, 0xd000, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x986, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x81, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x2, 0x4, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x342cf}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x52, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
recvmsg$unix(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x4c, &(0x7f0000000200)=r4, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001140)={r4, 0xe0, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000e80)=[0x0, 0x0, 0x0], ""/16, <r5=>0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000ec0)=[0x0, 0x0, 0x0], &(0x7f0000000f00)=[0x0], 0x0, 0xf3, &(0x7f0000000f40)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000f80), &(0x7f0000000fc0), 0x8, 0x9b, 0x8, 0x8, &(0x7f0000001000)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x1f, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffff20f}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @func={0x85, 0x0, 0x1, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x5c, '\x00', r5, @fallback, r4, 0x6, 0x0, 0xfffffffffffffea9}, 0x94)

83.676961ms ago: executing program 3 (id=2693):
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfe33)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, 0x2, @perf_bp={0x0, 0x7}, 0x8000, 0x5, 0x47a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0xc6bc}, 0x8)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000980)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000500000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0xe, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000801000000000000004000000850000007d00000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000009c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x8000)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x3000c085)
r4 = perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x0, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x5, 0x5, &(0x7f0000000b40)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, 0x0}, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, 0x0}, 0x3062)
r6 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r6, 0x0, 0x41, 0x0, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0x0, 0x0, 0x0, 0x9ca8, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="0f0000000400000004000000120000", @ANYRES32=0x0, @ANYBLOB='\x00'/14], 0x50)
r9 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000dc0)=ANY=[@ANYRES32=r8, @ANYRES32=r9, @ANYBLOB], 0x10)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000e00)={@fallback=r3, 0x36, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=[0x0], &(0x7f0000000e80), <r10=>0x0}, 0x40)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ec0)={0x3, 0xc, 0x0, &(0x7f0000000f80)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000fc0)={r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001040)={@fallback=r3, r7, 0x2, 0x2, r9, @void, @value=r11, @void, @void, r10}, 0x20)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r1}, &(0x7f00000004c0), &(0x7f0000000500)=r0}, 0x20)

2.76002ms ago: executing program 1 (id=2694):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28)
r2 = perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x108b84, 0x4, 0x10, 0x1, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0x5, &(0x7f0000000900)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000540)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b703000000000000a500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r4, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(0x3)
bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000700)=@generic={0x0, r5}, 0x18)
close(0x3)

0s ago: executing program 0 (id=2695):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28)
r2 = perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x108b84, 0x4, 0x10, 0x1, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0x5, &(0x7f0000000900)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000540)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b703000000000000a500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r4, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(0x3)
bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000700)=@generic={0x0, r5}, 0x18)
close(0x3) (fail_nth: 1)

kernel console output (not intermixed with test programs):

+0x125/0x370
[  424.883895][T12628]  kmalloc_node_trace+0x26/0xe0
[  424.888758][T12628]  __get_vm_area_node+0x125/0x370
[  424.893831][T12628]  __vmalloc_node_range+0x36f/0x1320
[  424.899123][T12628]  ? bpf_prog_alloc_no_stats+0x46/0x460
[  424.904716][T12628]  ? mark_lock+0x94/0x320
[  424.909050][T12628]  ? __lock_acquire+0x1431/0x7eb0
[  424.914093][T12628]  ? aa_get_newest_label+0xfd/0x5c0
[  424.919327][T12628]  ? free_vm_area+0x50/0x50
[  424.923834][T12628]  ? end_current_label_crit_section+0x170/0x170
[  424.930083][T12628]  ? verify_lock_unused+0x140/0x140
[  424.935285][T12628]  ? bpf_prog_alloc_no_stats+0x46/0x460
[  424.940837][T12628]  __vmalloc+0x7a/0x90
[  424.944913][T12628]  ? bpf_prog_alloc_no_stats+0x46/0x460
[  424.950491][T12628]  bpf_prog_alloc_no_stats+0x46/0x460
[  424.955869][T12628]  bpf_prog_alloc+0x3d/0x1a0
[  424.960460][T12628]  bpf_prog_load+0x6b2/0x1610
[  424.965167][T12628]  ? map_freeze+0x420/0x420
[  424.969676][T12628]  ? __might_fault+0xaa/0x120
[  424.974360][T12628]  ? __lock_acquire+0x7eb0/0x7eb0
[  424.979388][T12628]  ? file_end_write+0x159/0x250
[  424.984250][T12628]  ? __might_fault+0xaa/0x120
[  424.988927][T12628]  ? __might_fault+0xc6/0x120
[  424.993620][T12628]  ? __might_fault+0xaa/0x120
[  424.998297][T12628]  ? bpf_lsm_bpf+0x9/0x10
[  425.002632][T12628]  ? security_bpf+0x7e/0xa0
[  425.007165][T12628]  __sys_bpf+0x5ba/0x890
[  425.011411][T12628]  ? bpf_link_show_fdinfo+0x560/0x560
[  425.016811][T12628]  ? lock_chain_count+0x20/0x20
[  425.021668][T12628]  __x64_sys_bpf+0x7c/0x90
[  425.026096][T12628]  do_syscall_64+0x55/0xb0
[  425.030532][T12628]  ? clear_bhb_loop+0x40/0x90
[  425.035224][T12628]  ? clear_bhb_loop+0x40/0x90
[  425.039904][T12628]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  425.045796][T12628] RIP: 0033:0x7fb50eb9f559
[  425.050216][T12628] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  425.069824][T12628] RSP: 002b:00007fb50f9de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  425.078275][T12628] RAX: ffffffffffffffda RBX: 00007fb50ee25fa0 RCX: 00007fb50eb9f559
[  425.086253][T12628] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005
[  425.094231][T12628] RBP: 00007fb50f9de090 R08: 0000000000000000 R09: 0000000000000000
[  425.102207][T12628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  425.110178][T12628] R13: 00007fb50ee26038 R14: 00007fb50ee25fa0 R15: 00007ffffbac0a88
[  425.118161][T12628]  </TASK>
[  425.130880][T12628] syz.2.1856: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz2,mems_allowed=0-1
[  425.147797][T12628] CPU: 1 PID: 12628 Comm: syz.2.1856 Not tainted syzkaller #0
[  425.155282][T12628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  425.165357][T12628] Call Trace:
[  425.168682][T12628]  <TASK>
[  425.171609][T12628]  dump_stack_lvl+0x18c/0x250
[  425.176291][T12628]  ? show_regs_print_info+0x20/0x20
[  425.181497][T12628]  ? load_image+0x420/0x420
[  425.186006][T12628]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  425.192424][T12628]  ? cpuset_print_current_mems_allowed+0x2e7/0x360
[  425.198923][T12628]  warn_alloc+0x246/0x340
[  425.203270][T12628]  ? __get_vm_area_node+0x125/0x370
[  425.208519][T12628]  ? zone_watermark_ok_safe+0x230/0x230
[  425.214075][T12628]  ? rcu_is_watching+0x15/0xb0
[  425.218849][T12628]  ? __get_vm_area_node+0x356/0x370
[  425.224053][T12628]  __vmalloc_node_range+0x394/0x1320
[  425.229341][T12628]  ? mark_lock+0x94/0x320
[  425.233678][T12628]  ? __lock_acquire+0x1431/0x7eb0
[  425.238716][T12628]  ? aa_get_newest_label+0xfd/0x5c0
[  425.243910][T12628]  ? free_vm_area+0x50/0x50
[  425.248409][T12628]  ? end_current_label_crit_section+0x170/0x170
[  425.254654][T12628]  ? verify_lock_unused+0x140/0x140
[  425.259857][T12628]  ? bpf_prog_alloc_no_stats+0x46/0x460
[  425.265408][T12628]  __vmalloc+0x7a/0x90
[  425.269480][T12628]  ? bpf_prog_alloc_no_stats+0x46/0x460
[  425.275021][T12628]  bpf_prog_alloc_no_stats+0x46/0x460
[  425.280391][T12628]  bpf_prog_alloc+0x3d/0x1a0
[  425.284983][T12628]  bpf_prog_load+0x6b2/0x1610
[  425.289666][T12628]  ? map_freeze+0x420/0x420
[  425.294176][T12628]  ? __might_fault+0xaa/0x120
[  425.298857][T12628]  ? __lock_acquire+0x7eb0/0x7eb0
[  425.303882][T12628]  ? file_end_write+0x159/0x250
[  425.308738][T12628]  ? __might_fault+0xaa/0x120
[  425.313408][T12628]  ? __might_fault+0xc6/0x120
[  425.318078][T12628]  ? __might_fault+0xaa/0x120
[  425.322758][T12628]  ? bpf_lsm_bpf+0x9/0x10
[  425.327090][T12628]  ? security_bpf+0x7e/0xa0
[  425.331590][T12628]  __sys_bpf+0x5ba/0x890
[  425.335832][T12628]  ? bpf_link_show_fdinfo+0x560/0x560
[  425.341210][T12628]  ? lock_chain_count+0x20/0x20
[  425.346063][T12628]  __x64_sys_bpf+0x7c/0x90
[  425.350482][T12628]  do_syscall_64+0x55/0xb0
[  425.354898][T12628]  ? clear_bhb_loop+0x40/0x90
[  425.359585][T12628]  ? clear_bhb_loop+0x40/0x90
[  425.364266][T12628]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  425.370156][T12628] RIP: 0033:0x7fb50eb9f559
[  425.374594][T12628] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  425.394201][T12628] RSP: 002b:00007fb50f9de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  425.402613][T12628] RAX: ffffffffffffffda RBX: 00007fb50ee25fa0 RCX: 00007fb50eb9f559
[  425.410587][T12628] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005
[  425.418554][T12628] RBP: 00007fb50f9de090 R08: 0000000000000000 R09: 0000000000000000
[  425.426526][T12628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  425.434493][T12628] R13: 00007fb50ee26038 R14: 00007fb50ee25fa0 R15: 00007ffffbac0a88
[  425.442473][T12628]  </TASK>
[  425.497494][T12628] Mem-Info:
[  425.512721][T12628] active_anon:9054 inactive_anon:0 isolated_anon:0
[  425.512721][T12628]  active_file:17042 inactive_file:40094 isolated_file:0
[  425.512721][T12628]  unevictable:768 dirty:402 writeback:0
[  425.512721][T12628]  slab_reclaimable:11137 slab_unreclaimable:99499
[  425.512721][T12628]  mapped:27194 shmem:4594 pagetables:571
[  425.512721][T12628]  sec_pagetables:0 bounce:0
[  425.512721][T12628]  kernel_misc_reclaimable:0
[  425.512721][T12628]  free:1335276 free_pcp:7399 free_cma:0
[  425.578127][T12628] Node 0 active_anon:39716kB inactive_anon:0kB active_file:68168kB inactive_file:160172kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:112176kB dirty:1608kB writeback:0kB shmem:20340kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12840kB pagetables:2384kB sec_pagetables:0kB all_unreclaimable? no
[  425.628557][T12628] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  425.640524][T12636] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  425.676874][T12636] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  425.686717][T12636] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  425.694638][T12628] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  425.738550][T12628] lowmem_reserve[]: 0 2503 2504 2504 2504
[  425.755012][T12628] Node 0 DMA32 free:1415748kB boost:0kB min:34492kB low:43112kB high:51732kB reserved_highatomic:0KB active_anon:43072kB inactive_anon:0kB active_file:68168kB inactive_file:159356kB unevictable:1536kB writepending:1608kB present:3129332kB managed:2567744kB mlocked:0kB bounce:0kB free_pcp:12596kB local_pcp:3708kB free_cma:0kB
[  425.808858][T12628] lowmem_reserve[]: 0 0 0 0 0
[  425.813647][T12628] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:816kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB
[  425.849235][T12628] lowmem_reserve[]: 0 0 0 0 0
[  425.858553][T12628] Node 1 Normal free:3903192kB boost:0kB min:55396kB low:69244kB high:83092kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:17088kB local_pcp:11552kB free_cma:0kB
[  425.888620][T12628] lowmem_reserve[]: 0 0 0 0 0
[  425.893385][T12628] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  425.906235][T12628] Node 0 DMA32: 798*4kB (UE) 261*8kB (UME) 722*16kB (UE) 1575*32kB (UME) 416*64kB (UME) 194*128kB (UME) 144*256kB (UME) 76*512kB (UM) 51*1024kB (UM) 8*2048kB (UME) 280*4096kB (UM) = 1409952kB
[  425.925593][T12628] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  425.941738][T12628] Node 1 Normal: 190*4kB (UME) 50*8kB (UME) 49*16kB (UME) 114*32kB (UME) 32*64kB (UE) 8*128kB (UME) 1*256kB (U) 2*512kB (UM) 2*1024kB (UE) 2*2048kB (UE) 949*4096kB (M) = 3903192kB
[  425.969515][T12628] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  425.981709][T12628] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  425.991406][T12628] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  426.003601][T12628] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  426.016228][T12628] 65130 total pagecache pages
[  426.023978][T12628] 0 pages in swap cache
[  426.028998][T12628] Free swap  = 124996kB
[  426.034298][T12628] Total swap = 124996kB
[  426.043692][T12628] 2097051 pages RAM
[  426.047620][T12628] 0 pages HighMem/MovableOnly
[  426.053248][T12628] 421729 pages reserved
[  426.057636][T12628] 0 pages cma reserved
[  426.251211][T12653] : renamed from bond0
[  426.727016][T12664] netlink: 'syz.3.1868': attribute type 4 has an invalid length.
[  426.743769][T12664] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1868'.
[  426.865134][T12675] netlink: 'syz.3.1872': attribute type 29 has an invalid length.
[  426.882259][T12675] netlink: 'syz.3.1872': attribute type 29 has an invalid length.
[  426.914077][T12675] netlink: 'syz.3.1872': attribute type 29 has an invalid length.
[  426.929300][T12675] netlink: 'syz.3.1872': attribute type 29 has an invalid length.
[  426.950815][T12675] netlink: 'syz.3.1872': attribute type 29 has an invalid length.
[  427.001312][T12650] delete_channel: no stack
[  427.075272][T12682] netlink: 'syz.1.1876': attribute type 16 has an invalid length.
[  427.093606][T12682] netlink: 'syz.1.1876': attribute type 3 has an invalid length.
[  427.106893][T12682] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1876'.
[  427.156602][T12688] netlink: 'syz.0.1875': attribute type 9 has an invalid length.
[  427.167764][T12688] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1875'.
[  429.310259][T12711] delete_channel: no stack
[  429.633739][T12725] FAULT_INJECTION: forcing a failure.
[  429.633739][T12725] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  429.661736][T12725] CPU: 0 PID: 12725 Comm: syz.3.1890 Not tainted syzkaller #0
[  429.669260][T12725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  429.679329][T12725] Call Trace:
[  429.682602][T12725]  <TASK>
[  429.685620][T12725]  dump_stack_lvl+0x18c/0x250
[  429.690326][T12725]  ? show_regs_print_info+0x20/0x20
[  429.695527][T12725]  ? load_image+0x420/0x420
[  429.700021][T12725]  ? __might_fault+0xaa/0x120
[  429.704693][T12725]  ? __lock_acquire+0x7eb0/0x7eb0
[  429.709709][T12725]  should_fail_ex+0x394/0x4c0
[  429.714725][T12725]  _copy_from_user+0x2f/0xe0
[  429.719321][T12725]  __sys_bpf+0x23e/0x890
[  429.723592][T12725]  ? bpf_link_show_fdinfo+0x560/0x560
[  429.728963][T12725]  ? lock_chain_count+0x20/0x20
[  429.733830][T12725]  __x64_sys_bpf+0x7c/0x90
[  429.738279][T12725]  do_syscall_64+0x55/0xb0
[  429.742717][T12725]  ? clear_bhb_loop+0x40/0x90
[  429.747409][T12725]  ? clear_bhb_loop+0x40/0x90
[  429.752106][T12725]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  429.757990][T12725] RIP: 0033:0x7f11f0d9f559
[  429.762398][T12725] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  429.782027][T12725] RSP: 002b:00007f11f1c1c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  429.790452][T12725] RAX: ffffffffffffffda RBX: 00007f11f1025fa0 RCX: 00007f11f0d9f559
[  429.798458][T12725] RDX: 0000000000000050 RSI: 0000200000000f40 RDI: 000000000000000a
[  429.806435][T12725] RBP: 00007f11f1c1c090 R08: 0000000000000000 R09: 0000000000000000
[  429.814403][T12725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  429.822388][T12725] R13: 00007f11f1026038 R14: 00007f11f1025fa0 R15: 00007ffe578a07d8
[  429.830372][T12725]  </TASK>
[  430.555522][T12710] netlink: 14556 bytes leftover after parsing attributes in process `syz.2.1885'.
[  430.783393][T12739] FAULT_INJECTION: forcing a failure.
[  430.783393][T12739] name failslab, interval 1, probability 0, space 0, times 0
[  430.804456][T12739] CPU: 1 PID: 12739 Comm: syz.0.1895 Not tainted syzkaller #0
[  430.811982][T12739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  430.822061][T12739] Call Trace:
[  430.825349][T12739]  <TASK>
[  430.828276][T12739]  dump_stack_lvl+0x18c/0x250
[  430.832961][T12739]  ? show_regs_print_info+0x20/0x20
[  430.838167][T12739]  ? load_image+0x420/0x420
[  430.842681][T12739]  ? __might_sleep+0xe0/0xe0
[  430.847271][T12739]  ? __lock_acquire+0x7eb0/0x7eb0
[  430.852300][T12739]  should_fail_ex+0x394/0x4c0
[  430.856983][T12739]  should_failslab+0x9/0x20
[  430.861492][T12739]  slab_pre_alloc_hook+0x59/0x300
[  430.866521][T12739]  ? sk_prot_alloc+0xe7/0x210
[  430.871423][T12739]  ? sk_prot_alloc+0xe7/0x210
[  430.876103][T12739]  __kmem_cache_alloc_node+0x53/0x260
[  430.881480][T12739]  ? sk_prot_alloc+0xe7/0x210
[  430.886156][T12739]  __kmalloc+0xa7/0x240
[  430.890317][T12739]  sk_prot_alloc+0xe7/0x210
[  430.894815][T12739]  ? sk_alloc+0x24/0x350
[  430.899058][T12739]  sk_alloc+0x3a/0x350
[  430.903152][T12739]  ? bpf_ctx_init+0x154/0x190
[  430.907945][T12739]  bpf_prog_test_run_skb+0x371/0x18f0
[  430.913318][T12739]  ? __fget_files+0x28/0x460
[  430.917922][T12739]  ? __fget_files+0x3fc/0x460
[  430.922604][T12739]  ? cpu_online+0x60/0x60
[  430.926929][T12739]  bpf_prog_test_run+0x31f/0x390
[  430.931899][T12739]  __sys_bpf+0x49d/0x890
[  430.936151][T12739]  ? bpf_link_show_fdinfo+0x560/0x560
[  430.941560][T12739]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  430.947729][T12739]  __x64_sys_bpf+0x7c/0x90
[  430.952147][T12739]  do_syscall_64+0x55/0xb0
[  430.956561][T12739]  ? clear_bhb_loop+0x40/0x90
[  430.961240][T12739]  ? clear_bhb_loop+0x40/0x90
[  430.965930][T12739]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  430.971820][T12739] RIP: 0033:0x7f475979f559
[  430.976230][T12739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  430.995836][T12739] RSP: 002b:00007f475a6d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  431.004252][T12739] RAX: ffffffffffffffda RBX: 00007f4759a25fa0 RCX: 00007f475979f559
[  431.012223][T12739] RDX: 0000000000000050 RSI: 0000200000001a00 RDI: 000000000000000a
[  431.020539][T12739] RBP: 00007f475a6d5090 R08: 0000000000000000 R09: 0000000000000000
[  431.028521][T12739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  431.036488][T12739] R13: 00007f4759a26038 R14: 00007f4759a25fa0 R15: 00007ffdc1b913a8
[  431.044466][T12739]  </TASK>
[  431.111535][T12740] delete_channel: no stack
[  431.147319][T12749] FAULT_INJECTION: forcing a failure.
[  431.147319][T12749] name failslab, interval 1, probability 0, space 0, times 0
[  431.174690][T12749] CPU: 0 PID: 12749 Comm: syz.2.1900 Not tainted syzkaller #0
[  431.182217][T12749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  431.192300][T12749] Call Trace:
[  431.195592][T12749]  <TASK>
[  431.198538][T12749]  dump_stack_lvl+0x18c/0x250
[  431.203242][T12749]  ? show_regs_print_info+0x20/0x20
[  431.208469][T12749]  ? load_image+0x420/0x420
[  431.213027][T12749]  ? __lock_acquire+0x7eb0/0x7eb0
[  431.218103][T12749]  ? verify_lock_unused+0x140/0x140
[  431.223348][T12749]  should_fail_ex+0x394/0x4c0
[  431.228054][T12749]  should_failslab+0x9/0x20
[  431.232586][T12749]  slab_pre_alloc_hook+0x59/0x300
[  431.237635][T12749]  ? bpf_prog_test_run_skb+0x242/0x18f0
[  431.243211][T12749]  ? bpf_prog_test_run_skb+0x242/0x18f0
[  431.248787][T12749]  __kmem_cache_alloc_node+0x53/0x260
[  431.254191][T12749]  ? bpf_prog_test_run_skb+0x242/0x18f0
[  431.259768][T12749]  __kmalloc+0xa7/0x240
[  431.263960][T12749]  bpf_prog_test_run_skb+0x242/0x18f0
[  431.269354][T12749]  ? __fget_files+0x28/0x460
[  431.273969][T12749]  ? __fget_files+0x3fc/0x460
[  431.278680][T12749]  ? cpu_online+0x60/0x60
[  431.283032][T12749]  bpf_prog_test_run+0x31f/0x390
[  431.287990][T12749]  __sys_bpf+0x49d/0x890
[  431.292263][T12749]  ? bpf_link_show_fdinfo+0x560/0x560
[  431.297687][T12749]  ? lock_chain_count+0x20/0x20
[  431.302569][T12749]  __x64_sys_bpf+0x7c/0x90
[  431.307020][T12749]  do_syscall_64+0x55/0xb0
[  431.311472][T12749]  ? clear_bhb_loop+0x40/0x90
[  431.316184][T12749]  ? clear_bhb_loop+0x40/0x90
[  431.320900][T12749]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  431.326826][T12749] RIP: 0033:0x7fb50eb9f559
[  431.331264][T12749] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  431.350902][T12749] RSP: 002b:00007fb50f9de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  431.359345][T12749] RAX: ffffffffffffffda RBX: 00007fb50ee25fa0 RCX: 00007fb50eb9f559
[  431.367343][T12749] RDX: 0000000000000050 RSI: 0000200000000f40 RDI: 000000000000000a
[  431.375345][T12749] RBP: 00007fb50f9de090 R08: 0000000000000000 R09: 0000000000000000
[  431.383342][T12749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  431.391341][T12749] R13: 00007fb50ee26038 R14: 00007fb50ee25fa0 R15: 00007ffffbac0a88
[  431.399361][T12749]  </TASK>
[  432.203609][T12785] FAULT_INJECTION: forcing a failure.
[  432.203609][T12785] name failslab, interval 1, probability 0, space 0, times 0
[  432.250728][T12785] CPU: 0 PID: 12785 Comm: syz.3.1909 Not tainted syzkaller #0
[  432.258268][T12785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  432.268352][T12785] Call Trace:
[  432.271652][T12785]  <TASK>
[  432.274625][T12785]  dump_stack_lvl+0x18c/0x250
[  432.279341][T12785]  ? show_regs_print_info+0x20/0x20
[  432.284571][T12785]  ? load_image+0x420/0x420
[  432.289105][T12785]  ? __lock_acquire+0x7eb0/0x7eb0
[  432.294162][T12785]  should_fail_ex+0x394/0x4c0
[  432.298882][T12785]  should_failslab+0x9/0x20
[  432.303414][T12785]  slab_pre_alloc_hook+0x59/0x300
[  432.308484][T12785]  ? security_sk_alloc+0x4b/0x130
[  432.313546][T12785]  ? security_sk_alloc+0x4b/0x130
[  432.318734][T12785]  __kmem_cache_alloc_node+0x53/0x260
[  432.324156][T12785]  ? security_sk_alloc+0x4b/0x130
[  432.329231][T12785]  __kmalloc+0xa7/0x240
[  432.333432][T12785]  ? sk_prot_alloc+0xe7/0x210
[  432.338144][T12785]  security_sk_alloc+0x4b/0x130
[  432.343039][T12785]  sk_prot_alloc+0x101/0x210
[  432.347662][T12785]  ? sk_alloc+0x24/0x350
[  432.351942][T12785]  sk_alloc+0x3a/0x350
[  432.356041][T12785]  ? bpf_ctx_init+0x154/0x190
[  432.360759][T12785]  bpf_prog_test_run_skb+0x371/0x18f0
[  432.366165][T12785]  ? __fget_files+0x28/0x460
[  432.370786][T12785]  ? __fget_files+0x3fc/0x460
[  432.375504][T12785]  ? cpu_online+0x60/0x60
[  432.379861][T12785]  bpf_prog_test_run+0x31f/0x390
[  432.384832][T12785]  __sys_bpf+0x49d/0x890
[  432.389112][T12785]  ? bpf_link_show_fdinfo+0x560/0x560
[  432.394534][T12785]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  432.400738][T12785]  __x64_sys_bpf+0x7c/0x90
[  432.405182][T12785]  do_syscall_64+0x55/0xb0
[  432.409638][T12785]  ? clear_bhb_loop+0x40/0x90
[  432.414346][T12785]  ? clear_bhb_loop+0x40/0x90
[  432.419063][T12785]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  432.424996][T12785] RIP: 0033:0x7f11f0d9f559
[  432.429438][T12785] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  432.449076][T12785] RSP: 002b:00007f11f1c1c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  432.457535][T12785] RAX: ffffffffffffffda RBX: 00007f11f1025fa0 RCX: 00007f11f0d9f559
[  432.465593][T12785] RDX: 0000000000000050 RSI: 0000200000001a00 RDI: 000000000000000a
[  432.473685][T12785] RBP: 00007f11f1c1c090 R08: 0000000000000000 R09: 0000000000000000
[  432.481689][T12785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  432.489690][T12785] R13: 00007f11f1026038 R14: 00007f11f1025fa0 R15: 00007ffe578a07d8
[  432.497709][T12785]  </TASK>
[  432.508656][T12786] delete_channel: no stack
[  432.952675][T12797] FAULT_INJECTION: forcing a failure.
[  432.952675][T12797] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  432.991583][T12797] CPU: 0 PID: 12797 Comm: syz.2.1914 Not tainted syzkaller #0
[  432.999123][T12797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  433.009208][T12797] Call Trace:
[  433.012515][T12797]  <TASK>
[  433.015467][T12797]  dump_stack_lvl+0x18c/0x250
[  433.020186][T12797]  ? show_regs_print_info+0x20/0x20
[  433.025443][T12797]  ? load_image+0x420/0x420
[  433.029990][T12797]  ? __lock_acquire+0x7eb0/0x7eb0
[  433.035054][T12797]  should_fail_ex+0x394/0x4c0
[  433.039758][T12797]  _copy_from_user+0x2f/0xe0
[  433.044379][T12797]  bpf_prog_test_run_skb+0x267/0x18f0
[  433.049789][T12797]  ? __fget_files+0x28/0x460
[  433.054409][T12797]  ? __fget_files+0x3fc/0x460
[  433.059123][T12797]  ? cpu_online+0x60/0x60
[  433.063478][T12797]  bpf_prog_test_run+0x31f/0x390
[  433.068477][T12797]  __sys_bpf+0x49d/0x890
[  433.072755][T12797]  ? bpf_link_show_fdinfo+0x560/0x560
[  433.078193][T12797]  ? lock_chain_count+0x20/0x20
[  433.083086][T12797]  __x64_sys_bpf+0x7c/0x90
[  433.087542][T12797]  do_syscall_64+0x55/0xb0
[  433.092874][T12797]  ? clear_bhb_loop+0x40/0x90
[  433.097594][T12797]  ? clear_bhb_loop+0x40/0x90
[  433.102303][T12797]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  433.108220][T12797] RIP: 0033:0x7fb50eb9f559
[  433.112652][T12797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  433.132299][T12797] RSP: 002b:00007fb50f9de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  433.140715][T12797] RAX: ffffffffffffffda RBX: 00007fb50ee25fa0 RCX: 00007fb50eb9f559
[  433.148689][T12797] RDX: 0000000000000050 RSI: 0000200000000f40 RDI: 000000000000000a
[  433.156857][T12797] RBP: 00007fb50f9de090 R08: 0000000000000000 R09: 0000000000000000
[  433.164834][T12797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  433.172804][T12797] R13: 00007fb50ee26038 R14: 00007fb50ee25fa0 R15: 00007ffffbac0a88
[  433.180791][T12797]  </TASK>
[  433.441139][T12812] netlink: 'syz.2.1916': attribute type 25 has an invalid length.
[  433.449561][T12812] netlink: 'syz.2.1916': attribute type 28 has an invalid length.
[  433.641486][T12816] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.1917'.
[  433.656548][T12816] netlink: 'syz.0.1917': attribute type 4 has an invalid length.
[  433.664833][T12816] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1917'.
[  433.892761][T12821] delete_channel: no stack
[  433.921051][T12831] FAULT_INJECTION: forcing a failure.
[  433.921051][T12831] name failslab, interval 1, probability 0, space 0, times 0
[  433.968913][T12831] CPU: 0 PID: 12831 Comm: syz.3.1923 Not tainted syzkaller #0
[  433.976452][T12831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  433.986533][T12831] Call Trace:
[  433.989830][T12831]  <TASK>
[  433.992780][T12831]  dump_stack_lvl+0x18c/0x250
[  433.997499][T12831]  ? show_regs_print_info+0x20/0x20
[  434.002730][T12831]  ? load_image+0x420/0x420
[  434.007260][T12831]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  434.013272][T12831]  ? lock_chain_count+0x20/0x20
[  434.018167][T12831]  should_fail_ex+0x394/0x4c0
[  434.022885][T12831]  should_failslab+0x9/0x20
[  434.027420][T12831]  slab_pre_alloc_hook+0x59/0x300
[  434.032487][T12831]  ? __debug_object_init+0xec/0x450
[  434.037701][T12831]  kmem_cache_alloc+0x5a/0x2d0
[  434.042461][T12831]  ? slab_build_skb+0x28/0x3e0
[  434.047222][T12831]  slab_build_skb+0x28/0x3e0
[  434.051808][T12831]  bpf_prog_test_run_skb+0x38f/0x18f0
[  434.057179][T12831]  ? __fget_files+0x28/0x460
[  434.061767][T12831]  ? __fget_files+0x3fc/0x460
[  434.066449][T12831]  ? cpu_online+0x60/0x60
[  434.070777][T12831]  bpf_prog_test_run+0x31f/0x390
[  434.075721][T12831]  __sys_bpf+0x49d/0x890
[  434.079970][T12831]  ? read_tsc+0x9/0x20
[  434.084081][T12831]  ? bpf_link_show_fdinfo+0x560/0x560
[  434.089457][T12831]  ? lock_chain_count+0x20/0x20
[  434.094300][T12831]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  434.100293][T12831]  __x64_sys_bpf+0x7c/0x90
[  434.104740][T12831]  do_syscall_64+0x55/0xb0
[  434.109170][T12831]  ? clear_bhb_loop+0x40/0x90
[  434.113848][T12831]  ? clear_bhb_loop+0x40/0x90
[  434.118523][T12831]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  434.124416][T12831] RIP: 0033:0x7f11f0d9f559
[  434.128828][T12831] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  434.148529][T12831] RSP: 002b:00007f11f1c1c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  434.156943][T12831] RAX: ffffffffffffffda RBX: 00007f11f1025fa0 RCX: 00007f11f0d9f559
[  434.164916][T12831] RDX: 0000000000000050 RSI: 0000200000001a00 RDI: 000000000000000a
[  434.172881][T12831] RBP: 00007f11f1c1c090 R08: 0000000000000000 R09: 0000000000000000
[  434.180848][T12831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  434.188815][T12831] R13: 00007f11f1026038 R14: 00007f11f1025fa0 R15: 00007ffe578a07d8
[  434.196796][T12831]  </TASK>
[  434.339297][T12837] netlink: 'syz.0.1922': attribute type 10 has an invalid length.
[  434.384582][T12847] FAULT_INJECTION: forcing a failure.
[  434.384582][T12847] name failslab, interval 1, probability 0, space 0, times 0
[  434.400072][T12847] CPU: 1 PID: 12847 Comm: syz.3.1926 Not tainted syzkaller #0
[  434.407586][T12847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  434.417756][T12847] Call Trace:
[  434.421060][T12847]  <TASK>
[  434.424009][T12847]  dump_stack_lvl+0x18c/0x250
[  434.428723][T12847]  ? show_regs_print_info+0x20/0x20
[  434.433956][T12847]  ? load_image+0x420/0x420
[  434.438491][T12847]  ? __might_sleep+0xe0/0xe0
[  434.443110][T12847]  ? __lock_acquire+0x7eb0/0x7eb0
[  434.448163][T12847]  should_fail_ex+0x394/0x4c0
[  434.452868][T12847]  should_failslab+0x9/0x20
[  434.457372][T12847]  slab_pre_alloc_hook+0x59/0x300
[  434.462398][T12847]  ? exc_page_fault+0x8c/0x100
[  434.467238][T12847]  ? sk_prot_alloc+0xe7/0x210
[  434.471917][T12847]  ? sk_prot_alloc+0xe7/0x210
[  434.476591][T12847]  __kmem_cache_alloc_node+0x53/0x260
[  434.481957][T12847]  ? exc_page_fault+0x8c/0x100
[  434.486738][T12847]  ? sk_prot_alloc+0xe7/0x210
[  434.491439][T12847]  __kmalloc+0xa7/0x240
[  434.495620][T12847]  sk_prot_alloc+0xe7/0x210
[  434.500135][T12847]  ? sk_alloc+0x24/0x350
[  434.504381][T12847]  sk_alloc+0x3a/0x350
[  434.508461][T12847]  ? bpf_ctx_init+0x154/0x190
[  434.513188][T12847]  bpf_prog_test_run_skb+0x371/0x18f0
[  434.518596][T12847]  ? __fget_files+0x28/0x460
[  434.523227][T12847]  ? __fget_files+0x3fc/0x460
[  434.527914][T12847]  ? cpu_online+0x60/0x60
[  434.532242][T12847]  bpf_prog_test_run+0x31f/0x390
[  434.537187][T12847]  __sys_bpf+0x49d/0x890
[  434.541456][T12847]  ? bpf_link_show_fdinfo+0x560/0x560
[  434.546845][T12847]  ? lock_chain_count+0x20/0x20
[  434.551705][T12847]  __x64_sys_bpf+0x7c/0x90
[  434.556129][T12847]  do_syscall_64+0x55/0xb0
[  434.560548][T12847]  ? clear_bhb_loop+0x40/0x90
[  434.565229][T12847]  ? clear_bhb_loop+0x40/0x90
[  434.569908][T12847]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  434.575813][T12847] RIP: 0033:0x7f11f0d9f559
[  434.580230][T12847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  434.599838][T12847] RSP: 002b:00007f11f1c1c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  434.608293][T12847] RAX: ffffffffffffffda RBX: 00007f11f1025fa0 RCX: 00007f11f0d9f559
[  434.616263][T12847] RDX: 0000000000000050 RSI: 0000200000000f40 RDI: 000000000000000a
[  434.624232][T12847] RBP: 00007f11f1c1c090 R08: 0000000000000000 R09: 0000000000000000
[  434.632198][T12847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  434.640166][T12847] R13: 00007f11f1026038 R14: 00007f11f1025fa0 R15: 00007ffe578a07d8
[  434.648149][T12847]  </TASK>
[  434.652751][T12837] ..ãc¤±: mtu less than device minimum
[  434.666298][T12837] bond0: (slave ..ãc¤±): Error -22 calling dev_set_mtu
[  434.677197][T12840] netlink: 13439 bytes leftover after parsing attributes in process `syz.2.1924'.
[  434.916212][T12861] netlink: 'syz.3.1928': attribute type 46 has an invalid length.
[  435.191499][T12878] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1935'.
[  435.205547][T12876] FAULT_INJECTION: forcing a failure.
[  435.205547][T12876] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  435.221691][T12876] CPU: 0 PID: 12876 Comm: syz.2.1934 Not tainted syzkaller #0
[  435.229203][T12876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  435.239283][T12876] Call Trace:
[  435.242584][T12876]  <TASK>
[  435.245530][T12876]  dump_stack_lvl+0x18c/0x250
[  435.250239][T12876]  ? show_regs_print_info+0x20/0x20
[  435.255471][T12876]  ? load_image+0x420/0x420
[  435.260006][T12876]  ? __might_fault+0xaa/0x120
[  435.264719][T12876]  ? __lock_acquire+0x7eb0/0x7eb0
[  435.265366][T12880] FAULT_INJECTION: forcing a failure.
[  435.265366][T12880] name failslab, interval 1, probability 0, space 0, times 0
[  435.269768][T12876]  should_fail_ex+0x394/0x4c0
[  435.269804][T12876]  _copy_to_user+0x2f/0xa0
[  435.269822][T12876]  bpf_test_finish+0x19f/0x650
[  435.296257][T12876]  ? bpf_test_run+0x174/0x870
[  435.300959][T12876]  ? convert_skb_to___skb+0x420/0x420
[  435.306345][T12876]  ? slab_build_skb+0x25a/0x3e0
[  435.311200][T12876]  bpf_prog_test_run_skb+0x1135/0x18f0
[  435.316692][T12876]  ? cpu_online+0x60/0x60
[  435.321046][T12876]  bpf_prog_test_run+0x31f/0x390
[  435.326008][T12876]  __sys_bpf+0x49d/0x890
[  435.330280][T12876]  ? read_tsc+0x9/0x20
[  435.334382][T12876]  ? bpf_link_show_fdinfo+0x560/0x560
[  435.339931][T12876]  ? lock_chain_count+0x20/0x20
[  435.344830][T12876]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  435.350846][T12876]  __x64_sys_bpf+0x7c/0x90
[  435.355302][T12876]  do_syscall_64+0x55/0xb0
[  435.359741][T12876]  ? clear_bhb_loop+0x40/0x90
[  435.364447][T12876]  ? clear_bhb_loop+0x40/0x90
[  435.369146][T12876]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  435.375057][T12876] RIP: 0033:0x7fb50eb9f559
[  435.379487][T12876] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  435.399115][T12876] RSP: 002b:00007fb50f9de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  435.407554][T12876] RAX: ffffffffffffffda RBX: 00007fb50ee25fa0 RCX: 00007fb50eb9f559
[  435.415538][T12876] RDX: 0000000000000050 RSI: 0000200000001a00 RDI: 000000000000000a
[  435.423534][T12876] RBP: 00007fb50f9de090 R08: 0000000000000000 R09: 0000000000000000
[  435.431523][T12876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  435.439518][T12876] R13: 00007fb50ee26038 R14: 00007fb50ee25fa0 R15: 00007ffffbac0a88
[  435.447515][T12876]  </TASK>
[  435.450552][T12880] CPU: 1 PID: 12880 Comm: syz.0.1936 Not tainted syzkaller #0
[  435.458135][T12880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  435.468190][T12880] Call Trace:
[  435.471480][T12880]  <TASK>
[  435.474413][T12880]  dump_stack_lvl+0x18c/0x250
[  435.479096][T12880]  ? show_regs_print_info+0x20/0x20
[  435.484292][T12880]  ? load_image+0x420/0x420
[  435.488792][T12880]  ? __might_sleep+0xe0/0xe0
[  435.493381][T12880]  ? __lock_acquire+0x7eb0/0x7eb0
[  435.498402][T12880]  should_fail_ex+0x394/0x4c0
[  435.503084][T12880]  should_failslab+0x9/0x20
[  435.507581][T12880]  slab_pre_alloc_hook+0x59/0x300
[  435.512598][T12880]  ? exc_page_fault+0x8c/0x100
[  435.517358][T12880]  ? sk_prot_alloc+0xe7/0x210
[  435.522038][T12880]  ? sk_prot_alloc+0xe7/0x210
[  435.526710][T12880]  __kmem_cache_alloc_node+0x53/0x260
[  435.532073][T12880]  ? exc_page_fault+0x8c/0x100
[  435.536829][T12880]  ? sk_prot_alloc+0xe7/0x210
[  435.541507][T12880]  __kmalloc+0xa7/0x240
[  435.545667][T12880]  sk_prot_alloc+0xe7/0x210
[  435.550170][T12880]  ? sk_alloc+0x24/0x350
[  435.554415][T12880]  sk_alloc+0x3a/0x350
[  435.558483][T12880]  ? bpf_ctx_init+0x154/0x190
[  435.563167][T12880]  bpf_prog_test_run_skb+0x371/0x18f0
[  435.568543][T12880]  ? __fget_files+0x28/0x460
[  435.573136][T12880]  ? __fget_files+0x3fc/0x460
[  435.577821][T12880]  ? cpu_online+0x60/0x60
[  435.582173][T12880]  bpf_prog_test_run+0x31f/0x390
[  435.587195][T12880]  __sys_bpf+0x49d/0x890
[  435.591446][T12880]  ? bpf_link_show_fdinfo+0x560/0x560
[  435.596824][T12880]  ? lock_chain_count+0x20/0x20
[  435.601682][T12880]  __x64_sys_bpf+0x7c/0x90
[  435.606098][T12880]  do_syscall_64+0x55/0xb0
[  435.610514][T12880]  ? clear_bhb_loop+0x40/0x90
[  435.615211][T12880]  ? clear_bhb_loop+0x40/0x90
[  435.619885][T12880]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  435.625770][T12880] RIP: 0033:0x7f475979f559
[  435.630178][T12880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  435.649786][T12880] RSP: 002b:00007f475a6d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  435.658203][T12880] RAX: ffffffffffffffda RBX: 00007f4759a25fa0 RCX: 00007f475979f559
[  435.666168][T12880] RDX: 0000000000000050 RSI: 0000200000000f40 RDI: 000000000000000a
[  435.674132][T12880] RBP: 00007f475a6d5090 R08: 0000000000000000 R09: 0000000000000000
[  435.682100][T12880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  435.690065][T12880] R13: 00007f4759a26038 R14: 00007f4759a25fa0 R15: 00007ffdc1b913a8
[  435.698047][T12880]  </TASK>
[  435.814675][T12868] delete_channel: no stack
[  436.237475][T12902] netlink: 'syz.1.1943': attribute type 3 has an invalid length.
[  436.253540][T12902] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1943'.
[  436.443022][T12910] FAULT_INJECTION: forcing a failure.
[  436.443022][T12910] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  436.466799][T12910] CPU: 1 PID: 12910 Comm: syz.0.1946 Not tainted syzkaller #0
[  436.474403][T12910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  436.484485][T12910] Call Trace:
[  436.487790][T12910]  <TASK>
[  436.490742][T12910]  dump_stack_lvl+0x18c/0x250
[  436.495455][T12910]  ? show_regs_print_info+0x20/0x20
[  436.500666][T12910]  ? load_image+0x420/0x420
[  436.505319][T12910]  ? __might_fault+0xaa/0x120
[  436.510024][T12910]  ? __lock_acquire+0x7eb0/0x7eb0
[  436.515057][T12910]  should_fail_ex+0x394/0x4c0
[  436.519740][T12910]  _copy_to_user+0x2f/0xa0
[  436.524190][T12910]  bpf_test_finish+0x25a/0x650
[  436.528982][T12910]  ? bpf_test_run+0x174/0x870
[  436.533668][T12910]  ? convert_skb_to___skb+0x420/0x420
[  436.539046][T12910]  ? slab_build_skb+0x25a/0x3e0
[  436.543904][T12910]  bpf_prog_test_run_skb+0x1135/0x18f0
[  436.549392][T12910]  ? cpu_online+0x60/0x60
[  436.553720][T12910]  bpf_prog_test_run+0x31f/0x390
[  436.558670][T12910]  __sys_bpf+0x49d/0x890
[  436.562911][T12910]  ? read_tsc+0x9/0x20
[  436.566979][T12910]  ? bpf_link_show_fdinfo+0x560/0x560
[  436.572366][T12910]  ? lock_chain_count+0x20/0x20
[  436.577217][T12910]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  436.583289][T12910]  __x64_sys_bpf+0x7c/0x90
[  436.587706][T12910]  do_syscall_64+0x55/0xb0
[  436.592123][T12910]  ? clear_bhb_loop+0x40/0x90
[  436.596802][T12910]  ? clear_bhb_loop+0x40/0x90
[  436.601479][T12910]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  436.607394][T12910] RIP: 0033:0x7f475979f559
[  436.611821][T12910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  436.631426][T12910] RSP: 002b:00007f475a6d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  436.639868][T12910] RAX: ffffffffffffffda RBX: 00007f4759a25fa0 RCX: 00007f475979f559
[  436.647840][T12910] RDX: 0000000000000050 RSI: 0000200000001a00 RDI: 000000000000000a
[  436.655815][T12910] RBP: 00007f475a6d5090 R08: 0000000000000000 R09: 0000000000000000
[  436.663864][T12910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  436.671838][T12910] R13: 00007f4759a26038 R14: 00007f4759a25fa0 R15: 00007ffdc1b913a8
[  436.679822][T12910]  </TASK>
[  436.700804][T12917] FAULT_INJECTION: forcing a failure.
[  436.700804][T12917] name failslab, interval 1, probability 0, space 0, times 0
[  436.731763][T12917] CPU: 1 PID: 12917 Comm: syz.1.1947 Not tainted syzkaller #0
[  436.739281][T12917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  436.749367][T12917] Call Trace:
[  436.752667][T12917]  <TASK>
[  436.755614][T12917]  dump_stack_lvl+0x18c/0x250
[  436.760332][T12917]  ? show_regs_print_info+0x20/0x20
[  436.765563][T12917]  ? load_image+0x420/0x420
[  436.770095][T12917]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  436.776113][T12917]  ? lock_chain_count+0x20/0x20
[  436.780992][T12917]  should_fail_ex+0x394/0x4c0
[  436.785708][T12917]  should_failslab+0x9/0x20
[  436.790299][T12917]  slab_pre_alloc_hook+0x59/0x300
[  436.795356][T12917]  ? __debug_object_init+0xec/0x450
[  436.800696][T12917]  kmem_cache_alloc+0x5a/0x2d0
[  436.805690][T12917]  ? slab_build_skb+0x28/0x3e0
[  436.810593][T12917]  slab_build_skb+0x28/0x3e0
[  436.815193][T12917]  bpf_prog_test_run_skb+0x38f/0x18f0
[  436.820567][T12917]  ? __fget_files+0x28/0x460
[  436.825155][T12917]  ? __fget_files+0x3fc/0x460
[  436.829845][T12917]  ? cpu_online+0x60/0x60
[  436.834184][T12917]  bpf_prog_test_run+0x31f/0x390
[  436.839152][T12917]  __sys_bpf+0x49d/0x890
[  436.843532][T12917]  ? bpf_link_show_fdinfo+0x560/0x560
[  436.848915][T12917]  ? lock_chain_count+0x20/0x20
[  436.853780][T12917]  __x64_sys_bpf+0x7c/0x90
[  436.858226][T12917]  do_syscall_64+0x55/0xb0
[  436.862679][T12917]  ? clear_bhb_loop+0x40/0x90
[  436.867368][T12917]  ? clear_bhb_loop+0x40/0x90
[  436.872065][T12917]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  436.877966][T12917] RIP: 0033:0x7f0a38f9f559
[  436.882380][T12917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  436.902003][T12917] RSP: 002b:00007f0a39e70028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  436.910455][T12917] RAX: ffffffffffffffda RBX: 00007f0a39225fa0 RCX: 00007f0a38f9f559
[  436.918453][T12917] RDX: 0000000000000050 RSI: 0000200000000f40 RDI: 000000000000000a
[  436.926451][T12917] RBP: 00007f0a39e70090 R08: 0000000000000000 R09: 0000000000000000
[  436.934452][T12917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  436.942540][T12917] R13: 00007f0a39226038 R14: 00007f0a39225fa0 R15: 00007fff1af9fe58
[  436.950567][T12917]  </TASK>
[  436.973430][T12919] delete_channel: no stack
[  437.376358][T12936] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1950'.
[  438.846384][T12973] FAULT_INJECTION: forcing a failure.
[  438.846384][T12973] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  438.863334][T12973] CPU: 0 PID: 12973 Comm: syz.0.1958 Not tainted syzkaller #0
[  438.870847][T12973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  438.880944][T12973] Call Trace:
[  438.884245][T12973]  <TASK>
[  438.887203][T12973]  dump_stack_lvl+0x18c/0x250
[  438.891916][T12973]  ? show_regs_print_info+0x20/0x20
[  438.897161][T12973]  ? load_image+0x420/0x420
[  438.901699][T12973]  ? __might_fault+0xaa/0x120
[  438.906409][T12973]  ? __lock_acquire+0x7eb0/0x7eb0
[  438.911564][T12973]  should_fail_ex+0x394/0x4c0
[  438.916283][T12973]  _copy_to_user+0x2f/0xa0
[  438.920734][T12973]  bpf_test_finish+0x4e7/0x650
[  438.925535][T12973]  ? bpf_test_run+0x174/0x870
[  438.930253][T12973]  ? convert_skb_to___skb+0x420/0x420
[  438.935686][T12973]  ? bpf_prog_test_run_skb+0x599/0x18f0
[  438.941267][T12973]  bpf_prog_test_run_skb+0x1135/0x18f0
[  438.946785][T12973]  ? cpu_online+0x60/0x60
[  438.951162][T12973]  bpf_prog_test_run+0x31f/0x390
[  438.956165][T12973]  __sys_bpf+0x49d/0x890
[  438.960449][T12973]  ? read_tsc+0x9/0x20
[  438.964551][T12973]  ? bpf_link_show_fdinfo+0x560/0x560
[  438.969978][T12973]  ? lock_chain_count+0x20/0x20
[  438.974862][T12973]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  438.980932][T12973]  __x64_sys_bpf+0x7c/0x90
[  438.985477][T12973]  do_syscall_64+0x55/0xb0
[  438.989947][T12973]  ? clear_bhb_loop+0x40/0x90
[  438.994660][T12973]  ? clear_bhb_loop+0x40/0x90
[  438.999378][T12973]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  439.005308][T12973] RIP: 0033:0x7f475979f559
[  439.009754][T12973] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  439.029391][T12973] RSP: 002b:00007f475a6d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  439.037841][T12973] RAX: ffffffffffffffda RBX: 00007f4759a25fa0 RCX: 00007f475979f559
[  439.045844][T12973] RDX: 0000000000000050 RSI: 0000200000001a00 RDI: 000000000000000a
[  439.053843][T12973] RBP: 00007f475a6d5090 R08: 0000000000000000 R09: 0000000000000000
[  439.061848][T12973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  439.069853][T12973] R13: 00007f4759a26038 R14: 00007f4759a25fa0 R15: 00007ffdc1b913a8
[  439.077876][T12973]  </TASK>
[  439.103388][T12975] delete_channel: no stack
[  439.331989][T12985] FAULT_INJECTION: forcing a failure.
[  439.331989][T12985] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  439.366722][T12985] CPU: 1 PID: 12985 Comm: syz.2.1960 Not tainted syzkaller #0
[  439.374247][T12985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  439.384372][T12985] Call Trace:
[  439.387687][T12985]  <TASK>
[  439.390641][T12985]  dump_stack_lvl+0x18c/0x250
[  439.395359][T12985]  ? show_regs_print_info+0x20/0x20
[  439.400593][T12985]  ? load_image+0x420/0x420
[  439.405125][T12985]  ? __might_fault+0xaa/0x120
[  439.409827][T12985]  ? __lock_acquire+0x7eb0/0x7eb0
[  439.414886][T12985]  should_fail_ex+0x394/0x4c0
[  439.419607][T12985]  _copy_to_user+0x2f/0xa0
[  439.424069][T12985]  bpf_test_finish+0x19f/0x650
[  439.428870][T12985]  ? bpf_test_run+0x174/0x870
[  439.433602][T12985]  ? convert_skb_to___skb+0x420/0x420
[  439.439007][T12985]  ? __skb_checksum+0x800/0x800
[  439.443894][T12985]  bpf_prog_test_run_skb+0x1135/0x18f0
[  439.449391][T12985]  ? cpu_online+0x60/0x60
[  439.453721][T12985]  bpf_prog_test_run+0x31f/0x390
[  439.458659][T12985]  __sys_bpf+0x49d/0x890
[  439.462900][T12985]  ? bpf_link_show_fdinfo+0x560/0x560
[  439.468290][T12985]  ? lock_chain_count+0x20/0x20
[  439.473150][T12985]  __x64_sys_bpf+0x7c/0x90
[  439.477567][T12985]  do_syscall_64+0x55/0xb0
[  439.482095][T12985]  ? clear_bhb_loop+0x40/0x90
[  439.486815][T12985]  ? clear_bhb_loop+0x40/0x90
[  439.491514][T12985]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  439.498531][T12985] RIP: 0033:0x7fb50eb9f559
[  439.502956][T12985] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  439.522589][T12985] RSP: 002b:00007fb50f9de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  439.531024][T12985] RAX: ffffffffffffffda RBX: 00007fb50ee25fa0 RCX: 00007fb50eb9f559
[  439.539001][T12985] RDX: 0000000000000050 RSI: 0000200000000f40 RDI: 000000000000000a
[  439.546993][T12985] RBP: 00007fb50f9de090 R08: 0000000000000000 R09: 0000000000000000
[  439.554993][T12985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  439.562983][T12985] R13: 00007fb50ee26038 R14: 00007fb50ee25fa0 R15: 00007ffffbac0a88
[  439.571008][T12985]  </TASK>
[  439.714973][T13006] netlink: 'syz.3.1965': attribute type 3 has an invalid length.
[  439.733230][T13006] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.1965'.
[  439.867292][T13013] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.1967'.
[  439.976562][T13017] netlink: 134780 bytes leftover after parsing attributes in process `syz.2.1966'.
[  440.052895][T13008] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1966'.
[  440.077008][T13019] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1969'.
[  440.282431][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  440.293260][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  441.027082][T13022] delete_channel: no stack
[  442.127235][T13043] netlink: 'syz.1.1976': attribute type 21 has an invalid length.
[  442.138004][T13037] FAULT_INJECTION: forcing a failure.
[  442.138004][T13037] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  442.149939][T13043] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1976'.
[  442.152274][T13037] CPU: 1 PID: 13037 Comm: syz.2.1977 Not tainted syzkaller #0
[  442.168146][T13037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  442.170539][T13043] netlink: 'syz.1.1976': attribute type 4 has an invalid length.
[  442.178203][T13037] Call Trace:
[  442.178217][T13037]  <TASK>
[  442.178227][T13037]  dump_stack_lvl+0x18c/0x250
[  442.178257][T13037]  ? show_regs_print_info+0x20/0x20
[  442.178279][T13037]  ? load_image+0x420/0x420
[  442.206581][T13037]  ? __lock_acquire+0x7eb0/0x7eb0
[  442.211639][T13037]  ? mark_lock+0x94/0x320
[  442.215996][T13037]  should_fail_ex+0x394/0x4c0
[  442.220695][T13037]  prepare_alloc_pages+0x1e1/0x5b0
[  442.225823][T13037]  __alloc_pages+0x134/0x460
[  442.230427][T13037]  ? zone_statistics+0x170/0x170
[  442.235374][T13037]  ? do_wp_page+0x820/0x34d0
[  442.239960][T13037]  ? do_wp_page+0xf58/0x34d0
[  442.244545][T13037]  ? __lock_acquire+0x7eb0/0x7eb0
[  442.249569][T13037]  __folio_alloc+0x10/0x20
[  442.253982][T13037]  vma_alloc_folio+0x474/0x8f0
[  442.258748][T13037]  do_wp_page+0x11bc/0x34d0
[  442.263283][T13037]  ? folio_put+0xd0/0xd0
[  442.267524][T13037]  ? do_raw_spin_lock+0x11f/0x2b0
[  442.272553][T13037]  ? __rwlock_init+0x150/0x150
[  442.277329][T13037]  handle_mm_fault+0x1300/0x4a40
[  442.282268][T13037]  ? handle_mm_fault+0xe6/0x4a40
[  442.287208][T13037]  ? numa_migrate_prep+0x350/0x350
[  442.292328][T13037]  ? lock_chain_count+0x20/0x20
[  442.297182][T13037]  ? lock_mm_and_find_vma+0x9c/0x2f0
[  442.302467][T13037]  do_user_addr_fault+0xeb7/0x13e0
[  442.307616][T13037]  exc_page_fault+0x64/0x100
[  442.312205][T13037]  asm_exc_page_fault+0x26/0x30
[  442.317057][T13037] RIP: 0010:rep_movs_alternative+0x15/0x90
[  442.322899][T13037] Code: 8b 1c 24 4c 8b 64 24 08 48 83 c4 10 c3 cc cc cc cc cc cc cc cc f3 0f 1e fa 48 83 f9 40 73 40 83 f9 08 73 21 85 c9 74 0f 8a 06 <88> 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 66 2e 0f 1f 84 00 00 00
[  442.342510][T13037] RSP: 0018:ffffc9000bbb7ad0 EFLAGS: 00050202
[  442.348578][T13037] RAX: ffffffff842f2bac RBX: 0000000000000004 RCX: 0000000000000004
[  442.356543][T13037] RDX: 0000000000000000 RSI: ffffc9000bbb7b80 RDI: 0000200000000f4c
[  442.364514][T13037] RBP: ffffc9000bbb7c20 R08: 0000000000000003 R09: 0000000000000004
[  442.372494][T13037] R10: dffffc0000000000 R11: fffff52001776f70 R12: 0000200000000f50
[  442.380579][T13037] R13: dffffc0000000000 R14: 0000200000000f4c R15: ffffc9000bbb7b80
[  442.388559][T13037]  ? check_zeroed_user+0xc/0x160
[  442.393502][T13037]  _copy_to_user+0x85/0xa0
[  442.397919][T13037]  bpf_test_finish+0x19f/0x650
[  442.402686][T13037]  ? bpf_test_run+0x174/0x870
[  442.407364][T13037]  ? convert_skb_to___skb+0x420/0x420
[  442.412730][T13037]  ? __skb_checksum+0x800/0x800
[  442.417588][T13037]  bpf_prog_test_run_skb+0x1135/0x18f0
[  442.423063][T13037]  ? cpu_online+0x60/0x60
[  442.427408][T13037]  bpf_prog_test_run+0x31f/0x390
[  442.432398][T13037]  __sys_bpf+0x49d/0x890
[  442.436660][T13037]  ? bpf_link_show_fdinfo+0x560/0x560
[  442.442046][T13037]  ? lock_chain_count+0x20/0x20
[  442.446903][T13037]  __x64_sys_bpf+0x7c/0x90
[  442.451321][T13037]  do_syscall_64+0x55/0xb0
[  442.455743][T13037]  ? clear_bhb_loop+0x40/0x90
[  442.460443][T13037]  ? clear_bhb_loop+0x40/0x90
[  442.465124][T13037]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  442.471015][T13037] RIP: 0033:0x7fb50eb9f559
[  442.475428][T13037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  442.495052][T13037] RSP: 002b:00007fb50f9de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  442.503473][T13037] RAX: ffffffffffffffda RBX: 00007fb50ee25fa0 RCX: 00007fb50eb9f559
[  442.511441][T13037] RDX: 0000000000000050 RSI: 0000200000000f40 RDI: 000000000000000a
[  442.519413][T13037] RBP: 00007fb50f9de090 R08: 0000000000000000 R09: 0000000000000000
[  442.527395][T13037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  442.535383][T13037] R13: 00007fb50ee26038 R14: 00007fb50ee25fa0 R15: 00007ffffbac0a88
[  442.543412][T13037]  </TASK>
[  442.711677][T13052] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1980'.
[  442.913589][T13053] netlink: 'syz.2.1979': attribute type 19 has an invalid length.
[  442.934394][T13053] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1979'.
[  446.198939][T13101] FAULT_INJECTION: forcing a failure.
[  446.198939][T13101] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  446.233760][T13101] CPU: 0 PID: 13101 Comm: syz.0.1989 Not tainted syzkaller #0
[  446.241281][T13101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  446.251347][T13101] Call Trace:
[  446.254635][T13101]  <TASK>
[  446.257569][T13101]  dump_stack_lvl+0x18c/0x250
[  446.262248][T13101]  ? show_regs_print_info+0x20/0x20
[  446.267465][T13101]  ? load_image+0x420/0x420
[  446.271997][T13101]  ? __might_fault+0xaa/0x120
[  446.276699][T13101]  ? __lock_acquire+0x7eb0/0x7eb0
[  446.281755][T13101]  should_fail_ex+0x394/0x4c0
[  446.286479][T13101]  _copy_to_user+0x2f/0xa0
[  446.290922][T13101]  bpf_test_finish+0x4e7/0x650
[  446.295722][T13101]  ? bpf_test_run+0x174/0x870
[  446.300441][T13101]  ? convert_skb_to___skb+0x420/0x420
[  446.305847][T13101]  ? __skb_checksum+0x800/0x800
[  446.310740][T13101]  bpf_prog_test_run_skb+0x1135/0x18f0
[  446.316249][T13101]  ? cpu_online+0x60/0x60
[  446.320608][T13101]  bpf_prog_test_run+0x31f/0x390
[  446.325571][T13101]  __sys_bpf+0x49d/0x890
[  446.330181][T13101]  ? bpf_link_show_fdinfo+0x560/0x560
[  446.335571][T13101]  ? lock_chain_count+0x20/0x20
[  446.340424][T13101]  __x64_sys_bpf+0x7c/0x90
[  446.344843][T13101]  do_syscall_64+0x55/0xb0
[  446.349255][T13101]  ? clear_bhb_loop+0x40/0x90
[  446.353925][T13101]  ? clear_bhb_loop+0x40/0x90
[  446.358596][T13101]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  446.364480][T13101] RIP: 0033:0x7f475979f559
[  446.368884][T13101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  446.388485][T13101] RSP: 002b:00007f475a6d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  446.396898][T13101] RAX: ffffffffffffffda RBX: 00007f4759a25fa0 RCX: 00007f475979f559
[  446.404867][T13101] RDX: 0000000000000050 RSI: 0000200000000f40 RDI: 000000000000000a
[  446.412831][T13101] RBP: 00007f475a6d5090 R08: 0000000000000000 R09: 0000000000000000
[  446.420797][T13101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  446.428758][T13101] R13: 00007f4759a26038 R14: 00007f4759a25fa0 R15: 00007ffdc1b913a8
[  446.436733][T13101]  </TASK>
[  446.700495][T13122] raw_sendmsg: syz.1.1994 forgot to set AF_INET. Fix it!
[  446.816350][T13132] netlink: 212412 bytes leftover after parsing attributes in process `syz.1.1994'.
[  446.851377][T13125] netlink: 'syz.2.1996': attribute type 9 has an invalid length.
[  446.866941][T13133] netlink: 'syz.1.1994': attribute type 21 has an invalid length.
[  446.868490][T13132] openvswitch: netlink: Flow key attr not present in new flow.
[  446.882797][T13125] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1996'.
[  446.905029][T13133] netlink: 'syz.1.1994': attribute type 4 has an invalid length.
[  446.928584][T13133] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1994'.
[  447.991907][T13153] FAULT_INJECTION: forcing a failure.
[  447.991907][T13153] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  448.037069][T13153] CPU: 0 PID: 13153 Comm: syz.0.2001 Not tainted syzkaller #0
[  448.044679][T13153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  448.054761][T13153] Call Trace:
[  448.058064][T13153]  <TASK>
[  448.061014][T13153]  dump_stack_lvl+0x18c/0x250
[  448.065767][T13153]  ? show_regs_print_info+0x20/0x20
[  448.071000][T13153]  ? load_image+0x420/0x420
[  448.075532][T13153]  ? __might_fault+0xaa/0x120
[  448.080238][T13153]  ? __lock_acquire+0x7eb0/0x7eb0
[  448.085304][T13153]  should_fail_ex+0x394/0x4c0
[  448.090026][T13153]  _copy_to_user+0x2f/0xa0
[  448.094478][T13153]  bpf_test_finish+0x4e7/0x650
[  448.099282][T13153]  ? bpf_test_run+0x174/0x870
[  448.103991][T13153]  ? convert_skb_to___skb+0x420/0x420
[  448.109393][T13153]  ? __skb_checksum+0x800/0x800
[  448.114291][T13153]  bpf_prog_test_run_skb+0x1135/0x18f0
[  448.119804][T13153]  ? cpu_online+0x60/0x60
[  448.124172][T13153]  bpf_prog_test_run+0x31f/0x390
[  448.129151][T13153]  __sys_bpf+0x49d/0x890
[  448.133425][T13153]  ? bpf_link_show_fdinfo+0x560/0x560
[  448.138837][T13153]  ? lock_chain_count+0x20/0x20
[  448.143737][T13153]  __x64_sys_bpf+0x7c/0x90
[  448.148187][T13153]  do_syscall_64+0x55/0xb0
[  448.152631][T13153]  ? clear_bhb_loop+0x40/0x90
[  448.157334][T13153]  ? clear_bhb_loop+0x40/0x90
[  448.162042][T13153]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  448.167955][T13153] RIP: 0033:0x7f475979f559
[  448.172394][T13153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  448.192021][T13153] RSP: 002b:00007f475a6d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  448.200455][T13153] RAX: ffffffffffffffda RBX: 00007f4759a25fa0 RCX: 00007f475979f559
[  448.208443][T13153] RDX: 0000000000000050 RSI: 0000200000000f40 RDI: 000000000000000a
[  448.216432][T13153] RBP: 00007f475a6d5090 R08: 0000000000000000 R09: 0000000000000000
[  448.224423][T13153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  448.232414][T13153] R13: 00007f4759a26038 R14: 00007f4759a25fa0 R15: 00007ffdc1b913a8
[  448.240418][T13153]  </TASK>
[  448.322666][T13160] netlink: 'syz.3.2002': attribute type 39 has an invalid length.
[  448.561746][T13175] netlink: 'syz.2.2006': attribute type 9 has an invalid length.
[  448.594077][T13175] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2006'.
[  449.365286][T13178] netlink: 'syz.2.2006': attribute type 9 has an invalid length.
[  449.388624][T13178] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2006'.
[  450.149576][T13212] netlink: 'syz.1.2015': attribute type 21 has an invalid length.
[  450.189173][T13212] netlink: 'syz.1.2015': attribute type 4 has an invalid length.
[  450.201748][T13203] FAULT_INJECTION: forcing a failure.
[  450.201748][T13203] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  450.215948][T13203] CPU: 0 PID: 13203 Comm: syz.0.2013 Not tainted syzkaller #0
[  450.223475][T13203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  450.233562][T13203] Call Trace:
[  450.236859][T13203]  <TASK>
[  450.239839][T13203]  dump_stack_lvl+0x18c/0x250
[  450.244553][T13203]  ? show_regs_print_info+0x20/0x20
[  450.249771][T13203]  ? load_image+0x420/0x420
[  450.254299][T13203]  ? __lock_acquire+0x7eb0/0x7eb0
[  450.259362][T13203]  should_fail_ex+0x394/0x4c0
[  450.264064][T13203]  prepare_alloc_pages+0x1e1/0x5b0
[  450.269211][T13203]  __alloc_pages+0x134/0x460
[  450.273826][T13203]  ? zone_statistics+0x170/0x170
[  450.278817][T13203]  ? do_wp_page+0x820/0x34d0
[  450.283427][T13203]  ? do_wp_page+0xf58/0x34d0
[  450.288033][T13203]  ? __lock_acquire+0x7eb0/0x7eb0
[  450.293088][T13203]  __folio_alloc+0x10/0x20
[  450.297525][T13203]  vma_alloc_folio+0x474/0x8f0
[  450.302320][T13203]  do_wp_page+0x11bc/0x34d0
[  450.306875][T13203]  ? folio_put+0xd0/0xd0
[  450.311137][T13203]  ? do_raw_spin_lock+0x11f/0x2b0
[  450.316192][T13203]  ? __rwlock_init+0x150/0x150
[  450.321034][T13203]  handle_mm_fault+0x1300/0x4a40
[  450.326000][T13203]  ? handle_mm_fault+0xe6/0x4a40
[  450.330984][T13203]  ? lock_vma_under_rcu+0x52c/0x660
[  450.336201][T13203]  ? numa_migrate_prep+0x350/0x350
[  450.341322][T13203]  ? lock_vma_under_rcu+0xe5/0x660
[  450.346487][T13203]  ? do_user_addr_fault+0x1ae/0x13e0
[  450.351818][T13203]  do_user_addr_fault+0x5b2/0x13e0
[  450.356984][T13203]  ? lock_chain_count+0x20/0x20
[  450.361870][T13203]  ? rcu_is_watching+0x15/0xb0
[  450.366665][T13203]  exc_page_fault+0x64/0x100
[  450.371282][T13203]  ? clear_bhb_loop+0x40/0x90
[  450.375994][T13203]  asm_exc_page_fault+0x26/0x30
[  450.380865][T13203] RIP: 0033:0x7f4759665454
[  450.385300][T13203] Code: 00 00 00 64 f0 83 04 25 a0 ff ff ff 01 64 48 8b 04 25 00 00 00 00 48 8d b8 d8 fe ff ff e8 74 b1 0d 00 85 c0 0f 84 ec 01 00 00 <64> f0 83 2c 25 a0 ff ff ff 01 e8 1d 93 0c 00 48 8b 4c 24 08 8b 00
[  450.404935][T13203] RSP: 002b:00007f475a6d5050 EFLAGS: 00010206
[  450.411029][T13203] RAX: 0000000000000000 RBX: 00007f4759a25fa0 RCX: 00007f4759836b50
[  450.419015][T13203] RDX: 0000000000000000 RSI: 0000200000000f40 RDI: 000000000000000a
[  450.427028][T13203] RBP: 00007f475a6d5090 R08: 0000000000000000 R09: 0000000000000000
[  450.435022][T13203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  450.443011][T13203] R13: 00007f4759a26038 R14: 00007f4759a25fa0 R15: 00007ffdc1b913a8
[  450.451457][T13203]  </TASK>
[  450.469365][T13203] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[  450.685165][T13220] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2019'.
[  450.696787][T13220] netlink: 'syz.3.2019': attribute type 1 has an invalid length.
[  450.705856][T13220] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2019'.
[  450.724548][T13220] netlink: 'syz.3.2019': attribute type 10 has an invalid length.
[  451.735645][T13249] FAULT_INJECTION: forcing a failure.
[  451.735645][T13249] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  451.750607][T13249] CPU: 0 PID: 13249 Comm: syz.1.2027 Not tainted syzkaller #0
[  451.758101][T13249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  451.768168][T13249] Call Trace:
[  451.771447][T13249]  <TASK>
[  451.774380][T13249]  dump_stack_lvl+0x18c/0x250
[  451.779061][T13249]  ? show_regs_print_info+0x20/0x20
[  451.784254][T13249]  ? load_image+0x420/0x420
[  451.788749][T13249]  ? __lock_acquire+0x7eb0/0x7eb0
[  451.793766][T13249]  ? mark_lock+0x94/0x320
[  451.798087][T13249]  should_fail_ex+0x394/0x4c0
[  451.802766][T13249]  prepare_alloc_pages+0x1e1/0x5b0
[  451.807877][T13249]  __alloc_pages+0x134/0x460
[  451.812461][T13249]  ? zone_statistics+0x170/0x170
[  451.817397][T13249]  ? do_wp_page+0x820/0x34d0
[  451.821982][T13249]  ? do_wp_page+0xf58/0x34d0
[  451.826716][T13249]  ? __lock_acquire+0x7eb0/0x7eb0
[  451.832296][T13249]  __folio_alloc+0x10/0x20
[  451.836718][T13249]  vma_alloc_folio+0x474/0x8f0
[  451.841484][T13249]  do_wp_page+0x11bc/0x34d0
[  451.845993][T13249]  ? folio_put+0xd0/0xd0
[  451.850231][T13249]  ? do_raw_spin_lock+0x11f/0x2b0
[  451.855269][T13249]  ? __rwlock_init+0x150/0x150
[  451.860041][T13249]  handle_mm_fault+0x1300/0x4a40
[  451.864979][T13249]  ? handle_mm_fault+0xe6/0x4a40
[  451.869916][T13249]  ? lock_vma_under_rcu+0x52c/0x660
[  451.875110][T13249]  ? numa_migrate_prep+0x350/0x350
[  451.880219][T13249]  ? lock_vma_under_rcu+0xe5/0x660
[  451.885334][T13249]  ? do_user_addr_fault+0x1ae/0x13e0
[  451.890649][T13249]  do_user_addr_fault+0x5b2/0x13e0
[  451.895792][T13249]  ? lock_chain_count+0x20/0x20
[  451.900671][T13249]  ? rcu_is_watching+0x15/0xb0
[  451.905463][T13249]  exc_page_fault+0x64/0x100
[  451.910054][T13249]  asm_exc_page_fault+0x26/0x30
[  451.914912][T13249] RIP: 0033:0x7f0a38f5a694
[  451.919324][T13249] Code: 00 00 00 00 66 90 53 49 89 ca 64 48 8b 1c 25 10 00 00 00 8b 83 08 03 00 00 80 3d 2e 00 2a 00 00 75 44 a8 01 75 40 a8 10 75 3c <41> 51 4c 8d 9b 08 03 00 00 49 89 c9 48 89 f1 41 50 48 8b 74 24 20
[  451.938963][T13249] RSP: 002b:00007f0a39e70000 EFLAGS: 00010246
[  451.945175][T13249] RAX: 0000000000000000 RBX: 00007f0a39e706c0 RCX: 0000000000000000
[  451.953144][T13249] RDX: 000000000000000f RSI: 00007f0a39e700a0 RDI: 0000000000000005
[  451.961134][T13249] RBP: 00007f0a39e70090 R08: 0000000000000000 R09: 0000000000000000
[  451.969161][T13249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  451.977142][T13249] R13: 00007f0a39226038 R14: 00007f0a39225fa0 R15: 00007fff1af9fe58
[  451.985128][T13249]  </TASK>
[  451.994447][T13249] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[  452.129111][T13261] netlink: 'syz.1.2030': attribute type 10 has an invalid length.
[  452.155343][T13261] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2030'.
[  452.178775][T13261] bridge0: port 3(ipvlan1) entered blocking state
[  452.186608][T13261] bridge0: port 3(ipvlan1) entered disabled state
[  452.233570][T13261] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  452.331981][T13244] delete_channel: no stack
[  453.070719][T13285] netlink: 'syz.2.2038': attribute type 3 has an invalid length.
[  453.089352][T13285] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2038'.
[  453.200356][T13283] FAULT_INJECTION: forcing a failure.
[  453.200356][T13283] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  453.218666][T13283] CPU: 1 PID: 13283 Comm: syz.3.2040 Not tainted syzkaller #0
[  453.226164][T13283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  453.236224][T13283] Call Trace:
[  453.239521][T13283]  <TASK>
[  453.242472][T13283]  dump_stack_lvl+0x18c/0x250
[  453.247183][T13283]  ? show_regs_print_info+0x20/0x20
[  453.252415][T13283]  ? load_image+0x420/0x420
[  453.256951][T13283]  ? __lock_acquire+0x7eb0/0x7eb0
[  453.262009][T13283]  ? snprintf+0xe9/0x140
[  453.266284][T13283]  should_fail_ex+0x394/0x4c0
[  453.271000][T13283]  _copy_to_user+0x2f/0xa0
[  453.275419][T13283]  simple_read_from_buffer+0xe7/0x150
[  453.280790][T13283]  proc_fail_nth_read+0x1e8/0x260
[  453.285853][T13283]  ? proc_fault_inject_write+0x360/0x360
[  453.291491][T13283]  ? fsnotify_perm+0x271/0x5e0
[  453.296257][T13283]  ? proc_fault_inject_write+0x360/0x360
[  453.301888][T13283]  vfs_read+0x298/0x990
[  453.306049][T13283]  ? kernel_read+0x1e0/0x1e0
[  453.310640][T13283]  ? __fget_files+0x28/0x460
[  453.315227][T13283]  ? __fget_files+0x3fc/0x460
[  453.319931][T13283]  ? __fdget_pos+0x2a3/0x330
[  453.324520][T13283]  ? ksys_read+0x74/0x260
[  453.328849][T13283]  ksys_read+0x151/0x260
[  453.333092][T13283]  ? vfs_write+0x9a0/0x9a0
[  453.337509][T13283]  ? lockdep_hardirqs_on+0x98/0x150
[  453.342706][T13283]  do_syscall_64+0x55/0xb0
[  453.347118][T13283]  ? clear_bhb_loop+0x40/0x90
[  453.351795][T13283]  ? clear_bhb_loop+0x40/0x90
[  453.356468][T13283]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  453.362361][T13283] RIP: 0033:0x7f11f0d5fd8e
[  453.366775][T13283] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  453.386562][T13283] RSP: 002b:00007f11f1c1bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  453.394979][T13283] RAX: ffffffffffffffda RBX: 00007f11f1c1c6c0 RCX: 00007f11f0d5fd8e
[  453.402947][T13283] RDX: 000000000000000f RSI: 00007f11f1c1c0a0 RDI: 0000000000000005
[  453.410916][T13283] RBP: 00007f11f1c1c090 R08: 0000000000000000 R09: 0000000000000000
[  453.418880][T13283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  453.426842][T13283] R13: 00007f11f1026038 R14: 00007f11f1025fa0 R15: 00007ffe578a07d8
[  453.434838][T13283]  </TASK>
[  454.092196][T13318] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2049'.
[  454.104407][T13323] netlink: 'syz.3.2052': attribute type 21 has an invalid length.
[  454.122539][T13323] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2052'.
[  454.187234][T13324] netlink: 'syz.3.2052': attribute type 21 has an invalid length.
[  454.203263][T13324] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2052'.
[  454.334605][T13333] netlink: 106572 bytes leftover after parsing attributes in process `syz.0.2053'.
[  454.359923][T13298] delete_channel: no stack
[  454.386877][T13333] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2053'.
[  454.509723][T13340] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2055'.
[  455.573498][T13354] delete_channel: no stack
[  456.361538][T13356] delete_channel: no stack
[  457.243696][T13409] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2078'.
[  457.978634][T13403] delete_channel: no stack
[  458.769180][T13452] netlink: 'syz.0.2091': attribute type 29 has an invalid length.
[  458.835611][T13452] netlink: 'syz.0.2091': attribute type 29 has an invalid length.
[  458.903580][T13453] netlink: 'syz.0.2091': attribute type 29 has an invalid length.
[  458.948714][T13455] netlink: 'syz.0.2091': attribute type 29 has an invalid length.
[  458.957524][T13456] netlink: 'syz.0.2091': attribute type 29 has an invalid length.
[  459.213756][T13466] netlink: 1057 bytes leftover after parsing attributes in process `syz.1.2094'.
[  459.246694][T13466] netlink: 'syz.1.2094': attribute type 1 has an invalid length.
[  459.269024][T13466] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.2094'.
[  459.293118][T13463] delete_channel: no stack
[  459.385092][T13470] netlink: 'syz.3.2096': attribute type 9 has an invalid length.
[  459.418951][T13470] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2096'.
[  459.771118][T13480] netlink: 'syz.1.2099': attribute type 9 has an invalid length.
[  459.799017][T13480] netlink: 208880 bytes leftover after parsing attributes in process `syz.1.2099'.
[  459.938647][T13484] tun0: tun_chr_ioctl cmd 1074025677
[  459.957084][T13484] tun0: linktype set to 0
[  459.963479][T13464] delete_channel: no stack
[  460.115646][T13486] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2101'.
[  460.159029][T13491] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2101'.
[  460.168338][T13492] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2100'.
[  461.075066][T13522] netlink: 'syz.0.2108': attribute type 10 has an invalid length.
[  461.095709][T13522] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2108'.
[  461.137805][T13522] ipvlan1: entered promiscuous mode
[  461.148753][T13522] ipvlan1: entered allmulticast mode
[  461.166820][T13522] veth0_vlan: entered allmulticast mode
[  461.225510][T13522] bridge0: port 2(ipvlan1) entered blocking state
[  461.236730][T13522] bridge0: port 2(ipvlan1) entered disabled state
[  461.339650][T13522] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  461.358076][T13529] netlink: 'syz.1.2112': attribute type 2 has an invalid length.
[  461.386746][T13530] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2112'.
[  461.447937][T13530] dummy0 (unregistering): left promiscuous mode
[  461.454411][T13530] dummy0 (unregistering): left allmulticast mode
[  461.470176][T13530] team0: Port device dummy0 removed
[  461.503749][T13531] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2112'.
[  461.519368][T13531] A link change request failed with some changes committed already. Interface 
2
6±ÿ may have been left with an inconsistent configuration, please check.
[  461.891309][T13523] delete_channel: no stack
[  462.076035][T13574] ipvlan1: entered promiscuous mode
[  462.090658][T13574] ipvlan1: entered allmulticast mode
[  462.098931][T13568] delete_channel: no stack
[  462.103748][T13574] veth0_vlan: entered allmulticast mode
[  462.111008][T13568] delete_channel: no stack
[  462.128285][T13574] bridge0: port 2(ipvlan1) entered blocking state
[  462.135871][T13574] bridge0: port 2(ipvlan1) entered disabled state
[  462.157472][T13574] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  462.487913][T13589] IPv6: Can't replace route, no match found
[  462.495509][T13589] IPv6: Can't replace route, no match found
[  462.531016][T13589] IPv6: Can't replace route, no match found
[  462.562714][T13589] IPv6: Can't replace route, no match found
[  462.584338][T13589] IPv6: Can't replace route, no match found
[  462.602788][T13589] IPv6: Can't replace route, no match found
[  462.619891][T13589] IPv6: Can't replace route, no match found
[  462.627304][T13589] IPv6: Can't replace route, no match found
[  462.640974][T13589] IPv6: Can't replace route, no match found
[  462.652194][T13589] IPv6: Can't replace route, no match found
[  462.662076][T13589] IPv6: Can't replace route, no match found
[  462.673330][T13589] IPv6: Can't replace route, no match found
[  462.681683][T13589] IPv6: Can't replace route, no match found
[  462.693823][T13589] IPv6: Can't replace route, no match found
[  462.700313][T13589] IPv6: Can't replace route, no match found
[  462.706629][T13589] IPv6: Can't replace route, no match found
[  462.714198][T13589] IPv6: Can't replace route, no match found
[  462.721026][T13589] IPv6: Can't replace route, no match found
[  462.727326][T13589] IPv6: Can't replace route, no match found
[  462.747316][T13589] IPv6: Can't replace route, no match found
[  462.754879][T13589] IPv6: Can't replace route, no match found
[  462.778694][T13589] IPv6: Can't replace route, no match found
[  462.785498][T13589] IPv6: Can't replace route, no match found
[  462.809999][T13589] IPv6: Can't replace route, no match found
[  462.816845][T13589] IPv6: Can't replace route, no match found
[  462.839382][T13589] IPv6: Can't replace route, no match found
[  462.846253][T13589] IPv6: Can't replace route, no match found
[  462.872317][T13589] IPv6: Can't replace route, no match found
[  462.891970][T13589] IPv6: Can't replace route, no match found
[  462.919506][T13589] IPv6: Can't replace route, no match found
[  462.943050][T13589] IPv6: Can't replace route, no match found
[  462.957909][T13589] IPv6: Can't replace route, no match found
[  462.978121][T13589] IPv6: Can't replace route, no match found
[  463.167494][T13609] delete_channel: no stack
[  463.687398][T13636] pimreg: tun_chr_ioctl cmd 21731
[  463.871503][T13640] validate_nla: 39 callbacks suppressed
[  463.871519][T13640] netlink: 'syz.3.2144': attribute type 27 has an invalid length.
[  463.900771][T13608] delete_channel: no stack
[  464.475223][T13657] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[  464.504419][T13657] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  464.789340][T13667] veth1_to_bond: entered allmulticast mode
[  464.877331][T13666] syzkaller0: entered allmulticast mode
[  464.964099][T13673] netlink: 'syz.0.2156': attribute type 9 has an invalid length.
[  464.974431][T13673] __nla_validate_parse: 4 callbacks suppressed
[  464.974446][T13673] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.2156'.
[  465.643022][T13668] delete_channel: no stack
[  467.500432][T13699] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2163'.
[  467.523653][T13700] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2163'.
[  467.660373][T13704] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2165'.
[  467.963388][T13711] netlink: 'syz.1.2167': attribute type 10 has an invalid length.
[  468.046021][T13711] veth0_macvtap: left promiscuous mode
[  468.484545][T13719] rxe_eth0 speed is unknown, defaulting to 1000
[  468.805101][T13716] delete_channel: no stack
[  472.789512][T13765] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2182'.
[  472.861517][T13753] delete_channel: no stack
[  473.201072][T13772] netlink: 'syz.0.2183': attribute type 2 has an invalid length.
[  473.238637][T13772] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2183'.
[  473.504135][T13786] netlink: 'syz.2.2189': attribute type 29 has an invalid length.
[  473.528017][T13762] delete_channel: no stack
[  473.529845][T13786] netlink: 'syz.2.2189': attribute type 29 has an invalid length.
[  473.572616][T13787] netlink: 'syz.2.2189': attribute type 29 has an invalid length.
[  473.614093][T13792] netlink: 'syz.2.2189': attribute type 29 has an invalid length.
[  473.642730][T13795] netlink: 'syz.2.2189': attribute type 29 has an invalid length.
[  473.680294][T13798] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.2190'.
[  473.955076][T13813] netlink: 'syz.0.2195': attribute type 27 has an invalid length.
[  473.966980][T13813] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2195'.
[  473.977189][T13813] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  474.583118][T13801] delete_channel: no stack
[  475.190207][T13820] delete_channel: no stack
[  475.232655][T13839] netlink: 'syz.0.2202': attribute type 2 has an invalid length.
[  475.260062][T13836] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2202'.
[  475.333352][T13836] bond0: (slave dummy0): Releasing backup interface
[  476.064407][T13867] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2210'.
[  476.132325][T13867] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2210'.
[  477.238552][T13873] delete_channel: no stack
[  478.009267][T13921] netlink: 'syz.2.2225': attribute type 29 has an invalid length.
[  478.021548][T13922] netlink: 'syz.2.2225': attribute type 29 has an invalid length.
[  478.172285][T13930] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2224'.
[  479.166232][T13935] delete_channel: no stack
[  479.455174][T13960] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2234'.
[  479.468613][ T5784] Bluetooth: hci1: Malformed LE Event: 0x02
[  479.590351][T13969] sit0: entered promiscuous mode
[  480.784859][T13990] validate_nla: 4 callbacks suppressed
[  480.784878][T13990] netlink: 'syz.1.2244': attribute type 29 has an invalid length.
[  480.848102][T13990] netlink: 'syz.1.2244': attribute type 29 has an invalid length.
[  480.886341][ T5784] Bluetooth: hci0: unexpected event 0x10 length: 151 > 1
[  480.886968][T13996] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2244'.
[  480.887989][ T5784] Bluetooth: hci0: hardware error 0x00
[  481.281940][T14008] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.2249'.
[  482.327402][T14036] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2258'.
[  482.998800][ T5784] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  484.284541][T14086] bridge0: entered promiscuous mode
[  484.298637][T14086] bridge0: entered allmulticast mode
[  485.813585][T14129] netlink: 'syz.2.2287': attribute type 3 has an invalid length.
[  485.897772][T14129] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2287'.
[  486.020506][T14114] delete_channel: no stack
[  486.255028][T14138] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2290'.
[  486.285254][T14138] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2290'.
[  486.360672][T14139] netlink: 4068 bytes leftover after parsing attributes in process `syz.1.2289'.
[  486.911929][T14167] sctp: [Deprecated]: syz.1.2296 (pid 14167) Use of struct sctp_assoc_value in delayed_ack socket option.
[  486.911929][T14167] Use struct sctp_sack_info instead
[  488.089615][T14196] netlink: 'syz.3.2302': attribute type 9 has an invalid length.
[  488.108553][T14196] netlink: 'syz.3.2302': attribute type 23 has an invalid length.
[  488.116462][T14196] netlink: 156008 bytes leftover after parsing attributes in process `syz.3.2302'.
[  488.618137][T14220] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2308'.
[  488.720884][T14214] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.2307'.
[  488.732715][T14214] netlink: 22856 bytes leftover after parsing attributes in process `syz.3.2307'.
[  489.158631][T14236] netlink: 'syz.1.2312': attribute type 1 has an invalid length.
[  489.166427][T14236] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.2312'.
[  489.360876][T14241] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2315'.
[  489.394578][T14240] netlink: 'syz.2.2315': attribute type 39 has an invalid length.
[  490.361020][T14263] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  491.141247][ T5788] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  491.151345][ T5788] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  491.160400][ T5788] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  491.195554][ T5788] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  491.204881][ T5788] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  491.212821][ T5788] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  492.026212][T14275] delete_channel: no stack
[  493.142246][ T6617] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  493.200844][T14292] netlink: 'syz.1.2328': attribute type 23 has an invalid length.
[  493.230767][ T6617] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  493.253448][T14273] rxe_eth0 speed is unknown, defaulting to 1000
[  493.327415][ T5788] Bluetooth: hci4: command tx timeout
[  493.364214][ T6617] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  493.394776][T14297] netlink: 'syz.0.2331': attribute type 3 has an invalid length.
[  493.403014][T14297] netlink: 'syz.0.2331': attribute type 16 has an invalid length.
[  493.411410][T14297] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2331'.
[  493.453527][T14299] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2332'.
[  493.505765][ T6617] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  493.534629][T14301] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2332'.
[  493.839302][ T6617] tipc: Left network mode
[  494.155740][T14273] chnl_net:caif_netlink_parms(): no params data found
[  494.386194][T14341] netlink: 'syz.2.2337': attribute type 29 has an invalid length.
[  494.750773][T14341] netlink: 'syz.2.2337': attribute type 29 has an invalid length.
[  494.803762][T14348] netlink: 'syz.2.2337': attribute type 10 has an invalid length.
[  494.983006][T14343] netlink: 'syz.2.2337': attribute type 29 has an invalid length.
[  495.005880][T14345] netlink: 'syz.2.2337': attribute type 29 has an invalid length.
[  495.021243][T14338] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2337'.
[  495.126212][T14341] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2337'.
[  495.151050][T14349] netlink: 'syz.2.2337': attribute type 29 has an invalid length.
[  495.408677][ T5788] Bluetooth: hci4: command tx timeout
[  495.745911][T14377] netlink: 'syz.2.2343': attribute type 29 has an invalid length.
[  497.488609][ T5788] Bluetooth: hci4: command tx timeout
[  498.013722][T14273] bridge0: port 1(bridge_slave_0) entered blocking state
[  498.021225][T14273] bridge0: port 1(bridge_slave_0) entered disabled state
[  498.029128][T14273] bridge_slave_0: entered allmulticast mode
[  498.036481][T14273] bridge_slave_0: entered promiscuous mode
[  498.147506][T14273] bridge0: port 2(bridge_slave_1) entered blocking state
[  498.167173][T14273] bridge0: port 2(bridge_slave_1) entered disabled state
[  498.187569][T14273] bridge_slave_1: entered allmulticast mode
[  498.207911][T14273] bridge_slave_1: entered promiscuous mode
[  498.379410][T14273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  498.436163][T14273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  498.565058][T14273] team0: Port device team_slave_0 added
[  498.624025][T14273] team0: Port device team_slave_1 added
[  498.704728][T14273] batman_adv: batadv0: Adding interface: batadv_slave_0
[  498.717619][T14273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  498.744329][T14273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  498.758256][T14273] batman_adv: batadv0: Adding interface: batadv_slave_1
[  498.774021][T14273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  498.807928][T14273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  499.071094][T14273] hsr_slave_0: entered promiscuous mode
[  499.079663][T14273] hsr_slave_1: entered promiscuous mode
[  499.086146][T14273] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  499.095363][T14273] Cannot create hsr debugfs directory
[  499.316956][T14427] delete_channel: no stack
[  499.560173][ T5788] Bluetooth: hci4: command tx timeout
[  499.774187][T14459] validate_nla: 2 callbacks suppressed
[  499.774230][T14459] netlink: 'syz.0.2354': attribute type 10 has an invalid length.
[  499.802323][T14459] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2354'.
[  499.833476][T14459] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  500.000339][T14445] delete_channel: no stack
[  501.105094][T14490] netlink: 'syz.2.2361': attribute type 3 has an invalid length.
[  501.119153][T14490] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2361'.
[  501.155854][ T6617] hsr0: left allmulticast mode
[  501.177313][T14488] netlink: 'syz.0.2360': attribute type 3 has an invalid length.
[  501.189787][ T6617] hsr_slave_0: left allmulticast mode
[  501.196069][T14488] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.2360'.
[  501.199441][ T6617] hsr_slave_1: left allmulticast mode
[  501.213586][ T6617] hsr0: left promiscuous mode
[  501.224322][ T6617] nr0: port 1(hsr0) entered disabled state
[  501.262164][ T6617] hsr_slave_0: left promiscuous mode
[  501.282644][ T6617] hsr_slave_1: left promiscuous mode
[  501.294013][ T6617] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  501.315203][ T6617] batman_adv: batadv0: Removing interface: batadv_slave_0
[  501.329570][ T6617] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  501.344667][ T6617] batman_adv: batadv0: Removing interface: batadv_slave_1
[  501.358944][ T6617] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi
[  501.366846][ T6617] batman_adv: batadv0: Removing interface: veth1_virt_wifi
[  501.384583][ T6617] bridge_slave_0: left promiscuous mode
[  501.394490][ T6617] bridge0: port 1(bridge_slave_0) entered disabled state
[  501.419938][ T6617] veth1_vlan: left allmulticast mode
[  501.425690][ T6617] veth1_vlan: left promiscuous mode
[  501.564545][T14498] netlink: 'syz.1.2363': attribute type 1 has an invalid length.
[  501.572826][T14498] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.2363'.
[  501.747948][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  501.756910][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  502.228293][ T6617]  (unregistering): (slave bond_slave_1): Releasing backup interface
[  502.272696][ T6617]  (unregistering): (slave bond_slave_0): Releasing backup interface
[  502.319576][ T6617]  (unregistering): (slave bridge_slave_1): Releasing backup interface
[  502.584139][ T6617]  (unregistering): Released all slaves
[  502.686765][T14273] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  502.744801][T14273] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  502.790314][T14273] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  502.811927][T14273] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  503.128000][T14273] 8021q: adding VLAN 0 to HW filter on device bond0
[  503.181531][T14273] 8021q: adding VLAN 0 to HW filter on device team0
[  503.210991][ T6607] bridge0: port 1(bridge_slave_0) entered blocking state
[  503.218210][ T6607] bridge0: port 1(bridge_slave_0) entered forwarding state
[  503.244173][ T6607] bridge0: port 2(bridge_slave_1) entered blocking state
[  503.251419][ T6607] bridge0: port 2(bridge_slave_1) entered forwarding state
[  503.672554][T14504] delete_channel: no stack
[  503.720812][T14273] 8021q: adding VLAN 0 to HW filter on device batadv0
[  503.870214][T14273] veth0_vlan: entered promiscuous mode
[  503.980069][T14273] veth1_vlan: entered promiscuous mode
[  504.013448][T14273] veth0_macvtap: entered promiscuous mode
[  504.024543][T14273] veth1_macvtap: entered promiscuous mode
[  504.088728][T14273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  504.109182][T14273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  504.135969][T14273] batman_adv: batadv0: Interface activated: batadv_slave_0
[  504.166194][T14273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  504.188245][T14273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  504.228156][T14273] batman_adv: batadv0: Interface activated: batadv_slave_1
[  504.264742][T14273] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  504.288758][T14273] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  504.322694][T14273] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  504.350765][T14273] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  504.726974][ T6641] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  504.752448][ T6641] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  504.854847][ T6615] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  504.888592][ T6615] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  504.967699][T14578] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.2377'.
[  505.230390][T14586] netlink: 'syz.0.2379': attribute type 21 has an invalid length.
[  505.297499][T14586] IPv6: NLM_F_CREATE should be specified when creating new route
[  505.348631][T14586] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  505.356358][T14586] IPv6: NLM_F_CREATE should be set when creating new route
[  505.364325][T14586] IPv6: NLM_F_CREATE should be set when creating new route
[  505.372102][T14586] IPv6: NLM_F_CREATE should be set when creating new route
[  507.145552][ T5784] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  507.159817][ T5784] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  507.170261][ T5784] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  507.180865][ T5784] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  507.189763][ T5784] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  507.197629][ T5784] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  507.303991][T14626] rxe_eth0 speed is unknown, defaulting to 1000
[  508.342744][T14626] chnl_net:caif_netlink_parms(): no params data found
[  508.703278][T14626] bridge0: port 1(bridge_slave_0) entered blocking state
[  508.725689][T14626] bridge0: port 1(bridge_slave_0) entered disabled state
[  508.749049][T14626] bridge_slave_0: entered allmulticast mode
[  508.768592][T14626] bridge_slave_0: entered promiscuous mode
[  508.786860][T14626] bridge0: port 2(bridge_slave_1) entered blocking state
[  508.806213][T14626] bridge0: port 2(bridge_slave_1) entered disabled state
[  508.828763][T14626] bridge_slave_1: entered allmulticast mode
[  508.860414][T14626] bridge_slave_1: entered promiscuous mode
[  508.929915][T14626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  508.943057][T14626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  508.986107][T14626] team0: Port device team_slave_0 added
[  508.996868][T14626] team0: Port device team_slave_1 added
[  509.116140][T14626] batman_adv: batadv0: Adding interface: batadv_slave_0
[  509.138103][T14626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  509.167738][T14626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  509.209996][T14626] batman_adv: batadv0: Adding interface: batadv_slave_1
[  509.216987][T14626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  509.257016][ T5788] Bluetooth: hci2: command tx timeout
[  509.311399][T14626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  509.405392][T14626] hsr_slave_0: entered promiscuous mode
[  509.420643][T14652] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.2387'.
[  509.430746][T14626] hsr_slave_1: entered promiscuous mode
[  509.443731][T14626] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  509.464382][T14626] Cannot create hsr debugfs directory
[  509.606029][ T6617] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  509.708300][ T6617] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  509.806003][ T6617] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  509.852464][T14667] mac80211_hwsim hwsim37 wlan1: entered promiscuous mode
[  509.889836][ T6617] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  509.941643][T14667] syzkaller0: tun_chr_ioctl cmd 1074025677
[  509.948027][T14667] syzkaller0: linktype set to 780
[  510.249364][T14653] delete_channel: no stack
[  511.132841][T14683] ±ÿ: renamed from lo (while UP)
[  511.180083][T14696] netlink: 'syz.1.2395': attribute type 21 has an invalid length.
[  511.188005][T14696] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2395'.
[  511.318823][ T5788] Bluetooth: hci2: command tx timeout
[  511.557712][T14709] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2399'.
[  511.598782][T14709] tc_dump_action: action bad kind
[  512.145015][T14626] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  512.507326][T14626] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  512.537586][T14626] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  512.657524][T14626] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  512.768710][T14725] rxe_eth0 speed is unknown, defaulting to 1000
[  512.880295][T14741] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.2405'.
[  513.398958][ T5788] Bluetooth: hci2: command tx timeout
[  513.428316][T14759] Â: renamed from ip6gretap0 (while UP)
[  513.562190][T14626] 8021q: adding VLAN 0 to HW filter on device bond0
[  513.678263][T14626] 8021q: adding VLAN 0 to HW filter on device team0
[  513.698397][ T6621] bridge0: port 1(bridge_slave_0) entered blocking state
[  513.705649][ T6621] bridge0: port 1(bridge_slave_0) entered forwarding state
[  513.730451][ T6611] bridge0: port 2(bridge_slave_1) entered blocking state
[  513.737677][ T6611] bridge0: port 2(bridge_slave_1) entered forwarding state
[  514.255531][ T6617] hsr_slave_0: left promiscuous mode
[  514.265677][ T6617] hsr0: left allmulticast mode
[  514.271262][ T6617] bridge0: port 3(hsr0) entered disabled state
[  514.291544][ T6617] bridge0: port 1(bridge_slave_0) entered disabled state
[  514.317271][ T6617] veth1_vlan: left promiscuous mode
[  514.323385][ T6617] veth0_vlan: left promiscuous mode
[  515.478506][ T5788] Bluetooth: hci2: command tx timeout
[  515.491157][T14767] delete_channel: no stack
[  515.849008][ T6617] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  515.893724][ T6617] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  515.936440][ T6617] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[  516.156154][ T6617] bond0 (unregistering): Released all slaves
[  516.357355][T14626] 8021q: adding VLAN 0 to HW filter on device batadv0
[  516.504330][T14626] veth0_vlan: entered promiscuous mode
[  516.980849][T14626] veth1_vlan: entered promiscuous mode
[  517.159778][T14626] veth0_macvtap: entered promiscuous mode
[  517.187580][T14626] veth1_macvtap: entered promiscuous mode
[  517.231863][T14626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  517.247371][T14626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  517.270770][T14626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  517.289181][T14626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  517.308861][T14626] batman_adv: batadv0: Interface activated: batadv_slave_0
[  517.344608][T14626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  517.365830][T14626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  517.416790][T14626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  517.435462][T14811] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2418'.
[  517.458324][T14626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  517.480474][T14626] batman_adv: batadv0: Interface activated: batadv_slave_1
[  517.511275][T14626] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  517.529357][T14626] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  517.549059][T14626] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  517.570931][T14626] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  517.607176][T14811] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2418'.
[  517.879122][ T6617] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  517.886999][ T6617] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  517.962538][ T6607] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  517.990293][ T6607] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  518.742510][T14835] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.2419'.
[  518.765716][T14838] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.2419'.
[  518.991971][T14854] netlink: 'syz.3.2426': attribute type 10 has an invalid length.
[  519.021946][T14854] netlink: 'syz.3.2426': attribute type 10 has an invalid length.
[  519.050351][T14854] netlink: 'syz.3.2426': attribute type 10 has an invalid length.
[  519.079293][T14854] netlink: 'syz.3.2426': attribute type 10 has an invalid length.
[  519.119430][T14843] netlink: 'syz.1.2424': attribute type 21 has an invalid length.
[  519.187248][T14843] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2424'.
[  519.282083][T14844] A link change request failed with some changes committed already. Interface 
2
6±ÿ may have been left with an inconsistent configuration, please check.
[  519.398660][T14841] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2424'.
[  519.418620][T14854] netlink: 'syz.3.2426': attribute type 10 has an invalid length.
[  519.447620][T14854] netlink: 'syz.3.2426': attribute type 10 has an invalid length.
[  519.478920][T14854] netlink: 'syz.3.2426': attribute type 10 has an invalid length.
[  519.487903][T14854] netlink: 'syz.3.2426': attribute type 10 has an invalid length.
[  519.542464][T14854] netlink: 'syz.3.2426': attribute type 10 has an invalid length.
[  519.666540][ T5784] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  519.681171][ T5784] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  519.701538][ T5784] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  519.712278][ T5784] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  519.726097][ T5784] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  519.735504][ T5784] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  519.882679][T14862] rxe_eth0 speed is unknown, defaulting to 1000
[  520.476394][T14884] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.2433'.
[  521.321690][T14862] chnl_net:caif_netlink_parms(): no params data found
[  521.759533][T14918] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.2436'.
[  521.798967][ T5788] Bluetooth: hci0: command tx timeout
[  521.949381][T14862] bridge0: port 1(bridge_slave_0) entered blocking state
[  521.956610][T14862] bridge0: port 1(bridge_slave_0) entered disabled state
[  521.982994][T14934] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2438'.
[  521.999652][T14862] bridge_slave_0: entered allmulticast mode
[  522.007021][T14862] bridge_slave_0: entered promiscuous mode
[  522.019029][T14934] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  522.041889][T14862] bridge0: port 2(bridge_slave_1) entered blocking state
[  522.066929][T14862] bridge0: port 2(bridge_slave_1) entered disabled state
[  522.080778][T14862] bridge_slave_1: entered allmulticast mode
[  522.098625][T14862] bridge_slave_1: entered promiscuous mode
[  522.117751][T14932] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.2439'.
[  522.401820][T14940] ±ÿ: renamed from lo (while UP)
[  522.605785][T14944] 8021q: adding VLAN 0 to HW filter on device bond0
[  522.641345][T14944] team0: Port device bond0 added
[  522.688589][T14862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  522.821520][T14862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  523.060165][T14862] team0: Port device team_slave_0 added
[  523.153565][T14862] team0: Port device team_slave_1 added
[  523.474744][T14862] batman_adv: batadv0: Adding interface: batadv_slave_0
[  523.494660][T14862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  523.559829][T14862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  523.610870][T14862] batman_adv: batadv0: Adding interface: batadv_slave_1
[  523.628129][T14862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  523.689839][T14862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  523.724898][T14967] IPv6: NLM_F_CREATE should be specified when creating new route
[  523.746746][T14967] IPv6: Can't replace route, no match found
[  523.878665][ T5788] Bluetooth: hci0: command tx timeout
[  524.101638][T14971] team0: Device wg1 is of different type
[  524.228833][T14988] validate_nla: 31 callbacks suppressed
[  524.228851][T14988] netlink: 'syz.0.2453': attribute type 10 has an invalid length.
[  524.404610][T14988] team0 (unregistering): Port device team_slave_0 removed
[  524.446868][T14988] team0 (unregistering): Port device team_slave_1 removed
[  524.620187][T14862] hsr_slave_0: entered promiscuous mode
[  524.628787][T14862] hsr_slave_1: entered promiscuous mode
[  524.646557][T14862] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  524.660366][T14862] Cannot create hsr debugfs directory
[  525.958650][ T5788] Bluetooth: hci0: command tx timeout
[  528.038618][ T5788] Bluetooth: hci0: command tx timeout
[  528.475896][T15067] sit0: entered allmulticast mode
[  528.518807][T15069] sit0: entered promiscuous mode
[  528.605835][T14862] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  528.646308][ T6621] hsr_slave_0: left promiscuous mode
[  528.686476][ T6621] hsr_slave_1: left promiscuous mode
[  528.703789][ T6621] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  528.719225][ T6621] batman_adv: batadv0: Removing interface: batadv_slave_0
[  528.727606][ T6621] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  528.745375][ T6621] batman_adv: batadv0: Removing interface: batadv_slave_1
[  528.760089][ T6621] batman_adv: batadv0: Removing interface: veth1_virt_wifi
[  528.771885][ T6621] hsr0: left allmulticast mode
[  528.776887][ T6621] bridge0: port 4(hsr0) entered disabled state
[  528.798808][ T6621] bridge_slave_0: left allmulticast mode
[  528.804518][ T6621] bridge_slave_0: left promiscuous mode
[  528.818236][ T6621] bridge0: port 1(bridge_slave_0) entered disabled state
[  528.864514][ T6621] veth1_macvtap: left promiscuous mode
[  528.877045][ T6621] veth0_macvtap: left promiscuous mode
[  528.893322][ T6621] veth1_vlan: left promiscuous mode
[  529.909139][ T6621] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  530.013922][ T6621] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[  530.354868][ T6621] bond0 (unregistering): Released all slaves
[  530.413743][T14862] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  530.426051][T14862] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  530.466940][T14862] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  530.721947][T15090] netlink: 'syz.0.2476': attribute type 9 has an invalid length.
[  530.735284][T14862] 8021q: adding VLAN 0 to HW filter on device bond0
[  530.767339][T15090] netlink: 134780 bytes leftover after parsing attributes in process `syz.0.2476'.
[  530.822754][T15096] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  530.855755][T14862] 8021q: adding VLAN 0 to HW filter on device team0
[  530.926946][ T6607] bridge0: port 1(bridge_slave_0) entered blocking state
[  530.934215][ T6607] bridge0: port 1(bridge_slave_0) entered forwarding state
[  531.014894][ T6607] bridge0: port 2(bridge_slave_1) entered blocking state
[  531.022230][ T6607] bridge0: port 2(bridge_slave_1) entered forwarding state
[  531.663753][T14862] 8021q: adding VLAN 0 to HW filter on device batadv0
[  531.780067][T14862] veth0_vlan: entered promiscuous mode
[  531.865680][T14862] veth1_vlan: entered promiscuous mode
[  532.005876][T14862] veth0_macvtap: entered promiscuous mode
[  532.020688][T15127] netlink: 'syz.3.2481': attribute type 21 has an invalid length.
[  532.037587][T15127] netlink: 'syz.3.2481': attribute type 1 has an invalid length.
[  532.055710][T15127] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2481'.
[  532.085784][T14862] veth1_macvtap: entered promiscuous mode
[  532.150632][T14862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  532.164854][T14862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  532.190076][T14862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  532.214851][T14862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  532.227430][T14862] batman_adv: batadv0: Interface activated: batadv_slave_0
[  532.251572][T14862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  532.264251][T14862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  532.287054][T14862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  532.299803][T14862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  532.334706][T14862] batman_adv: batadv0: Interface activated: batadv_slave_1
[  532.362660][T15149] netlink: 'syz.0.2484': attribute type 29 has an invalid length.
[  532.386277][T14862] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  532.412710][T14862] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  532.448620][T14862] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  532.457383][T14862] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  532.504974][T15149] netlink: 'syz.0.2484': attribute type 29 has an invalid length.
[  532.557033][T15154] netlink: 'syz.0.2484': attribute type 29 has an invalid length.
[  532.691780][T15159] netlink: 'syz.0.2484': attribute type 29 has an invalid length.
[  532.719594][T15149] netlink: 'syz.0.2484': attribute type 29 has an invalid length.
[  532.873255][T15153] rxe_eth0 speed is unknown, defaulting to 1000
[  533.043658][ T6621] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  533.110208][ T6621] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  533.254273][ T6621] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  533.307233][ T6621] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  535.070885][ T5784] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  535.084095][ T5784] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  535.095748][ T5784] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  535.106931][ T5784] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  535.120530][ T5784] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  535.128087][ T5784] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  535.219408][T15205] rxe_eth0 speed is unknown, defaulting to 1000
[  535.752551][T15222] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.2499'.
[  536.282698][T15238] sit0: entered allmulticast mode
[  536.341873][T15239] sit0: entered promiscuous mode
[  536.429754][T15225] rxe_eth0 speed is unknown, defaulting to 1000
[  536.873330][T15205] chnl_net:caif_netlink_parms(): no params data found
[  537.244166][ T5788] Bluetooth: hci3: command tx timeout
[  537.866298][T15205] bridge0: port 1(bridge_slave_0) entered blocking state
[  537.884734][T15205] bridge0: port 1(bridge_slave_0) entered disabled state
[  537.898840][T15205] bridge_slave_0: entered allmulticast mode
[  537.917164][T15205] bridge_slave_0: entered promiscuous mode
[  538.170061][T15205] bridge0: port 2(bridge_slave_1) entered blocking state
[  538.178662][T15205] bridge0: port 2(bridge_slave_1) entered disabled state
[  538.196249][T15205] bridge_slave_1: entered allmulticast mode
[  538.212074][T15205] bridge_slave_1: entered promiscuous mode
[  538.304947][T15205] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  538.350852][T15205] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  538.443732][T15205] team0: Port device team_slave_0 added
[  538.462499][T15205] team0: Port device team_slave_1 added
[  538.561051][ T6615] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  538.586605][T15205] batman_adv: batadv0: Adding interface: batadv_slave_0
[  538.597031][T15205] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  538.633668][T15205] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  538.652483][T15205] batman_adv: batadv0: Adding interface: batadv_slave_1
[  538.662026][T15205] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  538.698728][T15205] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  538.743015][ T6615] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  538.892427][ T6615] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  538.912341][T15303] netlink: 'syz.3.2509': attribute type 10 has an invalid length.
[  539.096383][T15205] hsr_slave_0: entered promiscuous mode
[  539.103335][T15205] hsr_slave_1: entered promiscuous mode
[  539.109967][T15205] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  539.117575][T15205] Cannot create hsr debugfs directory
[  539.142193][ T6615] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  539.320193][ T5788] Bluetooth: hci3: command tx timeout
[  539.443056][T15299] delete_channel: no stack
[  539.589143][ T6615] tipc: Left network mode
[  539.778846][T15324] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2514'.
[  540.142405][T15324] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2514'.
[  540.268952][T15318] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2514'.
[  540.354601][T15332] tun0: tun_chr_ioctl cmd 1074812118
[  540.456176][T15320] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2514'.
[  541.400121][ T5788] Bluetooth: hci3: command tx timeout
[  541.510190][T15367] netlink: 'syz.0.2518': attribute type 10 has an invalid length.
[  541.794882][T15205] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  541.842880][T15205] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  541.928175][T15205] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  541.948268][T15205] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  542.558922][T15401] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2524'.
[  542.667953][T15205] 8021q: adding VLAN 0 to HW filter on device bond0
[  542.772792][T15205] 8021q: adding VLAN 0 to HW filter on device team0
[  542.845001][ T6611] bridge0: port 1(bridge_slave_0) entered blocking state
[  542.852252][ T6611] bridge0: port 1(bridge_slave_0) entered forwarding state
[  542.891840][ T6611] bridge0: port 2(bridge_slave_1) entered blocking state
[  542.899101][ T6611] bridge0: port 2(bridge_slave_1) entered forwarding state
[  543.480789][ T5788] Bluetooth: hci3: command tx timeout
[  543.778142][T15421] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.2527'.
[  543.861911][T15421] netlink: 'syz.0.2527': attribute type 39 has an invalid length.
[  544.359719][T15423] delete_channel: no stack
[  544.734604][T15205] 8021q: adding VLAN 0 to HW filter on device batadv0
[  544.867102][T15205] veth0_vlan: entered promiscuous mode
[  544.912024][T15205] veth1_vlan: entered promiscuous mode
[  545.401272][ T6615] hsr_slave_0: left promiscuous mode
[  545.430388][ T6615] hsr_slave_1: left promiscuous mode
[  545.436745][ T6615] team0: left allmulticast mode
[  545.445416][ T6615] team_slave_1: left allmulticast mode
[  545.460902][ T6615] macvlan0: left allmulticast mode
[  545.472331][ T6615] team0: left promiscuous mode
[  545.484015][ T6615] team_slave_1: left promiscuous mode
[  545.495133][ T6615] macvlan1: left promiscuous mode
[  545.501017][ T6615] macvlan0: left promiscuous mode
[  545.506518][ T6615] bridge0: port 2(team0) entered disabled state
[  545.518185][ T6615] bridge_slave_0: left allmulticast mode
[  545.524812][ T6615] bridge_slave_0: left promiscuous mode
[  545.535866][ T6615] bridge0: port 1(bridge_slave_0) entered disabled state
[  545.568352][ T6615] veth1_macvtap: left promiscuous mode
[  545.580056][ T6615] veth1_vlan: left allmulticast mode
[  545.585523][ T6615] veth1_vlan: left promiscuous mode
[  545.594984][ T6615] veth0_vlan: left promiscuous mode
[  546.106767][ T6615] team0 (unregistering): Port device macvlan1 removed
[  546.187423][ T6615] team0 (unregistering): Port device macvlan0 removed
[  546.852786][T15455] netlink: 'syz.0.2537': attribute type 9 has an invalid length.
[  546.861329][T15455] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2537'.
[  546.899405][ T6615] team0 (unregistering): Port device team_slave_1 removed
[  547.347969][T15443] ±ÿ: renamed from lo (while UP)
[  547.379678][T15205] veth0_macvtap: entered promiscuous mode
[  547.432216][T15205] veth1_macvtap: entered promiscuous mode
[  547.553769][T15205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  547.578567][T15205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  547.592129][T15205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  547.605134][T15205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  547.615726][T15205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  547.630701][T15205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  547.657498][T15205] batman_adv: batadv0: Interface activated: batadv_slave_0
[  547.694599][T15205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  547.723385][T15205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  547.734332][T15205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  547.745169][T15205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  547.757090][T15205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  547.772120][T15205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  547.800845][T15205] batman_adv: batadv0: Interface activated: batadv_slave_1
[  547.897485][T15205] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  547.913017][T15205] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  547.922169][T15205] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  547.931878][T15205] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  548.188979][ T6607] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  548.212775][ T6607] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  548.262894][ T6611] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  548.298576][ T6611] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  548.492138][T15473] netlink: 'syz.3.2538': attribute type 1 has an invalid length.
[  549.509422][T15476] delete_channel: no stack
[  549.587226][T15500] syzkaller0: tun_chr_ioctl cmd 2147767506
[  549.842103][T15505] syzkaller0: entered promiscuous mode
[  549.875589][T15505] syzkaller0: entered allmulticast mode
[  550.394215][T15510] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2550'.
[  550.421811][T15510] hsr_slave_0: left promiscuous mode
[  550.471523][T15510] hsr_slave_1: left promiscuous mode
[  550.949304][T15534] ±ÿ: renamed from lo (while UP)
[  551.121643][T15537] can: request_module (can-proto-0) failed.
[  551.134486][T15537] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2559'.
[  551.147783][T15537] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2559'.
[  551.523902][T15560] netlink: 'syz.2.2566': attribute type 4 has an invalid length.
[  551.552206][T15560] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2566'.
[  551.565806][T15556] netlink: 'syz.0.2565': attribute type 4 has an invalid length.
[  551.579106][T15556] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2565'.
[  551.682631][T15556] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  551.721119][T15564] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.2568'.
[  551.911632][T15570] netlink: 14463 bytes leftover after parsing attributes in process `syz.3.2570'.
[  551.991127][T15577] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.2572'.
[  552.063400][T15574] netlink: 'syz.0.2572': attribute type 20 has an invalid length.
[  553.315398][T15607] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2580'.
[  553.367924][T15618] netlink: 'syz.2.2582': attribute type 39 has an invalid length.
[  553.575217][T15619] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.2578'.
[  553.586042][T15619] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  553.982347][T15642] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.2588'.
[  554.033584][T15642] netlink: 22856 bytes leftover after parsing attributes in process `syz.2.2588'.
[  554.207302][T15648] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2589'.
[  554.249462][T15648] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  554.436059][T15648] batman_adv: batadv0: Removing interface: batadv_slave_1
[  555.186843][T15675] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2595'.
[  555.285271][T15686] netlink: 38831 bytes leftover after parsing attributes in process `syz.3.2597'.
[  555.306463][T15685] netlink: 'syz.3.2597': attribute type 17 has an invalid length.
[  555.341058][T15685] netlink: 'syz.3.2597': attribute type 16 has an invalid length.
[  555.444218][T15685] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2597'.
[  555.675894][T15695] delete_channel: no stack
[  555.682152][T15695] delete_channel: no stack
[  555.725805][T15695] netlink: 'syz.2.2599': attribute type 4 has an invalid length.
[  556.164854][T15701] netlink: 'syz.3.2601': attribute type 1 has an invalid length.
[  556.190237][T15702] netlink: 'syz.3.2601': attribute type 1 has an invalid length.
[  556.474678][T15712] syzkaller0: entered promiscuous mode
[  556.483711][T15712] syzkaller0: entered allmulticast mode
[  557.019298][T15742] netlink: 'syz.2.2611': attribute type 41 has an invalid length.
[  558.505222][T15728] nr0: port 1(hsr0) entered blocking state
[  558.511438][T15728] nr0: port 1(hsr0) entered disabled state
[  558.517525][T15728] hsr0: entered allmulticast mode
[  558.522725][T15728] hsr_slave_0: entered allmulticast mode
[  558.528381][T15728] hsr_slave_1: entered allmulticast mode
[  558.535973][T15728] hsr0: entered promiscuous mode
[  558.544304][T15736] netlink: 'syz.2.2611': attribute type 21 has an invalid length.
[  558.558152][T15740] netlink: 'syz.2.2611': attribute type 21 has an invalid length.
[  558.578865][T15740] __nla_validate_parse: 5 callbacks suppressed
[  558.578881][T15740] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2611'.
[  558.604858][T15740] netlink: 'syz.2.2611': attribute type 4 has an invalid length.
[  558.613390][T15740] netlink: 'syz.2.2611': attribute type 3 has an invalid length.
[  558.623495][T15740] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2611'.
[  558.633527][T15742] netlink: 'syz.2.2611': attribute type 41 has an invalid length.
[  558.642136][T15738] nr0: port 1(hsr0) entered blocking state
[  558.648073][T15738] nr0: port 1(hsr0) entered forwarding state
[  559.504534][T15770] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2617'.
[  562.215902][T15801] netlink: 'syz.0.2627': attribute type 39 has an invalid length.
[  562.248557][T15801] macvlan0: entered promiscuous mode
[  562.254121][T15801] macvlan0: entered allmulticast mode
[  562.291669][T15801] veth1_vlan: entered allmulticast mode
[  564.291516][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  564.297917][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  565.047669][T15808] netlink: 'syz.1.2628': attribute type 39 has an invalid length.
[  565.221693][T15817] netlink: 'syz.2.2631': attribute type 13 has an invalid length.
[  565.413915][T15833] netlink: 'syz.2.2634': attribute type 9 has an invalid length.
[  565.466363][T15833] netlink: 154020 bytes leftover after parsing attributes in process `syz.2.2634'.
[  565.941103][T15825] delete_channel: no stack
[  566.060646][T15828] delete_channel: no stack
[  566.235647][T15858] netlink: 199832 bytes leftover after parsing attributes in process `syz.2.2643'.
[  566.890083][T15890] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2654'.
[  567.028782][T15894] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2655'.
[  567.270764][T15871] delete_channel: no stack
[  567.432908][T15879] delete_channel: no stack
[  568.256485][T15930] netlink: 'syz.3.2667': attribute type 39 has an invalid length.
[  568.553086][T15941] netlink: 'syz.0.2669': attribute type 10 has an invalid length.
[  568.561520][T15941] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2669'.
[  568.850172][T15921] delete_channel: no stack
[  572.291228][T15973] netlink: 'syz.3.2677': attribute type 41 has an invalid length.
[  572.334165][T15973] netlink: 'syz.3.2677': attribute type 41 has an invalid length.
[  572.512987][T15975] netlink: 11262 bytes leftover after parsing attributes in process `syz.2.2681'.
[  572.639404][T15976] delete_channel: no stack
[  572.650324][T15973] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2677'.
[  573.271770][T15993] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.2685'.
[  573.549403][T16004] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2689'.
[  574.029191][T16018] FAULT_INJECTION: forcing a failure.
[  574.029191][T16018] name failslab, interval 1, probability 0, space 0, times 0
[  574.045638][T16018] CPU: 0 PID: 16018 Comm: syz.0.2695 Not tainted syzkaller #0
[  574.053185][T16018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  574.063298][T16018] Call Trace:
[  574.066643][T16018]  <TASK>
[  574.069639][T16018]  dump_stack_lvl+0x18c/0x250
[  574.074358][T16018]  ? show_regs_print_info+0x20/0x20
[  574.079578][T16018]  ? load_image+0x420/0x420
[  574.084107][T16018]  ? __might_sleep+0xe0/0xe0
[  574.088742][T16018]  ? __lock_acquire+0x7eb0/0x7eb0
[  574.093782][T16018]  ? __mutex_trylock_common+0x160/0x270
[  574.099358][T16018]  should_fail_ex+0x394/0x4c0
[  574.104066][T16018]  should_failslab+0x9/0x20
[  574.108582][T16018]  slab_pre_alloc_hook+0x59/0x300
[  574.113625][T16018]  ? __mutex_lock+0x30d/0xce0
[  574.118419][T16018]  ? bpf_trampoline_update+0x79/0x11c0
[  574.123912][T16018]  __kmem_cache_alloc_node+0x53/0x260
[  574.129313][T16018]  ? bpf_trampoline_update+0x79/0x11c0
[  574.134792][T16018]  kmalloc_trace+0x2a/0xe0
[  574.139233][T16018]  bpf_trampoline_update+0x79/0x11c0
[  574.144546][T16018]  ? __local_bh_enable_ip+0x13a/0x1c0
[  574.149957][T16018]  bpf_trampoline_unlink_prog+0x3c0/0x460
[  574.155703][T16018]  bpf_tracing_link_release+0x7c/0x110
[  574.161192][T16018]  bpf_link_free+0x123/0x300
[  574.165799][T16018]  ? idr_preload_end+0x200/0x200
[  574.170749][T16018]  bpf_link_release+0x6e/0x80
[  574.175444][T16018]  __fput+0x221/0x940
[  574.179466][T16018]  __se_sys_close+0x15c/0x1e0
[  574.184173][T16018]  do_syscall_64+0x55/0xb0
[  574.188607][T16018]  ? clear_bhb_loop+0x40/0x90
[  574.193298][T16018]  ? clear_bhb_loop+0x40/0x90
[  574.197994][T16018]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  574.203906][T16018] RIP: 0033:0x7f540e79f559
[  574.208345][T16018] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  574.227972][T16018] RSP: 002b:00007f540f623028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  574.236414][T16018] RAX: ffffffffffffffda RBX: 00007f540ea25fa0 RCX: 00007f540e79f559
[  574.244397][T16018] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[  574.252383][T16018] RBP: 00007f540f623090 R08: 0000000000000000 R09: 0000000000000000
[  574.260367][T16018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  574.268351][T16018] R13: 00007f540ea26038 R14: 00007f540ea25fa0 R15: 00007ffe11798ec8
[  574.276382][T16018]  </TASK>
[  574.313141][T16018] ------------[ cut here ]------------
[  574.318919][T16018] WARNING: CPU: 0 PID: 16018 at kernel/bpf/syscall.c:3129 bpf_tracing_link_release+0xff/0x110
[  574.329929][T16018] Modules linked in:
[  574.333876][T16018] CPU: 0 PID: 16018 Comm: syz.0.2695 Not tainted syzkaller #0
[  574.342007][T16018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  574.352390][T16018] RIP: 0010:bpf_tracing_link_release+0xff/0x110
[  574.359601][T16018] Code: e4 ef ff 48 89 df 5b 41 5c 41 5d 41 5e 41 5f 5d e9 a6 a0 fe ff e8 b1 e4 ef ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 a1 e4 ef ff <0f> 0b eb 8d 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 f3 0f 1e fa 53
[  574.379509][T16018] RSP: 0018:ffffc9000c6f7dc0 EFLAGS: 00010293
[  574.385641][T16018] RAX: ffffffff8197f9ff RBX: 1ffff1100c6f3172 RCX: ffff888024d43c00
[  574.394080][T16018] RDX: 0000000000000000 RSI: 00000000fffffff4 RDI: 0000000000000000
[  574.402321][T16018] RBP: 00000000fffffff4 R08: ffffc9000c6f7d07 R09: 1ffff920018defa0
[  574.410483][T16018] R10: dffffc0000000000 R11: fffff520018defa1 R12: ffff888063798b88
[  574.418634][T16018] R13: ffff888063798b90 R14: 1ffff1100c6f3171 R15: ffff888063798b00
[  574.426668][T16018] FS:  00007f540f6236c0(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000
[  574.435731][T16018] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  574.442733][T16018] CR2: 00007f540e7ecc40 CR3: 0000000065b55000 CR4: 00000000003506f0
[  574.450912][T16018] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  574.459066][T16018] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  574.467087][T16018] Call Trace:
[  574.470618][T16018]  <TASK>
[  574.473603][T16018]  bpf_link_free+0x123/0x300
[  574.478251][T16018]  ? idr_preload_end+0x200/0x200
[  574.483373][T16018]  bpf_link_release+0x6e/0x80
[  574.488103][T16018]  __fput+0x221/0x940
[  574.492258][T16018]  __se_sys_close+0x15c/0x1e0
[  574.497007][T16018]  do_syscall_64+0x55/0xb0
[  574.501633][T16018]  ? clear_bhb_loop+0x40/0x90
[  574.506364][T16018]  ? clear_bhb_loop+0x40/0x90
[  574.511257][T16018]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  574.517211][T16018] RIP: 0033:0x7f540e79f559
[  574.521873][T16018] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  574.541649][T16018] RSP: 002b:00007f540f623028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  574.550214][T16018] RAX: ffffffffffffffda RBX: 00007f540ea25fa0 RCX: 00007f540e79f559
[  574.558233][T16018] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[  574.566393][T16018] RBP: 00007f540f623090 R08: 0000000000000000 R09: 0000000000000000
[  574.574540][T16018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  574.582694][T16018] R13: 00007f540ea26038 R14: 00007f540ea25fa0 R15: 00007ffe11798ec8
[  574.590831][T16018]  </TASK>
[  574.593884][T16018] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  574.601194][T16018] CPU: 0 PID: 16018 Comm: syz.0.2695 Not tainted syzkaller #0
[  574.608679][T16018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  574.618738][T16018] Call Trace:
[  574.622023][T16018]  <TASK>
[  574.624961][T16018]  dump_stack_lvl+0x18c/0x250
[  574.629661][T16018]  ? show_regs_print_info+0x20/0x20
[  574.634872][T16018]  ? load_image+0x420/0x420
[  574.639422][T16018]  panic+0x2ca/0x720
[  574.643334][T16018]  ? bpf_jit_dump+0xd0/0xd0
[  574.647874][T16018]  __warn+0x2e0/0x470
[  574.651861][T16018]  ? bpf_tracing_link_release+0xff/0x110
[  574.657504][T16018]  ? bpf_tracing_link_release+0xff/0x110
[  574.663145][T16018]  report_bug+0x2be/0x4f0
[  574.667514][T16018]  ? bpf_tracing_link_release+0xff/0x110
[  574.673152][T16018]  ? bpf_tracing_link_release+0xff/0x110
[  574.678790][T16018]  ? bpf_tracing_link_release+0x101/0x110
[  574.684512][T16018]  handle_bug+0xcf/0x120
[  574.688765][T16018]  exc_invalid_op+0x1a/0x50
[  574.693274][T16018]  asm_exc_invalid_op+0x1a/0x20
[  574.698127][T16018] RIP: 0010:bpf_tracing_link_release+0xff/0x110
[  574.704385][T16018] Code: e4 ef ff 48 89 df 5b 41 5c 41 5d 41 5e 41 5f 5d e9 a6 a0 fe ff e8 b1 e4 ef ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 a1 e4 ef ff <0f> 0b eb 8d 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 f3 0f 1e fa 53
[  574.724007][T16018] RSP: 0018:ffffc9000c6f7dc0 EFLAGS: 00010293
[  574.730084][T16018] RAX: ffffffff8197f9ff RBX: 1ffff1100c6f3172 RCX: ffff888024d43c00
[  574.738055][T16018] RDX: 0000000000000000 RSI: 00000000fffffff4 RDI: 0000000000000000
[  574.746027][T16018] RBP: 00000000fffffff4 R08: ffffc9000c6f7d07 R09: 1ffff920018defa0
[  574.754005][T16018] R10: dffffc0000000000 R11: fffff520018defa1 R12: ffff888063798b88
[  574.761978][T16018] R13: ffff888063798b90 R14: 1ffff1100c6f3171 R15: ffff888063798b00
[  574.769970][T16018]  ? bpf_tracing_link_release+0xff/0x110
[  574.775635][T16018]  bpf_link_free+0x123/0x300
[  574.780232][T16018]  ? idr_preload_end+0x200/0x200
[  574.785174][T16018]  bpf_link_release+0x6e/0x80
[  574.789853][T16018]  __fput+0x221/0x940
[  574.793861][T16018]  __se_sys_close+0x15c/0x1e0
[  574.798561][T16018]  do_syscall_64+0x55/0xb0
[  574.803004][T16018]  ? clear_bhb_loop+0x40/0x90
[  574.807690][T16018]  ? clear_bhb_loop+0x40/0x90
[  574.812382][T16018]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  574.818281][T16018] RIP: 0033:0x7f540e79f559
[  574.822732][T16018] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  574.842367][T16018] RSP: 002b:00007f540f623028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  574.850795][T16018] RAX: ffffffffffffffda RBX: 00007f540ea25fa0 RCX: 00007f540e79f559
[  574.858772][T16018] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[  574.866747][T16018] RBP: 00007f540f623090 R08: 0000000000000000 R09: 0000000000000000
[  574.874727][T16018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  574.882697][T16018] R13: 00007f540ea26038 R14: 00007f540ea25fa0 R15: 00007ffe11798ec8
[  574.890712][T16018]  </TASK>
[  574.894005][T16018] Kernel Offset: disabled
[  574.898347][T16018] Rebooting in 86400 seconds..