last executing test programs:

12.700631403s ago: executing program 2 (id=5243):
perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x95, 0x1, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xfff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_ext={0x1c, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="180100002020040000000000002020207b1af8ff00000000b3a10000026636b46eec220000000725b227e8168fdbaa02000008000000b7560000002301008500000006000000"], &(0x7f0000000580)='GPL\x00', 0xa1c, 0xbf, &(0x7f00000005c0)=""/191, 0x41100, 0x68, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x1, 0x2}, 0x8, 0x10, &(0x7f00000006c0)={0x0, 0xa, 0x10000, 0x9}, 0x10, 0xc0ab, 0xffffffffffffffff, 0x3, &(0x7f0000001e40)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001e80)=[{0x2, 0x1, 0x9, 0xa}, {0x4, 0x5, 0x80000e, 0x6}, {0x5, 0x5, 0x4}], 0x10, 0x41ea}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x3, 0x4, 0x2}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x0, 0x0, 0x0, 0x5, 0xc8, &(0x7f0000000b00)=""/200, 0x41100, 0x0, '\x00', 0x0, @flow_dissector}, 0x94)
bpf$PROG_BIND_MAP(0x23, 0x0, 0x0)
bpf$LINK_DETACH(0x22, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x0, 0x2, 0x2, &(0x7f0000000040))
r0 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r0, 0x8916, &(0x7f0000000000)={'veth1_to_bridge\x00', @random="02000400ac14"})
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000980)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800"], 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000380)={0x0, 0xffffffffffffffba, 0x0, 0x0, 0x0, 0xd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x4}, 0x802, 0x5893, 0xffffffff, 0x0, 0x8d47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r3, &(0x7f0000001cc0)=ANY=[@ANYBLOB="8fedcb7907031175f37538e486dd630080fc000b2c00db5b686158bbcfe8875a060300001123000000000000000000000000ac1414aa2c"], 0xfdef)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0xf})
socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4f34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x3}, 0x0, 0xc8, 0x0, 0x4, 0x2, 0x0, 0x211, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
close(r6)
recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000140)=ANY=[@ANYBLOB="8fedcb7907031175f37538e486dd630080fc00000000db5b686158bbcfe8875a060300331123000000000000000000000000ac1414aa89"], 0x48)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89a2, &(0x7f0000000080))

9.362114871s ago: executing program 2 (id=5248):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2000000000}, 0x0, 0x1, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0x400c78, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xe, 0x4, 0x8, 0x8}, 0x48)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000340)='cpuset.cpus\x00', 0x2, 0x0)
write$cgroup_subtree(r2, 0x0, 0x31)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94)
bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50)
close(0xffffffffffffffff)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
r3 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000000c0), 0x8)
socket$kcm(0x11, 0x2, 0x300)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000005c0)='kfree_skb\x00', r5}, 0x18)
socket$kcm(0x2, 0x1000000000000002, 0x0)

9.241877272s ago: executing program 3 (id=5249):
r0 = socket$kcm(0x10, 0x2, 0x4)
r1 = socket$kcm(0x11, 0x200000000000003, 0x300)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
socketpair(0x1e, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2142, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080))
ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000200)={'erspan0\x00', 0x400})
bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x143842, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETDEBUG(r4, 0x400454c9, 0x0)
write$cgroup_devices(r4, &(0x7f0000000680)=ANY=[@ANYBLOB="1e03d3ffbc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x5d04, &(0x7f0000000900)=[{&(0x7f0000000040)="89000000120081ae08060cdc030000017f03e3f7000000016ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc00e6d782b7af4e76e00120c00010005080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1}, 0xff0f000020000080)

8.925365613s ago: executing program 2 (id=5254):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x11164e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000020000000000000000085000000610000008500000007000000"], 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f2f, 0x22, 0x0, &(0x7f0000000440)="9f449470fe919559684010a408002d7a5d4153f0226dcacf36a548ab01b5cb16afce", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x31)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x33, &(0x7f0000000540)=[{}, {}], 0x10, 0x10, &(0x7f0000000580), 0x0, 0x0, 0x89, 0x8, 0x8, &(0x7f0000000600)}}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff)
write$cgroup_subtree(r4, 0x0, 0xfdef)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
r7 = socket$kcm(0x2, 0xa, 0x2)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r8}, 0x8)
ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000000180)={r7})
r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000900)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xffffeea5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x4}, 0x50)
r10 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b40)=@bpf_tracing={0x1a, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x2}}, &(0x7f00000000c0)='syzkaller\x00', 0x391, 0x83, &(0x7f0000000380)=""/131, 0x41100, 0x1, '\x00', r3, 0x17, r4, 0x8, &(0x7f0000000780)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000007c0)={0x4, 0x8, 0x9, 0x4}, 0x10, 0x11ee0, 0xffffffffffffffff, 0x9, &(0x7f0000000a40)=[r5, r6, r8, r9, 0x1, r10], &(0x7f0000000a80)=[{0x1, 0x3, 0x1, 0x4}, {0x2, 0x4, 0xa}, {0x3, 0x1, 0x8, 0x6}, {0x1, 0x2, 0x7, 0x6}, {0x3, 0x5, 0x3, 0x8}, {0x1, 0x4, 0x3, 0x8}, {0x0, 0x1, 0x0, 0xc}, {0x1, 0x2, 0xf, 0xc}, {0x0, 0x2, 0xe, 0x8}], 0x10, 0x3ff}, 0x94)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000440)={0x2, &(0x7f0000000000)=[{0xac, 0x0, 0x1}, {0x6}]})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa, 0x0, 0xf1000000}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0xa4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xb5}, 0x48)
r11 = socket$kcm(0x2, 0x5, 0x84)
r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x22}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000080)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r12, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
setsockopt$sock_attach_bpf(r11, 0x84, 0x72, &(0x7f0000000000), 0xc)

8.723504503s ago: executing program 0 (id=5255):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000002000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfb800000000000007020010f8ffffffb703340008000000b70400000280000085000000820000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0xa, 0x922000000003, 0x11)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x480783, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0xb}, 0x7602, 0x3ff, 0x3, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b05c153}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="5c00000052006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a1577ae18c819945fb4e37e70e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10)
recvmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
recvmsg$kcm(r2, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0)
recvmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
close(r1)
r5 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="c00e020022003505d25a806f8c6394f97e24fc602f000e001f740100053582c137", 0x21}], 0x1, 0x0, 0x0, 0x74000000}, 0x4000800)
close(0xffffffffffffffff)
setsockopt$sock_attach_bpf(r5, 0x84, 0x75, &(0x7f0000000000), 0x8)
r6 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r6, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x4e21, @remote}, 0x80, &(0x7f0000000000)=[{&(0x7f00000006c0)='@', 0x1}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x38}, 0x41)
r7 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10012, 0x0, 0x0, 0x0, 0x5a7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000008c525234f80c7f84a6ec6d4858414ceab0ed8c6ac7a60bdbb4f2dd60bd530e20d14cc5367580b71800371f3e0d132ed01dc0c9ac86bfc92e6d374e1afd78dd55eda4c7ba4ee96bc234cfc22ecaae15df7d65bfeb699f6d3e32453579f8674eb5a323fdaefe0ad54c03"], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15)

7.410805822s ago: executing program 4 (id=5257):
socket$kcm(0xa, 0x6, 0x0)
r0 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r0, &(0x7f0000003a80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}], 0x38}, 0x4008804)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$kcm(0x10, 0x2, 0x10)
r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x7f}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000000000}, 0x0, 0x0, 0x0, 0x0, 0xf60}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xb, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="1806000000000000000000f8cacbb8ab181200005e5b47adf999974e870070de8c82854158c6f3b1111c7b84e7b7ff3111cd15e177915b1e79d71e5036c6f5f275a4e03945d50d695532fe8cad76446110ad48e74b24ae81641cfeaf58c609fc1ea6f0f900cd6d3d45166b7d3d6001ef61da9b63bb90f282bf3281f9954b6d13f8708c7f9337a8b0672dace2d842aaa1d14f004a", @ANYRES32=r4], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x12, 0xc, 0x4, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f0000000040), 0x0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6}, &(0x7f0000000080), &(0x7f0000000380)=r5}, 0x20)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r3, @ANYBLOB="be00"/20, @ANYRES32, @ANYRES32, @ANYBLOB="000300"/28], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x7, 0x0, &(0x7f0000000100)="fa48235548a646", 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="150a000060000000611154000000000018000000000000000000000000000000950000000000000055f48fcb60a7cc64c46d8389d5123a6500002a5b119b66b671a9a3473caaadcec1469321cf41bd7f43867726d437643016f19760d99f1a46e8bf43317e61412c2da87c03e2c36f45c04c5e1782ec139f025061b1d168890eb580239c02c54c70a7d5636b6c5b972e2993d4d938012172cdf3dfba00"/168], &(0x7f0000000000)='GPL\x00'}, 0x80)
sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="0f02000039000511d25a80648c63940d0424fc600b003540280008000200002037153e37eb010280060410000a00", 0x33fe0}], 0x1, 0x0, 0x0, 0x6c000000}, 0x0)

6.995466283s ago: executing program 4 (id=5258):
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0xa, 0x922000000003, 0x11)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x355d00, 0x0)
close(r0)
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[], 0x48)
socketpair(0x1, 0x20000000000001, 0x0, 0x0)
r1 = getpid()
r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x6, 0x0, 0x0, 0x0, 0x4, 0x48c52, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x20008000001946}, 0x0, 0x3, 0x0, 0x7, 0x3fe, 0x800}, r1, 0x1, 0xffffffffffffffff, 0x10)
socket$kcm(0x2, 0x5, 0x84)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000540), 0xa}, 0x11efa, 0x4, 0x99, 0x2, 0x2, 0x10, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x2, r2, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x2, 0x200000000000001, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20)
socketpair(0x3, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f0, &(0x7f0000000080))
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a0000008400000000010000010000", @ANYRES32, @ANYRESHEX=r4], 0x50)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080))
close(0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_int(r6, &(0x7f0000000800)='cpuset.mems\x00', 0x2, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000380), 0x12)
write$cgroup_int(r7, &(0x7f0000000040), 0x1)

5.059352543s ago: executing program 3 (id=5259):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x3f, 0x4, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}, 0x10000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48)
socket$kcm(0x2c, 0x3, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x2, 0x73)
socket$kcm(0xa, 0x2, 0x73)
socket$kcm(0x10, 0x2, 0x0)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

5.007754849s ago: executing program 4 (id=5270):
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0xa, 0x922000000003, 0x11)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x355d00, 0x0)
close(r0)
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[], 0x48)
socketpair(0x1, 0x20000000000001, 0x0, 0x0)
r1 = getpid()
r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x6, 0x0, 0x0, 0x0, 0x4, 0x48c52, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x20008000001946}, 0x0, 0x3, 0x0, 0x7, 0x3fe, 0x800}, r1, 0x1, 0xffffffffffffffff, 0x10)
socket$kcm(0x2, 0x5, 0x84)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000540), 0xa}, 0x11efa, 0x4, 0x99, 0x2, 0x2, 0x10, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x2, r2, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x2, 0x200000000000001, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20)
socketpair(0x3, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f0, &(0x7f0000000080))
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a0000008400000000010000010000", @ANYRES32, @ANYRESHEX=r4], 0x50)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080))
close(0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_procs(r6, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r7, &(0x7f0000000380), 0x12)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x1)

4.99024725s ago: executing program 2 (id=5261):
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0400000009000000020000000100000020900000", @ANYRES32, @ANYBLOB="feffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000020000000100", @ANYRES32, @ANYBLOB="f765149dab790a50f9423200420830b5a9f4c9254863e73d88e71e041c89994583656b4aa4abbd3a3574a708be3b5237edf54f24975ee41d6e6571e6e21e827f5ff327ec596c474bb3af"], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f0000000100), &(0x7f0000000000)=""/8, 0x2}, 0x20)
openat$cgroup_int(r2, &(0x7f00000000c0)='hugetlb.2MB.failcnt\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='cpu<=0||!')
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0xf}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x90)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000000000bd0000000003000000850000002700000095"], &(0x7f0000000080)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x18, 0x0, &(0x7f0000000380)="e0bcd7c6a00e0588cd5e47b8bffc8e670f78f1f5b3aac3eb", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640))
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272})
r6 = socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000007, 0x4, @perf_bp={0x0, 0x8}, 0x101000, 0x7, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008104e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0)
ioctl$TUNSETLINK(r5, 0x400454cd, 0x30c)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f00000002c0)={0x0, 0x900, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0)

4.98901868s ago: executing program 0 (id=5272):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x11164e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000020000000000000000085000000610000008500000007000000"], 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f2f, 0x22, 0x0, &(0x7f0000000440)="9f449470fe919559684010a408002d7a5d4153f0226dcacf36a548ab01b5cb16afce", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x31)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x33, &(0x7f0000000540)=[{}, {}], 0x10, 0x10, &(0x7f0000000580), 0x0, 0x0, 0x89, 0x8, 0x8, &(0x7f0000000600)}}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff)
write$cgroup_subtree(r4, 0x0, 0xfdef)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
r7 = socket$kcm(0x2, 0xa, 0x2)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r8}, 0x8)
ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000000180)={r7})
r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000900)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xffffeea5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x4}, 0x50)
r10 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b40)=@bpf_tracing={0x1a, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x2}}, &(0x7f00000000c0)='syzkaller\x00', 0x391, 0x83, &(0x7f0000000380)=""/131, 0x41100, 0x1, '\x00', r3, 0x17, r4, 0x8, &(0x7f0000000780)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000007c0)={0x4, 0x8, 0x9, 0x4}, 0x10, 0x11ee0, 0xffffffffffffffff, 0x9, &(0x7f0000000a40)=[r5, r6, r8, r9, 0x1, r10], &(0x7f0000000a80)=[{0x1, 0x3, 0x1, 0x4}, {0x2, 0x4, 0xa}, {0x3, 0x1, 0x8, 0x6}, {0x1, 0x2, 0x7, 0x6}, {0x3, 0x5, 0x3, 0x8}, {0x1, 0x4, 0x3, 0x8}, {0x0, 0x1, 0x0, 0xc}, {0x1, 0x2, 0xf, 0xc}, {0x0, 0x2, 0xe, 0x8}], 0x10, 0x3ff}, 0x94)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000440)={0x2, &(0x7f0000000000)=[{0xac, 0x0, 0x1}, {0x6}]})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa, 0x0, 0xf1000000}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0xa4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xb5}, 0x48)
r11 = socket$kcm(0x2, 0x5, 0x84)
r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x22}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000080)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r12, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
setsockopt$sock_attach_bpf(r11, 0x84, 0x72, &(0x7f0000000000), 0xc)

4.806717728s ago: executing program 4 (id=5262):
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0400000009000000020000000100000020900000", @ANYRES32, @ANYBLOB="feffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000020000000100"/20, @ANYRES32, @ANYBLOB="f765149dab790a50f9423200420830b5a9f4c9254863e73d88e71e041c89994583656b4aa4abbd3a3574a708be3b5237edf54f24975ee41d6e6571e6e21e827f5ff327ec596c474bb3af"], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f0000000100), &(0x7f0000000000)=""/8, 0x2}, 0x20)
openat$cgroup_int(r2, &(0x7f00000000c0)='hugetlb.2MB.failcnt\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='cpu<=0||!')
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0xf}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x90)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000000000bd0000000003000000850000002700000095"], &(0x7f0000000080)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x18, 0x0, &(0x7f0000000380)="e0bcd7c6a00e0588cd5e47b8bffc8e670f78f1f5b3aac3eb", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640))
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272})
r6 = socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000007, 0x4, @perf_bp={0x0, 0x8}, 0x101000, 0x7, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008104e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0)
ioctl$TUNSETLINK(r5, 0x400454cd, 0x30c)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)

3.980858409s ago: executing program 1 (id=5264):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94)

3.861525521s ago: executing program 1 (id=5265):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x68c01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x8, 0x81028, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x3, 0x0, 0x9, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$ITER_CREATE(0xb, 0x0, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1042, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902})
write$cgroup_devices(r3, &(0x7f00000003c0)=ANY=[], 0xffdd)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x13, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@call={0x85, 0x0, 0x0, 0x50}, @map_fd={0x18, 0x1, 0x1, 0x0, r4}, @call={0x85, 0x0, 0x0, 0x75}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10)
close(r2)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101})
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002bc0)={<r6=>0xffffffffffffffff})
sendmsg$unix(r6, &(0x7f00000036c0)={&(0x7f00000032c0)=@file={0x0, './file0\x00'}, 0x9e, 0x0, 0x0, &(0x7f0000003680)=[@rights={{0x14}}], 0x18}, 0x0)
recvmsg$unix(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/218, 0xda}, {&(0x7f0000000240)=""/36, 0x24}, {&(0x7f0000000500)=""/194, 0xc2}, {&(0x7f00000003c0)=""/127, 0x7f}], 0x4, &(0x7f0000000640)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd0}, 0x40002000)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2d00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000001c0)='mm_page_alloc\x00', r7}, 0x18)
bpf$MAP_CREATE(0x4400000000000000, &(0x7f00000000c0)=@base={0x5, 0x8, 0x4932, 0x7f, 0x0, 0x1}, 0x50)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000080))

1.998417054s ago: executing program 3 (id=5266):
r0 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r0, 0x84, 0x14, 0x0, 0x0)
sendmsg$inet(r0, &(0x7f0000000d80)={&(0x7f0000000b40)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000b80)="e0", 0x1}], 0x1}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="08000000002b66db11ae8b6071bee065c450001c5da1b4d323720000000000000000010400000000000000000000fc79"], 0x50)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r2, &(0x7f0000000680)="da"}, 0x20)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r1}, 0x8)
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r3, @ANYBLOB], 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10c00c, 0x0, 0x3, 0x3, 0x4f68}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x2, 0x2, 0x0)
sendmsg$inet(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1c0000000000", @ANYRES32, @ANYBLOB="ac1414bb008000000000000038000000000000000000000007000000070e43aa5889c23ef593ae6bcd1844187c8073b5c9e0000000060000000300000008000000090000140000000000000000000000010000000500000000000000140000000000000000000000070000000100000000000000140000000000000000000000010000000300"], 0xc0}, 0x4)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x10, 0x7, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x1)
r5 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r5, 0x29, 0x8, &(0x7f0000000100), 0x120)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000009000000dfa2bff372df8cdbeb318ab2bec8fc36903c0ec359caa1af3c914019395cc154010c693709800000000000000016a85adef34bf78c76e6222337923e1bea6ef682cc4375f594425d408ccc58187feb0e3d43347f989007a7c63f6dae2acb4af936461f34a8a32a50bbbb69ec85168947b86df9f2609bf93f7a1be259621818c3c75da31290bce645451b851111dd98ac4d8da9317c2c082020e0b2d634086785f3fe41a3053645cc413790faf7e229c782845b5bb774f7f154263178151ea93ff2cac4b181332c9c9a1c7d85616c8100000000000000d8300d19d585000000fc005774b56a7142047326f940e95b8489e1c5650f5c61299a295f39c88456391cffdef93e29f10f4a11f0cfbfc0ff976b20fef6033495b9b94777db9bb9b678ffc1130000009faa798226a080c01e47151268a02dc1a557cfdcf76305fbf6643df66b1b4d2d5e7bf698fc5a18d984ecb91e6683a5f522d536e2f3c43b89823659d1945258fc668950e5aacfffffffffffffff7f7a266c90e64efc8d8f730867202a9ee9"], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x401c5820, &(0x7f0000000000)=0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000380)=ANY=[@ANYBLOB="050000000000000069114b00000000008510000002000000850d8beb30e6000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x26e1, 0x0)

1.886224305s ago: executing program 2 (id=5267):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000002"], 0x50)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socket$kcm(0x29, 0x5, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x4)
r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r1)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="5c00000012006b000040017ea608601602f3650400010008000000000002009ee517c356a7b0251e616859ad3a78a76e807c857e21bea297bff435cf01c937e786a6d0bdc7fcf50e4509c5cc68b7ed9c232d786c3500000000000074", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00002000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="180800000000000000000000000000008510000003000000180000000000000000000000000000009500000000000000ddaa000000"], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x3, 0x5}, 0x440, 0x0, 0x1, 0x0, 0x46f7, 0x0, 0x19, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0xf, 0xffffffffffffffff, 0x0)
syz_clone(0x81200, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0500000004000000df7f000001"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48)
r4 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000140)=@l2={0x1f, 0xa2, @none, 0x7}, 0x80, 0x0}, 0x20008005)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r5, 0x0, 0x9, 0x0, &(0x7f0000000180)="001c00000004000000", 0x0, 0x3ff, 0x0, 0x0, 0xfffffffffffffc92, 0x0, 0x0}, 0x50)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='mem_disconnect\x00', r6}, 0x18)

1.874363266s ago: executing program 0 (id=5268):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0))
socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x90}, 0x10000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48)
socket$kcm(0x2c, 0x3, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x2, 0x73)
socket$kcm(0xa, 0x2, 0x73)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x11, 0x200000000000002, 0x300)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.736244189s ago: executing program 4 (id=5269):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x14869}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x15, 0x5, 0x0)
r1 = socket$kcm(0x29, 0x0, 0x0)
sendmsg$kcm(r1, &(0x7f0000001200)={&(0x7f0000000380)=@ethernet={0x1, @broadcast}, 0x80, &(0x7f0000000680)=[{&(0x7f0000001240)="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", 0x14e}, {&(0x7f00000013c0)="ceeafef067510b04ce8c905876b6167f04114d44faa6d422f92cc48925110eb622a137ad97a849598516a7f6af", 0x2d}, {&(0x7f00000011c0)="e186ddfc4710957fbce34f617972fa66d06f0d3a2f14d624435ab3c1894dc17b00000000161667", 0x27}, {&(0x7f00000005c0)="698c0c5487a158108901500ee6a75e6c95efd3e5fc1c8d1bf2080d1e07598ccce22c964d3add61e6c46279225047064a964372ab2b95ea41681a78980319a7cb6b8aad615c44b46541d66ecce607d0e421be42ec746462608c28e1486459d1053a11d27f76a1487d8637db95105c1e034699be260d4b109bc55e8d81", 0x7c}, {&(0x7f0000000640)}], 0x5, &(0x7f0000000700)=[{0xe8, 0x88, 0x6, "87a4ffb27f0c160df425aed940f3411af6e564136f8fa1777169ce68adea9b9aa18ef0031e5ff54d793c8350e3d3b7709a13684da11ef0779f51910298de76ab7528b6084cafddb534a6a95b51f9cee449c426008cf94a1f1e9687363eb635e71e3427526e3ed6cc4a582b151788626d7fe66f95173b4a4e0948e013cf782e0700b60c08aaf84882adecc71eeee10ec6aa8f73fb547035b74df7b822582d09a027f06caee2f1d281ed81e663ac63adef6db7a72937249cb745dd94fbfc3f7b969d24324eb194aba90ba43dc31b32d50f024a73ff8e66da"}, {0x88, 0x3a, 0x1ff, "be3a6ac666f120600ba930b279445eaccaae79ae7454f64a6e3f0757fd0b3ae3e2e001efb9852269cbc47d12aea1a9af3a7a6b83d1080c71a3377119d255e9f3f1c9f58152b898b90f60788dc5a88a7d37e1c8c4e49aa3c3e91b1cd77858159c6ef66bfe6180bd432e56859d400973589b"}, {0xac, 0x11, 0x1, "4ec502fb06568815281c873368a8c4080a2f80d07149f1db812d50dc33d56ceaf1404380858cc3440a354cf9af311fd447ba98582dc21e2afc5acff1e76ef211db3a8a33b5840a0a93d6eefa8f606bb2b320471da0d0eefcd1cde8bdf1f39edcf78313b0115b"}, {0xb8, 0x101, 0x4e19, "a19cdbbde9334a63b5c6c46b41bcb661b709ee624cd60e0a7eeae904bc0db3818554ebd0b701435307246e225303c14aa9430e2125da093f37b288b79f5a17b2064f6c8d624cfd3a87aba23249f9b5728ed1f8bd57f7356b6cfecc18ba7d2b26ee2d039c74f7f400163f463c0d9e21c68ec3d19fefd130ab3e8947a99e12eb95f3d2e57e17e88a03925956e75d25e40926d8a8a373ace11588e6e3858145ab670e75e62a8d9a"}], 0x2a0}, 0x800)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000000000}, 0x0, 0x0, 0x0, 0x0, 0xf60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r2, 0x2000012, 0xe, 0x0, &(0x7f00000002c0)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r3 = socket$kcm(0x11, 0x200000000000002, 0x300)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001400)={0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x4, 0x17, &(0x7f0000000d00)=ANY=[@ANYBLOB="7543f8ff00000000cf58500008000000b7080000000000007b8af8ff00000000b7080000030000007b8af0ff00000000bfa100000000000007010000f8ffff6b935349aa96ffbfa400000000000007040000f0ffffffb702000008000000182300000908ac849a1e78840cb130290c3bde466124378f4af34d6f6fd30196f385b6e012867a4c37cd11bbbe331fa6826e77095b0a02fd97d5357deaca6ba773e37b9d0f0d6f7ed83488ed564cc3b121e3466426774576c65208f0a5efeebb14a4013df9678b077588", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000185b00000100000000000000000000001800000004000000000000001000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000000000008500000086000000"], &(0x7f0000001540)='GPL\x00', 0x6, 0xa8, &(0x7f0000001580)=""/168, 0x0, 0xe, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, &(0x7f0000001640)={0x1, 0x5}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9, &(0x7f0000001680)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1], &(0x7f00000016c0)=[{0x3, 0x3, 0xb, 0x8}, {0x3, 0x4, 0xe, 0x1}, {0x5, 0x2, 0xd, 0x2}, {0x1, 0x1, 0x2, 0xb}, {0x2, 0x4, 0x5, 0x3}, {0x5, 0x4, 0xe, 0x5}, {0x1, 0x4, 0x5, 0x9}, {0x1, 0x4, 0xc, 0x5}, {0x2, 0x3, 0xf, 0x7}], 0x10, 0x10000}, 0x94)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000001840)={r3})
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
socket$kcm(0x10, 0x2, 0x10)
close(r4)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x0, 0x3, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000010000004200000040"], 0x48)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)

1.685661375s ago: executing program 1 (id=5271):
perf_event_open(&(0x7f0000000680)={0x0, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000700), 0x7}, 0x0, 0xc8, 0x0, 0x9, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81ea038800fe08000e40000200875a65969ff57b00ff020000000000000000000000000001e2607e15e697ab"], 0xfdef)
r3 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="1400000036000b63717a3c4a0ed8980004000078", 0x14}], 0x1}, 0x40000)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94)
r5 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xffff0000, 0x9, 0x0, 0x3ff, 0x0, 0x9}, 0x0, 0x1, 0xffffffffffffffff, 0x1)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, r7, 0x4}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073118600000000ffff10000002000000850000001a00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r8=>0x0}}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x13, 0x4, 0xb, 0x1, 0x1488, 0xffffffffffffffff, 0x8, '\x00', r8, 0xffffffffffffffff, 0x1, 0x5, 0x5}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, <r9=>0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)='%pI4   \x00'}, 0x20)
r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8)
r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0xfffffff9, 0x10}, 0xc)
r12 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="050000000f0000000800000040000000c000000066258e559163f6c60b228ece647fa5ff2167c753a557d9c9186370456a0e436392e6456a98e79fa1c57e99be000000000000", @ANYRES32=0x1, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r12}, 0x38)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r12, &(0x7f0000000080), &(0x7f0000000180)=""/40}, 0x20)
r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
close(r13)
ioctl$SIOCSIFHWADDR(r13, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '})
r14 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0xffffffffffffffff, 0xcb93, 0x10}, 0xc)
r15 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={0xffffffffffffffff, 0x10000000, 0x1c}, 0xc)
openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x40, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_ext={0x1c, 0x5, &(0x7f0000000040)=@raw=[@cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffff9}, @exit, @map_val={0x18, 0x8, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x101}], &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x3a, '\x00', r8, 0x0, r5, 0x8, &(0x7f0000000180)={0x3, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xebc8, r4, 0x1, &(0x7f0000000400)=[r5, r9, r10, r11, r12, r13, r14, r15], &(0x7f0000000440)=[{0x2, 0x5, 0x1, 0x2}], 0x10, 0x8}, 0x94)
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080))

932.857698ms ago: executing program 1 (id=5273):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000002000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfb800000000000007020010f8ffffffb703340008000000b70400000280000085000000820000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0xa, 0x922000000003, 0x11)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x480783, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0xb}, 0x7602, 0x3ff, 0x3, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b05c153}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af00000000000000000021a688b2d7007fcc4b59f719afb0b3b7e0aee306ca70fe42"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="5c00000052006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a1577ae18c819945fb4e37e70e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10)
recvmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
recvmsg$kcm(r2, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0)
recvmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
close(r1)
r5 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="c00e020022003505d25a806f8c6394f97e24fc602f000e001f740100053582c137", 0x21}], 0x1, 0x0, 0x0, 0x74000000}, 0x4000800)
close(0xffffffffffffffff)
setsockopt$sock_attach_bpf(r5, 0x84, 0x75, &(0x7f0000000000), 0x8)
r6 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r6, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x4e21, @remote}, 0x80, &(0x7f0000000000)=[{&(0x7f00000006c0)='@', 0x1}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x38}, 0x41)
r7 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10012, 0x0, 0x0, 0x0, 0x5a7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000008c525234f80c7f84a6ec6d4858414ceab0ed8c6ac7a60bdbb4f2dd60bd530e20d14cc5367580b71800371f3e0d132ed01dc0c9ac86bfc92e6d374e1afd78dd55eda4c7ba4ee96bc234cfc22ecaae15df7d65bfeb699f6d3e32453579f8674eb5a323fdaefe0ad54c03"], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15)

586.057522ms ago: executing program 4 (id=5274):
r0 = socket$kcm(0x10, 0x2, 0x4)
r1 = socket$kcm(0x11, 0x200000000000003, 0x300)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
socketpair(0x1e, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2142, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080))
ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000200)={'erspan0\x00', 0x400})
bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x143842, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETDEBUG(r4, 0x400454c9, 0x0)
write$cgroup_devices(r4, &(0x7f0000000680)=ANY=[@ANYBLOB="1e03d3ffbc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x5d04, &(0x7f0000000900)=[{&(0x7f0000000040)="89000000120081ae08060cdc030000017f03e3f7000000016ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc00e6d782b7af4e76e00120c00010005080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1}, 0xff0f000020000080)

561.207565ms ago: executing program 3 (id=5275):
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0xa, 0x922000000003, 0x11)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x355d00, 0x0)
close(r0)
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[], 0x48)
socketpair(0x1, 0x20000000000001, 0x0, 0x0)
r1 = getpid()
r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x6, 0x0, 0x0, 0x0, 0x4, 0x48c52, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x20008000001946}, 0x0, 0x3, 0x0, 0x7, 0x3fe, 0x800}, r1, 0x1, 0xffffffffffffffff, 0x10)
socket$kcm(0x2, 0x5, 0x84)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000540), 0xa}, 0x11efa, 0x4, 0x99, 0x2, 0x2, 0x10, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x2, r2, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x2, 0x200000000000001, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20)
socketpair(0x3, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f0, &(0x7f0000000080))
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a0000008400000000010000010000", @ANYRES32, @ANYRESHEX=r4], 0x50)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080))
close(0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_int(r6, &(0x7f0000000800)='cpuset.mems\x00', 0x2, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000380), 0x12)
write$cgroup_int(r7, &(0x7f0000000040), 0x1)

509.88835ms ago: executing program 0 (id=5276):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)

419.993909ms ago: executing program 1 (id=5277):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="bf16000000000000b70700000200f0ff4070000000000000480000000000e1ff95000000000000002ba7e1d30cb599e83f040000f300000000bd01212fb56f040026fbfefc41056bd8174b79ed317142fa9ea4158123751c5c652fbc1626cca2a2ad75806150ae0209e62f51ee988e6e06c8206ac6879fc404004900c788b277be1cb79b0a4dcf23d410f6accd3641110bec4e90a634199e07f8f6eb968f200e011ea665c45a3449abe802f5ab3e89cf6cfdffffffb8580218ce740068720000074e8b1715807ea0ca469e468eea3fd2f73902ebcfcf49822775985bf313405b367e81c700000040000000000200000000005335000000143ea70c2ab40c7cb70cc8943a6d60d7c4900282e147d08e0af4b29df814f5691db43a5c00000004000000000089faff01210cce39bf405f1e846c12423a164a330100846f26ad03dd65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d6155102b1ced1e8019e63c850af895abba14f6fbd7fb5e2a431ab914040000000000010092c9f4609646b6c5c29647d2f950a959cf9938d6dfcb8ed2cbdc2ba9d580609e31c3fa90812a533ce206e7e57a79d6fce424c2204dd418c005479ecab19bdfb15a32a4fd67ce446adb431d07db79240acaf091231b986e77d05d988d6efdffdf48dca02113a38300cabf2b5543ffc166955709009e000000000061629d1822f720ec23812770d72c700a44e113d17088fdd00600000f7889b8c7044f56ff030000000000006cd4970400cac6f45a6922ded2e29514af463f747c08f4010586903500000000000000000000be34cf0f9d640dd782ac0cbc46903243d0d0f4bc7f253d0500000032daaf281c450e64c33aac8ff7e7d1c94c4505a9839688b008c370494f6734b771546d9552d3bb2da0d000000000000000009125c97f0400f5e1671bc5eb7739daa7820a91cb0e732df2ae1d39c747e00a4fbfe8942fa859cd28bdaa1509309926c77fbcb15ec58b42b400005a6b649dd5f13cd776e6c7c4b5c4b0de20e033b378553ead4c8cc530b62c36364e6505992209bdbc6203da7a3797246a6adef071102f0aa2c40095ddd05176f5cb8bd99e1ba0f9568f3e3876bba7bf973334e7919a080000000000000004fb996ad919f7e9672ce107000000ad882f2aead166c94500be902ee7dabc768eb9ec13f334aae90981ecaf5f744f22f2e45afe2c9e8632276cffe5f1fc215c0797d0244cf1ce269d10525745caaa3f77d1b80116cb9a38400242010000000100000091a0116f4693133138583da5e10b434697b0443b7b4ddfb3ace29e16e5a881336aad0974269a1025f2a9a135c0508af1aec2926627b43bba1229a7466bdca64f514b7911458da083e8681916d408d753226a83ae2434ccd3fc508216aea86833030f569d61dc998620fcf4eeb92e7bc511df63c53b82514493b8f3c74f44ba184d40e87612024da1a1ebe316923865f037c01d71b5de81121046d84b18acb5cbea7eecad9b6dd46ed83515cd9f140e5f00019be25b5910a3193e90be231a05fd82e6003969c3f081ff1d0eb50a04d14644234828cbb5aaa0ece702abdd425fa25ae04a2315c89064df633700000000d9e5953ea67310993d01000000000000003ac753358791b1490273ca535e05b11d815237743a5b79ad45de2a3c91257f02c2f30f5513662809073710937ed0055b238f466e1442f8ec7a5b394228035039ceeb452dca75f9ff5332b4c4777a58a0aa9a821667c68549e9da89ad4274ce2d3d7619936768a84a1465fff4eedba55955434f132ab7b8840558b3f918d675a79907a72a8252cd3fbaea5d3006a03507838231a335ae759ed25534f2e90a7def4b3d4af7fd47ab1a701e4b7a7dfc1d12775ed0a31bc7b5855880aa767e68196c7aa5ac115724b6cb8fcebb67719eccd87b06b38566cf61ad2f307a79d2ce9801837bf0bd3af0271de700eef2795d28cb0017000000000000000000e052d93194121b774d21a0317d0346078400004652c769fd3d3e661a2fb5ff0f000002ab2ac4eb3f19c042163e0bdb88b82de384a8055e8b1e24294b0546cce481ff5618b7b9585dbb64d66debf219fa479abf22f3d64fe82e466ea6f27859946e72f80bb1c9cfcde57b79625e2979fe689a5a246cbbdf6ad488f43f46b2536f175f46dfb27d5229467270246ab53616c46edf34c559d3de0c59ca3305e66825715e5e4cd5b54c1b05c09f04337a76a30373baac3ecec91fd546eb7c32dbecb18a308a0004be94dfab28c2a51dc856df0000000000c12254f041804f7f7074356789b1d4dd55f3e045a48241a4ce04d06acb2cf11eab759ba78da5da0f26126d4cf2c73e5f94030000040000000000000000c301985d603403592486204054be3fdda91f9e315886941928e5a8bc1a00e69a98c0a8f7192f6ee93cc4124cf4e7610915efc08c834a44e1d685d6835a40b5bc615949cbcd98d0e68d7eef5d32d5fcc7923d7544fa492aa38717481455e86dcd7816ad8940bd1995369d89ae6eadeb9117e8b94ab422c8d62f858875dccdbc89572231ef5d6df6a9c55f8df763c7c64da7cc017e1e3f5cd4cb9fe6d19b11d4d38239d318016e622b9683b7e46be64dc097982e23462392a0cd05afb2e060fd42ef00dfbd057311aab94f307d10c7a1af0d8e5a0fcb547475d13c0000000000000000f1cc97103d714d1abb901f866d9d629b4fb185f45790517c4a0f5c6a5024e3359e8d83e3f6edf9e2afb5ab59c7b2b45cfb0a3c1303a98e4ed531ac11cca1cd744b431de74c7cd6533adaa8ec749061b2959d53da626aa189781dc1be4d5c81aebc0cada819895b377d6cf0a7878ba99864ae84464744c605646caf2e06b13eba7ba10acf77d91b2297e9573abb0a4da534d735a223626402b308daf7835780fa6f4e410000000000fb00000000000000000000b14952139bd4bdbccc5e334c49584655c4fce8c5bb7c54664aef6d780100358aa54b4b49926c4be9ee4659153d9fa95d07cc4efdab2c5f4503148d0255d0b748366dafe042d78479c21d832e1431ed6d646d13e8e7230300920a5642bbed1dee9b46b6f02e572024ccf3c8edd82660e5d74c22e46af480c300000000000000000000000000000000000044ff72f96f084f4b6cdcb1b4a9d8e9f99f1b85497d0c3df704c8a0034c09caeeb0e34799b755649883539258a7b33dcef15d8fd1953ebaaa3cff81a0de7a05a440f20f6b273ceb8678f10378b670be7504dabd1471355d853292775d0366891f0bcf0a6087ed4f1f25ef52394db3e9d8318bbb9baff3db95bfd68a08ded502cc08a485c804e4fd107a7ca2a64ca081c6b2f7b895cdf98b763ebab9451c65eced6f5f97a541210806d885762ac3150225036c7eccd7a05593abd963f9a02df58085115e54f675e6a08d25b5722cabf989b4bbc562e073b81bae61f05c5e1f90e021340b60cc5fb8fdb09b6d20b0d87a6ed800000000000000000000000000000000006cc6f64f583a26a78f7f417f66c0af32f5194ddfce51e5aff28f621bb2fd2a5ab719823488d6e869b08d3d4ac7950c60144cf77437e29895a23282e3c65e015d1c334832a90ee77d93596e3f12e9ca8c67c7f3c9b66c9cb03edec184ad1d9544c7a3be250e471dca00000078544d79c0efe4094e561eeb26ee4c81106d03c004bc1589ef6e13648999c8735e2634e89aaa90c571fa3c07238697b1db783c52715055445e96995fe3273b0346b03fc742c06aa3947e0d9cf0c99b5e245ede85893112deea8bd3355a32ec15e1242f170a51f28cea4105541e96a52da4984d26bd29cb0623f00c6b0a4c00ad406d729babc9d1550a683c349017a340444000000000000000000000920ca49f7cc8194aaebdcae5a62bb7587b57f41f1c2034911f23e6bd0291b3319f03a0a15dea685a8ab75b3c60391afa5483231305402b52a8f98638009c142751518f73a847ca583e855d70c6a4a53f61ad753d5e740db44afd32b019d9e8b41361c2c1b9a8a14604fe52837a19dd6952fe2724c0105ab158a54a4a23ff0f4bc43c0e0e426e51258e"], &(0x7f0000000140)='GPL\x00'}, 0x94)

369.749774ms ago: executing program 2 (id=5278):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x3f, 0x4, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}, 0x10000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48)
socket$kcm(0x2c, 0x3, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x2, 0x73)
socket$kcm(0xa, 0x2, 0x73)
socket$kcm(0x10, 0x2, 0x0)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

314.291869ms ago: executing program 3 (id=5279):
socket$kcm(0xa, 0x6, 0x0)
r0 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r0, &(0x7f0000003a80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}], 0x18}, 0x4008804)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x7f}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000000000}, 0x0, 0x0, 0x0, 0x0, 0xf60}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x6}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xb, 0x8, &(0x7f0000000340)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x12, 0xc, 0x4, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, 0x0, &(0x7f0000000380)=r3}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r2, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], ""/16, <r5=>0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x9e, &(0x7f0000000540), 0x0, 0x0, 0x0, &(0x7f0000000480), 0x8, 0x1c, 0x8, 0x8, &(0x7f0000000540)}}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="be00"/20, @ANYRES32=r5, @ANYRES32, @ANYBLOB="000300"/14], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x7, 0x0, &(0x7f0000000100)="fa48235548a646", 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="150a000060000000611154000000000018000000000000000000000000000000950000000000000055f48fcb60a7cc64c46d8389d5123a6500002a5b119b66b671a9a3473caaadcec1469321cf41bd7f43867726d437643016f19760d99f1a46e8bf43317e61412c2da87c03e2c36f45c04c5e1782ec139f025061b1d168890eb580239c02c54c70a7d5636b6c5b972e2993d4d938012172cdf3dfba00"/168], &(0x7f0000000000)='GPL\x00'}, 0x80)
sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="0f02000039000511d25a80648c63940d0424fc600b003540280008000200002037153e37eb010280060410000a00", 0x33fe0}], 0x1, 0x0, 0x0, 0x6c000000}, 0x0)

241.044966ms ago: executing program 1 (id=5280):
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0400000009000000020000000100000020900000", @ANYRES32, @ANYBLOB="feffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000020000000100", @ANYRES32, @ANYBLOB="f765149dab790a50f9423200420830b5a9f4c9254863e73d88e71e041c89994583656b4aa4abbd3a3574a708be3b5237edf54f24975ee41d6e6571e6e21e827f5ff327ec596c474bb3af"], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f0000000100), &(0x7f0000000000)=""/8, 0x2}, 0x20)
openat$cgroup_int(r2, &(0x7f00000000c0)='hugetlb.2MB.failcnt\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='cpu<=0||!')
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0xf}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x90)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000000000bd0000000003000000850000002700000095"], &(0x7f0000000080)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x18, 0x0, &(0x7f0000000380)="e0bcd7c6a00e0588cd5e47b8bffc8e670f78f1f5b3aac3eb", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640))
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272})
r6 = socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000007, 0x4, @perf_bp={0x0, 0x8}, 0x101000, 0x7, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008104e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0)
ioctl$TUNSETLINK(r5, 0x400454cd, 0x30c)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f00000002c0)={0x0, 0x900, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0)

240.285427ms ago: executing program 0 (id=5290):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)

71.189853ms ago: executing program 3 (id=5281):
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0400000009000000020000000100000020900000", @ANYRES32, @ANYBLOB="feffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000020000000100"/20, @ANYRES32, @ANYBLOB="f765149dab790a50f9423200420830b5a9f4c9254863e73d88e71e041c89994583656b4aa4abbd3a3574a708be3b5237edf54f24975ee41d6e6571e6e21e827f5ff327ec596c474bb3af"], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f0000000100), &(0x7f0000000000)=""/8, 0x2}, 0x20)
openat$cgroup_int(r2, &(0x7f00000000c0)='hugetlb.2MB.failcnt\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='cpu<=0||!')
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0xf}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x90)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000000000bd0000000003000000850000002700000095"], &(0x7f0000000080)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x18, 0x0, &(0x7f0000000380)="e0bcd7c6a00e0588cd5e47b8bffc8e670f78f1f5b3aac3eb", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640))
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272})
r6 = socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000007, 0x4, @perf_bp={0x0, 0x8}, 0x101000, 0x7, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008104e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0)
ioctl$TUNSETLINK(r5, 0x400454cd, 0x30c)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)

0s ago: executing program 0 (id=5282):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xd, &(0x7f00000003c0)=@framed={{0x18, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000380)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xb, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x44490, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b73, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14101, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0)
r3 = socket$kcm(0x2, 0x5, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x4)
sendmsg$inet(r3, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)="9f", 0x1}], 0x1}, 0x3e8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffffff03000000dd1100000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
close(0x3)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00\f\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x1e, 0x2, 0x0)
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0)=r2, 0x4)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r6=>0x0, 0x0})
close(r6)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffe00000000000}})
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r7=>0x0, <r8=>0x0})
close(r7)
openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x10000, 0x0)
setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
r9 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
sendmsg$kcm(r9, &(0x7f0000000100)={&(0x7f0000001540)=@tipc, 0x80, 0x0}, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(r9, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0xc000)

kernel console output (not intermixed with test programs):

082][T16439]  ? __ia32_sys_read+0x80/0x80
[  942.604934][T16439]  ? lockdep_hardirqs_on+0x94/0x140
[  942.610205][T16439]  do_syscall_64+0x4c/0xa0
[  942.614683][T16439]  ? clear_bhb_loop+0x60/0xb0
[  942.619429][T16439]  ? clear_bhb_loop+0x60/0xb0
[  942.624174][T16439]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  942.630130][T16439] RIP: 0033:0x7f800b38efc9
[  942.634603][T16439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  942.654275][T16439] RSP: 002b:00007f800c29a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  942.662761][T16439] RAX: ffffffffffffffda RBX: 00007f800b5e5fa0 RCX: 00007f800b38efc9
[  942.670824][T16439] RDX: 0000000000000005 RSI: 00002000000001c0 RDI: 0000000000000004
[  942.678855][T16439] RBP: 00007f800c29a090 R08: 0000000000000000 R09: 0000000000000000
[  942.686890][T16439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  942.694931][T16439] R13: 00007f800b5e6038 R14: 00007f800b5e5fa0 R15: 00007ffc8c231338
[  942.702984][T16439]  </TASK>
[  942.840401][T16444] netlink: 'syz.2.4021': attribute type 8 has an invalid length.
[  942.860187][T16444] netlink: 399 bytes leftover after parsing attributes in process `syz.2.4021'.
[  943.764644][T16461] device syzkaller0 entered promiscuous mode
[  944.903718][ T9553] wlan1: Trigger new scan to find an IBSS to join
[  945.440720][T16474] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4029'.
[  947.840494][T16488] netlink: 'syz.4.4035': attribute type 8 has an invalid length.
[  947.863187][T16488] netlink: 399 bytes leftover after parsing attributes in process `syz.4.4035'.
[  949.863427][ T9542] wlan1: Trigger new scan to find an IBSS to join
[  950.847028][ T9542] wlan1: Creating new IBSS network, BSSID ce:b3:c9:13:bb:91
[  951.134696][T16522] bridge0: port 3(bond0) entered blocking state
[  951.141127][T16522] bridge0: port 3(bond0) entered disabled state
[  951.158110][T16522] device bond0 entered promiscuous mode
[  951.173110][T16522] device bond_slave_0 entered promiscuous mode
[  951.196692][T16522] device bond_slave_1 entered promiscuous mode
[  951.214907][T16522] bridge0: port 3(bond0) entered blocking state
[  951.221329][T16522] bridge0: port 3(bond0) entered forwarding state
[  951.424573][T16530] FAULT_INJECTION: forcing a failure.
[  951.424573][T16530] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  951.441418][T16531] netlink: 830 bytes leftover after parsing attributes in process `syz.4.4048'.
[  951.467354][T16530] CPU: 1 PID: 16530 Comm: syz.2.4049 Not tainted syzkaller #0
[  951.474920][T16530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  951.485039][T16530] Call Trace:
[  951.488359][T16530]  <TASK>
[  951.491330][T16530]  dump_stack_lvl+0x168/0x22e
[  951.496079][T16530]  ? show_regs_print_info+0x12/0x12
[  951.501329][T16530]  ? load_image+0x3b0/0x3b0
[  951.505905][T16530]  ? __lock_acquire+0x7c50/0x7c50
[  951.510999][T16530]  should_fail_ex+0x399/0x4d0
[  951.515764][T16530]  _copy_from_user+0x2c/0x170
[  951.520502][T16530]  iovec_from_user+0x143/0x360
[  951.525332][T16530]  __import_iovec+0x6d/0x500
[  951.529989][T16530]  ? __might_fault+0xa6/0x120
[  951.534745][T16530]  import_iovec+0x6f/0xa0
[  951.539169][T16530]  ___sys_sendmsg+0x1e4/0x290
[  951.543909][T16530]  ? __sys_sendmsg+0x270/0x270
[  951.548754][T16530]  ? __lock_acquire+0x7c50/0x7c50
[  951.553863][T16530]  ? __fdget+0x17c/0x200
[  951.558167][T16530]  __se_sys_sendmsg+0x19e/0x270
[  951.563095][T16530]  ? __x64_sys_sendmsg+0x80/0x80
[  951.568111][T16530]  ? lockdep_hardirqs_on+0x94/0x140
[  951.573374][T16530]  do_syscall_64+0x4c/0xa0
[  951.577846][T16530]  ? clear_bhb_loop+0x60/0xb0
[  951.582571][T16530]  ? clear_bhb_loop+0x60/0xb0
[  951.587305][T16530]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  951.593264][T16530] RIP: 0033:0x7f07c0f8efc9
[  951.597730][T16530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  951.617392][T16530] RSP: 002b:00007f07c1ea8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  951.625864][T16530] RAX: ffffffffffffffda RBX: 00007f07c11e5fa0 RCX: 00007f07c0f8efc9
[  951.633883][T16530] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004
[  951.641912][T16530] RBP: 00007f07c1ea8090 R08: 0000000000000000 R09: 0000000000000000
[  951.649931][T16530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  951.657955][T16530] R13: 00007f07c11e6038 R14: 00007f07c11e5fa0 R15: 00007ffc77783738
[  951.666016][T16530]  </TASK>
[  955.021651][T16559] netlink: 'syz.3.4060': attribute type 8 has an invalid length.
[  955.045818][T16559] netlink: 399 bytes leftover after parsing attributes in process `syz.3.4060'.
[  955.209221][T16568] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.4063'.
[  955.293730][T16568] bridge0: port 3(bond0) entered disabled state
[  955.300332][T16568] bridge0: port 2(bridge_slave_1) entered disabled state
[  955.307930][T16568] bridge0: port 1(bridge_slave_0) entered disabled state
[  955.384764][T16571] FAULT_INJECTION: forcing a failure.
[  955.384764][T16571] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  955.452988][T16571] CPU: 0 PID: 16571 Comm: syz.3.4064 Not tainted syzkaller #0
[  955.460553][T16571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  955.470660][T16571] Call Trace:
[  955.473988][T16571]  <TASK>
[  955.476961][T16571]  dump_stack_lvl+0x168/0x22e
[  955.481699][T16571]  ? show_regs_print_info+0x12/0x12
[  955.486969][T16571]  ? load_image+0x3b0/0x3b0
[  955.491548][T16571]  ? __lock_acquire+0x7c50/0x7c50
[  955.496650][T16571]  ? snprintf+0xd7/0x120
[  955.500958][T16571]  should_fail_ex+0x399/0x4d0
[  955.505703][T16571]  _copy_to_user+0x2c/0x130
[  955.510262][T16571]  simple_read_from_buffer+0xe3/0x150
[  955.515703][T16571]  proc_fail_nth_read+0x19a/0x210
[  955.520782][T16571]  ? proc_fault_inject_write+0x2f0/0x2f0
[  955.526476][T16571]  ? fsnotify_perm+0x248/0x550
[  955.531294][T16571]  ? proc_fault_inject_write+0x2f0/0x2f0
[  955.536972][T16571]  vfs_read+0x2c0/0x920
[  955.541189][T16571]  ? kernel_read+0x1e0/0x1e0
[  955.545841][T16571]  ? __fget_files+0x28/0x4d0
[  955.550496][T16571]  ? __fget_files+0x44a/0x4d0
[  955.555236][T16571]  ? __fdget_pos+0x2ae/0x360
[  955.559864][T16571]  ? ksys_read+0x71/0x240
[  955.564231][T16571]  ksys_read+0x143/0x240
[  955.568520][T16571]  ? vfs_write+0x960/0x960
[  955.572990][T16571]  ? lockdep_hardirqs_on+0x94/0x140
[  955.578235][T16571]  do_syscall_64+0x4c/0xa0
[  955.582694][T16571]  ? clear_bhb_loop+0x60/0xb0
[  955.587408][T16571]  ? clear_bhb_loop+0x60/0xb0
[  955.592139][T16571]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  955.598161][T16571] RIP: 0033:0x7fc5d918d9dc
[  955.602603][T16571] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  955.622247][T16571] RSP: 002b:00007fc5da105030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  955.630701][T16571] RAX: ffffffffffffffda RBX: 00007fc5d93e5fa0 RCX: 00007fc5d918d9dc
[  955.638703][T16571] RDX: 000000000000000f RSI: 00007fc5da1050a0 RDI: 0000000000000005
[  955.646734][T16571] RBP: 00007fc5da105090 R08: 0000000000000000 R09: 0000000000000000
[  955.654740][T16571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  955.662741][T16571] R13: 00007fc5d93e6038 R14: 00007fc5d93e5fa0 R15: 00007ffc54d99bb8
[  955.670797][T16571]  </TASK>
[  959.060345][T16602] netlink: 'syz.4.4074': attribute type 8 has an invalid length.
[  959.068451][ T9556] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  959.143181][T16602] netlink: 399 bytes leftover after parsing attributes in process `syz.4.4074'.
[  959.161655][T16608] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.4077'.
[  959.174617][T16611] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  959.181933][T16611] IPv6: NLM_F_CREATE should be set when creating new route
[  959.189314][T16611] IPv6: NLM_F_CREATE should be set when creating new route
[  959.196626][T16611] IPv6: NLM_F_CREATE should be set when creating new route
[  959.214749][T16608] bridge0: port 2(bridge_slave_1) entered disabled state
[  959.222137][T16608] bridge0: port 1(bridge_slave_0) entered disabled state
[  959.968084][T16620] netlink: 'syz.2.4082': attribute type 8 has an invalid length.
[  960.001920][T16620] netlink: 399 bytes leftover after parsing attributes in process `syz.2.4082'.
[  963.279342][T16647] netlink: 'syz.0.4091': attribute type 13 has an invalid length.
[  963.365429][T16649] netlink: 'syz.3.4092': attribute type 8 has an invalid length.
[  963.403234][T16649] netlink: 399 bytes leftover after parsing attributes in process `syz.3.4092'.
[  963.485680][T16655] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.4095'.
[  963.611464][T16662] netlink: 'syz.2.4098': attribute type 8 has an invalid length.
[  963.621110][T16655] bridge0: port 2(bridge_slave_1) entered disabled state
[  963.628555][T16655] bridge0: port 1(bridge_slave_0) entered disabled state
[  963.643154][T16662] netlink: 399 bytes leftover after parsing attributes in process `syz.2.4098'.
[  967.609648][T16702] netlink: 'syz.2.4109': attribute type 8 has an invalid length.
[  967.643280][T16702] netlink: 399 bytes leftover after parsing attributes in process `syz.2.4109'.
[  967.783217][T16711] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.4113'.
[  967.928168][T16711] bridge0: port 2(bridge_slave_1) entered disabled state
[  967.935660][T16711] bridge0: port 1(bridge_slave_0) entered disabled state
[  968.432045][T16740] FAULT_INJECTION: forcing a failure.
[  968.432045][T16740] name failslab, interval 1, probability 0, space 0, times 0
[  968.514944][T16740] CPU: 0 PID: 16740 Comm: syz.1.4123 Not tainted syzkaller #0
[  968.522503][T16740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  968.532632][T16740] Call Trace:
[  968.535952][T16740]  <TASK>
[  968.538924][T16740]  dump_stack_lvl+0x168/0x22e
[  968.543667][T16740]  ? show_regs_print_info+0x12/0x12
[  968.548925][T16740]  ? load_image+0x3b0/0x3b0
[  968.553500][T16740]  ? __lock_acquire+0x7c50/0x7c50
[  968.558599][T16740]  should_fail_ex+0x399/0x4d0
[  968.563444][T16740]  should_failslab+0x5/0x20
[  968.568015][T16740]  slab_pre_alloc_hook+0x59/0x310
[  968.573099][T16740]  ? bpf_test_init+0xc0/0x150
[  968.577845][T16740]  __kmem_cache_alloc_node+0x4f/0x260
[  968.583286][T16740]  ? bpf_test_init+0xc0/0x150
[  968.588117][T16740]  __kmalloc+0xa0/0x240
[  968.592337][T16740]  bpf_test_init+0xc0/0x150
[  968.596910][T16740]  bpf_prog_test_run_xdp+0x359/0xe50
[  968.602276][T16740]  ? dev_put+0x80/0x80
[  968.606414][T16740]  ? dev_put+0x80/0x80
[  968.610538][T16740]  bpf_prog_test_run+0x31e/0x390
[  968.615550][T16740]  __sys_bpf+0x593/0x6d0
[  968.619872][T16740]  ? bpf_link_show_fdinfo+0x340/0x340
[  968.625321][T16740]  ? lock_chain_count+0x20/0x20
[  968.630250][T16740]  __x64_sys_bpf+0x78/0x90
[  968.634732][T16740]  do_syscall_64+0x4c/0xa0
[  968.639208][T16740]  ? clear_bhb_loop+0x60/0xb0
[  968.643938][T16740]  ? clear_bhb_loop+0x60/0xb0
[  968.648675][T16740]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  968.654623][T16740] RIP: 0033:0x7f800b38efc9
[  968.659092][T16740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  968.678761][T16740] RSP: 002b:00007f800c29a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  968.687284][T16740] RAX: ffffffffffffffda RBX: 00007f800b5e5fa0 RCX: 00007f800b38efc9
[  968.695310][T16740] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[  968.703356][T16740] RBP: 00007f800c29a090 R08: 0000000000000000 R09: 0000000000000000
[  968.711378][T16740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  968.719494][T16740] R13: 00007f800b5e6038 R14: 00007f800b5e5fa0 R15: 00007ffc8c231338
[  968.727640][T16740]  </TASK>
[  969.002307][T16742] netlink: 'syz.4.4125': attribute type 8 has an invalid length.
[  969.031757][T16742] netlink: 399 bytes leftover after parsing attributes in process `syz.4.4125'.
[  971.811267][T16769] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.4134'.
[  971.830446][T16761] netlink: 'syz.0.4131': attribute type 11 has an invalid length.
[  971.887558][T16761] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4131'.
[  972.135305][T16776] netlink: 'syz.3.4137': attribute type 8 has an invalid length.
[  972.143821][T16776] netlink: 399 bytes leftover after parsing attributes in process `syz.3.4137'.
[  972.279568][T16761] netlink: 'syz.0.4131': attribute type 2 has an invalid length.
[  972.288755][T16761] netlink: 'syz.0.4131': attribute type 2 has an invalid length.
[  972.297197][T16766] netlink: 'syz.0.4131': attribute type 21 has an invalid length.
[  972.572076][T16784] netlink: 'syz.2.4140': attribute type 8 has an invalid length.
[  972.596455][T16784] netlink: 399 bytes leftover after parsing attributes in process `syz.2.4140'.
[  972.973818][T16796] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4145'.
[  973.009266][T16796] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4145'.
[  973.041254][T16795] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4145'.
[  973.417624][T16805] FAULT_INJECTION: forcing a failure.
[  973.417624][T16805] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  973.463502][T16805] CPU: 1 PID: 16805 Comm: syz.0.4148 Not tainted syzkaller #0
[  973.471064][T16805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  973.481177][T16805] Call Trace:
[  973.484503][T16805]  <TASK>
[  973.487489][T16805]  dump_stack_lvl+0x168/0x22e
[  973.492236][T16805]  ? show_regs_print_info+0x12/0x12
[  973.497494][T16805]  ? load_image+0x3b0/0x3b0
[  973.502073][T16805]  ? __lock_acquire+0x7c50/0x7c50
[  973.507164][T16805]  ? __rcu_read_unlock+0x78/0xd0
[  973.512164][T16805]  should_fail_ex+0x399/0x4d0
[  973.516916][T16805]  _copy_to_user+0x2c/0x130
[  973.521476][T16805]  bpf_test_finish+0x48e/0x600
[  973.526304][T16805]  ? convert___skb_to_skb+0x580/0x580
[  973.531735][T16805]  ? convert_skb_to___skb+0x420/0x420
[  973.537166][T16805]  ? __build_skb+0x257/0x3c0
[  973.541827][T16805]  bpf_prog_test_run_skb+0xc03/0x11b0
[  973.547282][T16805]  ? cpu_online+0xa0/0xa0
[  973.551676][T16805]  bpf_prog_test_run+0x31e/0x390
[  973.556685][T16805]  __sys_bpf+0x593/0x6d0
[  973.560995][T16805]  ? bpf_link_show_fdinfo+0x340/0x340
[  973.566440][T16805]  ? lock_chain_count+0x20/0x20
[  973.571360][T16805]  __x64_sys_bpf+0x78/0x90
[  973.575835][T16805]  do_syscall_64+0x4c/0xa0
[  973.580313][T16805]  ? clear_bhb_loop+0x60/0xb0
[  973.585042][T16805]  ? clear_bhb_loop+0x60/0xb0
[  973.589776][T16805]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  973.595733][T16805] RIP: 0033:0x7fb5d4f8efc9
[  973.600199][T16805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  973.619860][T16805] RSP: 002b:00007fb5d5e43038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  973.628332][T16805] RAX: ffffffffffffffda RBX: 00007fb5d51e5fa0 RCX: 00007fb5d4f8efc9
[  973.636355][T16805] RDX: 0000000000000050 RSI: 0000200000000c40 RDI: 000000000000000a
[  973.644374][T16805] RBP: 00007fb5d5e43090 R08: 0000000000000000 R09: 0000000000000000
[  973.652391][T16805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  973.660414][T16805] R13: 00007fb5d51e6038 R14: 00007fb5d51e5fa0 R15: 00007ffc5448c8e8
[  973.668449][T16805]  </TASK>
[  973.871867][T16809] netlink: 'syz.2.4149': attribute type 8 has an invalid length.
[  973.896919][T16809] netlink: 399 bytes leftover after parsing attributes in process `syz.2.4149'.
[  973.987810][T16812] netlink: 'syz.0.4150': attribute type 6 has an invalid length.
[  973.996194][T16812] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4150'.
[  976.056419][T16824] netlink: 'syz.0.4155': attribute type 2 has an invalid length.
[  976.099497][T16824] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.4155'.
[  976.269984][T16833] netlink: 'syz.1.4156': attribute type 8 has an invalid length.
[  976.287665][T16833] netlink: 399 bytes leftover after parsing attributes in process `syz.1.4156'.
[  976.898707][T16852] netlink: 'syz.1.4164': attribute type 8 has an invalid length.
[  976.943808][T16852] netlink: 399 bytes leftover after parsing attributes in process `syz.1.4164'.
[  979.730689][T16859] netlink: 'syz.2.4166': attribute type 3 has an invalid length.
[  979.738664][T16859] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4166'.
[  980.356623][T16877] netlink: 'syz.3.4172': attribute type 8 has an invalid length.
[  980.400907][T16877] netlink: 399 bytes leftover after parsing attributes in process `syz.3.4172'.
[  980.486228][T16882] netlink: 'syz.1.4174': attribute type 39 has an invalid length.
[  980.838310][T16890] netlink: 'syz.3.4178': attribute type 8 has an invalid length.
[  980.858346][T16890] netlink: 399 bytes leftover after parsing attributes in process `syz.3.4178'.
[  980.900992][ T9556] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  980.958646][T16887] netlink: 'syz.0.4177': attribute type 10 has an invalid length.
[  980.970572][T16887] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4177'.
[  980.983953][T16887] device dummy0 entered promiscuous mode
[  981.019930][T16887] bridge0: port 4(dummy0) entered blocking state
[  981.032771][T16887] bridge0: port 4(dummy0) entered disabled state
[  981.913206][ T9551] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  984.724781][T16922] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4188'.
[  984.742063][T16922] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4188'.
[  984.760589][T16921] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4188'.
[  984.772113][T16922] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4188'.
[  984.842342][T16928] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  984.896496][T16925] netlink: 'syz.1.4191': attribute type 8 has an invalid length.
[  984.915724][T16930] syzkaller1: tun_chr_ioctl cmd 1074025677
[  984.923306][T16925] netlink: 399 bytes leftover after parsing attributes in process `syz.1.4191'.
[  984.952185][T16930] syzkaller1: linktype set to 780
[  985.219999][T16935] device wg2 entered promiscuous mode
[  985.475808][T16941] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4194'.
[  988.772594][T16955] netlink: 'syz.2.4201': attribute type 8 has an invalid length.
[  988.800994][T16955] netlink: 399 bytes leftover after parsing attributes in process `syz.2.4201'.
[  988.967305][T16964] netlink: 'syz.3.4204': attribute type 8 has an invalid length.
[  989.041847][T16964] netlink: 399 bytes leftover after parsing attributes in process `syz.3.4204'.
[  989.287271][T16975] device wg2 entered promiscuous mode
[  989.629763][T16980] netlink: 'syz.1.4210': attribute type 8 has an invalid length.
[  989.719924][T16980] netlink: 399 bytes leftover after parsing attributes in process `syz.1.4210'.
[  989.980409][T16986] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  990.423126][ T9542] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  992.986948][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[  992.993413][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[  993.315534][T17006] netlink: 'syz.0.4219': attribute type 8 has an invalid length.
[  993.335956][T17006] netlink: 399 bytes leftover after parsing attributes in process `syz.0.4219'.
[  993.486810][T17009] netlink: 'syz.3.4221': attribute type 21 has an invalid length.
[  993.604642][T17017] netlink: 'syz.1.4224': attribute type 8 has an invalid length.
[  993.613363][T17017] netlink: 399 bytes leftover after parsing attributes in process `syz.1.4224'.
[  993.667084][T17013] device wg2 entered promiscuous mode
[  993.677708][T17023] netlink: 'syz.2.4223': attribute type 21 has an invalid length.
[  993.692700][T17023] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4223'.
[  996.964555][T17033] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  997.176381][T17047] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4232'.
[ 1000.112482][T17057] netlink: 'syz.0.4237': attribute type 8 has an invalid length.
[ 1000.127956][T17059] pim6reg0: tun_chr_ioctl cmd 1074025677
[ 1000.133281][T17057] netlink: 399 bytes leftover after parsing attributes in process `syz.0.4237'.
[ 1000.163272][T17059] pim6reg0: linktype set to 5
[ 1001.348941][T17089] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1002.004562][T17101] netlink: 'syz.1.4252': attribute type 8 has an invalid length.
[ 1002.030240][T17101] netlink: 399 bytes leftover after parsing attributes in process `syz.1.4252'.
[ 1002.336433][T17106] netlink: 14546 bytes leftover after parsing attributes in process `syz.1.4253'.
[ 1002.529196][T17113] bond0: (slave bridge0): Error: Slave device does not support XDP
[ 1002.562414][T17113] netlink: 'syz.3.4256': attribute type 10 has an invalid length.
[ 1002.634419][T17113] bond0: (slave dummy0): Enslaving as an active interface with an up link
[ 1002.789505][T17124] FAULT_INJECTION: forcing a failure.
[ 1002.789505][T17124] name failslab, interval 1, probability 0, space 0, times 0
[ 1002.815563][T17126] FAULT_INJECTION: forcing a failure.
[ 1002.815563][T17126] name failslab, interval 1, probability 0, space 0, times 0
[ 1002.827049][T17124] CPU: 1 PID: 17124 Comm: syz.2.4260 Not tainted syzkaller #0
[ 1002.835754][T17124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1002.845867][T17124] Call Trace:
[ 1002.849276][T17124]  <TASK>
[ 1002.852247][T17124]  dump_stack_lvl+0x168/0x22e
[ 1002.856989][T17124]  ? show_regs_print_info+0x12/0x12
[ 1002.862258][T17124]  ? load_image+0x3b0/0x3b0
[ 1002.866823][T17124]  ? __might_sleep+0xd0/0xd0
[ 1002.871465][T17124]  ? __lock_acquire+0x7c50/0x7c50
[ 1002.876543][T17124]  should_fail_ex+0x399/0x4d0
[ 1002.881293][T17124]  should_failslab+0x5/0x20
[ 1002.885840][T17124]  slab_pre_alloc_hook+0x59/0x310
[ 1002.890898][T17124]  ? apparmor_sk_alloc_security+0x74/0x100
[ 1002.896756][T17124]  __kmem_cache_alloc_node+0x4f/0x260
[ 1002.902175][T17124]  ? apparmor_sk_alloc_security+0x74/0x100
[ 1002.908027][T17124]  kmalloc_trace+0x26/0xe0
[ 1002.912492][T17124]  apparmor_sk_alloc_security+0x74/0x100
[ 1002.918177][T17124]  security_sk_alloc+0x6a/0xa0
[ 1002.922996][T17124]  sk_prot_alloc+0x101/0x210
[ 1002.927627][T17124]  ? sk_alloc+0x20/0x340
[ 1002.931915][T17124]  sk_alloc+0x36/0x340
[ 1002.936028][T17124]  ? bpf_ctx_init+0x163/0x1a0
[ 1002.940752][T17124]  ? bpf_prog_test_run_skb+0x267/0x11b0
[ 1002.946357][T17124]  bpf_prog_test_run_skb+0x350/0x11b0
[ 1002.951780][T17124]  ? __fget_files+0x28/0x4d0
[ 1002.956419][T17124]  ? __fget_files+0x44a/0x4d0
[ 1002.961161][T17124]  ? cpu_online+0xa0/0xa0
[ 1002.965570][T17124]  bpf_prog_test_run+0x31e/0x390
[ 1002.970556][T17124]  __sys_bpf+0x593/0x6d0
[ 1002.974845][T17124]  ? bpf_link_show_fdinfo+0x340/0x340
[ 1002.980314][T17124]  ? lock_chain_count+0x20/0x20
[ 1002.985236][T17124]  __x64_sys_bpf+0x78/0x90
[ 1002.989811][T17124]  do_syscall_64+0x4c/0xa0
[ 1002.994267][T17124]  ? clear_bhb_loop+0x60/0xb0
[ 1002.998978][T17124]  ? clear_bhb_loop+0x60/0xb0
[ 1003.003696][T17124]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1003.009622][T17124] RIP: 0033:0x7f07c0f8efc9
[ 1003.014073][T17124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1003.033714][T17124] RSP: 002b:00007f07c1ea8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1003.042162][T17124] RAX: ffffffffffffffda RBX: 00007f07c11e5fa0 RCX: 00007f07c0f8efc9
[ 1003.050209][T17124] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a
[ 1003.058212][T17124] RBP: 00007f07c1ea8090 R08: 0000000000000000 R09: 0000000000000000
[ 1003.066253][T17124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1003.074429][T17124] R13: 00007f07c11e6038 R14: 00007f07c11e5fa0 R15: 00007ffc77783738
[ 1003.082451][T17124]  </TASK>
[ 1003.093779][T17126] CPU: 1 PID: 17126 Comm: syz.0.4262 Not tainted syzkaller #0
[ 1003.101325][T17126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1003.111426][T17126] Call Trace:
[ 1003.114743][T17126]  <TASK>
[ 1003.117711][T17126]  dump_stack_lvl+0x168/0x22e
[ 1003.122444][T17126]  ? show_regs_print_info+0x12/0x12
[ 1003.127695][T17126]  ? load_image+0x3b0/0x3b0
[ 1003.132273][T17126]  ? __lock_acquire+0x7c50/0x7c50
[ 1003.137363][T17126]  should_fail_ex+0x399/0x4d0
[ 1003.142113][T17126]  should_failslab+0x5/0x20
[ 1003.146680][T17126]  slab_pre_alloc_hook+0x59/0x310
[ 1003.151761][T17126]  kmem_cache_alloc_lru+0x49/0x2e0
[ 1003.157041][T17126]  ? proc_alloc_inode+0x26/0xb0
[ 1003.161958][T17126]  proc_alloc_inode+0x26/0xb0
[ 1003.166674][T17126]  ? proc_invalidate_siblings_dcache+0x6c0/0x6c0
[ 1003.173073][T17126]  new_inode_pseudo+0x5f/0x1c0
[ 1003.177889][T17126]  new_inode+0x25/0x1c0
[ 1003.182109][T17126]  proc_pid_make_inode+0x20/0x1c0
[ 1003.187201][T17126]  proc_pident_instantiate+0x69/0x2b0
[ 1003.192644][T17126]  proc_pident_lookup+0x1b8/0x260
[ 1003.197741][T17126]  __lookup_slow+0x27d/0x3a0
[ 1003.202399][T17126]  ? lookup_one_len+0x2c0/0x2c0
[ 1003.207320][T17126]  ? try_to_unlazy+0x34c/0x5a0
[ 1003.212136][T17126]  ? preempt_count_add+0x8d/0x190
[ 1003.217229][T17126]  ? down_read+0x1a8/0x2d0
[ 1003.221708][T17126]  lookup_slow+0x53/0x70
[ 1003.226012][T17126]  link_path_walk+0x928/0xe50
[ 1003.230765][T17126]  ? handle_lookup_down+0x130/0x130
[ 1003.236020][T17126]  ? percpu_counter_add_batch+0x13b/0x160
[ 1003.241822][T17126]  path_openat+0x276/0x2e70
[ 1003.246404][T17126]  ? do_sys_openat2+0xcf/0x490
[ 1003.251323][T17126]  ? __x64_sys_openat+0x135/0x160
[ 1003.256407][T17126]  ? do_syscall_64+0x4c/0xa0
[ 1003.261096][T17126]  ? do_filp_open+0x3c0/0x3c0
[ 1003.265824][T17126]  do_filp_open+0x1c1/0x3c0
[ 1003.270364][T17126]  ? vfs_tmpfile+0x480/0x480
[ 1003.274994][T17126]  ? noop_direct_IO+0x10/0x10
[ 1003.279735][T17126]  ? _raw_spin_unlock+0x24/0x40
[ 1003.284625][T17126]  ? alloc_fd+0x58f/0x630
[ 1003.289001][T17126]  do_sys_openat2+0x142/0x490
[ 1003.293723][T17126]  ? atomic_notifier_call_chain+0x282/0x2b0
[ 1003.299664][T17126]  ? atomic_notifier_call_chain+0x2c/0x2b0
[ 1003.305549][T17126]  ? do_sys_open+0xe0/0xe0
[ 1003.310005][T17126]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[ 1003.316054][T17126]  ? lock_chain_count+0x20/0x20
[ 1003.320948][T17126]  __x64_sys_openat+0x135/0x160
[ 1003.325860][T17126]  do_syscall_64+0x4c/0xa0
[ 1003.330369][T17126]  ? clear_bhb_loop+0x60/0xb0
[ 1003.335082][T17126]  ? clear_bhb_loop+0x60/0xb0
[ 1003.339796][T17126]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1003.345726][T17126] RIP: 0033:0x7fb5d4f8d810
[ 1003.350173][T17126] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44
[ 1003.369813][T17126] RSP: 002b:00007fb5d5e42f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[ 1003.378265][T17126] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fb5d4f8d810
[ 1003.386274][T17126] RDX: 0000000000000002 RSI: 00007fb5d5e42fa0 RDI: 00000000ffffff9c
[ 1003.394291][T17126] RBP: 00007fb5d5e42fa0 R08: 0000000000000000 R09: 0000000000000000
[ 1003.402298][T17126] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[ 1003.410306][T17126] R13: 00007fb5d51e6038 R14: 00007fb5d51e5fa0 R15: 00007ffc5448c8e8
[ 1003.418332][T17126]  </TASK>
[ 1003.593446][T17136] netlink: 'syz.3.4264': attribute type 8 has an invalid length.
[ 1003.633067][T17136] netlink: 399 bytes leftover after parsing attributes in process `syz.3.4264'.
[ 1006.601114][T17170] netlink: 'syz.1.4278': attribute type 8 has an invalid length.
[ 1006.623272][T17170] netlink: 399 bytes leftover after parsing attributes in process `syz.1.4278'.
[ 1010.837392][T17196] netlink: 'syz.2.4287': attribute type 8 has an invalid length.
[ 1010.860973][T17196] netlink: 399 bytes leftover after parsing attributes in process `syz.2.4287'.
[ 1010.930433][T17202] cgroup: fork rejected by pids controller in /syz0
[ 1010.969955][T17204] device syzkaller0 entered promiscuous mode
[ 1011.078027][T17215] netlink: 'syz.3.4292': attribute type 8 has an invalid length.
[ 1011.113585][T17215] netlink: 399 bytes leftover after parsing attributes in process `syz.3.4292'.
[ 1015.221135][T17340] netlink: 'syz.3.4304': attribute type 8 has an invalid length.
[ 1015.229719][T17340] netlink: 399 bytes leftover after parsing attributes in process `syz.3.4304'.
[ 1015.291510][ T9545] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1015.678399][T17345] netlink: 'syz.3.4306': attribute type 3 has an invalid length.
[ 1015.687631][T17345] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4306'.
[ 1016.756505][T17315] netlink: 'syz.1.4294': attribute type 10 has an invalid length.
[ 1017.060297][T17352] netlink: 'syz.4.4308': attribute type 8 has an invalid length.
[ 1017.074766][T17352] netlink: 399 bytes leftover after parsing attributes in process `syz.4.4308'.
[ 1017.088942][T17357] netlink: 'syz.3.4310': attribute type 39 has an invalid length.
[ 1017.257634][ T9542] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1017.376587][ T9542] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1017.632676][ T9542] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1017.967216][ T9542] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1017.991822][T17371] netlink: 194236 bytes leftover after parsing attributes in process `syz.3.4314'.
[ 1018.024661][T17371] netlink: zone id is out of range
[ 1018.081653][T17371] netlink: get zone limit has 8 unknown bytes
[ 1018.322015][T17373] netlink: 'syz.1.4316': attribute type 8 has an invalid length.
[ 1018.350112][T17373] netlink: 399 bytes leftover after parsing attributes in process `syz.1.4316'.
[ 1018.534215][   T47] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1018.544637][   T47] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1018.552803][   T47] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1018.561241][   T47] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1018.578505][   T47] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 1018.587476][   T47] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1018.814465][T17377] chnl_net:caif_netlink_parms(): no params data found
[ 1020.663215][T12850] Bluetooth: hci2: command 0x0409 tx timeout
[ 1021.068783][T17390] bond0: (slave bridge0): Error: Slave device does not support XDP
[ 1021.085038][T17390] netlink: 'syz.4.4318': attribute type 10 has an invalid length.
[ 1021.117739][T17390] bond0: (slave dummy0): Enslaving as an active interface with an up link
[ 1021.255524][T17377] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1021.304211][T17377] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1021.320174][T17377] device bridge_slave_0 entered promiscuous mode
[ 1021.368128][T17377] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1021.403089][T17377] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1021.411495][T17377] device bridge_slave_1 entered promiscuous mode
[ 1021.498489][T17408] FAULT_INJECTION: forcing a failure.
[ 1021.498489][T17408] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1021.533028][T17408] CPU: 1 PID: 17408 Comm: syz.4.4322 Not tainted syzkaller #0
[ 1021.540584][T17408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1021.550686][T17408] Call Trace:
[ 1021.554043][T17408]  <TASK>
[ 1021.557010][T17408]  dump_stack_lvl+0x168/0x22e
[ 1021.561830][T17408]  ? show_regs_print_info+0x12/0x12
[ 1021.567079][T17408]  ? load_image+0x3b0/0x3b0
[ 1021.571647][T17408]  ? __lock_acquire+0x7c50/0x7c50
[ 1021.576736][T17408]  should_fail_ex+0x399/0x4d0
[ 1021.581476][T17408]  _copy_from_user+0x2c/0x170
[ 1021.586210][T17408]  ___sys_recvmsg+0x12b/0x510
[ 1021.591097][T17408]  ? __sys_recvmsg+0x270/0x270
[ 1021.595920][T17408]  ? trace_call_bpf+0xbf/0x680
[ 1021.600724][T17408]  ? trace_call_bpf+0x5a7/0x680
[ 1021.605726][T17408]  ? __fget_files+0x44a/0x4d0
[ 1021.610446][T17408]  ? __fdget+0x17c/0x200
[ 1021.614740][T17408]  __x64_sys_recvmsg+0x1eb/0x2b0
[ 1021.619710][T17408]  ? ct_nmi_exit+0x145/0x1c0
[ 1021.624336][T17408]  ? ___sys_recvmsg+0x510/0x510
[ 1021.629247][T17408]  ? lockdep_hardirqs_on+0x94/0x140
[ 1021.634502][T17408]  do_syscall_64+0x4c/0xa0
[ 1021.638966][T17408]  ? clear_bhb_loop+0x60/0xb0
[ 1021.643687][T17408]  ? clear_bhb_loop+0x60/0xb0
[ 1021.648420][T17408]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1021.654344][T17408] RIP: 0033:0x7f1b3f18efc9
[ 1021.658804][T17408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1021.678447][T17408] RSP: 002b:00007f1b40023038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[ 1021.686988][T17408] RAX: ffffffffffffffda RBX: 00007f1b3f3e6090 RCX: 00007f1b3f18efc9
[ 1021.694990][T17408] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007
[ 1021.702988][T17408] RBP: 00007f1b40023090 R08: 0000000000000000 R09: 0000000000000000
[ 1021.710995][T17408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1021.718998][T17408] R13: 00007f1b3f3e6128 R14: 00007f1b3f3e6090 R15: 00007fff650b1508
[ 1021.727098][T17408]  </TASK>
[ 1021.853774][T17377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1021.887802][T17377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1022.369725][T17421] netlink: 'syz.3.4325': attribute type 8 has an invalid length.
[ 1022.458149][T17421] netlink: 399 bytes leftover after parsing attributes in process `syz.3.4325'.
[ 1022.743301][T12850] Bluetooth: hci2: command 0x041b tx timeout
[ 1023.451999][ T9559] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1024.943488][T12850] Bluetooth: hci2: command 0x040f tx timeout
[ 1026.444953][T17377] team0: Port device team_slave_0 added
[ 1026.556436][T17377] team0: Port device team_slave_1 added
[ 1026.667540][T17451] FAULT_INJECTION: forcing a failure.
[ 1026.667540][T17451] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1026.762458][T17451] CPU: 0 PID: 17451 Comm: syz.3.4333 Not tainted syzkaller #0
[ 1026.770019][T17451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1026.780124][T17451] Call Trace:
[ 1026.783445][T17451]  <TASK>
[ 1026.786411][T17451]  dump_stack_lvl+0x168/0x22e
[ 1026.791145][T17451]  ? show_regs_print_info+0x12/0x12
[ 1026.796397][T17451]  ? load_image+0x3b0/0x3b0
[ 1026.800959][T17451]  ? __lock_acquire+0x7c50/0x7c50
[ 1026.806053][T17451]  ? verify_lock_unused+0x140/0x140
[ 1026.811319][T17451]  should_fail_ex+0x399/0x4d0
[ 1026.816055][T17451]  _copy_from_user+0x2c/0x170
[ 1026.820785][T17451]  ___sys_sendmsg+0x155/0x290
[ 1026.825565][T17451]  ? __sys_sendmsg+0x270/0x270
[ 1026.830380][T17451]  ? perf_trace_run_bpf_submit+0xf3/0x1c0
[ 1026.836152][T17451]  ? __fdget+0x17c/0x200
[ 1026.840437][T17451]  __se_sys_sendmsg+0x19e/0x270
[ 1026.845414][T17451]  ? __x64_sys_sendmsg+0x80/0x80
[ 1026.850401][T17451]  ? syscall_enter_from_user_mode+0x2a/0x80
[ 1026.856349][T17451]  do_syscall_64+0x4c/0xa0
[ 1026.860896][T17451]  ? clear_bhb_loop+0x60/0xb0
[ 1026.865649][T17451]  ? clear_bhb_loop+0x60/0xb0
[ 1026.870361][T17451]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1026.876316][T17451] RIP: 0033:0x7fc5d918efc9
[ 1026.880767][T17451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1026.900403][T17451] RSP: 002b:00007fc5da105038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1026.908858][T17451] RAX: ffffffffffffffda RBX: 00007fc5d93e5fa0 RCX: 00007fc5d918efc9
[ 1026.916864][T17451] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005
[ 1026.924868][T17451] RBP: 00007fc5da105090 R08: 0000000000000000 R09: 0000000000000000
[ 1026.932877][T17451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1026.940881][T17451] R13: 00007fc5d93e6038 R14: 00007fc5d93e5fa0 R15: 00007ffc54d99bb8
[ 1026.948900][T17451]  </TASK>
[ 1026.990529][T12850] Bluetooth: hci2: command 0x0419 tx timeout
[ 1027.052058][T17377] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1027.072594][T17377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1027.163359][T17377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1027.251945][T17465] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.4339'.
[ 1027.293843][T17377] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1027.300926][T17377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1027.400322][T17377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1027.448027][T17470] netlink: 16182 bytes leftover after parsing attributes in process `syz.2.4339'.
[ 1027.488631][T17475] netlink: 'syz.1.4341': attribute type 8 has an invalid length.
[ 1027.509003][T17468] IPv6: Can't replace route, no match found
[ 1027.511257][T17475] netlink: 399 bytes leftover after parsing attributes in process `syz.1.4341'.
[ 1028.009232][T17377] device hsr_slave_0 entered promiscuous mode
[ 1028.028247][T17377] device hsr_slave_1 entered promiscuous mode
[ 1028.046037][T17377] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1028.064920][T17377] Cannot create hsr debugfs directory
[ 1028.080827][T17486] netlink: 'syz.4.4343': attribute type 39 has an invalid length.
[ 1029.374210][T17510] netlink: 'syz.1.4347': attribute type 10 has an invalid length.
[ 1029.537204][T17518] FAULT_INJECTION: forcing a failure.
[ 1029.537204][T17518] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1029.596568][T17518] CPU: 1 PID: 17518 Comm: syz.4.4350 Not tainted syzkaller #0
[ 1029.604120][T17518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1029.614391][T17518] Call Trace:
[ 1029.617796][T17518]  <TASK>
[ 1029.620771][T17518]  dump_stack_lvl+0x168/0x22e
[ 1029.625506][T17518]  ? show_regs_print_info+0x12/0x12
[ 1029.630820][T17518]  ? load_image+0x3b0/0x3b0
[ 1029.635387][T17518]  ? __lock_acquire+0x7c50/0x7c50
[ 1029.640461][T17518]  ? __rcu_read_unlock+0x78/0xd0
[ 1029.645449][T17518]  should_fail_ex+0x399/0x4d0
[ 1029.650215][T17518]  _copy_to_user+0x2c/0x130
[ 1029.654747][T17518]  bpf_test_finish+0x48e/0x600
[ 1029.659589][T17518]  ? convert___skb_to_skb+0x580/0x580
[ 1029.664993][T17518]  ? convert_skb_to___skb+0x420/0x420
[ 1029.670409][T17518]  ? bpf_test_init+0x134/0x150
[ 1029.675232][T17518]  bpf_prog_test_run_xdp+0x782/0xe50
[ 1029.680571][T17518]  ? dev_put+0x80/0x80
[ 1029.684677][T17518]  ? dev_put+0x80/0x80
[ 1029.688776][T17518]  bpf_prog_test_run+0x31e/0x390
[ 1029.693755][T17518]  __sys_bpf+0x593/0x6d0
[ 1029.698047][T17518]  ? bpf_link_show_fdinfo+0x340/0x340
[ 1029.703506][T17518]  ? lock_chain_count+0x20/0x20
[ 1029.708402][T17518]  __x64_sys_bpf+0x78/0x90
[ 1029.712865][T17518]  do_syscall_64+0x4c/0xa0
[ 1029.717319][T17518]  ? clear_bhb_loop+0x60/0xb0
[ 1029.722027][T17518]  ? clear_bhb_loop+0x60/0xb0
[ 1029.726738][T17518]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1029.732666][T17518] RIP: 0033:0x7f1b3f18efc9
[ 1029.737115][T17518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1029.756780][T17518] RSP: 002b:00007f1b40044038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1029.765227][T17518] RAX: ffffffffffffffda RBX: 00007f1b3f3e5fa0 RCX: 00007f1b3f18efc9
[ 1029.773229][T17518] RDX: 0000000000000050 RSI: 00002000000000c0 RDI: 000000000000000a
[ 1029.781235][T17518] RBP: 00007f1b40044090 R08: 0000000000000000 R09: 0000000000000000
[ 1029.789234][T17518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1029.797235][T17518] R13: 00007f1b3f3e6038 R14: 00007f1b3f3e5fa0 R15: 00007fff650b1508
[ 1029.805252][T17518]  </TASK>
[ 1029.841656][ T9542] device hsr_slave_0 left promiscuous mode
[ 1029.849874][ T9542] device hsr_slave_1 left promiscuous mode
[ 1029.933246][ T9542] bridge0: port 4(dummy0) entered disabled state
[ 1030.017838][ T9542] device bond0 left promiscuous mode
[ 1030.053115][ T9542] device bond_slave_0 left promiscuous mode
[ 1030.071860][ T9542] device bond_slave_1 left promiscuous mode
[ 1030.081371][ T9542] bridge0: port 3(bond0) entered disabled state
[ 1030.128063][ T9542] device bridge_slave_1 left promiscuous mode
[ 1030.149622][ T9542] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1030.185464][ T9542] device bridge_slave_0 left promiscuous mode
[ 1030.191773][ T9542] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1030.209257][T17529] netlink: 'syz.1.4353': attribute type 8 has an invalid length.
[ 1030.224123][T17534] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.4355'.
[ 1030.226128][T17529] netlink: 399 bytes leftover after parsing attributes in process `syz.1.4353'.
[ 1030.283652][ T9542] device veth1_macvtap left promiscuous mode
[ 1030.290929][ T9542] device veth1_vlan left promiscuous mode
[ 1030.314926][ T9542] device veth0_vlan left promiscuous mode
[ 1030.489691][T17534] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4355'.
[ 1031.301180][ T9542] team0 (unregistering): Port device macvlan1 removed
[ 1031.567758][ T9542] team0 (unregistering): Port device team_slave_1 removed
[ 1031.607102][ T9542] team0 (unregistering): Port device team_slave_0 removed
[ 1031.647925][ T9542] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1031.690284][ T9542] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1032.108908][ T9542] bond0 (unregistering): Released all slaves
[ 1032.199110][T17530] netlink: 172 bytes leftover after parsing attributes in process `syz.3.4355'.
[ 1036.348595][T17586] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4367'.
[ 1036.397762][T17586] netlink: 'syz.4.4367': attribute type 1 has an invalid length.
[ 1036.500376][T17377] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1036.587410][T17377] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1036.598490][T17590] netlink: 'syz.1.4368': attribute type 8 has an invalid length.
[ 1036.617007][T17590] netlink: 399 bytes leftover after parsing attributes in process `syz.1.4368'.
[ 1036.647586][T17377] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1036.667368][T17377] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1036.750996][T17603] netlink: 'syz.4.4369': attribute type 4 has an invalid length.
[ 1036.825786][T17603] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4369'.
[ 1036.986825][T17603] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[ 1037.217033][T17616] netlink: 'syz.1.4372': attribute type 10 has an invalid length.
[ 1037.658183][T17594] bond0: (slave bridge0): Error: Slave device does not support XDP
[ 1037.749177][T17622] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4373'.
[ 1037.932639][T17377] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1037.982025][T17377] 8021q: adding VLAN 0 to HW filter on device team0
[ 1038.029734][ T4631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1038.057493][ T4631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1038.093504][ T4631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1038.136318][ T4631] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1038.154619][ T4631] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1038.161882][ T4631] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1038.171555][ T4631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1038.188851][ T4631] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1038.207949][ T4631] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1038.215229][ T4631] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1038.236359][ T4631] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1038.277193][ T9553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1038.290950][ T9553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1038.301736][ T9553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1038.318685][ T9553] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1038.328651][ T9553] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1038.359269][ T4631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1038.385565][ T4631] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1038.395397][ T4631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1038.404913][ T4631] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1038.428527][T17377] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1038.441314][T17377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1038.451331][ T4631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1038.461211][ T4631] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1038.758782][T17645] netlink: 830 bytes leftover after parsing attributes in process `syz.4.4379'.
[ 1039.075078][ T4631] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1039.104403][ T4631] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1039.122470][T17377] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1039.215452][ T4631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1039.240054][ T4631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1039.325252][ T4631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1039.349576][ T4631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1039.392134][ T4631] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1039.441771][ T4631] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1039.510423][T17377] device veth0_vlan entered promiscuous mode
[ 1039.616085][T17664] netlink: 'syz.1.4382': attribute type 8 has an invalid length.
[ 1039.627415][T17664] netlink: 399 bytes leftover after parsing attributes in process `syz.1.4382'.
[ 1039.640583][T17377] device veth1_vlan entered promiscuous mode
[ 1039.697139][ T4631] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1039.740011][ T4631] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1039.786654][ T4631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1039.809191][ T4631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1039.869655][T17377] device veth0_macvtap entered promiscuous mode
[ 1039.881420][ T4631] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1039.910676][T17377] device veth1_macvtap entered promiscuous mode
[ 1039.940504][T17377] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1039.950605][ T4631] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1039.999418][ T4631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1040.039238][T17377] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1040.060128][ T4631] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1040.158282][ T4631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1040.240986][T17377] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1040.262403][T17377] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1040.286178][T17377] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1040.310348][T17377] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1040.419760][T17686] netlink: 'syz.1.4387': attribute type 4 has an invalid length.
[ 1040.483582][T17686] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4387'.
[ 1040.595047][T17686] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[ 1040.627209][T17691] netlink: 'syz.3.4389': attribute type 10 has an invalid length.
[ 1041.053204][T17699] netlink: 830 bytes leftover after parsing attributes in process `syz.4.4390'.
[ 1041.197705][ T9551] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1041.216310][ T9551] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1041.240371][ T9542] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1041.255632][ T9542] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1041.270681][ T9553] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1041.293004][ T9551] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1041.768773][T17716] netlink: 830 bytes leftover after parsing attributes in process `syz.4.4393'.
[ 1042.210718][T17733] netlink: 'syz.2.4398': attribute type 8 has an invalid length.
[ 1042.240967][T17733] netlink: 399 bytes leftover after parsing attributes in process `syz.2.4398'.
[ 1042.368277][T17736] netlink: 'syz.1.4399': attribute type 8 has an invalid length.
[ 1042.384879][T17736] netlink: 399 bytes leftover after parsing attributes in process `syz.1.4399'.
[ 1042.393874][T17740] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4402'.
[ 1042.508129][T17740] bond0: (slave dummy0): Releasing backup interface
[ 1043.249407][T17745] IPv6: Can't replace route, no match found
[ 1043.666088][T17759] netlink: 'syz.0.4405': attribute type 4 has an invalid length.
[ 1043.676556][T17759] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4405'.
[ 1043.803517][T17759] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[ 1043.829074][T17761] netlink: 'syz.4.4406': attribute type 10 has an invalid length.
[ 1044.550357][T17762] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4408'.
[ 1044.591552][T17773] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4409'.
[ 1045.090521][T17791] netlink: 'syz.0.4413': attribute type 8 has an invalid length.
[ 1045.109780][T17791] netlink: 399 bytes leftover after parsing attributes in process `syz.0.4413'.
[ 1045.280915][T17801] netlink: 'syz.4.4415': attribute type 8 has an invalid length.
[ 1045.289562][T17801] netlink: 399 bytes leftover after parsing attributes in process `syz.4.4415'.
[ 1045.863662][ T9553] wlan1: Trigger new scan to find an IBSS to join
[ 1045.924823][T17823] netlink: 'syz.0.4421': attribute type 10 has an invalid length.
[ 1046.217029][ T9553] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1046.382016][T17826] IPv6: Can't replace route, no match found
[ 1046.825595][T17847] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4424'.
[ 1046.910358][T17848] netlink: 'syz.2.4425': attribute type 4 has an invalid length.
[ 1046.921446][T17846] netlink: 'syz.3.4427': attribute type 8 has an invalid length.
[ 1046.928954][T17848] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4425'.
[ 1046.938536][T17846] netlink: 399 bytes leftover after parsing attributes in process `syz.3.4427'.
[ 1046.997810][T17848] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[ 1047.036390][T17849] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4423'.
[ 1047.058658][T17842] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1047.075436][T17842] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1047.127978][T17842] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1047.155407][T17842] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1047.202435][T17860] netlink: 'syz.3.4429': attribute type 8 has an invalid length.
[ 1047.211878][T17860] netlink: 399 bytes leftover after parsing attributes in process `syz.3.4429'.
[ 1047.270245][T17861] netlink: 64731 bytes leftover after parsing attributes in process `syz.4.4428'.
[ 1047.418417][T17856] pimreg1: tun_chr_ioctl cmd 21731
[ 1047.447114][T17852] pimreg1: tun_chr_ioctl cmd 1074025677
[ 1047.455316][T17852] pimreg1: linktype set to 771
[ 1048.267620][T17891] IPv6: Can't replace route, no match found
[ 1048.903086][ T9556] wlan1: Trigger new scan to find an IBSS to join
[ 1049.005544][T17906] netlink: 'syz.4.4439': attribute type 8 has an invalid length.
[ 1049.043364][T17906] netlink: 399 bytes leftover after parsing attributes in process `syz.4.4439'.
[ 1049.251272][T17912] netlink: 'syz.2.4441': attribute type 8 has an invalid length.
[ 1049.274951][T17912] netlink: 399 bytes leftover after parsing attributes in process `syz.2.4441'.
[ 1049.697777][T17919] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4443'.
[ 1049.800295][T17933] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4445'.
[ 1049.873170][ T4631] wlan1: Trigger new scan to find an IBSS to join
[ 1050.148207][T17947] netlink: 'syz.3.4451': attribute type 10 has an invalid length.
[ 1050.205598][T17947] team0: Device veth1_vlan failed to register rx_handler
[ 1050.510634][T17955] FAULT_INJECTION: forcing a failure.
[ 1050.510634][T17955] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1050.525400][T17955] CPU: 1 PID: 17955 Comm: syz.3.4453 Not tainted syzkaller #0
[ 1050.532943][T17955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1050.543083][T17955] Call Trace:
[ 1050.546425][T17955]  <TASK>
[ 1050.549420][T17955]  dump_stack_lvl+0x168/0x22e
[ 1050.554194][T17955]  ? show_regs_print_info+0x12/0x12
[ 1050.559476][T17955]  ? load_image+0x3b0/0x3b0
[ 1050.564082][T17955]  ? __lock_acquire+0x7c50/0x7c50
[ 1050.569201][T17955]  ? __virt_addr_valid+0x188/0x540
[ 1050.574418][T17955]  should_fail_ex+0x399/0x4d0
[ 1050.579208][T17955]  _copy_from_user+0x2c/0x170
[ 1050.583972][T17955]  btf_new_fd+0x324/0x780
[ 1050.588409][T17955]  __sys_bpf+0x57a/0x6d0
[ 1050.592746][T17955]  ? bpf_link_show_fdinfo+0x340/0x340
[ 1050.598261][T17955]  ? lock_chain_count+0x20/0x20
[ 1050.603231][T17955]  __x64_sys_bpf+0x78/0x90
[ 1050.607736][T17955]  do_syscall_64+0x4c/0xa0
[ 1050.612225][T17955]  ? clear_bhb_loop+0x60/0xb0
[ 1050.616958][T17955]  ? clear_bhb_loop+0x60/0xb0
[ 1050.621777][T17955]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1050.627731][T17955] RIP: 0033:0x7fc5d918efc9
[ 1050.632199][T17955] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1050.651857][T17955] RSP: 002b:00007fc5da105038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1050.660336][T17955] RAX: ffffffffffffffda RBX: 00007fc5d93e5fa0 RCX: 00007fc5d918efc9
[ 1050.668362][T17955] RDX: 0000000000000028 RSI: 0000200000000140 RDI: 0000000000000012
[ 1050.676384][T17955] RBP: 00007fc5da105090 R08: 0000000000000000 R09: 0000000000000000
[ 1050.684400][T17955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1050.692422][T17955] R13: 00007fc5d93e6038 R14: 00007fc5d93e5fa0 R15: 00007ffc54d99bb8
[ 1050.700579][T17955]  </TASK>
[ 1050.748689][T17956] netlink: 'syz.3.4453': attribute type 3 has an invalid length.
[ 1050.962752][T17958] netlink: 'syz.2.4455': attribute type 8 has an invalid length.
[ 1051.095191][T17960] netlink: 'syz.4.4456': attribute type 8 has an invalid length.
[ 1051.252536][T17962] IPv6: Can't replace route, no match found
[ 1051.516214][T17983] IPv6: Can't replace route, no match found
[ 1052.554341][T18001] netlink: 'syz.3.4469': attribute type 8 has an invalid length.
[ 1052.574913][T18001] __nla_validate_parse: 5 callbacks suppressed
[ 1052.574938][T18001] netlink: 399 bytes leftover after parsing attributes in process `syz.3.4469'.
[ 1052.755526][T18004] netlink: 'syz.4.4470': attribute type 8 has an invalid length.
[ 1052.764657][T18004] netlink: 399 bytes leftover after parsing attributes in process `syz.4.4470'.
[ 1052.834274][ T4631] wlan1: Trigger new scan to find an IBSS to join
[ 1053.558645][T18006] netlink: 'syz.1.4472': attribute type 3 has an invalid length.
[ 1053.573705][T18006] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4472'.
[ 1053.871943][ T9551] wlan1: Trigger new scan to find an IBSS to join
[ 1053.881168][ T9553] wlan1: Trigger new scan to find an IBSS to join
[ 1054.036518][T18023] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4478'.
[ 1054.067551][T18022] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4476'.
[ 1054.427072][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.433699][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[ 1054.860661][T18043] netlink: 'syz.0.4484': attribute type 3 has an invalid length.
[ 1054.869306][T18043] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4484'.
[ 1054.904635][ T9551] wlan1: Trigger new scan to find an IBSS to join
[ 1054.954406][T18038] netlink: 'syz.3.4483': attribute type 8 has an invalid length.
[ 1054.964065][T18038] netlink: 399 bytes leftover after parsing attributes in process `syz.3.4483'.
[ 1055.236020][T18049] netlink: 'syz.0.4485': attribute type 8 has an invalid length.
[ 1055.244317][T18049] netlink: 399 bytes leftover after parsing attributes in process `syz.0.4485'.
[ 1056.823521][ T9545] wlan1: Trigger new scan to find an IBSS to join
[ 1056.830476][ T9563] wlan1: Trigger new scan to find an IBSS to join
[ 1057.559669][ T4631] wlan1: Creating new IBSS network, BSSID ca:f0:90:c3:26:f3
[ 1057.733361][ T9551] wlan1: Creating new IBSS network, BSSID da:62:a9:73:28:30
[ 1057.828932][T18061] FAULT_INJECTION: forcing a failure.
[ 1057.828932][T18061] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1057.868182][T18061] CPU: 0 PID: 18061 Comm: syz.4.4490 Not tainted syzkaller #0
[ 1057.875736][T18061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1057.885835][T18061] Call Trace:
[ 1057.889154][T18061]  <TASK>
[ 1057.892129][T18061]  dump_stack_lvl+0x168/0x22e
[ 1057.896922][T18061]  ? show_regs_print_info+0x12/0x12
[ 1057.902178][T18061]  ? load_image+0x3b0/0x3b0
[ 1057.906760][T18061]  ? __lock_acquire+0x7c50/0x7c50
[ 1057.911853][T18061]  ? verify_lock_unused+0x140/0x140
[ 1057.917202][T18061]  should_fail_ex+0x399/0x4d0
[ 1057.921942][T18061]  _copy_from_user+0x2c/0x170
[ 1057.926670][T18061]  ___sys_sendmsg+0x155/0x290
[ 1057.931394][T18061]  ? __sys_sendmsg+0x270/0x270
[ 1057.936237][T18061]  ? ktime_get_real_ts64+0x420/0x420
[ 1057.941596][T18061]  ? __fdget+0x17c/0x200
[ 1057.945902][T18061]  __se_sys_sendmsg+0x19e/0x270
[ 1057.950807][T18061]  ? perf_trace_preemptirq_template+0x287/0x330
[ 1057.957115][T18061]  ? __x64_sys_sendmsg+0x80/0x80
[ 1057.962139][T18061]  ? lockdep_hardirqs_on+0x94/0x140
[ 1057.967402][T18061]  do_syscall_64+0x4c/0xa0
[ 1057.971853][T18061]  ? clear_bhb_loop+0x60/0xb0
[ 1057.976560][T18061]  ? clear_bhb_loop+0x60/0xb0
[ 1057.981271][T18061]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1057.987222][T18061] RIP: 0033:0x7f1b3f18efc9
[ 1057.991709][T18061] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1058.011358][T18061] RSP: 002b:00007f1b40044038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1058.019811][T18061] RAX: ffffffffffffffda RBX: 00007f1b3f3e5fa0 RCX: 00007f1b3f18efc9
[ 1058.027817][T18061] RDX: 0000000020000810 RSI: 0000200000000440 RDI: 0000000000000005
[ 1058.035868][T18061] RBP: 00007f1b40044090 R08: 0000000000000000 R09: 0000000000000000
[ 1058.043867][T18061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1058.051867][T18061] R13: 00007f1b3f3e6038 R14: 00007f1b3f3e5fa0 R15: 00007fff650b1508
[ 1058.059915][T18061]  </TASK>
[ 1058.111788][T18066] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4495'.
[ 1058.176587][T18070] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4493'.
[ 1058.390709][T18074] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4494'.
[ 1058.480470][T18077] netlink: 'syz.4.4497': attribute type 8 has an invalid length.
[ 1058.493113][T18077] netlink: 399 bytes leftover after parsing attributes in process `syz.4.4497'.
[ 1058.722358][T18084] netlink: 'syz.3.4499': attribute type 8 has an invalid length.
[ 1058.732194][T18084] netlink: 399 bytes leftover after parsing attributes in process `syz.3.4499'.
[ 1058.826206][ T9553] wlan1: Trigger new scan to find an IBSS to join
[ 1059.609198][T18106] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4507'.
[ 1059.760383][T18108] netlink: 'syz.4.4508': attribute type 1 has an invalid length.
[ 1059.779304][T18108] netlink: 112865 bytes leftover after parsing attributes in process `syz.4.4508'.
[ 1059.790892][ T9553] wlan1: Creating new IBSS network, BSSID 02:aa:46:11:71:7d
[ 1059.863311][T18052] wlan1: Trigger new scan to find an IBSS to join
[ 1060.001991][T18117] netlink: 'syz.1.4511': attribute type 8 has an invalid length.
[ 1060.064492][T18117] netlink: 399 bytes leftover after parsing attributes in process `syz.1.4511'.
[ 1060.180625][T18108] netlink: 'syz.4.4508': attribute type 21 has an invalid length.
[ 1060.213294][T18108] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4508'.
[ 1060.273709][T18120] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4512'.
[ 1060.366763][T18127] netlink: 'syz.1.4514': attribute type 8 has an invalid length.
[ 1061.034427][ T4631] wlan1: Creating new IBSS network, BSSID 16:28:95:11:79:48
[ 1063.368148][T18158] netlink: 'syz.0.4524': attribute type 8 has an invalid length.
[ 1063.379552][T18158] __nla_validate_parse: 1 callbacks suppressed
[ 1063.379592][T18158] netlink: 399 bytes leftover after parsing attributes in process `syz.0.4524'.
[ 1063.389275][T18166] FAULT_INJECTION: forcing a failure.
[ 1063.389275][T18166] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1063.436999][T18167] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.4525'.
[ 1063.456882][T18166] CPU: 1 PID: 18166 Comm: syz.3.4526 Not tainted syzkaller #0
[ 1063.464441][T18166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1063.474544][T18166] Call Trace:
[ 1063.477854][T18166]  <TASK>
[ 1063.480826][T18166]  dump_stack_lvl+0x168/0x22e
[ 1063.485554][T18166]  ? show_regs_print_info+0x12/0x12
[ 1063.490804][T18166]  ? load_image+0x3b0/0x3b0
[ 1063.495369][T18166]  ? __lock_acquire+0x7c50/0x7c50
[ 1063.500459][T18166]  should_fail_ex+0x399/0x4d0
[ 1063.505197][T18166]  _copy_from_user+0x2c/0x170
[ 1063.509926][T18166]  __sys_bpf+0x265/0x6d0
[ 1063.514226][T18166]  ? bpf_link_show_fdinfo+0x340/0x340
[ 1063.519673][T18166]  ? lock_chain_count+0x20/0x20
[ 1063.524592][T18166]  __x64_sys_bpf+0x78/0x90
[ 1063.529062][T18166]  do_syscall_64+0x4c/0xa0
[ 1063.533524][T18166]  ? clear_bhb_loop+0x60/0xb0
[ 1063.538238][T18166]  ? clear_bhb_loop+0x60/0xb0
[ 1063.542974][T18166]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1063.548944][T18166] RIP: 0033:0x7fc5d918efc9
[ 1063.553389][T18166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1063.573028][T18166] RSP: 002b:00007fc5da105038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1063.581478][T18166] RAX: ffffffffffffffda RBX: 00007fc5d93e5fa0 RCX: 00007fc5d918efc9
[ 1063.589484][T18166] RDX: 0000000000000020 RSI: 0000200000000800 RDI: 0000000000000003
[ 1063.597491][T18166] RBP: 00007fc5da105090 R08: 0000000000000000 R09: 0000000000000000
[ 1063.605512][T18166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1063.613600][T18166] R13: 00007fc5d93e6038 R14: 00007fc5d93e5fa0 R15: 00007ffc54d99bb8
[ 1063.621621][T18166]  </TASK>
[ 1063.639724][T18165] netlink: 'syz.1.4528': attribute type 8 has an invalid length.
[ 1063.659807][T18165] netlink: 399 bytes leftover after parsing attributes in process `syz.1.4528'.
[ 1063.911343][T18171] netlink: 830 bytes leftover after parsing attributes in process `syz.4.4530'.
[ 1064.221739][T18185] netlink: 'syz.4.4535': attribute type 10 has an invalid length.
[ 1064.230254][T18185] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4535'.
[ 1064.241712][T18185] bridge0: port 3(veth0_vlan) entered blocking state
[ 1064.249508][T18185] bridge0: port 3(veth0_vlan) entered disabled state
[ 1064.260289][T18185] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1065.894639][T18209] netlink: 'syz.1.4545': attribute type 3 has an invalid length.
[ 1065.916827][T18209] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4545'.
[ 1067.257293][T18234] netlink: 'syz.2.4550': attribute type 8 has an invalid length.
[ 1067.269752][T18234] netlink: 399 bytes leftover after parsing attributes in process `syz.2.4550'.
[ 1067.864088][ T9553] wlan1: Trigger new scan to find an IBSS to join
[ 1069.456572][T18237] netlink: 'syz.0.4551': attribute type 8 has an invalid length.
[ 1069.483261][T18237] netlink: 399 bytes leftover after parsing attributes in process `syz.0.4551'.
[ 1069.508731][T18245] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4552'.
[ 1070.826642][T18267] netlink: 'syz.1.4565': attribute type 8 has an invalid length.
[ 1070.857553][T18267] netlink: 399 bytes leftover after parsing attributes in process `syz.1.4565'.
[ 1071.601076][T18278] netlink: 'syz.0.4568': attribute type 8 has an invalid length.
[ 1071.619339][T18278] netlink: 399 bytes leftover after parsing attributes in process `syz.0.4568'.
[ 1071.873042][   T75] wlan1: Trigger new scan to find an IBSS to join
[ 1072.148645][T18283] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4570'.
[ 1074.005185][   T75] wlan1: Creating new IBSS network, BSSID ea:60:2d:f0:25:7f
[ 1074.607693][T18303] netlink: 'syz.0.4577': attribute type 8 has an invalid length.
[ 1074.623232][T18303] netlink: 399 bytes leftover after parsing attributes in process `syz.0.4577'.
[ 1075.146991][T18313] netlink: 'syz.2.4580': attribute type 8 has an invalid length.
[ 1075.155457][T18313] netlink: 399 bytes leftover after parsing attributes in process `syz.2.4580'.
[ 1075.394180][T18323] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4585'.
[ 1075.882541][T18332] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4588'.
[ 1076.187169][T18335] netlink: 'syz.4.4589': attribute type 8 has an invalid length.
[ 1076.195728][T18335] netlink: 399 bytes leftover after parsing attributes in process `syz.4.4589'.
[ 1078.901537][T18344] netlink: 'syz.4.4596': attribute type 8 has an invalid length.
[ 1078.910631][T18344] netlink: 399 bytes leftover after parsing attributes in process `syz.4.4596'.
[ 1079.115311][T18356] FAULT_INJECTION: forcing a failure.
[ 1079.115311][T18356] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1079.133030][T18356] CPU: 1 PID: 18356 Comm: syz.0.4598 Not tainted syzkaller #0
[ 1079.140604][T18356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1079.150818][T18356] Call Trace:
[ 1079.154151][T18356]  <TASK>
[ 1079.157142][T18356]  dump_stack_lvl+0x168/0x22e
[ 1079.161919][T18356]  ? show_regs_print_info+0x12/0x12
[ 1079.167205][T18356]  ? load_image+0x3b0/0x3b0
[ 1079.171810][T18356]  ? __lock_acquire+0x7c50/0x7c50
[ 1079.176921][T18356]  should_fail_ex+0x399/0x4d0
[ 1079.181670][T18356]  _copy_from_user+0x2c/0x170
[ 1079.186412][T18356]  ___sys_recvmsg+0x12b/0x510
[ 1079.191169][T18356]  ? __sys_recvmsg+0x270/0x270
[ 1079.195999][T18356]  ? common_file_perm+0x171/0x1c0
[ 1079.201110][T18356]  ? __fget_files+0x44a/0x4d0
[ 1079.205859][T18356]  ? __fdget+0x17c/0x200
[ 1079.210173][T18356]  __x64_sys_recvmsg+0x1eb/0x2b0
[ 1079.215177][T18356]  ? ___sys_recvmsg+0x510/0x510
[ 1079.220131][T18356]  ? lockdep_hardirqs_on+0x94/0x140
[ 1079.225398][T18356]  do_syscall_64+0x4c/0xa0
[ 1079.229860][T18356]  ? clear_bhb_loop+0x60/0xb0
[ 1079.234586][T18356]  ? clear_bhb_loop+0x60/0xb0
[ 1079.239318][T18356]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1079.245437][T18356] RIP: 0033:0x7fcc2b98efc9
[ 1079.249898][T18356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1079.269594][T18356] RSP: 002b:00007fcc2c8c0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[ 1079.278245][T18356] RAX: ffffffffffffffda RBX: 00007fcc2bbe5fa0 RCX: 00007fcc2b98efc9
[ 1079.286305][T18356] RDX: 0000000000000102 RSI: 0000200000000080 RDI: 0000000000000003
[ 1079.294326][T18356] RBP: 00007fcc2c8c0090 R08: 0000000000000000 R09: 0000000000000000
[ 1079.302346][T18356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1079.310376][T18356] R13: 00007fcc2bbe6038 R14: 00007fcc2bbe5fa0 R15: 00007fff4a498258
[ 1079.318447][T18356]  </TASK>
[ 1080.054164][T18368] netlink: 'syz.2.4603': attribute type 8 has an invalid length.
[ 1080.107443][T18368] netlink: 399 bytes leftover after parsing attributes in process `syz.2.4603'.
[ 1081.659895][T18373] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4604'.
[ 1083.014515][T18389] netlink: 'syz.0.4610': attribute type 8 has an invalid length.
[ 1083.033048][T18389] netlink: 399 bytes leftover after parsing attributes in process `syz.0.4610'.
[ 1084.011521][T18414] netlink: 'syz.0.4618': attribute type 8 has an invalid length.
[ 1084.020270][T18414] netlink: 399 bytes leftover after parsing attributes in process `syz.0.4618'.
[ 1084.983291][T18431] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4623'.
[ 1085.246423][T18441] netlink: 'syz.0.4627': attribute type 8 has an invalid length.
[ 1085.269870][T18441] netlink: 399 bytes leftover after parsing attributes in process `syz.0.4627'.
[ 1087.586167][   T75] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1087.829984][T18454] netlink: 'syz.2.4634': attribute type 8 has an invalid length.
[ 1087.862156][T18454] netlink: 399 bytes leftover after parsing attributes in process `syz.2.4634'.
[ 1088.610942][ T9545] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1089.838703][T18285] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1090.782277][T18469] netlink: 'syz.0.4640': attribute type 8 has an invalid length.
[ 1090.791060][T18469] netlink: 399 bytes leftover after parsing attributes in process `syz.0.4640'.
[ 1090.863130][   T75] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1091.334305][T18486] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4644'.
[ 1094.103375][   T75] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1094.177779][T18504] netlink: 'syz.3.4651': attribute type 8 has an invalid length.
[ 1094.186840][T18504] netlink: 399 bytes leftover after parsing attributes in process `syz.3.4651'.
[ 1094.385043][T18510] netlink: 'syz.3.4654': attribute type 8 has an invalid length.
[ 1094.394188][T18510] netlink: 399 bytes leftover after parsing attributes in process `syz.3.4654'.
[ 1095.518079][T18538] netlink: 'syz.1.4664': attribute type 8 has an invalid length.
[ 1095.541863][T18538] netlink: 399 bytes leftover after parsing attributes in process `syz.1.4664'.
[ 1095.573053][T18536] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4663'.
[ 1095.833402][T18548] netlink: 'syz.4.4667': attribute type 8 has an invalid length.
[ 1095.868281][T18548] netlink: 399 bytes leftover after parsing attributes in process `syz.4.4667'.
[ 1102.105049][T18581] netlink: 'syz.1.4681': attribute type 8 has an invalid length.
[ 1102.154658][T18581] netlink: 399 bytes leftover after parsing attributes in process `syz.1.4681'.
[ 1102.180386][T18583] netlink: 'syz.0.4679': attribute type 8 has an invalid length.
[ 1102.192012][T18583] netlink: 399 bytes leftover after parsing attributes in process `syz.0.4679'.
[ 1102.785681][T18597] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4686'.
[ 1104.073091][T16857] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1104.996882][T18285] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1106.023849][T18625] netlink: 'syz.4.4696': attribute type 8 has an invalid length.
[ 1106.032261][T18625] netlink: 399 bytes leftover after parsing attributes in process `syz.4.4696'.
[ 1108.828058][T18631] netlink: 'syz.1.4697': attribute type 8 has an invalid length.
[ 1108.843168][T18631] netlink: 399 bytes leftover after parsing attributes in process `syz.1.4697'.
[ 1110.081557][T18654] netlink: 830 bytes leftover after parsing attributes in process `syz.4.4707'.
[ 1110.549697][T18655] netlink: 'syz.1.4708': attribute type 3 has an invalid length.
[ 1110.557936][T18655] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4708'.
[ 1112.236280][T18664] netlink: 'syz.3.4712': attribute type 8 has an invalid length.
[ 1112.255128][T18664] netlink: 399 bytes leftover after parsing attributes in process `syz.3.4712'.
[ 1112.475010][T18669] netlink: 'syz.3.4715': attribute type 8 has an invalid length.
[ 1112.491707][T18669] netlink: 399 bytes leftover after parsing attributes in process `syz.3.4715'.
[ 1115.520931][T18694] netlink: 'syz.1.4725': attribute type 8 has an invalid length.
[ 1115.562425][T18694] netlink: 399 bytes leftover after parsing attributes in process `syz.1.4725'.
[ 1115.869293][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[ 1115.875921][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[ 1116.282291][T18701] netlink: 830 bytes leftover after parsing attributes in process `syz.4.4723'.
[ 1116.358011][T18707] netlink: 'syz.1.4728': attribute type 8 has an invalid length.
[ 1116.373809][T18707] netlink: 399 bytes leftover after parsing attributes in process `syz.1.4728'.
[ 1119.831067][T18736] netlink: 'syz.4.4739': attribute type 8 has an invalid length.
[ 1119.842009][T18736] netlink: 399 bytes leftover after parsing attributes in process `syz.4.4739'.
[ 1120.687601][T18751] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4743'.
[ 1120.728651][T18749] netlink: 'syz.4.4745': attribute type 8 has an invalid length.
[ 1120.741318][T18749] netlink: 399 bytes leftover after parsing attributes in process `syz.4.4745'.
[ 1123.667973][T18777] netlink: 'syz.0.4755': attribute type 8 has an invalid length.
[ 1123.676610][T18777] netlink: 399 bytes leftover after parsing attributes in process `syz.0.4755'.
[ 1123.733572][ T9556] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1124.203262][T18793] netlink: 'syz.0.4761': attribute type 8 has an invalid length.
[ 1124.211816][T18793] netlink: 399 bytes leftover after parsing attributes in process `syz.0.4761'.
[ 1124.659322][ T9553] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1124.670812][ T4347] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1125.475820][ T4631] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1125.576351][T18801] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1127.064694][T18812] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4766'.
[ 1127.997271][T18823] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4768'.
[ 1128.354290][T18830] netlink: 'syz.2.4770': attribute type 8 has an invalid length.
[ 1128.437003][T18830] netlink: 399 bytes leftover after parsing attributes in process `syz.2.4770'.
[ 1128.765248][T18836] netlink: 'syz.1.4774': attribute type 8 has an invalid length.
[ 1128.783040][T18836] netlink: 399 bytes leftover after parsing attributes in process `syz.1.4774'.
[ 1129.282369][T18850] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4779'.
[ 1132.235092][T18869] FAULT_INJECTION: forcing a failure.
[ 1132.235092][T18869] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1132.274275][T18869] CPU: 0 PID: 18869 Comm: syz.4.4786 Not tainted syzkaller #0
[ 1132.281851][T18869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1132.291978][T18869] Call Trace:
[ 1132.295320][T18869]  <TASK>
[ 1132.298318][T18869]  dump_stack_lvl+0x168/0x22e
[ 1132.303094][T18869]  ? show_regs_print_info+0x12/0x12
[ 1132.308389][T18869]  ? load_image+0x3b0/0x3b0
[ 1132.313001][T18869]  ? __lock_acquire+0x7c50/0x7c50
[ 1132.318220][T18869]  should_fail_ex+0x399/0x4d0
[ 1132.322991][T18869]  _copy_from_user+0x2c/0x170
[ 1132.327754][T18869]  iovec_from_user+0x143/0x360
[ 1132.332619][T18869]  __import_iovec+0x6d/0x500
[ 1132.337310][T18869]  ? __might_fault+0xa6/0x120
[ 1132.342102][T18869]  import_iovec+0x6f/0xa0
[ 1132.346527][T18869]  ___sys_sendmsg+0x1e4/0x290
[ 1132.351299][T18869]  ? __sys_sendmsg+0x270/0x270
[ 1132.356230][T18869]  ? __lock_acquire+0x7c50/0x7c50
[ 1132.361411][T18869]  ? __fdget+0x17c/0x200
[ 1132.365754][T18869]  __se_sys_sendmsg+0x19e/0x270
[ 1132.370698][T18869]  ? __x64_sys_sendmsg+0x80/0x80
[ 1132.375782][T18869]  ? lockdep_hardirqs_on+0x94/0x140
[ 1132.381076][T18869]  do_syscall_64+0x4c/0xa0
[ 1132.385574][T18869]  ? clear_bhb_loop+0x60/0xb0
[ 1132.390325][T18869]  ? clear_bhb_loop+0x60/0xb0
[ 1132.395079][T18869]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1132.401045][T18869] RIP: 0033:0x7f1b3f18efc9
[ 1132.405534][T18869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1132.425212][T18869] RSP: 002b:00007f1b40044038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1132.433713][T18869] RAX: ffffffffffffffda RBX: 00007f1b3f3e5fa0 RCX: 00007f1b3f18efc9
[ 1132.441753][T18869] RDX: 000000000000c000 RSI: 0000200000000040 RDI: 0000000000000005
[ 1132.449794][T18869] RBP: 00007f1b40044090 R08: 0000000000000000 R09: 0000000000000000
[ 1132.457829][T18869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1132.465873][T18869] R13: 00007f1b3f3e6038 R14: 00007f1b3f3e5fa0 R15: 00007fff650b1508
[ 1132.473968][T18869]  </TASK>
[ 1132.563279][T18865] netlink: 'syz.1.4785': attribute type 8 has an invalid length.
[ 1132.571618][T18865] netlink: 399 bytes leftover after parsing attributes in process `syz.1.4785'.
[ 1132.665864][T18873] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.4788'.
[ 1133.439235][T18873] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4788'.
[ 1133.458157][T18877] netlink: 'syz.3.4789': attribute type 8 has an invalid length.
[ 1133.493707][T18877] netlink: 399 bytes leftover after parsing attributes in process `syz.3.4789'.
[ 1133.727055][T18887] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1135.105178][T18905] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4797'.
[ 1137.209111][T18912] netlink: 'syz.4.4800': attribute type 8 has an invalid length.
[ 1137.240394][T18912] netlink: 399 bytes leftover after parsing attributes in process `syz.4.4800'.
[ 1137.505020][T18924] netlink: 'syz.3.4806': attribute type 8 has an invalid length.
[ 1137.559736][T18924] netlink: 399 bytes leftover after parsing attributes in process `syz.3.4806'.
[ 1138.035858][T18937] netlink: 'syz.3.4811': attribute type 10 has an invalid length.
[ 1138.582471][   T75] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1139.502931][ T9563] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1141.202914][T18945] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4813'.
[ 1141.494948][T18959] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4819'.
[ 1141.510400][T18958] netlink: 'syz.1.4817': attribute type 8 has an invalid length.
[ 1141.519577][T18958] netlink: 399 bytes leftover after parsing attributes in process `syz.1.4817'.
[ 1141.741266][T18964] netlink: 'syz.2.4821': attribute type 8 has an invalid length.
[ 1141.768450][T18964] netlink: 399 bytes leftover after parsing attributes in process `syz.2.4821'.
[ 1142.146657][T18959] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1142.206972][T18959] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1142.254299][T18959] bond0 (unregistering): Released all slaves
[ 1143.416202][T18993] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4831'.
[ 1143.543439][   T47] Bluetooth: hci2: command 0x0406 tx timeout
[ 1143.677459][T18996] netlink: 'syz.0.4835': attribute type 8 has an invalid length.
[ 1143.696659][T18996] netlink: 399 bytes leftover after parsing attributes in process `syz.0.4835'.
[ 1143.733200][T19000] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.4833'.
[ 1143.785012][T18998] netlink: 'syz.4.4834': attribute type 8 has an invalid length.
[ 1143.809911][T18998] netlink: 399 bytes leftover after parsing attributes in process `syz.4.4834'.
[ 1143.877172][T19006] FAULT_INJECTION: forcing a failure.
[ 1143.877172][T19006] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1143.916764][T19006] CPU: 1 PID: 19006 Comm: syz.3.4837 Not tainted syzkaller #0
[ 1143.924324][T19006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1143.934423][T19006] Call Trace:
[ 1143.937736][T19006]  <TASK>
[ 1143.940706][T19006]  dump_stack_lvl+0x168/0x22e
[ 1143.945438][T19006]  ? show_regs_print_info+0x12/0x12
[ 1143.950689][T19006]  ? load_image+0x3b0/0x3b0
[ 1143.955252][T19006]  ? __lock_acquire+0x7c50/0x7c50
[ 1143.960350][T19006]  should_fail_ex+0x399/0x4d0
[ 1143.965089][T19006]  _copy_from_user+0x2c/0x170
[ 1143.969825][T19006]  get_user_ifreq+0x67/0x170
[ 1143.974473][T19006]  inet_ioctl+0x292/0x400
[ 1143.978840][T19006]  ? inet_shutdown+0x370/0x370
[ 1143.983643][T19006]  ? slab_free_freelist_hook+0x131/0x1a0
[ 1143.989332][T19006]  ? tomoyo_path_number_perm+0x4ae/0x600
[ 1143.995002][T19006]  ? __kmem_cache_free+0xb6/0x1f0
[ 1144.000072][T19006]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[ 1144.005578][T19006]  sock_do_ioctl+0xd3/0x2f0
[ 1144.010130][T19006]  ? sock_show_fdinfo+0xb0/0xb0
[ 1144.015032][T19006]  sock_ioctl+0x4ed/0x6e0
[ 1144.019408][T19006]  ? sock_poll+0x3f0/0x3f0
[ 1144.023871][T19006]  ? bpf_lsm_file_ioctl+0x5/0x10
[ 1144.028843][T19006]  ? security_file_ioctl+0x7c/0xa0
[ 1144.033992][T19006]  ? sock_poll+0x3f0/0x3f0
[ 1144.038444][T19006]  __se_sys_ioctl+0xfa/0x170
[ 1144.043070][T19006]  do_syscall_64+0x4c/0xa0
[ 1144.047519][T19006]  ? clear_bhb_loop+0x60/0xb0
[ 1144.052232][T19006]  ? clear_bhb_loop+0x60/0xb0
[ 1144.056943][T19006]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1144.062873][T19006] RIP: 0033:0x7fc5d918efc9
[ 1144.067322][T19006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1144.086963][T19006] RSP: 002b:00007fc5da105038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1144.095405][T19006] RAX: ffffffffffffffda RBX: 00007fc5d93e5fa0 RCX: 00007fc5d918efc9
[ 1144.103414][T19006] RDX: 0000200000000040 RSI: 0000000000008918 RDI: 0000000000000004
[ 1144.111419][T19006] RBP: 00007fc5da105090 R08: 0000000000000000 R09: 0000000000000000
[ 1144.119542][T19006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1144.127713][T19006] R13: 00007fc5d93e6038 R14: 00007fc5d93e5fa0 R15: 00007ffc54d99bb8
[ 1144.135728][T19006]  </TASK>
[ 1145.142334][T19028] netlink: 830 bytes leftover after parsing attributes in process `syz.4.4846'.
[ 1145.847737][T19037] FAULT_INJECTION: forcing a failure.
[ 1145.847737][T19037] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1145.880157][T19037] CPU: 0 PID: 19037 Comm: syz.2.4847 Not tainted syzkaller #0
[ 1145.887714][T19037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1145.897810][T19037] Call Trace:
[ 1145.901126][T19037]  <TASK>
[ 1145.904093][T19037]  dump_stack_lvl+0x168/0x22e
[ 1145.908822][T19037]  ? show_regs_print_info+0x12/0x12
[ 1145.914068][T19037]  ? load_image+0x3b0/0x3b0
[ 1145.918632][T19037]  ? __lock_acquire+0x7c50/0x7c50
[ 1145.923717][T19037]  ? snprintf+0xd7/0x120
[ 1145.928009][T19037]  should_fail_ex+0x399/0x4d0
[ 1145.932744][T19037]  _copy_to_user+0x2c/0x130
[ 1145.937305][T19037]  simple_read_from_buffer+0xe3/0x150
[ 1145.942748][T19037]  proc_fail_nth_read+0x19a/0x210
[ 1145.947825][T19037]  ? proc_fault_inject_write+0x2f0/0x2f0
[ 1145.953520][T19037]  ? fsnotify_perm+0x248/0x550
[ 1145.958418][T19037]  ? proc_fault_inject_write+0x2f0/0x2f0
[ 1145.964104][T19037]  vfs_read+0x2c0/0x920
[ 1145.968326][T19037]  ? kernel_read+0x1e0/0x1e0
[ 1145.972974][T19037]  ? __fget_files+0x28/0x4d0
[ 1145.977605][T19037]  ? __fget_files+0x44a/0x4d0
[ 1145.982327][T19037]  ? __fdget_pos+0x2ae/0x360
[ 1145.986964][T19037]  ? ksys_read+0x71/0x240
[ 1145.991335][T19037]  ksys_read+0x143/0x240
[ 1145.995614][T19037]  ? vfs_write+0x960/0x960
[ 1146.000063][T19037]  ? lockdep_hardirqs_on+0x94/0x140
[ 1146.005299][T19037]  do_syscall_64+0x4c/0xa0
[ 1146.009752][T19037]  ? clear_bhb_loop+0x60/0xb0
[ 1146.014456][T19037]  ? clear_bhb_loop+0x60/0xb0
[ 1146.019167][T19037]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1146.025089][T19037] RIP: 0033:0x7f07c0f8d9dc
[ 1146.029535][T19037] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 1146.049177][T19037] RSP: 002b:00007f07c1ea8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1146.057624][T19037] RAX: ffffffffffffffda RBX: 00007f07c11e5fa0 RCX: 00007f07c0f8d9dc
[ 1146.065627][T19037] RDX: 000000000000000f RSI: 00007f07c1ea80a0 RDI: 0000000000000005
[ 1146.073623][T19037] RBP: 00007f07c1ea8090 R08: 0000000000000000 R09: 0000000000000000
[ 1146.081630][T19037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1146.089635][T19037] R13: 00007f07c11e6038 R14: 00007f07c11e5fa0 R15: 00007ffc77783738
[ 1146.097649][T19037]  </TASK>
[ 1146.133377][T19042] netlink: 'syz.4.4850': attribute type 8 has an invalid length.
[ 1146.141791][T19040] netlink: 'syz.1.4848': attribute type 8 has an invalid length.
[ 1146.148472][T19042] netlink: 399 bytes leftover after parsing attributes in process `syz.4.4850'.
[ 1146.481751][T19061] __nla_validate_parse: 1 callbacks suppressed
[ 1146.481773][T19061] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.4857'.
[ 1147.494521][T19073] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4860'.
[ 1150.078563][T19091] netlink: 'syz.1.4865': attribute type 8 has an invalid length.
[ 1150.097380][T19091] netlink: 399 bytes leftover after parsing attributes in process `syz.1.4865'.
[ 1150.192253][T19095] netlink: 'syz.0.4866': attribute type 8 has an invalid length.
[ 1150.213065][T19095] netlink: 399 bytes leftover after parsing attributes in process `syz.0.4866'.
[ 1152.969217][T19130] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4878'.
[ 1153.392775][T19142] netlink: 'syz.1.4882': attribute type 8 has an invalid length.
[ 1153.404525][T19142] netlink: 399 bytes leftover after parsing attributes in process `syz.1.4882'.
[ 1153.511445][T19138] netlink: 'syz.3.4881': attribute type 8 has an invalid length.
[ 1153.521621][T19138] netlink: 399 bytes leftover after parsing attributes in process `syz.3.4881'.
[ 1156.025132][T19183] netlink: 'syz.1.4897': attribute type 8 has an invalid length.
[ 1156.065532][T19183] netlink: 399 bytes leftover after parsing attributes in process `syz.1.4897'.
[ 1156.216754][T19186] netlink: 'syz.2.4896': attribute type 8 has an invalid length.
[ 1156.272227][T19186] netlink: 399 bytes leftover after parsing attributes in process `syz.2.4896'.
[ 1156.560146][T19188] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4898'.
[ 1157.464551][   T75] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1157.729511][   T75] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1157.740607][ T9556] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1158.871382][T19209] FAULT_INJECTION: forcing a failure.
[ 1158.871382][T19209] name failslab, interval 1, probability 0, space 0, times 0
[ 1158.932967][T19209] CPU: 0 PID: 19209 Comm: syz.0.4906 Not tainted syzkaller #0
[ 1158.940519][T19209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1158.950659][T19209] Call Trace:
[ 1158.953989][T19209]  <TASK>
[ 1158.956977][T19209]  dump_stack_lvl+0x168/0x22e
[ 1158.961715][T19209]  ? show_regs_print_info+0x12/0x12
[ 1158.966987][T19209]  ? load_image+0x3b0/0x3b0
[ 1158.971577][T19209]  should_fail_ex+0x399/0x4d0
[ 1158.976328][T19209]  should_failslab+0x5/0x20
[ 1158.980896][T19209]  slab_pre_alloc_hook+0x59/0x310
[ 1158.985991][T19209]  ? ref_tracker_alloc+0x129/0x450
[ 1158.991163][T19209]  __kmem_cache_alloc_node+0x4f/0x260
[ 1158.996602][T19209]  ? ref_tracker_alloc+0x129/0x450
[ 1159.001794][T19209]  kmalloc_trace+0x26/0xe0
[ 1159.006276][T19209]  ref_tracker_alloc+0x129/0x450
[ 1159.011289][T19209]  ? ref_tracker_dir_print+0x150/0x150
[ 1159.016832][T19209]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[ 1159.022786][T19209]  ? _raw_spin_unlock+0x40/0x40
[ 1159.027695][T19209]  ? __debug_object_init+0xe5/0x420
[ 1159.032963][T19209]  ? neigh_release+0x80/0x80
[ 1159.037605][T19209]  ? init_timer_key+0x178/0x320
[ 1159.042539][T19209]  ___neigh_create+0xc96/0x24c0
[ 1159.047467][T19209]  ip_neigh_gw4+0x356/0x4d0
[ 1159.052025][T19209]  ? ip_finish_output2+0x11b0/0x11b0
[ 1159.057375][T19209]  ip_finish_output2+0xf05/0x11b0
[ 1159.062587][T19209]  ? ip_finish_output2+0x3e8/0x11b0
[ 1159.067891][T19209]  ? ip_mc_finish_output+0x250/0x250
[ 1159.073324][T19209]  ? nf_hook+0x370/0x370
[ 1159.077616][T19209]  ? ip_fragment+0x210/0x210
[ 1159.082264][T19209]  ? ip_skb_dst_mtu+0x587/0x9c0
[ 1159.087294][T19209]  ? ip_finish_output+0x3eb/0x4c0
[ 1159.092373][T19209]  ip_send_skb+0x129/0x1c0
[ 1159.096879][T19209]  udp_send_skb+0xa88/0x1580
[ 1159.101598][T19209]  udp_sendmsg+0x1b0c/0x2390
[ 1159.106268][T19209]  ? ip_skb_dst_mtu+0x9c0/0x9c0
[ 1159.111172][T19209]  ? udp_cmsg_send+0x350/0x350
[ 1159.116011][T19209]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[ 1159.122057][T19209]  ? lock_chain_count+0x20/0x20
[ 1159.126984][T19209]  ? __local_bh_enable_ip+0x12a/0x1b0
[ 1159.132497][T19209]  ? _local_bh_enable+0xa0/0xa0
[ 1159.137407][T19209]  ? inet_sendmsg+0x147/0x2f0
[ 1159.142478][T19209]  ? inet_sendmsg+0x147/0x2f0
[ 1159.147301][T19209]  ? inet_send_prepare+0x260/0x260
[ 1159.152743][T19209]  ____sys_sendmsg+0x59b/0x970
[ 1159.157565][T19209]  ? __lock_acquire+0x7c50/0x7c50
[ 1159.162673][T19209]  ? __sys_sendmsg_sock+0x30/0x30
[ 1159.167751][T19209]  ? __import_iovec+0x315/0x500
[ 1159.172670][T19209]  ? import_iovec+0x6f/0xa0
[ 1159.177324][T19209]  ___sys_sendmsg+0x21c/0x290
[ 1159.182065][T19209]  ? __sys_sendmsg+0x270/0x270
[ 1159.186926][T19209]  ? __lock_acquire+0x7c50/0x7c50
[ 1159.192044][T19209]  ? __fdget+0x17c/0x200
[ 1159.196341][T19209]  __se_sys_sendmsg+0x19e/0x270
[ 1159.201243][T19209]  ? __x64_sys_sendmsg+0x80/0x80
[ 1159.206265][T19209]  ? lockdep_hardirqs_on+0x94/0x140
[ 1159.211615][T19209]  do_syscall_64+0x4c/0xa0
[ 1159.216079][T19209]  ? clear_bhb_loop+0x60/0xb0
[ 1159.220802][T19209]  ? clear_bhb_loop+0x60/0xb0
[ 1159.225524][T19209]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1159.231466][T19209] RIP: 0033:0x7fcc2b98efc9
[ 1159.235943][T19209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1159.255597][T19209] RSP: 002b:00007fcc2c8c0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1159.264064][T19209] RAX: ffffffffffffffda RBX: 00007fcc2bbe5fa0 RCX: 00007fcc2b98efc9
[ 1159.272165][T19209] RDX: 0000000000000000 RSI: 0000200000007940 RDI: 0000000000000004
[ 1159.280269][T19209] RBP: 00007fcc2c8c0090 R08: 0000000000000000 R09: 0000000000000000
[ 1159.288283][T19209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1159.296296][T19209] R13: 00007fcc2bbe6038 R14: 00007fcc2bbe5fa0 R15: 00007fff4a498258
[ 1159.304420][T19209]  </TASK>
[ 1159.365068][T19209] memory allocation failure, unreliable refcount tracker.
[ 1159.707270][T19218] netlink: 'syz.3.4910': attribute type 8 has an invalid length.
[ 1159.724418][T19218] netlink: 399 bytes leftover after parsing attributes in process `syz.3.4910'.
[ 1159.861801][T19222] netlink: 'syz.0.4912': attribute type 8 has an invalid length.
[ 1159.874496][T19222] netlink: 399 bytes leftover after parsing attributes in process `syz.0.4912'.
[ 1160.739687][T19232] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4915'.
[ 1164.037395][T19257] netlink: 'syz.2.4925': attribute type 8 has an invalid length.
[ 1164.045792][T19257] netlink: 399 bytes leftover after parsing attributes in process `syz.2.4925'.
[ 1164.248976][T19262] netlink: 'syz.0.4927': attribute type 8 has an invalid length.
[ 1164.257600][T19262] netlink: 399 bytes leftover after parsing attributes in process `syz.0.4927'.
[ 1164.738613][T19276] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4933'.
[ 1165.345531][T19285] FAULT_INJECTION: forcing a failure.
[ 1165.345531][T19285] name failslab, interval 1, probability 0, space 0, times 0
[ 1165.410105][T19285] CPU: 1 PID: 19285 Comm: syz.3.4936 Not tainted syzkaller #0
[ 1165.417685][T19285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1165.427814][T19285] Call Trace:
[ 1165.431149][T19285]  <TASK>
[ 1165.434152][T19285]  dump_stack_lvl+0x168/0x22e
[ 1165.438924][T19285]  ? show_regs_print_info+0x12/0x12
[ 1165.444214][T19285]  ? load_image+0x3b0/0x3b0
[ 1165.448823][T19285]  ? __might_sleep+0xd0/0xd0
[ 1165.453508][T19285]  ? __lock_acquire+0x7c50/0x7c50
[ 1165.458640][T19285]  should_fail_ex+0x399/0x4d0
[ 1165.463429][T19285]  should_failslab+0x5/0x20
[ 1165.468021][T19285]  slab_pre_alloc_hook+0x59/0x310
[ 1165.473150][T19285]  ? lockdep_softirqs_off+0x420/0x420
[ 1165.478715][T19285]  kmem_cache_alloc+0x56/0x2f0
[ 1165.483582][T19285]  ? security_inode_alloc+0x30/0x110
[ 1165.489234][T19285]  security_inode_alloc+0x30/0x110
[ 1165.494522][T19285]  inode_init_always+0x8f8/0xc90
[ 1165.499629][T19285]  ? new_inode_pseudo+0x7e/0x1c0
[ 1165.504669][T19285]  new_inode_pseudo+0x91/0x1c0
[ 1165.509535][T19285]  new_inode+0x25/0x1c0
[ 1165.513769][T19285]  ? start_creating+0x1f5/0x310
[ 1165.518800][T19285]  debugfs_create_dir+0xef/0x4b0
[ 1165.523849][T19285]  ieee80211_debugfs_add_netdev+0x168/0xec0
[ 1165.529854][T19285]  ? sta_aql_write+0x2f0/0x2f0
[ 1165.534716][T19285]  ? ieee80211_setup_sdata+0x9ae/0xc20
[ 1165.540303][T19285]  ieee80211_if_change_type+0x5dc/0xa50
[ 1165.546055][T19285]  ieee80211_change_iface+0x58/0x4c0
[ 1165.551456][T19285]  cfg80211_change_iface+0x7e6/0xf80
[ 1165.556866][T19285]  __cfg80211_wext_siwmode+0x1b4/0x270
[ 1165.562434][T19285]  ? __cfg80211_wext_giwfreq+0x860/0x860
[ 1165.568194][T19285]  ? full_name_hash+0x8e/0xe0
[ 1165.572974][T19285]  ? __cfg80211_wext_giwfreq+0x860/0x860
[ 1165.578798][T19285]  ioctl_standard_call+0xd4/0x2b0
[ 1165.583915][T19285]  ? __cfg80211_wext_giwfreq+0x860/0x860
[ 1165.589632][T19285]  wext_ioctl_dispatch+0x3da/0x470
[ 1165.594828][T19285]  ? wext_ioctl_dispatch+0x470/0x470
[ 1165.600196][T19285]  ? iw_handler_get_private+0x1e0/0x1e0
[ 1165.605845][T19285]  wext_handle_ioctl+0x104/0x1c0
[ 1165.610882][T19285]  ? call_commit_handler+0xf0/0xf0
[ 1165.616144][T19285]  sock_ioctl+0x145/0x6e0
[ 1165.620571][T19285]  ? sock_poll+0x3f0/0x3f0
[ 1165.625129][T19285]  ? bpf_lsm_file_ioctl+0x5/0x10
[ 1165.630151][T19285]  ? security_file_ioctl+0x7c/0xa0
[ 1165.635350][T19285]  ? sock_poll+0x3f0/0x3f0
[ 1165.639855][T19285]  __se_sys_ioctl+0xfa/0x170
[ 1165.644546][T19285]  do_syscall_64+0x4c/0xa0
[ 1165.649032][T19285]  ? clear_bhb_loop+0x60/0xb0
[ 1165.653797][T19285]  ? clear_bhb_loop+0x60/0xb0
[ 1165.658561][T19285]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1165.664546][T19285] RIP: 0033:0x7fc5d918efc9
[ 1165.669039][T19285] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1165.688988][T19285] RSP: 002b:00007fc5da105038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1165.697592][T19285] RAX: ffffffffffffffda RBX: 00007fc5d93e5fa0 RCX: 00007fc5d918efc9
[ 1165.705640][T19285] RDX: 0000200000000080 RSI: 0000000000008b06 RDI: 0000000000000007
[ 1165.713686][T19285] RBP: 00007fc5da105090 R08: 0000000000000000 R09: 0000000000000000
[ 1165.721731][T19285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1165.729774][T19285] R13: 00007fc5d93e6038 R14: 00007fc5d93e5fa0 R15: 00007ffc54d99bb8
[ 1165.737878][T19285]  </TASK>
[ 1165.893338][T19285] debugfs: out of free dentries, can not create directory 'stations'
[ 1166.156923][T19300] netlink: 'syz.2.4941': attribute type 8 has an invalid length.
[ 1166.165354][T19300] netlink: 399 bytes leftover after parsing attributes in process `syz.2.4941'.
[ 1166.220156][T19304] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.4943'.
[ 1166.366090][T19310] netlink: 830 bytes leftover after parsing attributes in process `syz.4.4945'.
[ 1166.381776][T19308] netlink: 'syz.3.4944': attribute type 8 has an invalid length.
[ 1166.400637][T19308] netlink: 399 bytes leftover after parsing attributes in process `syz.3.4944'.
[ 1169.739886][T19342] netlink: 'syz.0.4955': attribute type 10 has an invalid length.
[ 1169.863566][T19344] netlink: 'syz.3.4956': attribute type 8 has an invalid length.
[ 1169.900935][T19344] netlink: 399 bytes leftover after parsing attributes in process `syz.3.4956'.
[ 1170.166468][T19358] netlink: 'syz.3.4962': attribute type 3 has an invalid length.
[ 1170.215121][T19358] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4962'.
[ 1170.280970][T19360] netlink: 'syz.2.4963': attribute type 8 has an invalid length.
[ 1170.289674][T19360] netlink: 399 bytes leftover after parsing attributes in process `syz.2.4963'.
[ 1170.504207][T19361] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4960'.
[ 1171.256571][T19381] FAULT_INJECTION: forcing a failure.
[ 1171.256571][T19381] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1171.289281][T19381] CPU: 0 PID: 19381 Comm: syz.1.4970 Not tainted syzkaller #0
[ 1171.296956][T19381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1171.307081][T19381] Call Trace:
[ 1171.310418][T19381]  <TASK>
[ 1171.313412][T19381]  dump_stack_lvl+0x168/0x22e
[ 1171.318268][T19381]  ? show_regs_print_info+0x12/0x12
[ 1171.323603][T19381]  ? load_image+0x3b0/0x3b0
[ 1171.328208][T19381]  ? __lock_acquire+0x7c50/0x7c50
[ 1171.333316][T19381]  ? mutex_unlock+0x10/0x10
[ 1171.337912][T19381]  should_fail_ex+0x399/0x4d0
[ 1171.342694][T19381]  _copy_from_user+0x2c/0x170
[ 1171.347480][T19381]  smc_setsockopt+0x40e/0xb60
[ 1171.352267][T19381]  ? smc_shutdown+0x9a0/0x9a0
[ 1171.357022][T19381]  ? aa_sock_opt_perm+0x74/0x100
[ 1171.362049][T19381]  ? bpf_lsm_socket_setsockopt+0x5/0x10
[ 1171.367665][T19381]  ? security_socket_setsockopt+0x7a/0xa0
[ 1171.373472][T19381]  ? smc_shutdown+0x9a0/0x9a0
[ 1171.378543][T19381]  __sys_setsockopt+0x2bf/0x3d0
[ 1171.383551][T19381]  __x64_sys_setsockopt+0xb1/0xc0
[ 1171.388676][T19381]  do_syscall_64+0x4c/0xa0
[ 1171.393169][T19381]  ? clear_bhb_loop+0x60/0xb0
[ 1171.397915][T19381]  ? clear_bhb_loop+0x60/0xb0
[ 1171.402674][T19381]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1171.408646][T19381] RIP: 0033:0x7f800b38efc9
[ 1171.413128][T19381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1171.432831][T19381] RSP: 002b:00007f800c29a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 1171.441324][T19381] RAX: ffffffffffffffda RBX: 00007f800b5e5fa0 RCX: 00007f800b38efc9
[ 1171.449380][T19381] RDX: 0000000000000005 RSI: 0000000000000006 RDI: 0000000000000003
[ 1171.457420][T19381] RBP: 00007f800c29a090 R08: 0000000000000004 R09: 0000000000000000
[ 1171.465646][T19381] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001
[ 1171.473692][T19381] R13: 00007f800b5e6038 R14: 00007f800b5e5fa0 R15: 00007ffc8c231338
[ 1171.481883][T19381]  </TASK>
[ 1171.981945][T19391] netlink: 'syz.1.4973': attribute type 8 has an invalid length.
[ 1172.000816][T19391] netlink: 399 bytes leftover after parsing attributes in process `syz.1.4973'.
[ 1172.248373][T19401] netlink: 'syz.4.4975': attribute type 8 has an invalid length.
[ 1172.256558][T19401] netlink: 399 bytes leftover after parsing attributes in process `syz.4.4975'.
[ 1174.251636][T19410] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4978'.
[ 1175.487110][T19438] netlink: 'syz.0.4989': attribute type 8 has an invalid length.
[ 1175.531854][T19438] netlink: 399 bytes leftover after parsing attributes in process `syz.0.4989'.
[ 1175.669141][T19444] netlink: 'syz.4.4991': attribute type 8 has an invalid length.
[ 1175.705357][T19444] netlink: 399 bytes leftover after parsing attributes in process `syz.4.4991'.
[ 1176.538765][T19465] netlink: 830 bytes leftover after parsing attributes in process `syz.4.4999'.
[ 1177.307407][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[ 1177.313822][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[ 1179.337043][T19477] FAULT_INJECTION: forcing a failure.
[ 1179.337043][T19477] name failslab, interval 1, probability 0, space 0, times 0
[ 1179.381675][T19477] CPU: 1 PID: 19477 Comm: syz.0.5002 Not tainted syzkaller #0
[ 1179.389322][T19477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1179.399428][T19477] Call Trace:
[ 1179.402742][T19477]  <TASK>
[ 1179.405717][T19477]  dump_stack_lvl+0x168/0x22e
[ 1179.410554][T19477]  ? show_regs_print_info+0x12/0x12
[ 1179.415818][T19477]  ? load_image+0x3b0/0x3b0
[ 1179.420386][T19477]  ? __might_sleep+0xd0/0xd0
[ 1179.425038][T19477]  ? __lock_acquire+0x7c50/0x7c50
[ 1179.430142][T19477]  should_fail_ex+0x399/0x4d0
[ 1179.435002][T19477]  should_failslab+0x5/0x20
[ 1179.439537][T19477]  slab_pre_alloc_hook+0x59/0x310
[ 1179.444583][T19477]  ? kvmalloc_node+0x6c/0x180
[ 1179.449302][T19477]  __kmem_cache_alloc_node+0x4f/0x260
[ 1179.454721][T19477]  ? kvmalloc_node+0x6c/0x180
[ 1179.459432][T19477]  __kmalloc_node+0xa0/0x240
[ 1179.464061][T19477]  kvmalloc_node+0x6c/0x180
[ 1179.468590][T19477]  bpf_test_run_xdp_live+0x182/0x1970
[ 1179.474032][T19477]  ? text_poke_copy+0x79/0x90
[ 1179.478753][T19477]  ? 0xffffffffa00041c0
[ 1179.482970][T19477]  ? __sys_bpf+0x593/0x6d0
[ 1179.487427][T19477]  ? __x64_sys_bpf+0x78/0x90
[ 1179.492044][T19477]  ? do_syscall_64+0x4c/0xa0
[ 1179.496674][T19477]  ? xdp_convert_md_to_buff+0x330/0x330
[ 1179.502274][T19477]  ? trace_raw_output_bpf_test_finish+0xd0/0xd0
[ 1179.508551][T19477]  ? bpf_test_init+0x134/0x150
[ 1179.513356][T19477]  ? xdp_convert_md_to_buff+0x5b/0x330
[ 1179.518943][T19477]  bpf_prog_test_run_xdp+0x6f1/0xe50
[ 1179.524273][T19477]  ? dev_put+0x80/0x80
[ 1179.528379][T19477]  ? dev_put+0x80/0x80
[ 1179.532472][T19477]  bpf_prog_test_run+0x31e/0x390
[ 1179.537452][T19477]  __sys_bpf+0x593/0x6d0
[ 1179.541817][T19477]  ? bpf_link_show_fdinfo+0x340/0x340
[ 1179.547237][T19477]  ? lock_chain_count+0x20/0x20
[ 1179.552169][T19477]  __x64_sys_bpf+0x78/0x90
[ 1179.556622][T19477]  do_syscall_64+0x4c/0xa0
[ 1179.561071][T19477]  ? clear_bhb_loop+0x60/0xb0
[ 1179.565785][T19477]  ? clear_bhb_loop+0x60/0xb0
[ 1179.570499][T19477]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1179.576435][T19477] RIP: 0033:0x7fcc2b98efc9
[ 1179.580885][T19477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1179.600524][T19477] RSP: 002b:00007fcc2c89f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1179.608968][T19477] RAX: ffffffffffffffda RBX: 00007fcc2bbe6090 RCX: 00007fcc2b98efc9
[ 1179.616971][T19477] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[ 1179.624971][T19477] RBP: 00007fcc2c89f090 R08: 0000000000000000 R09: 0000000000000000
[ 1179.632974][T19477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1179.640988][T19477] R13: 00007fcc2bbe6128 R14: 00007fcc2bbe6090 R15: 00007fff4a498258
[ 1179.649021][T19477]  </TASK>
[ 1179.675162][T19483] netlink: 'syz.4.5004': attribute type 8 has an invalid length.
[ 1179.685169][T19483] netlink: 399 bytes leftover after parsing attributes in process `syz.4.5004'.
[ 1179.787451][T19489] netlink: 'syz.3.5007': attribute type 10 has an invalid length.
[ 1179.821815][T19485] netlink: 'syz.2.5005': attribute type 8 has an invalid length.
[ 1179.835931][T19485] netlink: 399 bytes leftover after parsing attributes in process `syz.2.5005'.
[ 1179.865737][T19489] team0: Port device netdevsim0 added
[ 1180.485826][T19505] netlink: 830 bytes leftover after parsing attributes in process `syz.0.5014'.
[ 1183.556474][T19529] netlink: 'syz.3.5021': attribute type 8 has an invalid length.
[ 1183.565102][T19529] netlink: 399 bytes leftover after parsing attributes in process `syz.3.5021'.
[ 1183.665757][T19531] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.5020'.
[ 1184.296172][T19535] netlink: 154788 bytes leftover after parsing attributes in process `syz.0.5022'.
[ 1184.346521][T19535] openvswitch: netlink: Message has 48126 unknown bytes.
[ 1184.390303][T19534] netlink: 'syz.4.5023': attribute type 8 has an invalid length.
[ 1184.401253][T19534] netlink: 399 bytes leftover after parsing attributes in process `syz.4.5023'.
[ 1184.607670][T19540] device pim6reg1 entered promiscuous mode
[ 1187.706813][T19560] netlink: 830 bytes leftover after parsing attributes in process `syz.4.5030'.
[ 1188.595996][T19577] netlink: 'syz.1.5036': attribute type 8 has an invalid length.
[ 1188.659675][T19577] netlink: 399 bytes leftover after parsing attributes in process `syz.1.5036'.
[ 1188.670257][ T9551] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1188.682223][ T9556] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1188.958015][T19586] netlink: 'syz.4.5039': attribute type 8 has an invalid length.
[ 1188.979283][T19586] netlink: 399 bytes leftover after parsing attributes in process `syz.4.5039'.
[ 1189.199134][T19595] FAULT_INJECTION: forcing a failure.
[ 1189.199134][T19595] name failslab, interval 1, probability 0, space 0, times 0
[ 1189.212258][T19595] CPU: 0 PID: 19595 Comm: syz.4.5044 Not tainted syzkaller #0
[ 1189.219796][T19595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1189.229988][T19595] Call Trace:
[ 1189.233314][T19595]  <TASK>
[ 1189.236281][T19595]  dump_stack_lvl+0x168/0x22e
[ 1189.241052][T19595]  ? show_regs_print_info+0x12/0x12
[ 1189.246311][T19595]  ? load_image+0x3b0/0x3b0
[ 1189.250875][T19595]  ? rt6_nlmsg_size+0xc6/0x480
[ 1189.255798][T19595]  should_fail_ex+0x399/0x4d0
[ 1189.260543][T19595]  should_failslab+0x5/0x20
[ 1189.265104][T19595]  slab_pre_alloc_hook+0x59/0x310
[ 1189.270196][T19595]  kmem_cache_alloc_node+0x5a/0x320
[ 1189.275445][T19595]  ? __alloc_skb+0xfc/0x7e0
[ 1189.280020][T19595]  __alloc_skb+0xfc/0x7e0
[ 1189.284405][T19595]  inet6_rt_notify+0xb0/0x240
[ 1189.289149][T19595]  fib6_add+0x1d88/0x3cc0
[ 1189.293570][T19595]  ? fib6_update_sernum_stub+0x110/0x110
[ 1189.299263][T19595]  ? __local_bh_disable_ip+0xd9/0x190
[ 1189.304705][T19595]  ? do_raw_spin_lock+0x11d/0x280
[ 1189.309820][T19595]  ? ip6_route_add+0x71/0x130
[ 1189.314554][T19595]  ip6_route_add+0x86/0x130
[ 1189.319118][T19595]  addrconf_prefix_route+0x20d/0x2b0
[ 1189.324477][T19595]  ? addrconf_get_prefix_route+0x760/0x760
[ 1189.330441][T19595]  ? ipv6_count_addresses+0x190/0x190
[ 1189.335894][T19595]  inet6_addr_add+0x4fe/0x9b0
[ 1189.340740][T19595]  addrconf_add_ifaddr+0x148/0x1a0
[ 1189.345892][T19595]  ? addrconf_set_dstaddr+0x2d0/0x2d0
[ 1189.351306][T19595]  ? __lock_acquire+0x7c50/0x7c50
[ 1189.356407][T19595]  ? slab_free_freelist_hook+0x131/0x1a0
[ 1189.362163][T19595]  inet6_ioctl+0x15e/0x240
[ 1189.366617][T19595]  ? __kmem_cache_free+0xb6/0x1f0
[ 1189.371784][T19595]  ? inet6_getname+0x640/0x640
[ 1189.376685][T19595]  ? tomoyo_path_number_perm+0x503/0x600
[ 1189.382459][T19595]  ? tomoyo_path_number_perm+0x1b6/0x600
[ 1189.388149][T19595]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[ 1189.393686][T19595]  sock_do_ioctl+0xd3/0x2f0
[ 1189.398315][T19595]  ? sock_show_fdinfo+0xb0/0xb0
[ 1189.403401][T19595]  sock_ioctl+0x4ed/0x6e0
[ 1189.407795][T19595]  ? sock_poll+0x3f0/0x3f0
[ 1189.412280][T19595]  ? bpf_lsm_file_ioctl+0x5/0x10
[ 1189.417271][T19595]  ? security_file_ioctl+0x7c/0xa0
[ 1189.422434][T19595]  ? sock_poll+0x3f0/0x3f0
[ 1189.426946][T19595]  __se_sys_ioctl+0xfa/0x170
[ 1189.431599][T19595]  do_syscall_64+0x4c/0xa0
[ 1189.436062][T19595]  ? clear_bhb_loop+0x60/0xb0
[ 1189.440789][T19595]  ? clear_bhb_loop+0x60/0xb0
[ 1189.445622][T19595]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1189.451563][T19595] RIP: 0033:0x7f1b3f18efc9
[ 1189.456068][T19595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1189.476039][T19595] RSP: 002b:00007f1b40044038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1189.484510][T19595] RAX: ffffffffffffffda RBX: 00007f1b3f3e5fa0 RCX: 00007f1b3f18efc9
[ 1189.492541][T19595] RDX: 0000200000000000 RSI: 0000000000008916 RDI: 0000000000000005
[ 1189.500566][T19595] RBP: 00007f1b40044090 R08: 0000000000000000 R09: 0000000000000000
[ 1189.508762][T19595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1189.516867][T19595] R13: 00007f1b3f3e6038 R14: 00007f1b3f3e5fa0 R15: 00007fff650b1508
[ 1189.524913][T19595]  </TASK>
[ 1189.551425][   T75] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1189.988153][ T9556] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1189.999671][ T9551] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1190.433636][T19625] netlink: 830 bytes leftover after parsing attributes in process `syz.4.5049'.
[ 1190.486086][T19624] netlink: 'syz.3.5052': attribute type 8 has an invalid length.
[ 1190.503213][T19624] netlink: 399 bytes leftover after parsing attributes in process `syz.3.5052'.
[ 1190.765171][T19635] netlink: 'syz.0.5054': attribute type 8 has an invalid length.
[ 1190.791129][T19635] netlink: 399 bytes leftover after parsing attributes in process `syz.0.5054'.
[ 1191.601493][T19647] netlink: 'syz.1.5060': attribute type 10 has an invalid length.
[ 1191.645870][T19647] 8021q: adding VLAN 0 to HW filter on device team0
[ 1191.668923][T19647] bond0: (slave team0): Enslaving as an active interface with an up link
[ 1191.708807][T19649] netlink: 'syz.0.5070': attribute type 8 has an invalid length.
[ 1191.734730][T19649] netlink: 399 bytes leftover after parsing attributes in process `syz.0.5070'.
[ 1195.064222][T19680] netlink: 'syz.2.5069': attribute type 8 has an invalid length.
[ 1195.088908][T19680] netlink: 399 bytes leftover after parsing attributes in process `syz.2.5069'.
[ 1195.129141][T19684] netlink: 830 bytes leftover after parsing attributes in process `syz.1.5071'.
[ 1195.696654][T19692] netlink: 'syz.2.5076': attribute type 8 has an invalid length.
[ 1195.706034][T19692] netlink: 399 bytes leftover after parsing attributes in process `syz.2.5076'.
[ 1196.427676][T19702] netlink: 'syz.2.5081': attribute type 8 has an invalid length.
[ 1196.473820][T19702] netlink: 399 bytes leftover after parsing attributes in process `syz.2.5081'.
[ 1199.963310][T19721] netlink: 'syz.2.5087': attribute type 8 has an invalid length.
[ 1199.971443][T19721] netlink: 399 bytes leftover after parsing attributes in process `syz.2.5087'.
[ 1200.110676][T19729] netlink: 830 bytes leftover after parsing attributes in process `syz.0.5088'.
[ 1200.220713][T19732] netlink: 830 bytes leftover after parsing attributes in process `syz.4.5090'.
[ 1200.300609][T19735] netlink: 'syz.2.5092': attribute type 8 has an invalid length.
[ 1200.309413][T19735] netlink: 399 bytes leftover after parsing attributes in process `syz.2.5092'.
[ 1201.869589][T19768] netlink: 'syz.1.5102': attribute type 8 has an invalid length.
[ 1201.887964][T19768] netlink: 399 bytes leftover after parsing attributes in process `syz.1.5102'.
[ 1202.691093][T19772] netlink: 'syz.2.5106': attribute type 8 has an invalid length.
[ 1202.713021][T19772] netlink: 399 bytes leftover after parsing attributes in process `syz.2.5106'.
[ 1202.747018][T19774] netlink: 'syz.1.5105': attribute type 8 has an invalid length.
[ 1202.763240][T19774] netlink: 399 bytes leftover after parsing attributes in process `syz.1.5105'.
[ 1202.991531][T19781] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5107'.
[ 1204.209964][T19804] netlink: 'syz.1.5117': attribute type 8 has an invalid length.
[ 1204.219990][T19804] netlink: 399 bytes leftover after parsing attributes in process `syz.1.5117'.
[ 1204.655376][T19812] netlink: 830 bytes leftover after parsing attributes in process `syz.2.5118'.
[ 1204.691148][T19823] netlink: 830 bytes leftover after parsing attributes in process `syz.4.5122'.
[ 1204.725258][T19822] netlink: 'syz.1.5123': attribute type 8 has an invalid length.
[ 1208.498439][T19847] netlink: 'syz.2.5132': attribute type 8 has an invalid length.
[ 1208.522958][T19847] __nla_validate_parse: 1 callbacks suppressed
[ 1208.522998][T19847] netlink: 399 bytes leftover after parsing attributes in process `syz.2.5132'.
[ 1208.734010][T19857] netlink: 'syz.3.5135': attribute type 8 has an invalid length.
[ 1208.742329][T19857] netlink: 399 bytes leftover after parsing attributes in process `syz.3.5135'.
[ 1209.229717][T19868] netlink: 830 bytes leftover after parsing attributes in process `syz.0.5138'.
[ 1209.502283][T19875] netlink: 830 bytes leftover after parsing attributes in process `syz.4.5141'.
[ 1212.943741][T19902] netlink: 'syz.3.5147': attribute type 8 has an invalid length.
[ 1212.951905][T19902] netlink: 399 bytes leftover after parsing attributes in process `syz.3.5147'.
[ 1215.084580][T19906] netlink: 'syz.1.5150': attribute type 8 has an invalid length.
[ 1215.099058][T19906] netlink: 399 bytes leftover after parsing attributes in process `syz.1.5150'.
[ 1216.487945][T19924] netlink: 830 bytes leftover after parsing attributes in process `syz.4.5156'.
[ 1216.845725][T19927] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5157'.
[ 1219.924862][T19938] netlink: 830 bytes leftover after parsing attributes in process `syz.1.5170'.
[ 1220.832462][T19958] netlink: 'syz.1.5164': attribute type 8 has an invalid length.
[ 1220.840958][T19958] netlink: 399 bytes leftover after parsing attributes in process `syz.1.5164'.
[ 1220.933896][T19956] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5163'.
[ 1221.320151][T18801] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1221.320488][T18285] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1222.113117][T18285] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1222.864446][T19990] netlink: 830 bytes leftover after parsing attributes in process `syz.1.5176'.
[ 1225.704509][T20002] netlink: 830 bytes leftover after parsing attributes in process `syz.2.5178'.
[ 1231.719949][T20041] netlink: 'syz.2.5195': attribute type 8 has an invalid length.
[ 1231.743189][T20041] netlink: 399 bytes leftover after parsing attributes in process `syz.2.5195'.
[ 1231.770989][T20044] netlink: 830 bytes leftover after parsing attributes in process `syz.0.5193'.
[ 1236.174702][T20074] netlink: 'syz.4.5206': attribute type 8 has an invalid length.
[ 1236.203121][T20074] netlink: 399 bytes leftover after parsing attributes in process `syz.4.5206'.
[ 1236.285786][T20081] netlink: 'syz.1.5210': attribute type 8 has an invalid length.
[ 1236.313102][T20081] netlink: 399 bytes leftover after parsing attributes in process `syz.1.5210'.
[ 1236.440987][T20086] netlink: 'syz.3.5212': attribute type 8 has an invalid length.
[ 1236.463073][T20086] netlink: 399 bytes leftover after parsing attributes in process `syz.3.5212'.
[ 1236.467301][T20084] netlink: 'syz.0.5211': attribute type 8 has an invalid length.
[ 1236.510854][T20084] netlink: 399 bytes leftover after parsing attributes in process `syz.0.5211'.
[ 1238.744555][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[ 1238.751026][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[ 1239.893852][T20115] netlink: 830 bytes leftover after parsing attributes in process `syz.0.5221'.
[ 1239.938501][T20114] netlink: 'syz.2.5223': attribute type 8 has an invalid length.
[ 1239.963165][T20114] netlink: 399 bytes leftover after parsing attributes in process `syz.2.5223'.
[ 1240.222063][T20122] netlink: 'syz.4.5225': attribute type 8 has an invalid length.
[ 1240.262171][T20122] netlink: 399 bytes leftover after parsing attributes in process `syz.4.5225'.
[ 1240.318673][T20124] netlink: 'syz.2.5226': attribute type 8 has an invalid length.
[ 1240.327575][T20124] netlink: 399 bytes leftover after parsing attributes in process `syz.2.5226'.
[ 1240.435853][T20128] netlink: 'syz.1.5227': attribute type 8 has an invalid length.
[ 1240.464655][T20128] netlink: 399 bytes leftover after parsing attributes in process `syz.1.5227'.
[ 1240.597647][T20136] FAULT_INJECTION: forcing a failure.
[ 1240.597647][T20136] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1240.722194][T20136] CPU: 0 PID: 20136 Comm: syz.4.5231 Not tainted syzkaller #0
[ 1240.729801][T20136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1240.740125][T20136] Call Trace:
[ 1240.743483][T20136]  <TASK>
[ 1240.746495][T20136]  dump_stack_lvl+0x168/0x22e
[ 1240.751312][T20136]  ? show_regs_print_info+0x12/0x12
[ 1240.756621][T20136]  ? load_image+0x3b0/0x3b0
[ 1240.761251][T20136]  ? __lock_acquire+0x7c50/0x7c50
[ 1240.766695][T20136]  ? snprintf+0xd7/0x120
[ 1240.771058][T20136]  should_fail_ex+0x399/0x4d0
[ 1240.775862][T20136]  _copy_to_user+0x2c/0x130
[ 1240.780480][T20136]  simple_read_from_buffer+0xe3/0x150
[ 1240.785995][T20136]  proc_fail_nth_read+0x19a/0x210
[ 1240.791136][T20136]  ? proc_fault_inject_write+0x2f0/0x2f0
[ 1240.796895][T20136]  ? fsnotify_perm+0x248/0x550
[ 1240.801782][T20136]  ? proc_fault_inject_write+0x2f0/0x2f0
[ 1240.807533][T20136]  vfs_read+0x2c0/0x920
[ 1240.812053][T20136]  ? kernel_read+0x1e0/0x1e0
[ 1240.816852][T20136]  ? __fget_files+0x28/0x4d0
[ 1240.821633][T20136]  ? __fget_files+0x44a/0x4d0
[ 1240.826472][T20136]  ? __fdget_pos+0x2ae/0x360
[ 1240.831163][T20136]  ? ksys_read+0x71/0x240
[ 1240.835615][T20136]  ksys_read+0x143/0x240
[ 1240.839986][T20136]  ? vfs_write+0x960/0x960
[ 1240.844540][T20136]  ? lockdep_hardirqs_on+0x94/0x140
[ 1240.849882][T20136]  do_syscall_64+0x4c/0xa0
[ 1240.854385][T20136]  ? clear_bhb_loop+0x60/0xb0
[ 1240.859162][T20136]  ? clear_bhb_loop+0x60/0xb0
[ 1240.863945][T20136]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1240.869926][T20136] RIP: 0033:0x7f1b3f18d9dc
[ 1240.874439][T20136] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 1240.894124][T20136] RSP: 002b:00007f1b40044030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1240.902627][T20136] RAX: ffffffffffffffda RBX: 00007f1b3f3e5fa0 RCX: 00007f1b3f18d9dc
[ 1240.910692][T20136] RDX: 000000000000000f RSI: 00007f1b400440a0 RDI: 0000000000000007
[ 1240.918750][T20136] RBP: 00007f1b40044090 R08: 0000000000000000 R09: 0000000000000000
[ 1240.926879][T20136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1240.934902][T20136] R13: 00007f1b3f3e6038 R14: 00007f1b3f3e5fa0 R15: 00007fff650b1508
[ 1240.943002][T20136]  </TASK>
[ 1241.521247][T20144] FAULT_INJECTION: forcing a failure.
[ 1241.521247][T20144] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1241.547120][T20144] CPU: 0 PID: 20144 Comm: syz.3.5234 Not tainted syzkaller #0
[ 1241.554687][T20144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1241.564813][T20144] Call Trace:
[ 1241.568235][T20144]  <TASK>
[ 1241.571226][T20144]  dump_stack_lvl+0x168/0x22e
[ 1241.575998][T20144]  ? show_regs_print_info+0x12/0x12
[ 1241.581439][T20144]  ? load_image+0x3b0/0x3b0
[ 1241.586062][T20144]  ? __lock_acquire+0x7c50/0x7c50
[ 1241.591170][T20144]  ? __rcu_read_unlock+0x78/0xd0
[ 1241.596233][T20144]  should_fail_ex+0x399/0x4d0
[ 1241.601015][T20144]  _copy_to_user+0x2c/0x130
[ 1241.605607][T20144]  bpf_test_finish+0x4fa/0x600
[ 1241.610469][T20144]  ? convert___skb_to_skb+0x580/0x580
[ 1241.615936][T20144]  ? convert_skb_to___skb+0x420/0x420
[ 1241.621388][T20144]  ? __build_skb+0x257/0x3c0
[ 1241.626790][T20144]  bpf_prog_test_run_skb+0xc03/0x11b0
[ 1241.632316][T20144]  ? cpu_online+0xa0/0xa0
[ 1241.636737][T20144]  bpf_prog_test_run+0x31e/0x390
[ 1241.641774][T20144]  __sys_bpf+0x593/0x6d0
[ 1241.646108][T20144]  ? bpf_link_show_fdinfo+0x340/0x340
[ 1241.651623][T20144]  ? lock_chain_count+0x20/0x20
[ 1241.656597][T20144]  __x64_sys_bpf+0x78/0x90
[ 1241.661108][T20144]  do_syscall_64+0x4c/0xa0
[ 1241.665599][T20144]  ? clear_bhb_loop+0x60/0xb0
[ 1241.670353][T20144]  ? clear_bhb_loop+0x60/0xb0
[ 1241.675126][T20144]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1241.681091][T20144] RIP: 0033:0x7fc5d918efc9
[ 1241.685578][T20144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1241.705256][T20144] RSP: 002b:00007fc5da105038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1241.714723][T20144] RAX: ffffffffffffffda RBX: 00007fc5d93e5fa0 RCX: 00007fc5d918efc9
[ 1241.722768][T20144] RDX: 0000000000000048 RSI: 00002000000002c0 RDI: 000000000000000a
[ 1241.730810][T20144] RBP: 00007fc5da105090 R08: 0000000000000000 R09: 0000000000000000
[ 1241.738853][T20144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1241.746988][T20144] R13: 00007fc5d93e6038 R14: 00007fc5d93e5fa0 R15: 00007ffc54d99bb8
[ 1241.755197][T20144]  </TASK>
Stopping sshd: stopped /usr/sbin/sshd (pid 4032)
OK
Stopping crond: stopped /usr/sbin/crond (pid 4013)
OK
[ 1243.872745][T20160] netlink: 'syz.4.5238': attribute type 8 has an invalid length.
[ 1243.902641][T20160] netlink: 399 bytes leftover after parsing attributes in process `syz.4.5238'.
Stopping dhcpcd...
stopped /sbin/dhcpcd (pid 3931)
[ 1244.392148][T20184] bridge0: port 3(bond0) entered blocking state
[ 1244.427965][T20184] bridge0: port 3(bond0) entered disabled state
[ 1244.444610][T20179] netlink: 'syz.1.5244': attribute type 8 has an invalid length.
[ 1244.456213][T20184] device bond0 entered promiscuous mode
[ 1244.483033][T20179] netlink: 399 bytes leftover after parsing attributes in process `syz.1.5244'.
[ 1244.494944][T20184] device bond_slave_0 entered promiscuous mode
[ 1244.553063][T20184] device bond_slave_1 entered promiscuous mode
[ 1244.560857][T20174] netlink: 830 bytes leftover after parsing attributes in process `syz.4.5242'.
[ 1244.840442][T20190] netlink: 830 bytes leftover after parsing attributes in process `syz.0.5245'.
Stopping network: [ 1245.160064][T20199] netlink: 830 bytes leftover after parsing attributes in process `syz.1.5247'.
[ 1247.890409][T20211] device syzkaller0 entered promiscuous mode
[ 1247.933242][T20215] netlink: 'syz.0.5252': attribute type 8 has an invalid length.
[ 1247.960585][T20215] netlink: 399 bytes leftover after parsing attributes in process `syz.0.5252'.
OK
Stopping iptables: OK
Stopping system message bus: [ 1248.991926][T20243] FAULT_INJECTION: forcing a failure.
[ 1248.991926][T20243] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1249.045899][T20243] CPU: 1 PID: 20243 Comm: syz.4.5256 Not tainted syzkaller #0
[ 1249.053465][T20243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1249.063560][T20243] Call Trace:
[ 1249.066869][T20243]  <TASK>
[ 1249.069831][T20243]  dump_stack_lvl+0x168/0x22e
[ 1249.074561][T20243]  ? show_regs_print_info+0x12/0x12
[ 1249.079803][T20243]  ? load_image+0x3b0/0x3b0
[ 1249.084363][T20243]  ? __lock_acquire+0x7c50/0x7c50
[ 1249.089448][T20243]  ? snprintf+0xd7/0x120
[ 1249.093754][T20243]  should_fail_ex+0x399/0x4d0
[ 1249.102321][T20243]  _copy_to_user+0x2c/0x130
[ 1249.106915][T20243]  simple_read_from_buffer+0xe3/0x150
[ 1249.112341][T20243]  proc_fail_nth_read+0x19a/0x210
[ 1249.117424][T20243]  ? proc_fault_inject_write+0x2f0/0x2f0
[ 1249.123095][T20243]  ? fsnotify_perm+0x248/0x550
[ 1249.127882][T20243]  ? proc_fault_inject_write+0x2f0/0x2f0
[ 1249.133623][T20243]  vfs_read+0x2c0/0x920
[ 1249.137838][T20243]  ? kernel_read+0x1e0/0x1e0
[ 1249.142459][T20243]  ? __fget_files+0x28/0x4d0
[ 1249.147106][T20243]  ? __fget_files+0x44a/0x4d0
[ 1249.151814][T20243]  ? __fdget_pos+0x2ae/0x360
[ 1249.156438][T20243]  ? ksys_read+0x71/0x240
[ 1249.160817][T20243]  ksys_read+0x143/0x240
[ 1249.165092][T20243]  ? vfs_write+0x960/0x960
[ 1249.169536][T20243]  ? lockdep_hardirqs_on+0x94/0x140
[ 1249.174771][T20243]  do_syscall_64+0x4c/0xa0
[ 1249.179206][T20243]  ? clear_bhb_loop+0x60/0xb0
[ 1249.183900][T20243]  ? clear_bhb_loop+0x60/0xb0
[ 1249.188594][T20243]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1249.194506][T20243] RIP: 0033:0x7f1b3f18d9dc
[ 1249.198962][T20243] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 1249.218585][T20243] RSP: 002b:00007f1b40044030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1249.227013][T20243] RAX: ffffffffffffffda RBX: 00007f1b3f3e5fa0 RCX: 00007f1b3f18d9dc
[ 1249.234996][T20243] RDX: 000000000000000f RSI: 00007f1b400440a0 RDI: 0000000000000004
[ 1249.243003][T20243] RBP: 00007f1b40044090 R08: 0000000000000000 R09: 0000000000000000
[ 1249.250982][T20243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1249.258963][T20243] R13: 00007f1b3f3e6038 R14: 00007f1b3f3e5fa0 R15: 00007fff650b1508
[ 1249.266963][T20243]  </TASK>
[ 1249.660484][T20247] netlink: 'syz.4.5257': attribute type 8 has an invalid length.
[ 1249.678246][T20247] netlink: 399 bytes leftover after parsing attributes in process `syz.4.5257'.
done
killall: can't kill pid 19951: No such process
Stopping klogd: OK
Stopping acpid: [ 1251.651191][T20226] netlink: 'syz.1.5253': attribute type 10 has an invalid length.
[ 1251.659488][T20226] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1251.666756][T20226] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1251.684151][T20226] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1251.691416][T20226] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1251.699540][T20226] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1251.706718][T20226] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1251.720701][T20226] team0: Port device bridge0 added
[ 1252.005904][T20271] netlink: 'syz.1.5260': attribute type 10 has an invalid length.
[ 1252.046067][T20271] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5260'.
[ 1252.115087][T20271] device ipvlan1 entered promiscuous mode
[ 1252.248267][ T9553] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1252.259178][ T9556] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
OK
[ 1252.285788][T20271] bridge0: port 3(ipvlan1) entered blocking state
[ 1252.312351][T20271] bridge0: port 3(ipvlan1) entered disabled state
[ 1252.435651][T20271] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
Stopping syslogd: [ 1252.581498][T20281] netlink: 830 bytes leftover after parsing attributes in process `syz.2.5261'.
[ 1252.740261][T20283] netlink: 830 bytes leftover after parsing attributes in process `syz.4.5262'.
stopped /sbin/syslogd (pid 3619)
OK
[ 1253.269058][ T9542] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1253.280524][T18285] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
umount: can't remount debugfs read-only
umount: can't remount tmpfs read-only
[ 1255.383548][ T9556] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1256.560616][T20334] device syzkaller0 entered promiscuous mode
[ 1256.651064][T20341] netlink: 'syz.3.5279': attribute type 8 has an invalid length.
[ 1256.672976][T20341] netlink: 399 bytes leftover after parsing attributes in process `syz.3.5279'.
umount: sysfs busy - remounted read-only
umount: devtmpfs busy - remounted read-only
umount: can't remount /dev/root read-only
The system is going down NOW!
Connection to 10.128.0.195 closed by remote host.
Sent SIGTERM to all processes
Sent SIGKILL to all processes
Requesting system poweroff
[ 1259.483019][T20349] netlink: 830 bytes leftover after parsing attributes in process `syz.1.5280'.
[ 1259.502614][T20357] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5281'.
[ 1259.789097][T20360] kvm: exiting hardware virtualization
[ 1259.870827][T20360] sd 0:0:1:0: [sda] Synchronizing SCSI cache
[ 1259.910819][T20360] ACPI: PM: Preparing to enter system sleep state S5
[ 1259.953991][T20360] reboot: Power down
serialport: VM disconnected.