last executing test programs:

8.745565474s ago: executing program 3 (id=1292):
close(0xffffffffffffffff)
r0 = socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000040), 0x0, 0x4000}, 0x20)
r4 = socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], ""/16, <r5=>0x0, 0x0, 0x0, 0x0, 0x7, 0x8, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x76, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0xdc, 0x8, 0x0, 0x0}}, 0x10)
close(0xffffffffffffffff)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
recvmsg$unix(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYRES8=r6], 0x9a)
sendmsg$inet(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="bb1b3d4dd5", 0x5}, {&(0x7f0000000200)}], 0x2, &(0x7f0000000a40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @local, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_retopts={{0x10}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}], 0x80}, 0x850)
r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000007044f16c01b1fbfd000000000000008af65f0df9928941994cc8c173fac5688671085a86d143c59fed0e57feb97f422c51d8e63b4ed9e295df3ccd1a55752dfc2f32f14b6c8f0e7413c3e9caaad30dcb412d0f54623f388bb2c63d2b1f7d83cd0cc021867bb4aee9967a6ee83e1b18fd8beca7d7eddcd96634"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7, '\x00', r5, r8, 0x0, 0x4, 0x3}, 0x50)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001e40)=[{0x0}, {&(0x7f0000001c40)="16a96e378ce83b099d181d5a475f987ac7d4c709d72e15337f95990a6e60a814a1165f11ded69b0d5ec0e5f8b8623fe022dfb012a17e612baf4d41016d40067d0020a8df8d2cf303570f807ebcbe337791272d3365a16fb323b1be36bfefbbaea683be04d4dfa6b03e66f68ec62ab1595927c7337f400fafed4931face8a9a3088cc1bccea681ca96bda8f58190d560102a63b06ac", 0x95}, {&(0x7f0000001d00)="ed4db3ed244804701578c63809ca404dd04966febecc1f6aea77d9b7256eaae8cd5bdee37e40a48e581de93b75a3df82c5522ff234ce9e47ca2c487097505d01bcf21cc5a76bf4cc3f0e40d3c98b25c56972530bd0aa69bfab26eb1671b9e86eb2aa35", 0x63}], 0x3}, 0x4000000)
sendmsg$inet(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000280)}], 0x1, &(0x7f0000000380)}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca200000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xad}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)

8.741497335s ago: executing program 0 (id=1293):
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e281ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014006040400010404009bbc7a46e3988285dcdf12f213e6f768fec601955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)
socket$kcm(0x21, 0x0, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001240)={@ifindex, 0xffffffffffffffff, 0x16, 0x10}, 0x20)
socketpair$tipc(0x1e, 0x5, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket$kcm(0x2, 0x3, 0x2)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0500000004000000080000000c00000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1d, 0xd, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000a0c10000000000000900000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000003ab70c0000000000b7080000000000007b8af8ff00000000b7080000010000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000000100008000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x23, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3, r2}, 0xc)
perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r4, 0x20e, 0x5ee, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x0, 0x5e0}, 0x28)
r5 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="1400000027000b6c8cff001b0529fc60022fc569", 0x14}], 0x1}, 0x8084)
syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4990, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x10a02, 0x0, 0xc2ba, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x24040084)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000d0ffffff000000000000001718110000", @ANYRES32, @ANYBLOB="0000000000000000b706000014000000b7030000000d00008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b6af8ff00000000b50902000f0000007baaf0ff00000000bf8700000000000007080000fffdffffbf2400000000000007060000f0ffffff740200000800000018200000", @ANYRES32, @ANYBLOB="0000000000000000b7010000080000004608f0ff76000000bf9800000000000079080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8a020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3afbe5135a46a8ed}, 0x11c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r9 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0)={r8}, 0x8)
sendmsg$kcm(r9, &(0x7f0000002900)={&(0x7f0000000380)=@nl=@proc={0x10, 0x0, 0x25dfdbfc, 0x20000000}, 0x80, &(0x7f00000028c0)=[{&(0x7f0000000540)="970068c75d745c6140f7c1cbca3a3ae5f22a157aa34964907f462123f2eab79a054e9b7d2234b11b66719935f6692a4ea764569d80156b95288870dccc14aa6cff6817e17f75bcfdb7cbc200f578e4e020b3bc167670755bd03f9a82a33b1f2d3e1932587ec2a7fba3807ae343ba435a0d076003ca81fd2a84c846a9b1a6594c38148e1fd98a49daadc267c836619636d3be2a5d3bc39d562b41749c5b7a6e4ff6", 0xa1}, {&(0x7f0000001740)="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", 0x1000}, {&(0x7f0000002740)="70bb402aa0ee7d67108cfc28dd5554c1939953484131551f1b66db45822ae027ca195c29b990344d179fafd649553abf3e040993a36336d76b5a7ba57449a7171789afde06cb66f800350475b5cda1cda64d3a25b08e0dabef50df21b08c62a074dddeb1be8719e39c5c570c505373cf207d51bbdc7e0f0aaa63344d462bbfda5ff2a460f7cfeb4f5736ed3779e2d8d74c7aec7a7af46082603448552176383f2e22965b340a4f575d8f68df960a869e7815c4b4f7092a36717c1e8e0fa882f616a7ecff92f28b95fded3b179aa32674c6201c22d0af4268bb8b9174a7d96b62517c8fc627feaa4c8f", 0xe9}, {0x0}], 0x4}, 0x8000000)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_tracing={0x1a, 0xb, &(0x7f0000000a80)=ANY=[@ANYBLOB="18000000ff070000b6930000000000801858000002000000001814000038889421c5d7aad84cb0596503ebd092fa20911c63bba634212f875b867fe325bb7328f025", @ANYRES32, @ANYBLOB="000000000000000085200000040000001852000009000000000000000000000000dc7a00000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00', 0x7, 0x5d, &(0x7f0000000600)=""/93, 0x41000, 0x29, '\x00', 0x0, 0x1a, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000740)={0x2, 0x7, 0xff6, 0x8}, 0x10, 0x12146, 0xffffffffffffffff, 0x0, &(0x7f0000000840)=[r2, r2, r2], 0x0, 0x10, 0x6}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff)

8.157627157s ago: executing program 2 (id=1297):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000000000000008100000081"], 0x48)
openat$tun(0xffffffffffffff9c, 0x0, 0x80, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x11, 0x2, 0x300)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x10, 0x1}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0xb56, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

8.144711707s ago: executing program 3 (id=1298):
r0 = socket$kcm(0xa, 0x1, 0x0)
sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x80, 0x0}, 0x20000000)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x808fd}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00', 0x400})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89fc, &(0x7f0000000080))
sendmsg$kcm(r0, &(0x7f0000002ec0)={&(0x7f0000001b00)=@l2tp6={0xa, 0x0, 0x0, @remote, 0x1002}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x86a9}, 0x20000000)

7.809992604s ago: executing program 1 (id=1301):
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x1}, 0x201, 0x0, 0xc2ba, 0x0, 0x4000000, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, 0x0, 0x4040001)
recvmsg$unix(r4, &(0x7f00000038c0)={&(0x7f0000000640)=@abs, 0x6e, &(0x7f0000000140)}, 0x101)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600), 0x8094)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31}, 0x94)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x7}, 0x0, 0x800000002, 0x0, 0x0, 0x0, 0x80, 0x80, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r6 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1c0000001e007f109e", 0x2a}, {&(0x7f0000000140)="78cafb73fc02010700000000ef02258f2e440ab8f9e6aaeb1ae2f6e8bcb5ee52dc06b6c9ad11cb5dbc249798093c5102a1bca0b6050000004f6e6b788b3219c233e60ddc36024a99a63e7238fe9f9b06f96137c8af12b6", 0x98}], 0x2}, 0x4000000)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r7, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="020000000500"})
socketpair(0x1, 0x1, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x81, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f3, &(0x7f0000000080))
r8 = socket$kcm(0x10, 0x2, 0x10)
ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f0000000140)={r8, r1})

7.425704142s ago: executing program 0 (id=1303):
socket$kcm(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x5, 0x0)
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8919, 0x0)
socket$kcm(0xa, 0x5, 0x0)
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8916, &(0x7f0000000580)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12t\x02\x006\xe3\xd7\\b\x00\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x01\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(\x04\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x02\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x04.\x9aL\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5<J\x1f\xba\xfc\x90(\x985\x93\xa8\xd4\xf0\xbdTy\x18\xc8\xa0\xbb\x99\x8c\xe0Q\xffCl\xbdX\xf73\xa1\xa2\'\x00\x00\x00\xfb\xce\x959x\xfeW\r\xf0{\xcaT\xecp)=\x9d\xdfG8\xa1\xe3=\xa6\x00\x98\xc1\xb3\x91-\xab\'W\x8al?d<JN\xcb\xd4H\xb0_jO\xf3\x90\xe8/l\xdfg)\x8d#\xfdo\xa9L\xdeA*\xec\xa1\x14,\xe8\x8d^\xb9r=\xc0\x18\xd4\x11dU[Ry\xed\xd6\x97\x8a\xe8\xca\x99\x10\x8e\xc8P\xa3\xae/\xdaof\x06\x7f\xf7\x80$f\b\x92\xae\xeb\xdd\"\x89\xb8\xf0\xc3\b\x00\x00\x00\x00\a\xf6\xfc\x1d\xd4\x893\xeb)\xc1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00O!\xd2q\xda}\xe2\xa2\xfe\xfd)\\\xdf\x9aN\\\xaeyc\xe4g\xc0\x8a\n\v{\xa9H\\\xd1\x9d')

7.425298802s ago: executing program 2 (id=1304):
socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3504000010000511d25a80648c63940d0324fc60040035400c", 0x19}], 0x1}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="97d9deabea352018000000000000006761110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c06", 0x17}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000)
socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1000000004000000080000000800000000000000", @ANYRESOCT, @ANYBLOB='_'], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

7.385355143s ago: executing program 1 (id=1305):
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2bb, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0xa, 0x2, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x7fff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x6}, 0x50)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB], 0x0, 0x28}, 0x28)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=r3], 0x50)
r5 = socket$kcm(0x11, 0x200000000000002, 0x300)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000007c0)={r4, 0x58, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0}}, 0x10)
sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000800)=@xdp={0x2c, 0x4, r6, 0x14}, 0xffffff7e, &(0x7f0000000580)=[{&(0x7f00000006c0)="3494ddcb79cccc", 0x7}], 0x1}, 0x4c081)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000940)={0x6, <r7=>0x0}, 0x8)
r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000980), 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1b, 0x28, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xe}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xd}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @func, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @printk={@i}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000007c0)='GPL\x00', 0x6, 0xf8, &(0x7f0000000800)=""/248, 0x41000, 0x8, '\x00', r6, @fallback=0x23, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r7, 0xffffffffffffffff, 0x3, &(0x7f00000009c0)=[r8, 0x1], &(0x7f0000000a00)=[{0x3, 0x2, 0x10, 0x1}, {0x5, 0x3, 0xc, 0x3}, {0x2, 0x4, 0x2, 0x1}], 0x10, 0x9}, 0x94)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x541b, &(0x7f0000000000))
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x60, 0x4, 0x5}, {0x6, 0x3}]})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18020000fcffffff0000000003000008850000002800000085000000a000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r9 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a1d08020a000000040000a118000200ffe0000000000e1208000f0100810401a80016ea1f0006400303000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r10 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x4180, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r11 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180200000ec5000058f400000000000000007110400000000000950000000000"], &(0x7f0000000080)='syzkaller\x00'}, 0x94)
perf_event_open$cgroup(&(0x7f0000000280)={0x1, 0x80, 0x5, 0x0, 0x9, 0x2, 0x0, 0x8, 0x8c000, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2a, 0x2, @perf_bp={&(0x7f00000001c0), 0xf}, 0x102101, 0x8, 0x424, 0x2, 0xe, 0x8, 0x2, 0x0, 0xe, 0x0, 0xa85}, r10, 0x8, r11, 0xe)
bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0x0, 0x40, 0x8}, 0xc)

7.205403936s ago: executing program 0 (id=1306):
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x7)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b80))
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r2 = socket$kcm(0x2a, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x4041}, 0x80, 0x0}, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251ef60a84c9f4d4930f0000004509c5bb0000000000001da2b2ae3ae74cc4e8c3c811", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x48040)
recvmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000001340)=""/4067, 0xfe3}, {&(0x7f00000004c0)=""/131, 0x83}], 0x2}, 0x10020)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000740)=0xffffffffffffffff, 0x4)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="d8000000140081044e81f782db44b9040a1d080201000000040000a118000200ff030000000000000000000000000001a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f722f054f55153c6f94007134cf6ee08000a09108e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000580bb9ad809d5e1cace81b341139fe3cd4032e8edb12d1d", 0xd9}], 0x1, 0x0, 0x0, 0x7400}, 0x4040c04)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x36}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0xd, 0x1c, &(0x7f0000000500)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x100b0}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xa0}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f0000000a40)=0x5b06)
recvmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x100)

7.175221868s ago: executing program 4 (id=1307):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x2}, 0x0, 0x0, 0xfffffffd, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x5}, 0x10}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000680)={0x6, 0x80, 0x7, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x0, 0x3}, 0xd099, 0xac5d, 0x3, 0x0, 0xbcf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xd, 0xf, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7)
recvmsg(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000002200)=""/4096, 0x7ffff000}, {&(0x7f0000003200)=""/4073, 0xfe9}], 0x2}, 0x0)
recvmsg(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x23}, 0x94)
recvmsg$kcm(r2, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x300}, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8983, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)

7.100066579s ago: executing program 3 (id=1308):
close(0xffffffffffffffff)
r0 = socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000040), 0x0, 0x4000}, 0x20)
r4 = socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], ""/16, <r5=>0x0, 0x0, 0x0, 0x0, 0x7, 0x8, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x76, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0xdc, 0x8, 0x0, 0x0}}, 0x10)
close(0xffffffffffffffff)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
recvmsg$unix(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYRES8=r6], 0x9a)
sendmsg$inet(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="bb1b3d4dd5", 0x5}, {&(0x7f0000000200)}], 0x2, &(0x7f0000000a40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @local, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_retopts={{0x10}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}], 0x80}, 0x850)
r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000007044f16c01b1fbfd000000000000008af65f0df9928941994cc8c173fac5688671085a86d143c59fed0e57feb97f422c51d8e63b4ed9e295df3ccd1a55752dfc2f32f14b6c8f0e7413c3e9caaad30dcb412d0f54623f388bb2c63d2b1f7d83cd0cc021867bb4aee9967a6ee83e1b18fd8beca7d7eddcd96634"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7, '\x00', r5, r8, 0x0, 0x4, 0x3}, 0x50)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001e40)=[{0x0}, {&(0x7f0000001c40)="16a96e378ce83b099d181d5a475f987ac7d4c709d72e15337f95990a6e60a814a1165f11ded69b0d5ec0e5f8b8623fe022dfb012a17e612baf4d41016d40067d0020a8df8d2cf303570f807ebcbe337791272d3365a16fb323b1be36bfefbbaea683be04d4dfa6b03e66f68ec62ab1595927c7337f400fafed4931face8a9a3088cc1bccea681ca96bda8f58190d560102a63b06ac", 0x95}, {&(0x7f0000001d00)="ed4db3ed244804701578c63809ca404dd04966febecc1f6aea77d9b7256eaae8cd5bdee37e40a48e581de93b75a3df82c5522ff234ce9e47ca2c487097505d01bcf21cc5a76bf4cc3f0e40d3c98b25c56972530bd0aa69bfab26eb1671b9e86eb2aa35", 0x63}], 0x3}, 0x4000000)
sendmsg$inet(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000280)}], 0x1, &(0x7f0000000380)}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca200000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xad}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)

3.982270325s ago: executing program 2 (id=1309):
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="13000000190091c8b14a0778a812"], 0xfe33)
socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x2}, 0x2408, 0x0, 0xfffffffc, 0x9, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r1, 0x80047441, &(0x7f0000000180))

3.981319925s ago: executing program 3 (id=1310):
close(0xffffffffffffffff)
r0 = socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
socketpair(0x6, 0x800, 0x8, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000040), 0x0, 0x4000}, 0x20)
r3 = socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x7, 0x8, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x76, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0xdc, 0x8, 0x0, 0x0}}, 0x10)
close(0xffffffffffffffff)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
recvmsg$unix(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r6=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYRES8=r5], 0x9a)
sendmsg$inet(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="bb1b3d4dd5", 0x5}, {&(0x7f0000000200)}], 0x2, &(0x7f0000000a40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @local, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_retopts={{0x10}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}], 0x80}, 0x850)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000007044f16c01b1fbfd000000000000008af65f0df9928941994cc8c173fac5688671085a86d143c59fed0e57feb97f422c51d8e63b4ed9e295df3ccd1a55752dfc2f32f14b6c8f0e7413c3e9caaad30dcb412d0f54623f388bb2c63d2b1f7d83cd0cc021867bb4aee9967a6ee83e1b18fd8beca7d7eddcd96634"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7, '\x00', r4, r7, 0x0, 0x4, 0x3}, 0x50)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001e40)=[{0x0}, {&(0x7f0000001c40)="16a96e378ce83b099d181d5a475f987ac7d4c709d72e15337f95990a6e60a814a1165f11ded69b0d5ec0e5f8b8623fe022dfb012a17e612baf4d41016d40067d0020a8df8d2cf303570f807ebcbe337791272d3365a16fb323b1be36bfefbbaea683be04d4dfa6b03e66f68ec62ab1595927c7337f400fafed4931face8a9a3088cc1bccea681ca96bda8f58190d560102a63b06ac", 0x95}, {&(0x7f0000001d00)="ed4db3ed244804701578c63809ca404dd04966febecc1f6aea77d9b7256eaae8cd5bdee37e40a48e581de93b75a3df82c5522ff234ce9e47ca2c487097505d01bcf21cc5a76bf4cc3f0e40d3c98b25c56972530bd0aa69bfab26eb1671b9e86eb2aa35", 0x63}], 0x3}, 0x4000000)
sendmsg$inet(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000280)}], 0x1, &(0x7f0000000380)}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca200000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xad}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)

3.877789607s ago: executing program 1 (id=1311):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008001000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x5, 0x7, 0x0, &(0x7f0000000040)="6121eed4cd50bb", 0x0, 0x29d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50)

3.868709078s ago: executing program 4 (id=1312):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="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"/1810], &(0x7f0000000140)='GPL\x00'}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000240)=r2, 0x4)
sendmsg$unix(r1, &(0x7f00000003c0)={&(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000280)="ff8ad06885380d70460b2e3ad297ee29d0b010acc7cda3bc387789db03076ab0eeb67034bb17", 0x26}], 0x1, 0x0, 0x0, 0x4000080}, 0x880)

3.77799319s ago: executing program 0 (id=1313):
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x100010, 0x0, 0x8, 0x0, 0x4000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x5, &(0x7f00000007c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000780)=r1, 0x4)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340)=ANY=[@ANYBLOB], 0xfdef)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0xf2, 0x0, 0x0, 0x21000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x6}, 0x0, 0xc8, 0x0, 0x0, 0x8, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x4b}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x18000000000002a0, 0xf, 0xfffffffffffffe0d, &(0x7f0000000140)="7c003307000000000008000088471a", 0x0, 0xffedfff0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0)
r3 = socket$kcm(0x11, 0x5, 0x300)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[], 0x48)
r4 = socket$kcm(0x11, 0x200000000000002, 0x300)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000009, 0x0, @perf_bp={0x0, 0x8}, 0x10c002, 0xac5d, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x9)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x37}}, &(0x7f0000000480)='GPL\x00'}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$sock(r4, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000180)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}, @mark={{0x14}}], 0x30}, 0x801)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r5, 0x0, 0x20008090)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
socket$kcm(0x29, 0x0, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
recvmsg(r6, 0x0, 0x1f00)
sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)}], 0x1}, 0x0)

3.629814943s ago: executing program 1 (id=1314):
r0 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000200081044e81f782db44b90402000000e8fe55a1180015000600142603600e1209000b000000000000002f50c85a929e01a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8cbf7a7ff4841ef62b49816277ce06b", 0x6c}], 0x1}, 0x4000)
socket$kcm(0x21, 0x2, 0x2) (async)
r1 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$inet(r1, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7fffffff}}, @ip_retopts={{0x14, 0x110, 0xd, {[@rr={0x7, 0x3, 0xba}]}}}], 0x30}, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, 0x0)

3.597883073s ago: executing program 4 (id=1315):
socket$kcm(0x29, 0x5, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180))
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000500000000000000", @ANYRES32, @ANYBLOB='\t\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000030000000200"/21], 0x50)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x80800, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x4, 0x3}, 0x10009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x1}, 0x201, 0x0, 0xc2ba, 0x0, 0x4000000, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="d8000000160081044e81f782db44b9040a1d080206000000040000a118000200fe05000000000e1208000f0100810401a80016ea1f00010000005f54c92011148ed08734843cb12b00000803", 0x4c}, {&(0x7f0000000500)="383d180ced167f4e20efe387e9f655200e9ef57059e65fda2a46ea72b507f849a24f8bd9dd8ae89a3816c910a61c28d2fa089f96b9807a8f55a832c4f11e448538ffcee0c6b822436a53c33c12f3a69d81efd66f3affa37aaa31c99041171824f069f392273bd5ce1ab2b2b6f2dcd0b5b5935c360149c52fd45fec45f0cf2728205888adff194e4191575a40", 0x8c}], 0x2, 0x0, 0x0, 0x7400}, 0x40)
r1 = socket$kcm(0xa, 0x6, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x7)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000580)=0x4)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)

3.571121024s ago: executing program 3 (id=1316):
socket$kcm(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x2a, 0x2, 0x0)
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8919, 0x0)
socket$kcm(0xa, 0x5, 0x0)
r1 = socket$kcm(0x11, 0x200000000000002, 0x300)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8916, &(0x7f0000000580)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12t\x02\x006\xe3\xd7\\b\x00\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x01\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(\x04\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x02\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x04.\x9aL\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5<J\x1f\xba\xfc\x90(\x985\x93\xa8\xd4\xf0\xbdTy\x18\xc8\xa0\xbb\x99\x8c\xe0Q\xffCl\xbdX\xf73\xa1\xa2\'\x00\x00\x00\xfb\xce\x959x\xfeW\r\xf0{\xcaT\xecp)=\x9d\xdfG8\xa1\xe3=\xa6\x00\x98\xc1\xb3\x91-\xab\'W\x8al?d<JN\xcb\xd4H\xb0_jO\xf3\x90\xe8/l\xdfg)\x8d#\xfdo\xa9L\xdeA*\xec\xa1\x14,\xe8\x8d^\xb9r=\xc0\x18\xd4\x11dU[Ry\xed\xd6\x97\x8a\xe8\xca\x99\x10\x8e\xc8P\xa3\xae/\xdaof\x06\x7f\xf7\x80$f\b\x92\xae\xeb\xdd\"\x89\xb8\xf0\xc3\b\x00\x00\x00\x00\a\xf6\xfc\x1d\xd4\x893\xeb)\xc1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00O!\xd2q\xda}\xe2\xa2\xfe\xfd)\\\xdf\x9aN\\\xaeyc\xe4g\xc0\x8a\n\v{\xa9H\\\xd1\x9d')

3.454192087s ago: executing program 2 (id=1317):
socket$kcm(0x29, 0x5, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180))
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000500000000000000", @ANYRES32, @ANYBLOB='\t\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000030000000200"/21], 0x50)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x80800, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x4, 0x3}, 0x10009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x1}, 0x201, 0x0, 0xc2ba, 0x0, 0x4000000, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="d8000000160081044e81f782db44b9040a1d080206000000040000a118000200fe05000000000e1208000f0100810401a80016ea1f00010000005f54c92011148ed08734843cb12b00000803", 0x4c}, {&(0x7f0000000500)="383d180ced167f4e20efe387e9f655200e9ef57059e65fda2a46ea72b507f849a24f8bd9dd8ae89a3816c910a61c28d2fa089f96b9807a8f55a832c4f11e448538ffcee0c6b822436a53c33c12f3a69d81efd66f3affa37aaa31c99041171824f069f392273bd5ce1ab2b2b6f2dcd0b5b5935c360149c52fd45fec45f0cf2728205888adff194e4191575a40", 0x8c}], 0x2, 0x0, 0x0, 0x7400}, 0x40) (fail_nth: 1)
r1 = socket$kcm(0xa, 0x6, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x7)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000580)=0x4)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)

3.385656138s ago: executing program 1 (id=1318):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x301002, 0x0)
close(r1)
close(0xffffffffffffffff)
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xf6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000980)={r2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x2b, 0x1, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000740)="d800000019008111e0020f060d8107040a60000000020000001455a12a00090008000699e3ffffff14000500fe80817806000567b8b7b94002000009080016060000000000000000d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237e09000000b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b7b4338c9f1ac76efb42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1}, 0x80)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6)
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000240)={0x3, &(0x7f0000000100)=[{0x5, 0x1, 0x7, 0xffeff038}, {0x6, 0x0, 0x0, 0x80000000}, {0x5ed, 0x5, 0x8, 0x5}]})
ioctl$TUNGETVNETLE(r1, 0x40107446, 0x0)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$TUNSETOFFLOAD(r5, 0x4004743d, 0x110e22fff6)
write$cgroup_type(r5, &(0x7f0000000280), 0x9)
socket$kcm(0x2, 0x2, 0x0)
sendmsg$sock(r0, &(0x7f00000001c0)={&(0x7f00000002c0)=@l2={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3ff, 0x2}, 0x80, 0x0}, 0x4000000)
r6 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r6, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0202000902000000e4a17c45040060cb", 0x10}], 0x1}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000000c0))

3.2673583s ago: executing program 4 (id=1319):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740))
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x1000000000000002, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000180)=r0, 0x4)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(r1, &(0x7f0000000140)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="2c600000000000000000000007000000441c0503e020000100000000ac1414", @ANYRES64], 0x30}, 0x40880)

2.930816638s ago: executing program 4 (id=1320):
socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3504000010000511d25a80648c63940d0324fc60040035400c", 0x19}], 0x1}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="97d9deabea352018000000000000006761110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c06", 0x17}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000)
socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1000000004000000080000000800000000000000", @ANYRESOCT, @ANYBLOB='_'], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

2.753615341s ago: executing program 2 (id=1321):
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2bb, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0xa, 0x2, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x7fff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x6}, 0x50)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB], 0x0, 0x28}, 0x28)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=r3], 0x50)
r5 = socket$kcm(0x11, 0x200000000000002, 0x300)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000007c0)={r4, 0x58, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0}}, 0x10)
sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000800)=@xdp={0x2c, 0x4, r6, 0x14}, 0xffffff7e, &(0x7f0000000580)=[{&(0x7f00000006c0)="3494ddcb79cccc", 0x7}], 0x1}, 0x4c081)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000940)={0x6, <r7=>0x0}, 0x8)
bpf$ITER_CREATE(0x21, &(0x7f0000000980), 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1b, 0x28, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xe}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xd}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @func, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @printk={@i}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000007c0)='GPL\x00', 0x6, 0xf8, &(0x7f0000000800)=""/248, 0x41000, 0x8, '\x00', r6, @fallback=0x23, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000900)={0x0, 0x6, 0x4}, 0x10, r7, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000a00)=[{0x3, 0x2, 0x10, 0x1}, {0x5, 0x3, 0xc, 0x3}, {0x2, 0x4, 0x2, 0x1}], 0x10, 0x9}, 0x94)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x541b, &(0x7f0000000000))
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x60, 0x4, 0x5}, {0x6, 0x3}]})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18020000fcffffff0000000003000008850000002800000085000000a000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a1d08020a000000040000a118000200ffe0000000000e1208000f0100810401a80016ea1f0006400303000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r9 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x4180, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r10 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180200000ec5000058f400000000000000007110400000000000950000000000"], &(0x7f0000000080)='syzkaller\x00'}, 0x94)
perf_event_open$cgroup(&(0x7f0000000280)={0x1, 0x80, 0x5, 0x0, 0x9, 0x2, 0x0, 0x8, 0x8c000, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2a, 0x2, @perf_bp={&(0x7f00000001c0), 0xf}, 0x102101, 0x8, 0x424, 0x2, 0xe, 0x8, 0x2, 0x0, 0xe, 0x0, 0xa85}, r9, 0x8, r10, 0xe)
bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0x0, 0x40, 0x8}, 0xc)

519.074899ms ago: executing program 4 (id=1322):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x2}, 0x0, 0x0, 0xfffffffd, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x5}, 0x10}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5b}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000680)={0x6, 0x80, 0x7, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x0, 0x3}, 0xd099, 0xac5d, 0x3, 0x0, 0xbcf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xd, 0xf, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xe6123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x7, @perf_bp={&(0x7f0000000040), 0x2}, 0x400, 0x0, 0x0, 0x3, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x4, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r6)
r7 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8)
syz_clone(0x32a0000, 0x0, 0x0, 0x0, 0x0, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7)
recvmsg(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000002200)=""/4096, 0x7ffff000}, {&(0x7f0000003200)=""/4073, 0xfe9}], 0x2}, 0x0)
recvmsg(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)

504.256829ms ago: executing program 0 (id=1323):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x2}, 0x0, 0x0, 0xfffffffd, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x5}, 0x10}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000680)={0x6, 0x80, 0x7, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x0, 0x3}, 0xd099, 0xac5d, 0x3, 0x0, 0xbcf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xd, 0xf, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7)
recvmsg(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000002200)=""/4096, 0x7ffff000}, {&(0x7f0000003200)=""/4073, 0xfe9}], 0x2}, 0x0)
recvmsg(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x23}, 0x94)
recvmsg$kcm(r2, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x300}, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8983, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)

503.459599ms ago: executing program 3 (id=1324):
socket$kcm(0xa, 0x5, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="1b00000000000000000000000300000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1e00000008000000080000000200000044ba0400", @ANYRES32, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000053b1e643279f3a5e355020000050000000e0000000000000014da6989f221db080c09f2db5f89fc391941ba7583bb66569de13a399fb8d1a5645efdc29e7743db2f49bfb944ffe98d4a71ac2197f3892cfdbd67705072743dea848fced979ebd3e307aa3afc27b8cf620f5603651b861e4b16cb4bddde5bbbddb57231450b77fdd24940ec8d57644ba144434566b4", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000008c0)={0x1, 0x58, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0}}, 0x4)
r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001840)=@o_path={&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, r0}, 0x18)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001940)={0x18, 0x17, &(0x7f0000001c00)=ANY=[@ANYBLOB="180000000300000000000000bbf2000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702e7be7ba880000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000950000000000000018240000ea833db71b46998782236800521dd7bca9e57192e057fd0d0a769c4a45465ea47b16054d2eb232a7bbb96b90ff336b16c4f0cf8941240f0dee432b7c1d23e57fb7bc128d40f3e1ace271", @ANYRES32=r3, @ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000af5b02009a292d3418550000070000000000000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000800)='syzkaller\x00', 0x14, 0x0, 0x0, 0x41000, 0x40, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x4, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000001880)=[r5], &(0x7f00000018c0)=[{0x4, 0x2, 0x10, 0xa}, {0x3, 0x5, 0x10, 0x5}, {0x3, 0x1, 0x2, 0x3}, {0x2, 0x1, 0x6, 0x2}, {0x5, 0x1, 0x3, 0x9}, {0x1, 0x3, 0x10, 0xa}], 0x10, 0x8}, 0x94)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x8d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0x6f5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
r7 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8916, &(0x7f0000000040)={'nicvf0\x00', @local})
close(0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001ac0)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@func={0x7, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x0]}}, 0x0, 0x27, 0x0, 0x0, 0x10}, 0x28)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0)
close(r8)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{0xffffffffffffffff, <r9=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r8}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r9}, &(0x7f00000004c0), &(0x7f0000000400)=r8}, 0x20)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRESOCT=r6, @ANYBLOB="09000000000000000000000000000e0000000004", @ANYRES32, @ANYRES32=r8, @ANYBLOB="0100"/28, @ANYRES32=r0], 0x50)
socket$kcm(0x2, 0x200000000000006, 0x0)
ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x8955, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000001b00)={0x4, 0x80, 0xfb, 0x9, 0x5, 0x50, 0x0, 0x5, 0x50082, 0xa, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0xffff3c99, 0x0, @perf_config_ext={0xffffffff7fffffff, 0x4}, 0x10400a, 0x1, 0xffffffff, 0x0, 0x8, 0x8001, 0x1, 0x0, 0xd528, 0x0, 0x7f})
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
syz_clone(0x80801000, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="2ce9375e662e46329c8e8e3c668bdf66695bdc83aa44c2b7629795f502ef88c371a94b75b456ecf158c648ba54cdd56a2f5cc503c6a98742f57b31633f850c8b9e0411f9ce9fa3d3594854ed9610b8b3a554ae631509c99d20d794eee008cb373349f0bd")
r10 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0)
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0x200000007ff}, 0x10022, 0xac5f, 0x0, 0x0, 0x0, 0x67ac}, 0x0, 0x8, r10, 0x0)

287.114954ms ago: executing program 1 (id=1325):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008001000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x5, 0x7, 0x0, &(0x7f0000000040)="6121eed4cd50bb", 0x0, 0x29d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50)

227.407475ms ago: executing program 2 (id=1326):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="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"/1810], &(0x7f0000000140)='GPL\x00'}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000240)=r2, 0x4)
sendmsg$unix(r1, &(0x7f00000003c0)={&(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000280)="ff8ad06885380d70460b2e3ad297ee29d0b010acc7cda3bc387789db03076ab0eeb67034bb17", 0x26}], 0x1, 0x0, 0x0, 0x4000080}, 0x880)

0s ago: executing program 0 (id=1327):
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="13000000190091c8b14a0778a812"], 0xfe33)
socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x2}, 0x2408, 0x0, 0xfffffffc, 0x9, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r1, 0x80047441, &(0x7f0000000180))

kernel console output (not intermixed with test programs):

: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   82.112518][ T1116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   82.123317][ T1116] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   82.132925][ T1116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   82.142532][ T1116] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   82.151821][ T1116] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.158952][ T1116] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.167578][ T1116] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   82.178491][ T1116] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   82.193893][ T1116] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   82.203881][ T1116] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   82.214697][ T1116] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.221961][ T1116] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.242818][ T1116] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   82.252173][ T1116] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   82.266867][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   82.275910][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   82.297356][ T4272] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   82.312700][ T4272] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   82.335893][ T4282] 8021q: adding VLAN 0 to HW filter on device team0
[   82.345232][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   82.356993][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   82.366734][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   82.376949][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   82.386641][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   82.397961][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   82.425608][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   82.438968][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   82.459135][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   82.477438][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   82.501825][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   82.520396][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   82.529898][   T56] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.537065][   T56] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.555737][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   82.587600][ T4283] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.606459][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   82.620559][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   82.677257][ T4283] 8021q: adding VLAN 0 to HW filter on device team0
[   82.706431][ T4271] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   82.717241][ T4271] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   82.721013][ T4287] Bluetooth: hci4: command 0x041b tx timeout
[   82.729637][ T4277] Bluetooth: hci0: command 0x041b tx timeout
[   82.748664][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   82.767155][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   82.777203][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   82.786525][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   82.796002][   T56] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.803231][   T56] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.810890][ T4277] Bluetooth: hci1: command 0x041b tx timeout
[   82.813378][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   82.816968][ T4277] Bluetooth: hci2: command 0x041b tx timeout
[   82.828797][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   82.839490][ T4278] Bluetooth: hci3: command 0x041b tx timeout
[   82.846961][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   82.863475][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   82.874712][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   82.892398][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   82.949715][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   82.957777][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   82.983773][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   82.998276][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   83.008723][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   83.023307][   T56] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.030621][   T56] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.046677][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   83.056321][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   83.067337][   T56] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.074552][   T56] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.083450][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   83.092943][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   83.102925][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   83.112310][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   83.121686][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   83.179030][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   83.188551][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   83.197530][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   83.213419][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   83.227453][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   83.236407][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   83.252608][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   83.271163][ T1116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   83.281147][ T1116] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   83.298248][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0
[   83.317884][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   83.331338][ T1116] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   83.340470][ T1116] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   83.349850][ T1116] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   83.378361][ T4279] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.431966][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   83.449157][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   83.465338][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   83.475108][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   83.503897][ T4272] device veth0_vlan entered promiscuous mode
[   83.521039][ T4283] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   83.541598][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   83.555586][ T4279] 8021q: adding VLAN 0 to HW filter on device team0
[   83.564774][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   83.576306][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   83.585147][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   83.594051][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   83.603946][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   83.612328][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   83.621737][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   83.630916][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   83.647645][ T4272] device veth1_vlan entered promiscuous mode
[   83.714216][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   83.730401][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   83.745711][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   83.756702][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   83.773851][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.781080][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.795185][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   83.804776][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   83.819537][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.826710][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.835608][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   83.891849][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   83.914834][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   83.940426][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   83.960839][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   83.980584][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   83.997114][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   84.013468][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   84.076239][ T4271] 8021q: adding VLAN 0 to HW filter on device batadv0
[   84.096390][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   84.107042][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   84.116186][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   84.124381][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   84.137937][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   84.147626][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   84.156613][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   84.166350][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   84.195472][ T4272] device veth0_macvtap entered promiscuous mode
[   84.213611][ T4272] device veth1_macvtap entered promiscuous mode
[   84.228507][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   84.237953][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   84.321927][ T4282] 8021q: adding VLAN 0 to HW filter on device batadv0
[   84.342012][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   84.360574][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   84.370078][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   84.377621][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   84.423692][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0
[   84.462779][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   84.472168][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   84.488122][ T4271] device veth0_vlan entered promiscuous mode
[   84.510208][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1
[   84.527292][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   84.537167][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   84.554123][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   84.572599][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   84.582419][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   84.595059][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   84.606548][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   84.619167][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   84.634976][ T4271] device veth1_vlan entered promiscuous mode
[   84.653677][ T4272] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   84.668739][ T4272] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   84.677920][ T4272] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   84.687039][ T4272] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.717804][ T4283] 8021q: adding VLAN 0 to HW filter on device batadv0
[   84.759576][ T1116] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   84.768023][ T1116] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   84.800792][ T4277] Bluetooth: hci0: command 0x040f tx timeout
[   84.806881][ T4277] Bluetooth: hci4: command 0x040f tx timeout
[   84.828674][ T1116] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   84.838930][ T1116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   84.879748][ T4277] Bluetooth: hci1: command 0x040f tx timeout
[   84.885845][ T4277] Bluetooth: hci2: command 0x040f tx timeout
[   84.892130][ T4278] Bluetooth: hci3: command 0x040f tx timeout
[   84.900747][ T1116] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   84.929780][ T1116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   84.953065][ T4271] device veth0_macvtap entered promiscuous mode
[   85.013942][ T4271] device veth1_macvtap entered promiscuous mode
[   85.056786][ T1116] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   85.069790][ T1116] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   85.078136][ T1116] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   85.088036][ T1116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   85.097484][ T1116] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   85.105815][ T1116] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   85.114864][ T4282] device veth0_vlan entered promiscuous mode
[   85.196211][ T4282] device veth1_vlan entered promiscuous mode
[   85.224009][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.242881][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.262639][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.273906][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.286902][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_0
[   85.294672][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   85.303863][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   85.314431][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   85.323733][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   85.336247][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   85.344004][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   85.358342][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.375523][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.387937][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_1
[   85.413966][ T4279] 8021q: adding VLAN 0 to HW filter on device batadv0
[   85.428858][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   85.440750][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   85.455625][ T4271] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.469914][ T4271] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.478693][ T4271] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.488782][ T4271] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.535460][ T1116] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   85.546293][ T1116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   85.581851][ T1116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.592798][ T4282] device veth0_macvtap entered promiscuous mode
[   85.607622][ T1116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.617370][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   85.630976][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   85.652501][ T4282] device veth1_macvtap entered promiscuous mode
[   85.692990][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   85.725657][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   85.735589][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   85.768365][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.785777][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.795919][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.806630][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.820142][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_0
[   85.843988][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   85.870459][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   85.892934][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.904421][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.914526][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.926105][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.938814][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_1
[   85.957060][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   85.978070][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   86.030230][ T4282] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   86.039005][ T4282] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   86.063424][ T4282] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   86.085084][ T4282] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.103310][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.120854][ T4279] device veth0_vlan entered promiscuous mode
[   86.138363][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.150509][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   86.164904][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   86.173620][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   86.187806][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   86.196475][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   86.265197][ T4279] device veth1_vlan entered promiscuous mode
[   86.299504][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.326147][ T1116] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   86.330092][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.354490][ T1116] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   86.368047][ T1116] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   86.385671][ T1116] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   86.418565][ T1116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   86.429374][    C1] hrtimer: interrupt took 46968 ns
[   86.486774][ T4283] device veth0_vlan entered promiscuous mode
[   86.522324][ T1116] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   86.532575][ T1116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   86.576470][ T1116] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   86.589854][ T1116] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   86.633486][ T4283] device veth1_vlan entered promiscuous mode
[   86.650687][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.658580][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.684453][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   86.708116][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   86.723010][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   86.765723][ T4279] device veth0_macvtap entered promiscuous mode
[   86.795964][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   86.826025][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   86.846403][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   86.867962][ T4279] device veth1_macvtap entered promiscuous mode
[   86.879676][ T4277] Bluetooth: hci4: command 0x0419 tx timeout
[   86.882531][ T4287] Bluetooth: hci0: command 0x0419 tx timeout
[   86.951350][ T1116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.959248][ T1116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.961999][ T4277] Bluetooth: hci2: command 0x0419 tx timeout
[   86.968652][ T4287] Bluetooth: hci3: command 0x0419 tx timeout
[   86.972767][ T4278] Bluetooth: hci1: command 0x0419 tx timeout
[   87.036702][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   87.085057][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   87.116001][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   87.156560][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   87.192781][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   87.214174][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.248380][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   87.289449][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.335516][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   87.366767][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.411107][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_0
[   87.448512][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.505367][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.528379][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.555372][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.587406][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.619490][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.648238][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_1
[   87.808773][ T4283] device veth0_macvtap entered promiscuous mode
[   87.832651][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   87.851916][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   87.861344][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   87.875036][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   87.911786][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   87.985545][ T4283] device veth1_macvtap entered promiscuous mode
[   88.012488][ T4279] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.029462][ T4279] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.038238][ T4279] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.089512][ T4279] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.139105][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   88.206630][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.309763][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   88.333803][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.344107][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   88.355460][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.366474][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   88.382429][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.398468][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_0
[   88.567914][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   88.579004][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   88.715788][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   88.765465][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.826185][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   88.848472][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.859100][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   88.873584][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.885578][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   88.896430][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.908642][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.298120][ T4380] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9'.
[   89.318700][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   89.333399][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   89.389906][ T4283] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.398781][ T4283] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.414593][ T4283] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.424223][ T4283] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.630000][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.638043][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.670517][   T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.678408][   T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.770661][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   89.781819][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   89.826940][ T1116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.867325][ T1116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.885750][ T4385] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11'.
[   89.910826][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   89.977624][ T1116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.989419][ T1116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.015284][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   90.841007][ T4400] netlink: 'syz.4.5': attribute type 3 has an invalid length.
[   90.850558][ T4400] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.5'.
[   92.071437][   T26] cfg80211: failed to load regulatory.db
[   92.335136][ T4421] netlink: 132 bytes leftover after parsing attributes in process `syz.0.17'.
[   94.364925][ T4429] netlink: 32 bytes leftover after parsing attributes in process `syz.3.20'.
[   94.512843][ T4429] netlink: 'syz.3.20': attribute type 21 has an invalid length.
[   94.668598][ T4429] netlink: 156 bytes leftover after parsing attributes in process `syz.3.20'.
[   94.743741][ T4433] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.21'.
[   94.755071][ T4432] netlink: 144 bytes leftover after parsing attributes in process `syz.3.20'.
[   94.854627][ T4429] Zero length message leads to an empty skb
[   95.376266][ T4441] netlink: 132 bytes leftover after parsing attributes in process `syz.0.24'.
[   95.913095][ T4458] netlink: 'syz.0.29': attribute type 21 has an invalid length.
[   95.929280][ T4458] netlink: 156 bytes leftover after parsing attributes in process `syz.0.29'.
[   95.955065][ T4455] netlink: 32 bytes leftover after parsing attributes in process `syz.0.29'.
[   95.986027][ T4452] netlink: 132 bytes leftover after parsing attributes in process `syz.3.28'.
[   96.026470][ T4455] netlink: 144 bytes leftover after parsing attributes in process `syz.0.29'.
[   96.156149][ T4451] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[   96.505964][ T4465] netlink: 32 bytes leftover after parsing attributes in process `syz.3.33'.
[   96.517417][ T4465] netlink: 'syz.3.33': attribute type 21 has an invalid length.
[   98.961384][   T11] wlan1: Trigger new scan to find an IBSS to join
[   99.485852][ T4509] __nla_validate_parse: 4 callbacks suppressed
[   99.485868][ T4509] netlink: 32 bytes leftover after parsing attributes in process `syz.3.43'.
[   99.559869][ T4505] netlink: 132 bytes leftover after parsing attributes in process `syz.1.44'.
[   99.593488][ T4509] netlink: 'syz.3.43': attribute type 21 has an invalid length.
[   99.625951][ T4509] netlink: 156 bytes leftover after parsing attributes in process `syz.3.43'.
[   99.686791][ T4509] netlink: 144 bytes leftover after parsing attributes in process `syz.3.43'.
[   99.769465][ T4519] netlink: 32 bytes leftover after parsing attributes in process `syz.2.48'.
[   99.857126][ T4506] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[   99.894775][ T4519] netlink: 'syz.2.48': attribute type 21 has an invalid length.
[   99.914029][ T4519] netlink: 156 bytes leftover after parsing attributes in process `syz.2.48'.
[   99.985354][ T4519] netlink: 144 bytes leftover after parsing attributes in process `syz.2.48'.
[  100.082055][ T4524] netlink: 'syz.1.61': attribute type 29 has an invalid length.
[  100.142952][ T4524] netlink: 'syz.1.61': attribute type 29 has an invalid length.
[  100.160016][ T4527] netlink: 'syz.1.61': attribute type 29 has an invalid length.
[  100.195346][ T4528] netlink: 132 bytes leftover after parsing attributes in process `syz.1.61'.
[  100.285479][ T4524] netlink: 'syz.1.61': attribute type 29 has an invalid length.
[  101.145768][ T4541] netlink: 'syz.0.67': attribute type 3 has an invalid length.
[  101.207228][ T4541] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.67'.
[  101.697608][ T4559] netlink: 32 bytes leftover after parsing attributes in process `syz.4.62'.
[  101.745330][ T4559] netlink: 'syz.4.62': attribute type 21 has an invalid length.
[  101.922819][ T4329] wlan1: Trigger new scan to find an IBSS to join
[  102.547914][ T4577] netlink: 'syz.2.65': attribute type 29 has an invalid length.
[  103.656560][ T4577] netlink: 'syz.2.65': attribute type 29 has an invalid length.
[  103.846092][ T4582] netlink: 'syz.0.66': attribute type 21 has an invalid length.
[  103.930815][ T1116] wlan1: Trigger new scan to find an IBSS to join
[  104.496233][ T4594] __nla_validate_parse: 10 callbacks suppressed
[  104.496256][ T4594] netlink: 132 bytes leftover after parsing attributes in process `syz.1.72'.
[  104.966057][   T56] wlan1: Trigger new scan to find an IBSS to join
[  105.071760][ T4329] wlan1: Creating new IBSS network, BSSID 92:a9:e7:4c:d0:1f
[  105.331209][ T4614] netlink: 'syz.0.80': attribute type 29 has an invalid length.
[  105.367157][ T4614] netlink: 'syz.0.80': attribute type 29 has an invalid length.
[  105.380567][ T4614] netlink: 'syz.0.80': attribute type 29 has an invalid length.
[  105.411280][ T4614] netlink: 132 bytes leftover after parsing attributes in process `syz.0.80'.
[  105.467643][ T4614] netlink: 'syz.0.80': attribute type 29 has an invalid length.
[  108.655674][   T56] wlan1: Creating new IBSS network, BSSID ba:18:a6:60:61:9f
[  108.828208][ T4626] netlink: 132 bytes leftover after parsing attributes in process `syz.2.82'.
[  108.913580][ T4634] netlink: 132 bytes leftover after parsing attributes in process `syz.4.83'.
[  109.028220][ T4640] netlink: 'syz.1.85': attribute type 3 has an invalid length.
[  109.039938][ T4640] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.85'.
[  111.137328][ T4642] netlink: 144 bytes leftover after parsing attributes in process `syz.0.87'.
[  111.177457][ T4659] netlink: 'syz.3.93': attribute type 4 has an invalid length.
[  111.199646][ T4659] netlink: 176 bytes leftover after parsing attributes in process `syz.3.93'.
[  111.471136][ T4666] netlink: 'syz.3.96': attribute type 29 has an invalid length.
[  111.479195][ T4666] netlink: 'syz.3.96': attribute type 29 has an invalid length.
[  111.506895][ T4667] Driver unsupported XDP return value 0 on prog  (id 65) dev N/A, expect packet loss!
[  111.548590][ T4666] netlink: 'syz.3.96': attribute type 29 has an invalid length.
[  111.581827][ T4666] netlink: 132 bytes leftover after parsing attributes in process `syz.3.96'.
[  111.663222][ T4672] netlink: 132 bytes leftover after parsing attributes in process `syz.0.97'.
[  111.741780][ T4666] netlink: 'syz.3.96': attribute type 29 has an invalid length.
[  112.670429][ T4680] netlink: 'syz.3.101': attribute type 3 has an invalid length.
[  112.733159][ T4680] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.101'.
[  113.666073][ T4696] netlink: 144 bytes leftover after parsing attributes in process `syz.4.108'.
[  114.032116][ T4707] netlink: 'syz.0.112': attribute type 29 has an invalid length.
[  114.465683][ T4701] netlink: 132 bytes leftover after parsing attributes in process `syz.1.106'.
[  114.492650][ T4707] netlink: 'syz.0.112': attribute type 29 has an invalid length.
[  114.515083][ T4712] netlink: 132 bytes leftover after parsing attributes in process `syz.0.112'.
[  117.684256][ T4711] netlink: 'syz.0.112': attribute type 29 has an invalid length.
[  117.702223][ T4719] netlink: 132 bytes leftover after parsing attributes in process `syz.3.114'.
[  118.086602][ T4745] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.121'.
[  118.776248][ T4761] netlink: 'syz.0.125': attribute type 8 has an invalid length.
[  118.815864][ T4759] netlink: 144 bytes leftover after parsing attributes in process `syz.1.127'.
[  118.840064][ T4761] netlink: 'syz.0.125': attribute type 1 has an invalid length.
[  118.847792][ T4761] netlink: 104088 bytes leftover after parsing attributes in process `syz.0.125'.
[  119.484040][ T4773] netlink: 'syz.1.130': attribute type 29 has an invalid length.
[  119.560036][ T4773] netlink: 'syz.1.130': attribute type 29 has an invalid length.
[  119.573272][ T4776] netlink: 154020 bytes leftover after parsing attributes in process `syz.3.131'.
[  119.589727][ T4776] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16)
[  119.599424][ T4773] netlink: 'syz.1.130': attribute type 29 has an invalid length.
[  119.614879][ T4773] netlink: 132 bytes leftover after parsing attributes in process `syz.1.130'.
[  119.678161][ T4773] netlink: 'syz.1.130': attribute type 29 has an invalid length.
[  120.198593][ T4782] netlink: 132 bytes leftover after parsing attributes in process `syz.2.133'.
[  120.284971][ T4793] netlink: 60 bytes leftover after parsing attributes in process `syz.0.137'.
[  120.295144][ T4786] netlink: 'syz.3.134': attribute type 10 has an invalid length.
[  120.307680][ T4786] netlink: 2 bytes leftover after parsing attributes in process `syz.3.134'.
[  120.330079][ T4786] device hsr0 entered promiscuous mode
[  120.393641][ T4786] bridge0: port 3(hsr0) entered blocking state
[  120.413446][ T4786] bridge0: port 3(hsr0) entered disabled state
[  120.489610][ T4786] bridge0: port 3(hsr0) entered blocking state
[  120.498036][ T4786] bridge0: port 3(hsr0) entered forwarding state
[  120.530345][ T4794] netlink: 4 bytes leftover after parsing attributes in process `syz.0.137'.
[  120.897496][ T4808] FAULT_INJECTION: forcing a failure.
[  120.897496][ T4808] name failslab, interval 1, probability 0, space 0, times 1
[  120.957468][ T4808] CPU: 1 PID: 4808 Comm: syz.0.141 Not tainted syzkaller #0
[  120.964934][ T4808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  120.975049][ T4808] Call Trace:
[  120.978383][ T4808]  <TASK>
[  120.981389][ T4808]  dump_stack_lvl+0x188/0x24e
[  120.986163][ T4808]  ? inet_diag_bc_sk+0x10c0/0x10c0
[  120.991508][ T4808]  ? show_regs_print_info+0x12/0x12
[  120.996765][ T4808]  ? load_image+0x410/0x410
[  121.001331][ T4808]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  121.007027][ T4808]  should_fail_ex+0x390/0x4c0
[  121.011759][ T4808]  should_failslab+0x5/0x20
[  121.016302][ T4808]  slab_pre_alloc_hook+0x59/0x300
[  121.021389][ T4808]  kmem_cache_alloc+0x56/0x2f0
[  121.026197][ T4808]  ? skb_clone+0x1e7/0x370
[  121.030670][ T4808]  skb_clone+0x1e7/0x370
[  121.034964][ T4808]  __netlink_deliver_tap+0x3e4/0x7e0
[  121.040318][ T4808]  ? netlink_deliver_tap+0x2e/0x1b0
[  121.045573][ T4808]  netlink_deliver_tap+0x19c/0x1b0
[  121.050737][ T4808]  netlink_dump+0x80f/0xcd0
[  121.055298][ T4808]  ? netlink_lookup+0x200/0x200
[  121.060211][ T4808]  ? __inet_diag_dump_start+0x805/0x970
[  121.065808][ T4808]  __netlink_dump_start+0x52c/0x6f0
[  121.071071][ T4808]  inet_diag_rcv_msg_compat+0x207/0x420
[  121.076873][ T4808]  ? __inet_diag_dump+0x380/0x380
[  121.082041][ T4808]  ? sock_diag_rcv_msg+0x137/0x5e0
[  121.087209][ T4808]  ? inet_diag_rcv_msg_compat+0x420/0x420
[  121.092985][ T4808]  ? inet_diag_dump_start_compat+0x20/0x20
[  121.098884][ T4808]  ? inet_diag_dump+0x50/0x50
[  121.103699][ T4808]  ? trace_raw_output_contention_end+0xd0/0xd0
[  121.109995][ T4808]  ? __inet_diag_dump+0x380/0x380
[  121.115108][ T4808]  sock_diag_rcv_msg+0x3c7/0x5e0
[  121.120112][ T4808]  netlink_rcv_skb+0x1ef/0x440
[  121.125149][ T4808]  ? sock_diag_bind+0xa0/0xa0
[  121.129892][ T4808]  ? netlink_ack+0x1160/0x1160
[  121.134727][ T4808]  ? netlink_deliver_tap+0x2e/0x1b0
[  121.140075][ T4808]  sock_diag_rcv+0x26/0x40
[  121.144544][ T4808]  netlink_unicast+0x7ad/0x920
[  121.149368][ T4808]  netlink_sendmsg+0x8ad/0xbd0
[  121.154187][ T4808]  ? netlink_getsockopt+0x550/0x550
[  121.159439][ T4808]  ? apparmor_socket_sendmsg+0x8a/0x330
[  121.165034][ T4808]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  121.170487][ T4808]  ? security_socket_sendmsg+0x7c/0xa0
[  121.176028][ T4808]  ? netlink_getsockopt+0x550/0x550
[  121.181288][ T4808]  ____sys_sendmsg+0x5ed/0x9a0
[  121.186154][ T4808]  ? __sys_sendmsg_sock+0x30/0x30
[  121.191312][ T4808]  ? __import_iovec+0x306/0x510
[  121.196223][ T4808]  ? import_iovec+0x6f/0xa0
[  121.200794][ T4808]  ___sys_sendmsg+0x2a2/0x360
[  121.205532][ T4808]  ? __sys_sendmsg+0x2a0/0x2a0
[  121.210386][ T4808]  ? __lock_acquire+0x7c40/0x7c40
[  121.215530][ T4808]  __se_sys_sendmsg+0x1c3/0x2b0
[  121.220433][ T4808]  ? __x64_sys_sendmsg+0x80/0x80
[  121.225437][ T4808]  ? lockdep_hardirqs_on+0x94/0x140
[  121.230684][ T4808]  do_syscall_64+0x4c/0xa0
[  121.235147][ T4808]  ? clear_bhb_loop+0x60/0xb0
[  121.239877][ T4808]  ? clear_bhb_loop+0x60/0xb0
[  121.244606][ T4808]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  121.250664][ T4808] RIP: 0033:0x7ff0bb59de99
[  121.255148][ T4808] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  121.275006][ T4808] RSP: 002b:00007ff0bc37e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  121.279261][ T4814] netlink: 'syz.2.144': attribute type 21 has an invalid length.
[  121.283546][ T4808] RAX: ffffffffffffffda RBX: 00007ff0bb825fa0 RCX: 00007ff0bb59de99
[  121.283596][ T4808] RDX: 0000000004004010 RSI: 0000200000000240 RDI: 0000000000000003
[  121.283613][ T4808] RBP: 00007ff0bc37e090 R08: 0000000000000000 R09: 0000000000000000
[  121.283628][ T4808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  121.283641][ T4808] R13: 00007ff0bb826038 R14: 00007ff0bb825fa0 R15: 00007ffd5f78e928
[  121.283677][ T4808]  </TASK>
[  121.577636][ T4821] netlink: 'syz.2.146': attribute type 29 has an invalid length.
[  121.677115][ T4821] netlink: 'syz.2.146': attribute type 29 has an invalid length.
[  121.772475][ T4824] netlink: 'syz.2.146': attribute type 29 has an invalid length.
[  121.811782][ T4821] netlink: 'syz.2.146': attribute type 29 has an invalid length.
[  122.365884][ T4836] device hsr0 entered promiscuous mode
[  122.368393][ T4839] FAULT_INJECTION: forcing a failure.
[  122.368393][ T4839] name failslab, interval 1, probability 0, space 0, times 0
[  122.384966][ T4839] CPU: 0 PID: 4839 Comm: syz.2.153 Not tainted syzkaller #0
[  122.389568][ T4836] bridge0: port 3(hsr0) entered blocking state
[  122.392305][ T4839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  122.392320][ T4839] Call Trace:
[  122.392328][ T4839]  <TASK>
[  122.392337][ T4839]  dump_stack_lvl+0x188/0x24e
[  122.392382][ T4839]  ? show_regs_print_info+0x12/0x12
[  122.392413][ T4839]  ? load_image+0x410/0x410
[  122.392441][ T4839]  ? kasan_set_track+0x60/0x70
[  122.392469][ T4839]  ? __kasan_slab_alloc+0x6b/0x80
[  122.392497][ T4839]  ? slab_post_alloc_hook+0x4b/0x490
[  122.392519][ T4839]  ? kmem_cache_alloc+0x18b/0x2f0
[  122.392540][ T4839]  ? dst_alloc+0x101/0x160
[  122.392569][ T4839]  ? ip_route_output_key_hash_rcu+0x14e4/0x23f0
[  122.392603][ T4839]  ? ip_route_output_key_hash+0x1ef/0x330
[  122.392640][ T4839]  should_fail_ex+0x390/0x4c0
[  122.392674][ T4839]  should_failslab+0x5/0x20
[  122.392694][ T4839]  slab_pre_alloc_hook+0x59/0x300
[  122.392721][ T4839]  ? ref_tracker_alloc+0x14f/0x490
[  122.392748][ T4839]  __kmem_cache_alloc_node+0x4f/0x270
[  122.392776][ T4839]  ? ref_tracker_alloc+0x14f/0x490
[  122.392802][ T4839]  kmalloc_trace+0x26/0xe0
[  122.392836][ T4839]  ref_tracker_alloc+0x14f/0x490
[  122.392866][ T4839]  ? ref_tracker_dir_print+0x150/0x150
[  122.392896][ T4839]  ? __kasan_slab_alloc+0x6b/0x80
[  122.392925][ T4839]  ? slab_post_alloc_hook+0x67/0x490
[  122.392949][ T4839]  ? slab_pre_alloc_hook+0x59/0x300
[  122.392975][ T4839]  ? rcu_is_watching+0x11/0xa0
[  122.393010][ T4839]  dst_init+0xb1/0x400
[  122.393045][ T4839]  dst_alloc+0x12a/0x160
[  122.393082][ T4839]  ip_route_output_key_hash_rcu+0x14e4/0x23f0
[  122.393127][ T4839]  ? ip_route_output_key_hash+0x139/0x330
[  122.393162][ T4839]  ip_route_output_key_hash+0x1ef/0x330
[  122.393199][ T4839]  ? ip_route_input_rcu+0x30a0/0x30a0
[  122.393245][ T4839]  ? bpf_lsm_xfrm_decode_session+0x5/0x10
[  122.393274][ T4839]  vti6_tnl_xmit+0xcbd/0x1ab0
[  122.393314][ T4839]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  122.393348][ T4839]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  122.393390][ T4839]  ? vti6_dev_uninit+0x120/0x120
[  122.393444][ T4839]  dev_hard_start_xmit+0x292/0x8b0
[  122.393470][ T4839]  ? __rwlock_init+0x140/0x140
[  122.393502][ T4839]  __dev_queue_xmit+0x1b4b/0x3810
[  122.393534][ T4839]  ? __dev_queue_xmit+0x281/0x3810
[  122.393558][ T4839]  ? rcu_is_watching+0x11/0xa0
[  122.393593][ T4839]  ? netdev_core_pick_tx+0x360/0x360
[  122.393613][ T4839]  ? lockdep_hardirqs_on+0x94/0x140
[  122.393636][ T4839]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  122.393672][ T4839]  ? skb_release_data+0xab/0x7e0
[  122.393706][ T4839]  ? skb_release_data+0x1d3/0x7e0
[  122.393749][ T4839]  __bpf_redirect+0x8c7/0x1110
[  122.393783][ T4839]  bpf_clone_redirect+0x311/0x4a0
[  122.652949][ T4839]  bpf_prog_5e3b4e18def6d727+0x56/0x5b
[  122.658443][ T4839]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  122.664454][ T4839]  ? __lock_acquire+0x7c40/0x7c40
[  122.669511][ T4839]  ? lock_chain_count+0x20/0x20
[  122.674402][ T4839]  ? seqcount_lockdep_reader_access+0x127/0x1d0
[  122.680674][ T4839]  ? lockdep_hardirqs_on+0x94/0x140
[  122.685913][ T4839]  ? ktime_get+0x7b/0x270
[  122.690300][ T4839]  ? seqcount_lockdep_reader_access+0x18d/0x1d0
[  122.696572][ T4839]  ? ktime_get_real_ts64+0x440/0x440
[  122.701909][ T4839]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  122.708107][ T4839]  ? __cant_sleep+0x220/0x220
[  122.712809][ T4839]  ? ktime_get+0x247/0x270
[  122.717256][ T4839]  bpf_test_run+0x2b6/0x830
[  122.721805][ T4839]  ? dst_hold+0xb0/0xb0
[  122.725985][ T4839]  ? eth_get_headlen+0x200/0x200
[  122.731046][ T4839]  ? convert___skb_to_skb+0x3d/0x580
[  122.736446][ T4839]  bpf_prog_test_run_skb+0xdaf/0x18e0
[  122.741879][ T4839]  ? cpu_online+0xa0/0xa0
[  122.746239][ T4839]  bpf_prog_test_run+0x31c/0x390
[  122.751209][ T4839]  __sys_bpf+0x62b/0x780
[  122.755484][ T4839]  ? bpf_link_show_fdinfo+0x380/0x380
[  122.761075][ T4839]  ? lock_chain_count+0x20/0x20
[  122.765957][ T4839]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  122.771977][ T4839]  __x64_sys_bpf+0x78/0x90
[  122.776436][ T4839]  do_syscall_64+0x4c/0xa0
[  122.780968][ T4839]  ? clear_bhb_loop+0x60/0xb0
[  122.785672][ T4839]  ? clear_bhb_loop+0x60/0xb0
[  122.790401][ T4839]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  122.796327][ T4839] RIP: 0033:0x7f3fb399de99
[  122.800791][ T4839] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  122.820430][ T4839] RSP: 002b:00007f3fb491a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  122.828867][ T4839] RAX: ffffffffffffffda RBX: 00007f3fb3c25fa0 RCX: 00007f3fb399de99
[  122.836862][ T4839] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a
[  122.844874][ T4839] RBP: 00007f3fb491a090 R08: 0000000000000000 R09: 0000000000000000
[  122.852955][ T4839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  122.860949][ T4839] R13: 00007f3fb3c26038 R14: 00007f3fb3c25fa0 R15: 00007ffe0d3a8a78
[  122.868967][ T4839]  </TASK>
[  122.872122][ T4839] memory allocation failure, unreliable refcount tracker.
[  122.902990][ T4836] bridge0: port 3(hsr0) entered disabled state
[  122.954598][ T4836] bridge0: port 3(hsr0) entered blocking state
[  122.961447][ T4836] bridge0: port 3(hsr0) entered forwarding state
[  124.227139][ T4863] __nla_validate_parse: 3 callbacks suppressed
[  124.227159][ T4863] netlink: 132 bytes leftover after parsing attributes in process `syz.3.161'.
[  124.265729][ T4860] netlink: 132 bytes leftover after parsing attributes in process `syz.1.159'.
[  124.575231][ T4868] netlink: 144 bytes leftover after parsing attributes in process `syz.3.163'.
[  124.887901][ T4878] FAULT_INJECTION: forcing a failure.
[  124.887901][ T4878] name failslab, interval 1, probability 0, space 0, times 0
[  124.917588][ T4878] CPU: 1 PID: 4878 Comm: syz.4.167 Not tainted syzkaller #0
[  124.924966][ T4878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  124.935071][ T4878] Call Trace:
[  124.938476][ T4878]  <TASK>
[  124.941444][ T4878]  dump_stack_lvl+0x188/0x24e
[  124.946264][ T4878]  ? show_regs_print_info+0x12/0x12
[  124.951637][ T4878]  ? load_image+0x410/0x410
[  124.956196][ T4878]  ? __might_sleep+0xd0/0xd0
[  124.960825][ T4878]  ? __lock_acquire+0x7c40/0x7c40
[  124.965920][ T4878]  should_fail_ex+0x390/0x4c0
[  124.970830][ T4878]  should_failslab+0x5/0x20
[  124.975379][ T4878]  slab_pre_alloc_hook+0x59/0x300
[  124.980448][ T4878]  kmem_cache_alloc_node+0x5a/0x310
[  124.985775][ T4878]  ? __alloc_skb+0xf9/0x7d0
[  124.990312][ T4878]  __alloc_skb+0xf9/0x7d0
[  124.994762][ T4878]  netlink_sendmsg+0x654/0xbd0
[  124.999572][ T4878]  ? netlink_getsockopt+0x550/0x550
[  125.004809][ T4878]  ? apparmor_socket_sendmsg+0x8a/0x330
[  125.010391][ T4878]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  125.015724][ T4878]  ? security_socket_sendmsg+0x7c/0xa0
[  125.021206][ T4878]  ? netlink_getsockopt+0x550/0x550
[  125.026443][ T4878]  ____sys_sendmsg+0x5ed/0x9a0
[  125.031242][ T4878]  ? __sys_sendmsg_sock+0x30/0x30
[  125.036297][ T4878]  ? __import_iovec+0x306/0x510
[  125.041189][ T4878]  ? import_iovec+0x6f/0xa0
[  125.045726][ T4878]  ___sys_sendmsg+0x2a2/0x360
[  125.050437][ T4878]  ? __sys_sendmsg+0x2a0/0x2a0
[  125.055319][ T4878]  ? __lock_acquire+0x7c40/0x7c40
[  125.060413][ T4878]  __se_sys_sendmsg+0x1c3/0x2b0
[  125.065334][ T4878]  ? __x64_sys_sendmsg+0x80/0x80
[  125.070549][ T4878]  ? lockdep_hardirqs_on+0x94/0x140
[  125.075827][ T4878]  do_syscall_64+0x4c/0xa0
[  125.080388][ T4878]  ? clear_bhb_loop+0x60/0xb0
[  125.085159][ T4878]  ? clear_bhb_loop+0x60/0xb0
[  125.089879][ T4878]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  125.095843][ T4878] RIP: 0033:0x7f1786f9de99
[  125.100301][ T4878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  125.120043][ T4878] RSP: 002b:00007f1787ecb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  125.128596][ T4878] RAX: ffffffffffffffda RBX: 00007f1787225fa0 RCX: 00007f1786f9de99
[  125.136600][ T4878] RDX: 0000000004044000 RSI: 0000200000000040 RDI: 0000000000000003
[  125.144689][ T4878] RBP: 00007f1787ecb090 R08: 0000000000000000 R09: 0000000000000000
[  125.152689][ T4878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  125.160728][ T4878] R13: 00007f1787226038 R14: 00007f1787225fa0 R15: 00007ffe24fdff38
[  125.168736][ T4878]  </TASK>
[  125.410199][ T4886] validate_nla: 5 callbacks suppressed
[  125.410219][ T4886] netlink: 'syz.3.170': attribute type 10 has an invalid length.
[  125.651976][ T4893] netlink: 'syz.1.173': attribute type 29 has an invalid length.
[  125.783966][ T4892] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  125.986820][ T4893] netlink: 'syz.1.173': attribute type 29 has an invalid length.
[  126.022289][ T4896] netlink: 132 bytes leftover after parsing attributes in process `syz.1.173'.
[  126.045177][ T4894] netlink: 'syz.1.173': attribute type 29 has an invalid length.
[  126.099566][ T4893] netlink: 'syz.1.173': attribute type 29 has an invalid length.
[  126.135496][ T4902] netlink: 132 bytes leftover after parsing attributes in process `syz.2.176'.
[  126.849224][ T4907] FAULT_INJECTION: forcing a failure.
[  126.849224][ T4907] name failslab, interval 1, probability 0, space 0, times 0
[  126.866177][ T4907] CPU: 0 PID: 4907 Comm: syz.3.178 Not tainted syzkaller #0
[  126.873621][ T4907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  126.883910][ T4907] Call Trace:
[  126.887227][ T4907]  <TASK>
[  126.890223][ T4907]  dump_stack_lvl+0x188/0x24e
[  126.894968][ T4907]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  126.901188][ T4907]  ? show_regs_print_info+0x12/0x12
[  126.906420][ T4907]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  126.912755][ T4907]  should_fail_ex+0x390/0x4c0
[  126.917481][ T4907]  should_failslab+0x5/0x20
[  126.922013][ T4907]  slab_pre_alloc_hook+0x59/0x300
[  126.927115][ T4907]  kmem_cache_alloc+0x56/0x2f0
[  126.931991][ T4907]  ? skb_clone+0x1e7/0x370
[  126.936479][ T4907]  skb_clone+0x1e7/0x370
[  126.940761][ T4907]  __netlink_deliver_tap+0x3e4/0x7e0
[  126.946094][ T4907]  ? netlink_deliver_tap+0x2e/0x1b0
[  126.951331][ T4907]  netlink_deliver_tap+0x19c/0x1b0
[  126.956494][ T4907]  netlink_unicast+0x777/0x920
[  126.961299][ T4907]  netlink_sendmsg+0x8ad/0xbd0
[  126.966097][ T4907]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  126.972289][ T4907]  ? netlink_getsockopt+0x550/0x550
[  126.977525][ T4907]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  126.982922][ T4907]  ? security_socket_sendmsg+0x7c/0xa0
[  126.988414][ T4907]  ? netlink_getsockopt+0x550/0x550
[  126.993671][ T4907]  ____sys_sendmsg+0x5ed/0x9a0
[  126.998500][ T4907]  ? __sys_sendmsg_sock+0x30/0x30
[  127.003555][ T4907]  ? __import_iovec+0x306/0x510
[  127.008453][ T4907]  ? import_iovec+0x6f/0xa0
[  127.013112][ T4907]  ___sys_sendmsg+0x2a2/0x360
[  127.017836][ T4907]  ? __sys_sendmsg+0x2a0/0x2a0
[  127.022644][ T4907]  ? perf_trace_run_bpf_submit+0xf3/0x1c0
[  127.028420][ T4907]  __se_sys_sendmsg+0x1c3/0x2b0
[  127.033357][ T4907]  ? __x64_sys_sendmsg+0x80/0x80
[  127.038347][ T4907]  ? syscall_enter_from_user_mode+0x2a/0x80
[  127.044269][ T4907]  do_syscall_64+0x4c/0xa0
[  127.048713][ T4907]  ? clear_bhb_loop+0x60/0xb0
[  127.053419][ T4907]  ? clear_bhb_loop+0x60/0xb0
[  127.058130][ T4907]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  127.064065][ T4907] RIP: 0033:0x7fef70b9de99
[  127.068621][ T4907] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  127.088271][ T4907] RSP: 002b:00007fef71a98028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  127.096834][ T4907] RAX: ffffffffffffffda RBX: 00007fef70e25fa0 RCX: 00007fef70b9de99
[  127.104921][ T4907] RDX: 0000000020040900 RSI: 0000200000000600 RDI: 000000000000000c
[  127.113008][ T4907] RBP: 00007fef71a98090 R08: 0000000000000000 R09: 0000000000000000
[  127.121044][ T4907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  127.129128][ T4907] R13: 00007fef70e26038 R14: 00007fef70e25fa0 R15: 00007fff53ba2ef8
[  127.137224][ T4907]  </TASK>
[  127.188428][ T4907] netlink: 'syz.3.178': attribute type 10 has an invalid length.
[  127.541585][ T4907] 8021q: adding VLAN 0 to HW filter on device batadv0
[  127.577276][ T4907] team0: Port device batadv0 added
[  127.594562][ T4914] netlink: 132 bytes leftover after parsing attributes in process `syz.1.189'.
[  127.725281][ T4907] syz.3.178 (4907) used greatest stack depth: 20632 bytes left
[  127.830345][ T4923] netlink: 'syz.4.183': attribute type 10 has an invalid length.
[  127.903717][ T4928] netlink: 'syz.4.183': attribute type 3 has an invalid length.
[  127.919944][   T41] wlan1: Trigger new scan to find an IBSS to join
[  127.971758][ T4923] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  127.978035][ T4928] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.183'.
[  128.051139][ T4930] netlink: 'syz.1.185': attribute type 3 has an invalid length.
[  128.058867][ T4930] netlink: 'syz.1.185': attribute type 1 has an invalid length.
[  129.044023][ T4955] device bridge_slave_1 left promiscuous mode
[  129.065085][ T4955] bridge0: port 2(bridge_slave_1) entered disabled state
[  129.170234][ T4955] device bridge_slave_0 left promiscuous mode
[  129.176599][ T4955] bridge0: port 1(bridge_slave_0) entered disabled state
[  129.784535][ T4969] netlink: 132 bytes leftover after parsing attributes in process `syz.3.196'.
[  130.072079][ T4976] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  130.120360][ T4978] netlink: 132 bytes leftover after parsing attributes in process `syz.4.199'.
[  130.533579][ T4978] validate_nla: 4 callbacks suppressed
[  130.533600][ T4978] netlink: 'syz.4.199': attribute type 29 has an invalid length.
[  130.880479][   T56] wlan1: Trigger new scan to find an IBSS to join
[  130.941838][ T4990] netlink: 144 bytes leftover after parsing attributes in process `syz.3.203'.
[  131.446833][ T5007] netlink: 'syz.3.211': attribute type 9 has an invalid length.
[  131.482674][ T5004] netlink: 'syz.0.210': attribute type 12 has an invalid length.
[  131.503641][ T5004] bridge0: port 3(hsr0) entered disabled state
[  131.585216][ T5004] device bridge_slave_1 left promiscuous mode
[  131.604179][ T5004] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.680499][ T5004] device bridge_slave_0 left promiscuous mode
[  131.693837][ T5004] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.953921][ T5016] FAULT_INJECTION: forcing a failure.
[  131.953921][ T5016] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  132.019658][ T5016] CPU: 1 PID: 5016 Comm: syz.4.214 Not tainted syzkaller #0
[  132.027036][ T5016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  132.037130][ T5016] Call Trace:
[  132.040436][ T5016]  <TASK>
[  132.043395][ T5016]  dump_stack_lvl+0x188/0x24e
[  132.048119][ T5016]  ? show_regs_print_info+0x12/0x12
[  132.053351][ T5016]  ? load_image+0x410/0x410
[  132.057879][ T5016]  ? __lock_acquire+0x7c40/0x7c40
[  132.062941][ T5016]  should_fail_ex+0x390/0x4c0
[  132.067652][ T5016]  _copy_from_user+0x2c/0x170
[  132.072369][ T5016]  __sys_bpf+0x2ea/0x780
[  132.076735][ T5016]  ? bpf_link_show_fdinfo+0x380/0x380
[  132.082153][ T5016]  ? lock_chain_count+0x20/0x20
[  132.087036][ T5016]  __x64_sys_bpf+0x78/0x90
[  132.091571][ T5016]  do_syscall_64+0x4c/0xa0
[  132.096013][ T5016]  ? clear_bhb_loop+0x60/0xb0
[  132.100719][ T5016]  ? clear_bhb_loop+0x60/0xb0
[  132.105533][ T5016]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  132.111470][ T5016] RIP: 0033:0x7f1786f9de99
[  132.115905][ T5016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  132.135537][ T5016] RSP: 002b:00007f1787ecb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  132.143981][ T5016] RAX: ffffffffffffffda RBX: 00007f1787225fa0 RCX: 00007f1786f9de99
[  132.151977][ T5016] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 000000000000000a
[  132.159970][ T5016] RBP: 00007f1787ecb090 R08: 0000000000000000 R09: 0000000000000000
[  132.167959][ T5016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  132.176125][ T5016] R13: 00007f1787226038 R14: 00007f1787225fa0 R15: 00007ffe24fdff38
[  132.184134][ T5016]  </TASK>
[  132.219602][ T5009] netlink: 'syz.1.212': attribute type 10 has an invalid length.
[  132.252430][ T5009] device hsr0 entered promiscuous mode
[  132.270586][ T5009] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  132.387655][ T5018] netlink: 'syz.4.215': attribute type 10 has an invalid length.
[  132.396241][ T5018] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.215'.
[  132.612908][ T5022] netlink: 'syz.1.216': attribute type 29 has an invalid length.
[  132.637842][ T5022] netlink: 'syz.1.216': attribute type 29 has an invalid length.
[  132.703122][ T5027] netlink: 'syz.1.216': attribute type 29 has an invalid length.
[  132.750943][ T5022] netlink: 132 bytes leftover after parsing attributes in process `syz.1.216'.
[  132.816791][ T5022] netlink: 'syz.1.216': attribute type 29 has an invalid length.
[  132.882810][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  132.889588][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  132.931257][ T5029] netlink: 144 bytes leftover after parsing attributes in process `syz.3.221'.
[  133.283886][ T5040] netlink: 'syz.1.224': attribute type 9 has an invalid length.
[  133.604718][ T5045] netlink: 197344 bytes leftover after parsing attributes in process `syz.0.226'.
[  133.730414][ T5051] device syzkaller0 entered promiscuous mode
[  133.932492][    T9] wlan1: Trigger new scan to find an IBSS to join
[  133.942882][   T11] wlan1: Trigger new scan to find an IBSS to join
[  134.743703][ T5066] netlink: 132 bytes leftover after parsing attributes in process `syz.2.234'.
[  134.871094][ T4329] wlan1: Creating new IBSS network, BSSID c6:89:66:a3:aa:0a
[  135.105305][   T46] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  136.446886][ T5078] syz.1.240 (5078) used greatest stack depth: 14416 bytes left
[  136.966003][   T11] wlan1: Trigger new scan to find an IBSS to join
[  137.324311][ T5110] validate_nla: 7 callbacks suppressed
[  137.324327][ T5110] netlink: 'syz.1.249': attribute type 12 has an invalid length.
[  137.362465][ T5110] device bridge_slave_1 left promiscuous mode
[  137.369841][ T5110] bridge0: port 2(bridge_slave_1) entered disabled state
[  137.515157][ T5114] netlink: 'syz.4.250': attribute type 29 has an invalid length.
[  138.743795][ T4635] wlan1: Creating new IBSS network, BSSID 56:2e:a7:38:88:1e
[  139.458266][ T5110] device bridge_slave_0 left promiscuous mode
[  139.469724][ T5110] bridge0: port 1(bridge_slave_0) entered disabled state
[  139.635227][ T5114] netlink: 'syz.4.250': attribute type 29 has an invalid length.
[  139.673928][ T5116] netlink: 132 bytes leftover after parsing attributes in process `syz.4.250'.
[  140.068861][ T5132] netlink: 'syz.3.258': attribute type 3 has an invalid length.
[  140.161050][ T5132] netlink: 'syz.3.258': attribute type 8 has an invalid length.
[  140.177533][ T5137] netlink: 'syz.3.258': attribute type 21 has an invalid length.
[  140.201162][ T5132] netlink: 197344 bytes leftover after parsing attributes in process `syz.3.258'.
[  141.698732][ T5165] netlink: 'syz.1.267': attribute type 29 has an invalid length.
[  141.755911][ T5165] netlink: 'syz.1.267': attribute type 29 has an invalid length.
[  141.867327][ T5168] netlink: 'syz.1.267': attribute type 29 has an invalid length.
[  141.919661][ T5165] netlink: 132 bytes leftover after parsing attributes in process `syz.1.267'.
[  141.978708][ T5170] netlink: 188 bytes leftover after parsing attributes in process `syz.2.269'.
[  142.059044][ T5165] netlink: 'syz.1.267': attribute type 29 has an invalid length.
[  142.315400][ T5182] netlink: 144 bytes leftover after parsing attributes in process `syz.2.273'.
[  142.609865][ T5190] netlink: 'syz.2.276': attribute type 3 has an invalid length.
[  142.636448][ T5190] netlink: 'syz.2.276': attribute type 8 has an invalid length.
[  142.673893][ T5190] netlink: 197344 bytes leftover after parsing attributes in process `syz.2.276'.
[  142.703604][ T5193] netlink: 144 bytes leftover after parsing attributes in process `syz.0.286'.
[  142.765022][ T5190] netlink: 'syz.2.276': attribute type 21 has an invalid length.
[  144.293122][ T5218] netlink: 'syz.0.284': attribute type 29 has an invalid length.
[  144.340007][ T5218] netlink: 'syz.0.284': attribute type 29 has an invalid length.
[  144.413105][ T5220] netlink: 'syz.0.284': attribute type 29 has an invalid length.
[  144.572147][ T5218] netlink: 132 bytes leftover after parsing attributes in process `syz.0.284'.
[  144.660780][ T5218] netlink: 'syz.0.284': attribute type 29 has an invalid length.
[  146.619227][ T5282] netlink: 'syz.4.303': attribute type 29 has an invalid length.
[  146.677648][ T5282] netlink: 'syz.4.303': attribute type 29 has an invalid length.
[  146.736472][ T5290] netlink: 'syz.4.303': attribute type 29 has an invalid length.
[  146.786336][ T5292] netlink: 132 bytes leftover after parsing attributes in process `syz.2.306'.
[  146.819720][ T5282] netlink: 132 bytes leftover after parsing attributes in process `syz.4.303'.
[  147.263482][ T5301] device 0 entered promiscuous mode
[  150.866324][ T5340] netlink: 132 bytes leftover after parsing attributes in process `syz.3.320'.
[  150.879967][ T5343] validate_nla: 2 callbacks suppressed
[  150.879984][ T5343] netlink: 'syz.1.321': attribute type 29 has an invalid length.
[  150.984022][ T5343] netlink: 'syz.1.321': attribute type 29 has an invalid length.
[  151.016087][ T5344] netlink: 40 bytes leftover after parsing attributes in process `syz.2.322'.
[  151.035389][ T5348] netlink: 132 bytes leftover after parsing attributes in process `syz.1.321'.
[  151.057999][ T5345] netlink: 'syz.1.321': attribute type 29 has an invalid length.
[  151.133752][ T5343] netlink: 'syz.1.321': attribute type 29 has an invalid length.
[  151.160545][ T5354] netlink: 'syz.0.324': attribute type 2 has an invalid length.
[  151.234377][ T5354] netlink: 199848 bytes leftover after parsing attributes in process `syz.0.324'.
[  152.012881][ T5372] netlink: 'syz.1.332': attribute type 10 has an invalid length.
[  152.098493][ T5372] team0: Port device netdevsim0 added
[  152.106638][ T5374] netlink: 'syz.1.332': attribute type 10 has an invalid length.
[  152.182197][ T5374] team0: Port device netdevsim0 removed
[  152.208870][ T5374] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  152.227402][ T5368] netlink: 14 bytes leftover after parsing attributes in process `syz.3.331'.
[  152.256919][ T5372] netlink: 40 bytes leftover after parsing attributes in process `syz.1.332'.
[  152.527536][ T5381] netlink: 'syz.1.336': attribute type 3 has an invalid length.
[  152.816739][ T5386] netlink: 132 bytes leftover after parsing attributes in process `syz.2.337'.
[  152.836384][ T5389] netlink: 'syz.1.338': attribute type 29 has an invalid length.
[  152.868502][ T5389] netlink: 'syz.1.338': attribute type 29 has an invalid length.
[  152.931206][ T5389] netlink: 132 bytes leftover after parsing attributes in process `syz.1.338'.
[  153.395890][ T5397] FAULT_INJECTION: forcing a failure.
[  153.395890][ T5397] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  153.500724][ T5397] CPU: 0 PID: 5397 Comm: syz.0.340 Not tainted syzkaller #0
[  153.508310][ T5397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  153.518437][ T5397] Call Trace:
[  153.521758][ T5397]  <TASK>
[  153.524768][ T5397]  dump_stack_lvl+0x188/0x24e
[  153.529566][ T5397]  ? show_regs_print_info+0x12/0x12
[  153.534828][ T5397]  ? load_image+0x410/0x410
[  153.539398][ T5397]  ? __lock_acquire+0x7c40/0x7c40
[  153.544525][ T5397]  ? snprintf+0xe5/0x140
[  153.548850][ T5397]  should_fail_ex+0x390/0x4c0
[  153.553600][ T5397]  _copy_to_user+0x2c/0x130
[  153.558161][ T5397]  simple_read_from_buffer+0xe3/0x150
[  153.563593][ T5397]  proc_fail_nth_read+0x1a6/0x220
[  153.568947][ T5397]  ? proc_fault_inject_write+0x310/0x310
[  153.574648][ T5397]  ? fsnotify_perm+0x248/0x550
[  153.579464][ T5397]  ? proc_fault_inject_write+0x310/0x310
[  153.585158][ T5397]  vfs_read+0x2db/0x960
[  153.589379][ T5397]  ? kernel_read+0x1e0/0x1e0
[  153.594032][ T5397]  ? __fget_files+0x28/0x460
[  153.598684][ T5397]  ? __fget_files+0x3fc/0x460
[  153.603602][ T5397]  ? __fdget_pos+0x2ae/0x360
[  153.608271][ T5397]  ? ksys_read+0x70/0x260
[  153.612668][ T5397]  ksys_read+0x14d/0x260
[  153.617015][ T5397]  ? vfs_write+0x9a0/0x9a0
[  153.621510][ T5397]  ? lockdep_hardirqs_on+0x94/0x140
[  153.626767][ T5397]  do_syscall_64+0x4c/0xa0
[  153.631243][ T5397]  ? clear_bhb_loop+0x60/0xb0
[  153.635979][ T5397]  ? clear_bhb_loop+0x60/0xb0
[  153.640719][ T5397]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  153.646667][ T5397] RIP: 0033:0x7ff0bb55e6ce
[  153.651127][ T5397] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  153.670979][ T5397] RSP: 002b:00007ff0bc37dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  153.679485][ T5397] RAX: ffffffffffffffda RBX: 00007ff0bc37e6c0 RCX: 00007ff0bb55e6ce
[  153.687611][ T5397] RDX: 000000000000000f RSI: 00007ff0bc37e0a0 RDI: 000000000000000a
[  153.695640][ T5397] RBP: 00007ff0bc37e090 R08: 0000000000000000 R09: 0000000000000000
[  153.703757][ T5397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  153.711777][ T5397] R13: 00007ff0bb826038 R14: 00007ff0bb825fa0 R15: 00007ffd5f78e928
[  153.719838][ T5397]  </TASK>
[  153.962846][ T5408] netlink: 144 bytes leftover after parsing attributes in process `syz.1.343'.
[  154.092690][ T5414] FAULT_INJECTION: forcing a failure.
[  154.092690][ T5414] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  154.169643][ T5414] CPU: 0 PID: 5414 Comm: syz.0.345 Not tainted syzkaller #0
[  154.177033][ T5414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  154.187142][ T5414] Call Trace:
[  154.190471][ T5414]  <TASK>
[  154.193442][ T5414]  dump_stack_lvl+0x188/0x24e
[  154.198178][ T5414]  ? show_regs_print_info+0x12/0x12
[  154.203464][ T5414]  ? load_image+0x410/0x410
[  154.208025][ T5414]  ? __lock_acquire+0x7c40/0x7c40
[  154.213123][ T5414]  should_fail_ex+0x390/0x4c0
[  154.217863][ T5414]  _copy_from_user+0x2c/0x170
[  154.222575][ T5414]  __sys_bpf+0x2ea/0x780
[  154.226938][ T5414]  ? bpf_link_show_fdinfo+0x380/0x380
[  154.232421][ T5414]  ? lock_chain_count+0x20/0x20
[  154.237336][ T5414]  __x64_sys_bpf+0x78/0x90
[  154.241935][ T5414]  do_syscall_64+0x4c/0xa0
[  154.246423][ T5414]  ? clear_bhb_loop+0x60/0xb0
[  154.251144][ T5414]  ? clear_bhb_loop+0x60/0xb0
[  154.255859][ T5414]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  154.261796][ T5414] RIP: 0033:0x7ff0bb59de99
[  154.266286][ T5414] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  154.286028][ T5414] RSP: 002b:00007ff0bc37e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  154.294502][ T5414] RAX: ffffffffffffffda RBX: 00007ff0bb825fa0 RCX: 00007ff0bb59de99
[  154.302514][ T5414] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a
[  154.310520][ T5414] RBP: 00007ff0bc37e090 R08: 0000000000000000 R09: 0000000000000000
[  154.318540][ T5414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  154.326532][ T5414] R13: 00007ff0bb826038 R14: 00007ff0bb825fa0 R15: 00007ffd5f78e928
[  154.334636][ T5414]  </TASK>
[  155.034582][ T5434] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  155.042774][ T5434] batman_adv: batadv0: Removing interface: batadv_slave_0
[  155.151299][ T5434] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  155.234759][ T5434] batman_adv: batadv0: Removing interface: batadv_slave_1
[  155.412746][ T5441] netlink: 132 bytes leftover after parsing attributes in process `syz.1.353'.
[  155.434114][ T5442] netlink: 132 bytes leftover after parsing attributes in process `syz.0.352'.
[  155.826532][ T5457] netlink: 144 bytes leftover after parsing attributes in process `syz.2.359'.
[  157.753841][ T5482] validate_nla: 7 callbacks suppressed
[  157.753860][ T5482] netlink: 'syz.1.366': attribute type 29 has an invalid length.
[  157.806816][ T5482] netlink: 'syz.1.366': attribute type 29 has an invalid length.
[  157.847987][ T5483] netlink: 'syz.1.366': attribute type 29 has an invalid length.
[  157.867888][ T5482] netlink: 132 bytes leftover after parsing attributes in process `syz.1.366'.
[  157.936231][ T5482] netlink: 'syz.1.366': attribute type 29 has an invalid length.
[  157.978859][ T5486] netlink: 132 bytes leftover after parsing attributes in process `syz.4.367'.
[  158.553386][ T5497] netlink: 144 bytes leftover after parsing attributes in process `syz.0.371'.
[  159.802078][ T5521] netlink: 'syz.4.379': attribute type 29 has an invalid length.
[  159.825217][ T5521] netlink: 'syz.4.379': attribute type 29 has an invalid length.
[  159.874117][ T5524] netlink: 'syz.4.379': attribute type 29 has an invalid length.
[  159.897628][ T5521] netlink: 132 bytes leftover after parsing attributes in process `syz.4.379'.
[  159.962600][ T5521] netlink: 'syz.4.379': attribute type 29 has an invalid length.
[  160.024933][ T5523] netlink: 132 bytes leftover after parsing attributes in process `syz.2.380'.
[  161.209552][ T5546] syz.3.385 uses obsolete (PF_INET,SOCK_PACKET)
[  161.628401][ T5551] netlink: 144 bytes leftover after parsing attributes in process `syz.2.387'.
[  164.242742][ T5569] netlink: 132 bytes leftover after parsing attributes in process `syz.3.396'.
[  164.904101][ T4635] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  165.677793][ T5592] FAULT_INJECTION: forcing a failure.
[  165.677793][ T5592] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  165.747228][ T5596] netlink: 144 bytes leftover after parsing attributes in process `syz.3.407'.
[  165.757987][ T5592] CPU: 1 PID: 5592 Comm: syz.0.404 Not tainted syzkaller #0
[  165.765348][ T5592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  165.775459][ T5592] Call Trace:
[  165.778793][ T5592]  <TASK>
[  165.781776][ T5592]  dump_stack_lvl+0x188/0x24e
[  165.786514][ T5592]  ? show_regs_print_info+0x12/0x12
[  165.791778][ T5592]  ? load_image+0x410/0x410
[  165.796514][ T5592]  ? __lock_acquire+0x7c40/0x7c40
[  165.801603][ T5592]  should_fail_ex+0x390/0x4c0
[  165.806344][ T5592]  _copy_from_user+0x2c/0x170
[  165.811075][ T5592]  __sys_bpf+0x2ea/0x780
[  165.815376][ T5592]  ? bpf_link_show_fdinfo+0x380/0x380
[  165.820826][ T5592]  ? lock_chain_count+0x20/0x20
[  165.825752][ T5592]  __x64_sys_bpf+0x78/0x90
[  165.830263][ T5592]  do_syscall_64+0x4c/0xa0
[  165.834739][ T5592]  ? clear_bhb_loop+0x60/0xb0
[  165.839496][ T5592]  ? clear_bhb_loop+0x60/0xb0
[  165.844228][ T5592]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  165.850177][ T5592] RIP: 0033:0x7ff0bb59de99
[  165.854679][ T5592] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  165.874336][ T5592] RSP: 002b:00007ff0bc37e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  165.882966][ T5592] RAX: ffffffffffffffda RBX: 00007ff0bb825fa0 RCX: 00007ff0bb59de99
[  165.891088][ T5592] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a
[  165.899207][ T5592] RBP: 00007ff0bc37e090 R08: 0000000000000000 R09: 0000000000000000
[  165.907234][ T5592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  165.915257][ T5592] R13: 00007ff0bb826038 R14: 00007ff0bb825fa0 R15: 00007ffd5f78e928
[  165.923298][ T5592]  </TASK>
[  166.390435][ T5611] netlink: 144 bytes leftover after parsing attributes in process `syz.1.420'.
[  166.443257][ T4635] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  166.600655][ T5615] netlink: 'syz.0.411': attribute type 2 has an invalid length.
[  166.644993][ T5615] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.411'.
[  166.763086][ T5617] netlink: 132 bytes leftover after parsing attributes in process `syz.1.412'.
[  168.235150][ T5639] netlink: 144 bytes leftover after parsing attributes in process `syz.4.423'.
[  168.312621][ T5645] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.419'.
[  168.340632][ T5640] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.419'.
[  168.797797][   T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  169.002060][ T5658] netlink: 132 bytes leftover after parsing attributes in process `syz.4.428'.
[  169.556004][ T5672] FAULT_INJECTION: forcing a failure.
[  169.556004][ T5672] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  169.665500][ T5672] CPU: 1 PID: 5672 Comm: syz.1.434 Not tainted syzkaller #0
[  169.672971][ T5672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  169.683070][ T5672] Call Trace:
[  169.686387][ T5672]  <TASK>
[  169.689356][ T5672]  dump_stack_lvl+0x188/0x24e
[  169.694100][ T5672]  ? show_regs_print_info+0x12/0x12
[  169.699406][ T5672]  ? load_image+0x410/0x410
[  169.704002][ T5672]  ? __lock_acquire+0x7c40/0x7c40
[  169.709109][ T5672]  should_fail_ex+0x390/0x4c0
[  169.713851][ T5672]  _copy_from_user+0x2c/0x170
[  169.718576][ T5672]  __copy_msghdr+0x384/0x560
[  169.723232][ T5672]  ___sys_sendmsg+0x210/0x360
[  169.727970][ T5672]  ? __sys_sendmsg+0x2a0/0x2a0
[  169.732817][ T5672]  ? __lock_acquire+0x7c40/0x7c40
[  169.737924][ T5672]  __se_sys_sendmsg+0x1c3/0x2b0
[  169.742834][ T5672]  ? __x64_sys_sendmsg+0x80/0x80
[  169.747838][ T5672]  ? lockdep_hardirqs_on+0x94/0x140
[  169.753085][ T5672]  do_syscall_64+0x4c/0xa0
[  169.757548][ T5672]  ? clear_bhb_loop+0x60/0xb0
[  169.762274][ T5672]  ? clear_bhb_loop+0x60/0xb0
[  169.767001][ T5672]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  169.772949][ T5672] RIP: 0033:0x7f2e3df9de99
[  169.777417][ T5672] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  169.797071][ T5672] RSP: 002b:00007f2e3eee8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  169.805562][ T5672] RAX: ffffffffffffffda RBX: 00007f2e3e225fa0 RCX: 00007f2e3df9de99
[  169.813577][ T5672] RDX: 000000000004c810 RSI: 0000200000001280 RDI: 0000000000000003
[  169.821592][ T5672] RBP: 00007f2e3eee8090 R08: 0000000000000000 R09: 0000000000000000
[  169.829599][ T5672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  169.837703][ T5672] R13: 00007f2e3e226038 R14: 00007f2e3e225fa0 R15: 00007ffe042557f8
[  169.845736][ T5672]  </TASK>
[  170.436229][ T5683] netlink: 144 bytes leftover after parsing attributes in process `syz.4.438'.
[  170.950380][ T5694] netlink: 132 bytes leftover after parsing attributes in process `syz.0.444'.
[  171.373373][ T5710] netlink: 144 bytes leftover after parsing attributes in process `syz.0.451'.
[  171.646980][ T5718] netlink: 60 bytes leftover after parsing attributes in process `syz.3.452'.
[  171.883359][ T5722] netlink: 144 bytes leftover after parsing attributes in process `syz.0.454'.
[  172.746254][ T5736] netlink: 132 bytes leftover after parsing attributes in process `syz.3.461'.
[  172.755733][ T4287] Bluetooth: hci1: ISO packet for unknown connection handle 2366
[  176.068294][ T5779] netlink: 'syz.0.477': attribute type 2 has an invalid length.
[  176.087154][ T5779] netlink: 10 bytes leftover after parsing attributes in process `syz.0.477'.
[  176.117370][ T5775] netlink: 132 bytes leftover after parsing attributes in process `syz.3.475'.
[  176.441002][ T5782] netlink: 'syz.2.474': attribute type 21 has an invalid length.
[  176.506610][ T5782] netlink: 152 bytes leftover after parsing attributes in process `syz.2.474'.
[  178.244955][ T4287] Bluetooth: hci3: ISO packet for unknown connection handle 2366
[  178.694566][ T5825] netlink: 152 bytes leftover after parsing attributes in process `syz.1.488'.
[  178.898231][ T5827] netlink: 132 bytes leftover after parsing attributes in process `syz.3.490'.
[  181.969832][ T4287] Bluetooth: hci2: ISO packet for unknown connection handle 2366
[  182.348753][ T5881] netlink: 132 bytes leftover after parsing attributes in process `syz.4.506'.
[  186.644036][ T5922] netlink: 3 bytes leftover after parsing attributes in process `syz.0.518'.
[  186.928203][ T5933] netlink: 132 bytes leftover after parsing attributes in process `syz.2.520'.
[  190.975209][ T6061] netlink: 132 bytes leftover after parsing attributes in process `syz.3.537'.
[  194.737183][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  194.743725][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  195.275221][ T6131] netlink: 'syz.1.557': attribute type 3 has an invalid length.
[  195.347461][ T6131] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.557'.
[  196.033520][ T6016] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  198.089594][ T4329] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  199.667249][ T6235] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.574'.
[  200.233298][ T6000] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  201.522132][ T4287] Bluetooth: hci0: command 0x0406 tx timeout
[  201.528268][ T4287] Bluetooth: hci4: command 0x0406 tx timeout
[  201.534693][ T4278] Bluetooth: hci1: command 0x0406 tx timeout
[  201.540972][ T4277] Bluetooth: hci2: command 0x0406 tx timeout
[  201.540993][ T4280] Bluetooth: hci3: command 0x0406 tx timeout
[  203.126334][ T6246] netlink: 132 bytes leftover after parsing attributes in process `syz.4.578'.
[  203.147955][ T6273] netlink: 132 bytes leftover after parsing attributes in process `syz.0.587'.
[  203.466369][ T6285] FAULT_INJECTION: forcing a failure.
[  203.466369][ T6285] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  203.584459][ T6285] CPU: 1 PID: 6285 Comm: syz.3.589 Not tainted syzkaller #0
[  203.591836][ T6285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  203.601947][ T6285] Call Trace:
[  203.605289][ T6285]  <TASK>
[  203.608272][ T6285]  dump_stack_lvl+0x188/0x24e
[  203.613016][ T6285]  ? show_regs_print_info+0x12/0x12
[  203.618315][ T6285]  ? load_image+0x410/0x410
[  203.622881][ T6285]  ? __lock_acquire+0x7c40/0x7c40
[  203.627971][ T6285]  should_fail_ex+0x390/0x4c0
[  203.632714][ T6285]  _copy_from_iter+0x1c0/0x1130
[  203.637616][ T6285]  ? __lock_acquire+0x7c40/0x7c40
[  203.642695][ T6285]  ? do_raw_spin_trylock+0xae/0x190
[  203.647988][ T6285]  ? copyout_mc+0x110/0x110
[  203.652545][ T6285]  ? __virt_addr_valid+0x188/0x540
[  203.657714][ T6285]  ? __virt_addr_valid+0x188/0x540
[  203.662967][ T6285]  ? __virt_addr_valid+0x467/0x540
[  203.668115][ T6285]  ? __check_object_size+0x4f6/0xa70
[  203.673435][ T6285]  skb_copy_datagram_from_iter+0xee/0x6b0
[  203.679192][ T6285]  tun_get_user+0xc41/0x3c20
[  203.683831][ T6285]  ? rcu_read_unlock+0xa0/0xa0
[  203.688636][ T6285]  ? tun_get+0x1c/0x2e0
[  203.692823][ T6285]  ? __lock_acquire+0x7c40/0x7c40
[  203.697882][ T6285]  ? tun_get+0x1c/0x2e0
[  203.702079][ T6285]  tun_chr_write_iter+0x112/0x1f0
[  203.707139][ T6285]  vfs_write+0x482/0x9a0
[  203.711447][ T6285]  ? file_end_write+0x250/0x250
[  203.716338][ T6285]  ? __fget_files+0x3fc/0x460
[  203.721284][ T6285]  ? __fdget_pos+0x1d4/0x360
[  203.725934][ T6285]  ? ksys_write+0x70/0x260
[  203.730412][ T6285]  ksys_write+0x14d/0x260
[  203.734808][ T6285]  ? __ia32_sys_read+0x80/0x80
[  203.739637][ T6285]  ? lockdep_hardirqs_on+0x94/0x140
[  203.744909][ T6285]  do_syscall_64+0x4c/0xa0
[  203.749383][ T6285]  ? clear_bhb_loop+0x60/0xb0
[  203.754315][ T6285]  ? clear_bhb_loop+0x60/0xb0
[  203.759036][ T6285]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  203.764980][ T6285] RIP: 0033:0x7fef70b9de99
[  203.769506][ T6285] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  203.789334][ T6285] RSP: 002b:00007fef71a77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  203.797891][ T6285] RAX: ffffffffffffffda RBX: 00007fef70e26090 RCX: 00007fef70b9de99
[  203.805997][ T6285] RDX: 000000000000fdef RSI: 0000200000000440 RDI: 0000000000000003
[  203.814052][ T6285] RBP: 00007fef71a77090 R08: 0000000000000000 R09: 0000000000000000
[  203.822064][ T6285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  203.830075][ T6285] R13: 00007fef70e26128 R14: 00007fef70e26090 R15: 00007fff53ba2ef8
[  203.838097][ T6285]  </TASK>
[  205.346054][ T6303] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.598'.
[  207.030858][ T6295] netlink: 132 bytes leftover after parsing attributes in process `syz.1.594'.
[  207.048560][ T6307] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.599'.
[  207.220516][ T6317] netlink: 132 bytes leftover after parsing attributes in process `syz.2.602'.
[  207.488887][ T6322] netlink: 132 bytes leftover after parsing attributes in process `syz.4.604'.
[  208.912431][ T6345] netlink: 'syz.2.614': attribute type 3 has an invalid length.
[  208.957844][ T6345] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.614'.
[  209.728314][ T6360] netlink: 132 bytes leftover after parsing attributes in process `syz.1.621'.
[  210.278224][ T6374] netlink: 132 bytes leftover after parsing attributes in process `syz.4.623'.
[  211.283046][ T6389] netlink: 'syz.3.629': attribute type 3 has an invalid length.
[  211.352942][ T6389] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.629'.
[  212.711502][ T6418] netlink: 'syz.3.635': attribute type 29 has an invalid length.
[  212.979572][ T6418] netlink: 'syz.3.635': attribute type 3 has an invalid length.
[  213.068811][ T6418] netlink: 132 bytes leftover after parsing attributes in process `syz.3.635'.
[  213.091383][ T6415] netlink: 132 bytes leftover after parsing attributes in process `syz.4.637'.
[  213.627969][ T6427] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.642'.
[  214.017303][ T6434] netlink: 132 bytes leftover after parsing attributes in process `syz.1.645'.
[  214.051247][ T6440] netlink: 'syz.0.646': attribute type 3 has an invalid length.
[  214.129390][ T6440] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.646'.
[  214.754709][ T6456] netlink: 830 bytes leftover after parsing attributes in process `syz.0.654'.
[  214.791392][ T6454] netlink: 132 bytes leftover after parsing attributes in process `syz.3.653'.
[  215.258962][ T6476] netlink: 'syz.1.660': attribute type 3 has an invalid length.
[  215.288308][ T6476] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.660'.
[  215.565276][ T6478] netlink: 132 bytes leftover after parsing attributes in process `syz.3.661'.
[  215.865921][ T6493] syz.4.668[6493] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  215.866047][ T6493] syz.4.668[6493] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  216.024403][ T6491] netlink: 'syz.1.667': attribute type 3 has an invalid length.
[  216.364287][ T6502] __nla_validate_parse: 2 callbacks suppressed
[  216.364308][ T6502] netlink: 132 bytes leftover after parsing attributes in process `syz.0.671'.
[  216.437720][ T6506] netlink: 'syz.1.673': attribute type 3 has an invalid length.
[  216.476306][ T6506] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.673'.
[  217.074011][ T6521] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.680'.
[  217.666068][ T6534] netlink: 132 bytes leftover after parsing attributes in process `syz.4.682'.
[  217.831043][ T6540] netlink: 132 bytes leftover after parsing attributes in process `syz.0.686'.
[  218.881472][ T6564] netlink: 16222 bytes leftover after parsing attributes in process `syz.1.696'.
[  218.999027][ T6571] netlink: 'syz.0.698': attribute type 29 has an invalid length.
[  219.027921][ T6571] netlink: 'syz.0.698': attribute type 29 has an invalid length.
[  219.073951][ T6572] netlink: 'syz.0.698': attribute type 29 has an invalid length.
[  219.630610][ T6581] netlink: 132 bytes leftover after parsing attributes in process `syz.1.704'.
[  220.048581][ T6597] netlink: 132 bytes leftover after parsing attributes in process `syz.1.708'.
[  220.551623][ T6602] netlink: 132 bytes leftover after parsing attributes in process `syz.3.709'.
[  221.400809][ T6612] netlink: 14 bytes leftover after parsing attributes in process `syz.0.713'.
[  223.559240][ T6612] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  223.616270][ T6612] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  223.670451][ T6612] bond0 (unregistering): Released all slaves
[  224.014111][ T6637] netlink: 132 bytes leftover after parsing attributes in process `syz.1.721'.
[  224.166221][ T6634] netlink: 132 bytes leftover after parsing attributes in process `syz.2.719'.
[  224.314481][ T6647] netlink: 132 bytes leftover after parsing attributes in process `syz.1.724'.
[  225.375293][ T6663] netlink: 132 bytes leftover after parsing attributes in process `syz.0.729'.
[  225.475238][ T6655] netlink: 'syz.3.728': attribute type 3 has an invalid length.
[  225.485432][ T6655] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.728'.
[  226.801955][ T6669] netlink: 'syz.3.732': attribute type 3 has an invalid length.
[  226.812673][ T6669] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.732'.
[  227.778056][ T6049] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  229.200471][ T6684] netlink: 132 bytes leftover after parsing attributes in process `syz.0.737'.
[  229.418450][ T6049] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  229.684861][ T6696] netlink: 132 bytes leftover after parsing attributes in process `syz.3.741'.
[  230.272209][ T6699] netlink: 'syz.4.742': attribute type 3 has an invalid length.
[  230.299978][ T6699] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.742'.
[  230.617507][ T6705] netlink: 'syz.1.744': attribute type 3 has an invalid length.
[  230.651775][ T6705] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.744'.
[  230.681409][ T6712] netlink: 'syz.2.746': attribute type 10 has an invalid length.
[  231.203085][ T6712] bridge0: port 2(bridge_slave_1) entered disabled state
[  231.210879][ T6712] bridge0: port 1(bridge_slave_0) entered disabled state
[  231.310022][ T6712] bridge0: port 2(bridge_slave_1) entered blocking state
[  231.317305][ T6712] bridge0: port 2(bridge_slave_1) entered forwarding state
[  231.325073][ T6712] bridge0: port 1(bridge_slave_0) entered blocking state
[  231.332309][ T6712] bridge0: port 1(bridge_slave_0) entered forwarding state
[  231.385375][ T6712] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  231.467710][ T6026] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  232.342038][ T6731] netlink: 132 bytes leftover after parsing attributes in process `syz.0.753'.
[  233.125541][ T6745] netlink: 'syz.3.758': attribute type 3 has an invalid length.
[  233.213919][ T6745] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.758'.
[  233.380896][ T6750] netlink: 132 bytes leftover after parsing attributes in process `syz.0.759'.
[  234.511683][ T6759] netlink: 'syz.4.761': attribute type 3 has an invalid length.
[  234.534351][ T6759] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.761'.
[  234.795576][ T6765] netlink: 'syz.3.764': attribute type 13 has an invalid length.
[  234.804874][ T6765] netlink: 24643 bytes leftover after parsing attributes in process `syz.3.764'.
[  235.188038][ T6777] netlink: 132 bytes leftover after parsing attributes in process `syz.3.769'.
[  236.084328][ T6784] netlink: 'syz.1.772': attribute type 3 has an invalid length.
[  236.130626][ T6784] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.772'.
[  236.494386][ T6792] netlink: 'syz.3.775': attribute type 10 has an invalid length.
[  239.094757][ T6793] netlink: 132 bytes leftover after parsing attributes in process `syz.1.776'.
[  239.645950][ T6809] netlink: 'syz.0.782': attribute type 10 has an invalid length.
[  239.722718][ T6809] team0: Device hsr_slave_0 failed to register rx_handler
[  240.579113][ T6824] netlink: 132 bytes leftover after parsing attributes in process `syz.4.785'.
[  240.594571][ T6823] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.787'.
[  241.021347][ T6830] netlink: 'syz.1.788': attribute type 3 has an invalid length.
[  241.040742][ T6830] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.788'.
[  241.086878][ T6833] netlink: 132 bytes leftover after parsing attributes in process `syz.2.789'.
[  241.324586][ T6838] netlink: 'syz.0.790': attribute type 3 has an invalid length.
[  241.369650][ T6838] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.790'.
[  241.878167][ T6845] netlink: 'syz.0.794': attribute type 3 has an invalid length.
[  241.896962][ T6845] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.794'.
[  243.684358][ T6874] netlink: 'syz.2.803': attribute type 3 has an invalid length.
[  243.720143][ T6874] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.803'.
[  243.871142][ T6879] netlink: 'syz.3.804': attribute type 3 has an invalid length.
[  243.878848][ T6879] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.804'.
[  245.999769][ T6886] netlink: 132 bytes leftover after parsing attributes in process `syz.0.806'.
[  246.484710][ T6900] netlink: 'syz.4.809': attribute type 3 has an invalid length.
[  246.511888][ T6900] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.809'.
[  247.546861][ T6918] netlink: 'syz.4.818': attribute type 3 has an invalid length.
[  247.589670][ T6918] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.818'.
[  247.982516][ T6924] netlink: 'syz.3.819': attribute type 3 has an invalid length.
[  248.049662][ T6924] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.819'.
[  248.541053][ T6945] netlink: 132 bytes leftover after parsing attributes in process `syz.0.826'.
[  248.570971][ T6944] netlink: 'syz.1.825': attribute type 3 has an invalid length.
[  248.578887][ T6944] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.825'.
[  250.483295][ T6967] netlink: 132 bytes leftover after parsing attributes in process `syz.2.834'.
[  250.680147][ T6983] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.840'.
[  250.911630][ T6983] netlink: 'syz.3.840': attribute type 29 has an invalid length.
[  250.941431][ T6983] netlink: 'syz.3.840': attribute type 29 has an invalid length.
[  250.964190][ T6986] netlink: 'syz.3.840': attribute type 29 has an invalid length.
[  251.002052][ T6983] netlink: 'syz.3.840': attribute type 29 has an invalid length.
[  251.210660][ T7000] netlink: 132 bytes leftover after parsing attributes in process `syz.1.845'.
[  251.621402][ T7004] netlink: 132 bytes leftover after parsing attributes in process `syz.4.847'.
[  252.892066][ T7023] netlink: 132 bytes leftover after parsing attributes in process `syz.3.853'.
[  253.462804][ T7049] netlink: 132 bytes leftover after parsing attributes in process `syz.3.862'.
[  254.837051][ T7071] netlink: 132 bytes leftover after parsing attributes in process `syz.3.872'.
[  255.556292][ T7092] netlink: 132 bytes leftover after parsing attributes in process `syz.1.877'.
[  255.769812][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  255.776446][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  256.723125][ T7102] netlink: 132 bytes leftover after parsing attributes in process `syz.2.878'.
[  257.562551][ T7120] netlink: 132 bytes leftover after parsing attributes in process `syz.4.886'.
[  258.323597][ T7131] netlink: 'syz.4.891': attribute type 3 has an invalid length.
[  258.349408][ T7131] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.891'.
[  258.441306][ T7136] netlink: 'syz.1.892': attribute type 2 has an invalid length.
[  258.526275][ T7136] device .*! entered promiscuous mode
[  258.724944][ T7144] netlink: 132 bytes leftover after parsing attributes in process `syz.4.894'.
[  259.014628][ T6014] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  259.753236][ T7152] netlink: 132 bytes leftover after parsing attributes in process `syz.2.896'.
[  260.442857][ T6014] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  260.606063][ T7166] netlink: 132 bytes leftover after parsing attributes in process `syz.2.901'.
[  262.650939][ T7194] netlink: 132 bytes leftover after parsing attributes in process `syz.1.908'.
[  262.909247][ T6026] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  263.757686][ T7207] netlink: 132 bytes leftover after parsing attributes in process `syz.3.914'.
[  264.729047][ T7222] FAULT_INJECTION: forcing a failure.
[  264.729047][ T7222] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  264.773662][ T7222] CPU: 1 PID: 7222 Comm: syz.4.921 Not tainted syzkaller #0
[  264.781077][ T7222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  264.791296][ T7222] Call Trace:
[  264.794647][ T7222]  <TASK>
[  264.797667][ T7222]  dump_stack_lvl+0x188/0x24e
[  264.802449][ T7222]  ? show_regs_print_info+0x12/0x12
[  264.807838][ T7222]  ? load_image+0x410/0x410
[  264.812439][ T7222]  ? __lock_acquire+0x7c40/0x7c40
[  264.817589][ T7222]  should_fail_ex+0x390/0x4c0
[  264.822381][ T7222]  _copy_from_user+0x2c/0x170
[  264.827142][ T7222]  ___sys_sendmsg+0x1c3/0x360
[  264.831915][ T7222]  ? __sys_sendmsg+0x2a0/0x2a0
[  264.836829][ T7222]  ? __lock_acquire+0x7c40/0x7c40
[  264.841976][ T7222]  __se_sys_sendmsg+0x1c3/0x2b0
[  264.846906][ T7222]  ? __x64_sys_sendmsg+0x80/0x80
[  264.851956][ T7222]  ? lockdep_hardirqs_on+0x94/0x140
[  264.857210][ T7222]  do_syscall_64+0x4c/0xa0
[  264.861675][ T7222]  ? clear_bhb_loop+0x60/0xb0
[  264.866405][ T7222]  ? clear_bhb_loop+0x60/0xb0
[  264.871141][ T7222]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  264.877084][ T7222] RIP: 0033:0x7f1786f9de99
[  264.881647][ T7222] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  264.901611][ T7222] RSP: 002b:00007f1787ecb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  264.910101][ T7222] RAX: ffffffffffffffda RBX: 00007f1787225fa0 RCX: 00007f1786f9de99
[  264.918133][ T7222] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005
[  264.926254][ T7222] RBP: 00007f1787ecb090 R08: 0000000000000000 R09: 0000000000000000
[  264.934283][ T7222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  264.942309][ T7222] R13: 00007f1787226038 R14: 00007f1787225fa0 R15: 00007ffe24fdff38
[  264.950563][ T7222]  </TASK>
[  267.522169][ T7249] netlink: 'syz.3.923': attribute type 10 has an invalid length.
[  267.559502][ T7249] netlink: 40 bytes leftover after parsing attributes in process `syz.3.923'.
[  267.682576][ T7249] device ipvlan1 entered promiscuous mode
[  267.914654][ T7249] bridge0: port 4(ipvlan1) entered blocking state
[  267.976360][ T7249] bridge0: port 4(ipvlan1) entered disabled state
[  268.345066][ T7249] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  268.628472][ T7248] netlink: 'syz.3.923': attribute type 21 has an invalid length.
[  268.724892][ T7257] netlink: 132 bytes leftover after parsing attributes in process `syz.0.925'.
[  268.809520][ T7260] netlink: 'syz.4.927': attribute type 3 has an invalid length.
[  268.839667][ T7260] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.927'.
[  269.172151][ T7270] netlink: 132 bytes leftover after parsing attributes in process `syz.0.929'.
[  269.288030][ T7274] netlink: 'syz.4.932': attribute type 1 has an invalid length.
[  269.319585][ T7274] netlink: 'syz.4.932': attribute type 3 has an invalid length.
[  269.327713][ T7274] netlink: 132 bytes leftover after parsing attributes in process `syz.4.932'.
[  271.979531][ T7313] netlink: 132 bytes leftover after parsing attributes in process `syz.0.939'.
[  274.505776][ T7331] netlink: 'syz.2.943': attribute type 3 has an invalid length.
[  274.535438][ T7331] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.943'.
[  275.116520][ T7343] netlink: 6 bytes leftover after parsing attributes in process `syz.0.950'.
[  275.164058][ T7348] netlink: 'syz.3.946': attribute type 3 has an invalid length.
[  275.192699][ T7343] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  275.230544][ T7348] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.946'.
[  275.319041][ T7343] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  275.793741][ T7361] netlink: 132 bytes leftover after parsing attributes in process `syz.1.953'.
[  277.453072][ T7382] netlink: 'syz.0.959': attribute type 3 has an invalid length.
[  277.493101][ T7382] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.959'.
[  278.296342][ T7393] netlink: 132 bytes leftover after parsing attributes in process `syz.1.962'.
[  278.815225][ T7405] netlink: 'syz.1.967': attribute type 3 has an invalid length.
[  278.830300][ T7404] netlink: 'syz.2.965': attribute type 3 has an invalid length.
[  278.838884][ T7404] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.965'.
[  278.848837][ T7405] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.967'.
[  279.249228][ T7411] netlink: 132 bytes leftover after parsing attributes in process `syz.4.968'.
[  280.623448][ T7427] device syzkaller0 entered promiscuous mode
[  280.664818][ T7434] netlink: 'syz.1.975': attribute type 3 has an invalid length.
[  280.713877][ T7434] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.975'.
[  281.158759][ T7431] netlink: 'syz.3.976': attribute type 3 has an invalid length.
[  281.168627][ T7431] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.976'.
[  283.712441][ T7442] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  283.720319][ T7442] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  283.897671][ T7450] netlink: 132 bytes leftover after parsing attributes in process `syz.2.983'.
[  285.050919][ T7466] netlink: 'syz.2.988': attribute type 3 has an invalid length.
[  285.072783][ T7466] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.988'.
[  285.264102][ T7473] netlink: 'syz.1.989': attribute type 3 has an invalid length.
[  285.345198][ T7473] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.989'.
[  286.624691][ T7497] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.998'.
[  287.823857][ T7504] netlink: 132 bytes leftover after parsing attributes in process `syz.4.999'.
[  288.400614][ T7507] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1000'.
[  288.745693][ T7515] netlink: 'syz.2.1003': attribute type 3 has an invalid length.
[  288.794020][ T7515] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1003'.
[  288.984109][ T7524] netlink: 'syz.1.1007': attribute type 6 has an invalid length.
[  289.616306][ T7534] netlink: 'syz.3.1013': attribute type 10 has an invalid length.
[  290.146559][ T6026] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  290.159824][ T7545] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1015'.
[  290.569364][ T7553] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1016'.
[  291.471131][ T6049] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  291.580351][ T7567] netlink: 'syz.3.1022': attribute type 3 has an invalid length.
[  291.625597][ T7567] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1022'.
[  292.925085][ T7585] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1028'.
[  293.404983][ T7595] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1032'.
[  293.881891][ T7598] netlink: 'syz.0.1036': attribute type 3 has an invalid length.
[  293.909429][ T7598] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1036'.
[  294.031769][ T6049] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  295.472147][ T7629] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1046'.
[  296.007685][ T7638] netlink: 'syz.1.1048': attribute type 3 has an invalid length.
[  296.042688][ T7638] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1048'.
[  296.339091][ T7643] netlink: 'syz.1.1049': attribute type 21 has an invalid length.
[  296.365837][ T7643] netlink: 'syz.1.1049': attribute type 6 has an invalid length.
[  296.395658][ T7643] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1049'.
[  296.587119][ T7645] netlink: 'syz.2.1050': attribute type 29 has an invalid length.
[  296.694335][ T7645] netlink: 'syz.2.1050': attribute type 29 has an invalid length.
[  296.712514][ T7646] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1050'.
[  296.959048][ T7645] netlink: 'syz.2.1050': attribute type 29 has an invalid length.
[  297.287451][ T7658] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.1056'.
[  297.299823][ T7659] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.1055'.
[  297.635869][ T7665] netlink: 'syz.1.1059': attribute type 3 has an invalid length.
[  297.673505][ T7665] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1059'.
[  298.056930][ T7673] netlink: 'syz.0.1063': attribute type 13 has an invalid length.
[  298.067407][ T7673] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1063'.
[  298.083233][ T7673] erspan0: refused to change device tx_queue_len
[  298.100230][ T7673] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  298.648122][ T7688] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1069'.
[  299.986808][ T7713] netlink: 'syz.4.1078': attribute type 13 has an invalid length.
[  300.002875][ T7713] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1078'.
[  300.032791][ T7713] erspan0: refused to change device tx_queue_len
[  300.053729][ T7713] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  300.951148][ T7738] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1089'.
[  301.808564][ T7751] netlink: 'syz.3.1095': attribute type 13 has an invalid length.
[  301.860184][ T7751] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1095'.
[  302.023806][ T7751] erspan0: refused to change device tx_queue_len
[  302.074995][ T7751] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  302.604278][ T7763] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1100'.
[  304.093200][ T7801] netlink: 'syz.1.1112': attribute type 13 has an invalid length.
[  304.104526][ T7801] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1112'.
[  304.149726][ T7801] erspan0: refused to change device tx_queue_len
[  304.219877][ T7801] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  304.463475][ T7814] netlink: 'syz.2.1115': attribute type 3 has an invalid length.
[  304.491429][ T7814] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1115'.
[  304.830944][ T7820] netlink: 'syz.3.1116': attribute type 3 has an invalid length.
[  304.874201][ T7820] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1116'.
[  306.476589][ T7850] netlink: 'syz.2.1129': attribute type 3 has an invalid length.
[  306.560113][ T7850] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1129'.
[  306.965312][ T7859] netlink: 'syz.2.1134': attribute type 29 has an invalid length.
[  307.046640][ T7859] netlink: 'syz.2.1134': attribute type 29 has an invalid length.
[  307.100148][ T7860] netlink: 'syz.2.1134': attribute type 29 has an invalid length.
[  307.224395][ T7862] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1134'.
[  307.360294][ T7859] netlink: 'syz.2.1134': attribute type 29 has an invalid length.
[  307.865212][ T7876] netlink: 61967 bytes leftover after parsing attributes in process `syz.4.1141'.
[  307.938091][ T7883] netlink: 'syz.2.1144': attribute type 3 has an invalid length.
[  307.946893][ T7883] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1144'.
[  309.157576][ T7896] netlink: 'syz.0.1148': attribute type 3 has an invalid length.
[  309.179406][ T7896] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1148'.
[  310.610041][ T7915] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.1155'.
[  310.688972][ T7921] netlink: 'syz.2.1156': attribute type 3 has an invalid length.
[  310.699680][ T7921] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1156'.
[  311.013840][ T7932] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1162'.
[  314.063155][ T7932] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  314.106159][ T7932] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  314.150426][ T7932] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  314.169899][ T7932] bridge0: port 2(bridge_slave_1) entered disabled state
[  314.177461][ T7932] bridge0: port 1(bridge_slave_0) entered disabled state
[  314.198502][ T7932] bond0 (unregistering): Released all slaves
[  314.350046][ T7957] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.1170'.
[  314.534822][ T7963] netlink: 'syz.2.1172': attribute type 3 has an invalid length.
[  314.579740][ T7963] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1172'.
[  316.033643][ T7987] netlink: 'syz.2.1178': attribute type 29 has an invalid length.
[  316.053142][ T7987] netlink: 'syz.2.1178': attribute type 29 has an invalid length.
[  316.109494][ T7987] netlink: 'syz.2.1178': attribute type 29 has an invalid length.
[  316.135507][ T7987] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1178'.
[  316.168675][ T7987] netlink: 'syz.2.1178': attribute type 29 has an invalid length.
[  316.547809][ T7996] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1182'.
[  316.565236][ T7998] FAULT_INJECTION: forcing a failure.
[  316.565236][ T7998] name failslab, interval 1, probability 0, space 0, times 0
[  316.579708][ T7998] CPU: 0 PID: 7998 Comm: syz.2.1184 Not tainted syzkaller #0
[  316.587171][ T7998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  316.597279][ T7998] Call Trace:
[  316.600611][ T7998]  <TASK>
[  316.603593][ T7998]  dump_stack_lvl+0x188/0x24e
[  316.608322][ T7998]  ? sctp_sendmsg+0x1686/0x2940
[  316.613301][ T7998]  ? ___sys_sendmsg+0x2a2/0x360
[  316.618215][ T7998]  ? show_regs_print_info+0x12/0x12
[  316.623470][ T7998]  ? load_image+0x410/0x410
[  316.628066][ T7998]  should_fail_ex+0x390/0x4c0
[  316.632817][ T7998]  should_failslab+0x5/0x20
[  316.637361][ T7998]  slab_pre_alloc_hook+0x59/0x300
[  316.642446][ T7998]  ? sctp_add_bind_addr+0x89/0x350
[  316.647700][ T7998]  __kmem_cache_alloc_node+0x4f/0x270
[  316.653135][ T7998]  ? sctp_add_bind_addr+0x89/0x350
[  316.658312][ T7998]  kmalloc_trace+0x26/0xe0
[  316.662792][ T7998]  sctp_add_bind_addr+0x89/0x350
[  316.667785][ T7998]  sctp_copy_local_addr_list+0x317/0x4d0
[  316.673474][ T7998]  ? sctp_copy_local_addr_list+0xa0/0x4d0
[  316.679275][ T7998]  ? sctp_do_8_2_transport_strike+0x900/0x900
[  316.685496][ T7998]  ? sctp_v4_is_any+0x31/0x50
[  316.690232][ T7998]  ? sctp_copy_one_addr+0x93/0x660
[  316.695399][ T7998]  sctp_bind_addr_copy+0xaf/0x3c0
[  316.700484][ T7998]  ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190
[  316.706886][ T7998]  sctp_connect_new_asoc+0x2f5/0x6a0
[  316.712218][ T7998]  ? __sctp_connect+0xd80/0xd80
[  316.717106][ T7998]  ? __local_bh_enable_ip+0x136/0x1c0
[  316.722514][ T7998]  ? bpf_lsm_sctp_bind_connect+0x5/0x10
[  316.728097][ T7998]  ? security_sctp_bind_connect+0x85/0xb0
[  316.733861][ T7998]  sctp_sendmsg+0x1686/0x2940
[  316.738675][ T7998]  ? sctp_getsockopt+0x8a0/0x8a0
[  316.743911][ T7998]  ? __might_fault+0xa6/0x120
[  316.748615][ T7998]  ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0
[  316.755059][ T7998]  ? aa_sock_msg_perm+0x94/0x150
[  316.760061][ T7998]  ? inet_sendmsg+0xca/0x2a0
[  316.764689][ T7998]  ? inet_send_prepare+0x250/0x250
[  316.769930][ T7998]  ____sys_sendmsg+0x5ed/0x9a0
[  316.774749][ T7998]  ? __sys_sendmsg_sock+0x30/0x30
[  316.779847][ T7998]  ? __import_iovec+0x306/0x510
[  316.784761][ T7998]  ? import_iovec+0x6f/0xa0
[  316.789299][ T7998]  ___sys_sendmsg+0x2a2/0x360
[  316.794023][ T7998]  ? __sys_sendmsg+0x2a0/0x2a0
[  316.798836][ T7998]  ? __lock_acquire+0x7c40/0x7c40
[  316.803915][ T7998]  __se_sys_sendmsg+0x1c3/0x2b0
[  316.808801][ T7998]  ? __x64_sys_sendmsg+0x80/0x80
[  316.813793][ T7998]  ? lockdep_hardirqs_on+0x94/0x140
[  316.819022][ T7998]  do_syscall_64+0x4c/0xa0
[  316.823473][ T7998]  ? clear_bhb_loop+0x60/0xb0
[  316.828312][ T7998]  ? clear_bhb_loop+0x60/0xb0
[  316.833113][ T7998]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  316.839036][ T7998] RIP: 0033:0x7f3fb399de99
[  316.843561][ T7998] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  316.863285][ T7998] RSP: 002b:00007f3fb491a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  316.871747][ T7998] RAX: ffffffffffffffda RBX: 00007f3fb3c25fa0 RCX: 00007f3fb399de99
[  316.879771][ T7998] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[  316.887884][ T7998] RBP: 00007f3fb491a090 R08: 0000000000000000 R09: 0000000000000000
[  316.895877][ T7998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  316.903869][ T7998] R13: 00007f3fb3c26038 R14: 00007f3fb3c25fa0 R15: 00007ffe0d3a8a78
[  316.911892][ T7998]  </TASK>
[  316.917904][ T7999] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.1183'.
[  316.978789][ T8002] netlink: 'syz.0.1185': attribute type 3 has an invalid length.
[  317.012644][ T8002] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1185'.
[  317.209091][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  317.215575][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  317.965742][ T8027] netlink: 'syz.3.1195': attribute type 29 has an invalid length.
[  318.104033][ T8027] netlink: 'syz.3.1195': attribute type 29 has an invalid length.
[  318.170917][ T8034] netlink: 'syz.3.1195': attribute type 29 has an invalid length.
[  318.270114][ T8027] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1195'.
[  318.450124][ T8027] netlink: 'syz.3.1195': attribute type 29 has an invalid length.
[  318.693479][ T8039] mac80211_hwsim hwsim12 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  318.885772][ T8048] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1200'.
[  319.163913][ T8055] netlink: 61967 bytes leftover after parsing attributes in process `syz.4.1205'.
[  320.889661][ T5992] wlan1: Trigger new scan to find an IBSS to join
[  321.184663][ T5992] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  321.819093][ T8094] validate_nla: 1 callbacks suppressed
[  321.819113][ T8094] netlink: 'syz.1.1213': attribute type 3 has an invalid length.
[  321.842235][ T8094] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1213'.
[  322.053968][ T8098] netlink: 'syz.3.1215': attribute type 1 has an invalid length.
[  322.188468][ T8098] netlink: 'syz.3.1215': attribute type 1 has an invalid length.
[  322.229732][ T8098] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.1215'.
[  322.600263][ T5992] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  323.074421][ T8136] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.1224'.
[  323.297453][ T8135] netlink: 'syz.0.1225': attribute type 10 has an invalid length.
[  323.348179][ T8141] netlink: 'syz.3.1227': attribute type 3 has an invalid length.
[  323.396915][ T8141] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1227'.
[  323.935949][ T6022] wlan1: Trigger new scan to find an IBSS to join
[  324.544007][ T8135] 8021q: adding VLAN 0 to HW filter on device batadv0
[  324.571296][ T8135] team0: Port device batadv0 added
[  325.167710][ T6049] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  326.254555][ T8181] netlink: 'syz.0.1238': attribute type 10 has an invalid length.
[  326.615606][ T8193] netlink: 'syz.1.1241': attribute type 3 has an invalid length.
[  326.640453][ T8193] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1241'.
[  326.745167][ T8192] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.1240'.
[  327.482227][ T8212] netlink: 'syz.1.1247': attribute type 29 has an invalid length.
[  327.560925][ T8212] netlink: 'syz.1.1247': attribute type 29 has an invalid length.
[  327.609895][ T8213] netlink: 'syz.1.1247': attribute type 29 has an invalid length.
[  327.826996][ T8218] netlink: 'syz.4.1248': attribute type 29 has an invalid length.
[  327.861592][ T8218] netlink: 'syz.4.1248': attribute type 29 has an invalid length.
[  327.929714][ T6049] wlan1: Trigger new scan to find an IBSS to join
[  327.937127][ T8223] netlink: 'syz.4.1248': attribute type 29 has an invalid length.
[  328.422833][ T8229] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1253'.
[  328.555001][ T8239] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.1255'.
[  328.849018][ T8244] FAULT_INJECTION: forcing a failure.
[  328.849018][ T8244] name failslab, interval 1, probability 0, space 0, times 0
[  328.897347][ T8244] CPU: 1 PID: 8244 Comm: syz.4.1256 Not tainted syzkaller #0
[  328.904810][ T8244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  328.914913][ T8244] Call Trace:
[  328.918230][ T8244]  <TASK>
[  328.921216][ T8244]  dump_stack_lvl+0x188/0x24e
[  328.925960][ T8244]  ? show_regs_print_info+0x12/0x12
[  328.931227][ T8244]  ? load_image+0x410/0x410
[  328.935791][ T8244]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  328.941872][ T8244]  ? __lock_acquire+0x7c40/0x7c40
[  328.946961][ T8244]  should_fail_ex+0x390/0x4c0
[  328.951691][ T8244]  should_failslab+0x5/0x20
[  328.956242][ T8244]  slab_pre_alloc_hook+0x59/0x300
[  328.961324][ T8244]  kmem_cache_alloc+0x56/0x2f0
[  328.966152][ T8244]  ? __build_skb+0x27/0x3b0
[  328.970739][ T8244]  __build_skb+0x27/0x3b0
[  328.975145][ T8244]  ? build_skb+0x14/0x230
[  328.979534][ T8244]  build_skb+0x1e/0x230
[  328.983752][ T8244]  bpf_prog_test_run_skb+0x38d/0x18e0
[  328.989202][ T8244]  ? __fget_files+0x28/0x460
[  328.993849][ T8244]  ? __fget_files+0x3fc/0x460
[  328.998589][ T8244]  ? cpu_online+0xa0/0xa0
[  329.002979][ T8244]  bpf_prog_test_run+0x31c/0x390
[  329.007997][ T8244]  __sys_bpf+0x62b/0x780
[  329.012307][ T8244]  ? bpf_link_show_fdinfo+0x380/0x380
[  329.017754][ T8244]  ? lock_chain_count+0x20/0x20
[  329.022670][ T8244]  __x64_sys_bpf+0x78/0x90
[  329.027250][ T8244]  do_syscall_64+0x4c/0xa0
[  329.031724][ T8244]  ? clear_bhb_loop+0x60/0xb0
[  329.036445][ T8244]  ? clear_bhb_loop+0x60/0xb0
[  329.041177][ T8244]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  329.047130][ T8244] RIP: 0033:0x7f1786f9de99
[  329.051588][ T8244] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  329.071245][ T8244] RSP: 002b:00007f1787ecb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  329.079743][ T8244] RAX: ffffffffffffffda RBX: 00007f1787225fa0 RCX: 00007f1786f9de99
[  329.087830][ T8244] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a
[  329.095883][ T8244] RBP: 00007f1787ecb090 R08: 0000000000000000 R09: 0000000000000000
[  329.103947][ T8244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  329.111977][ T8244] R13: 00007f1787226038 R14: 00007f1787225fa0 R15: 00007ffe24fdff38
[  329.120021][ T8244]  </TASK>
[  329.219911][ T5992] wlan1: Creating new IBSS network, BSSID 52:72:3d:1b:61:8a
[  329.344242][ T8253] netlink: 'syz.1.1260': attribute type 2 has an invalid length.
[  329.364732][ T8253] netlink: 'syz.1.1260': attribute type 4 has an invalid length.
[  329.383200][ T8253] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1260'.
[  329.771125][ T8264] netlink: 'syz.1.1263': attribute type 29 has an invalid length.
[  329.800273][ T8264] netlink: 'syz.1.1263': attribute type 29 has an invalid length.
[  329.824296][ T8265] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1263'.
[  330.453233][ T8282] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1268'.
[  330.841911][ T8287] netlink: 61967 bytes leftover after parsing attributes in process `syz.4.1269'.
[  331.010424][ T8289] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1270'.
[  331.367403][ T8306] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1276'.
[  332.074914][ T8330] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1284'.
[  332.425804][ T8344] FAULT_INJECTION: forcing a failure.
[  332.425804][ T8344] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  332.452408][ T8344] CPU: 0 PID: 8344 Comm: syz.2.1289 Not tainted syzkaller #0
[  332.460408][ T8344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  332.470689][ T8344] Call Trace:
[  332.474023][ T8344]  <TASK>
[  332.476997][ T8344]  dump_stack_lvl+0x188/0x24e
[  332.481740][ T8344]  ? show_regs_print_info+0x12/0x12
[  332.486995][ T8344]  ? load_image+0x410/0x410
[  332.491552][ T8344]  ? __lock_acquire+0x7c40/0x7c40
[  332.496642][ T8344]  should_fail_ex+0x390/0x4c0
[  332.501377][ T8344]  _copy_from_user+0x2c/0x170
[  332.506101][ T8344]  iovec_from_user+0x143/0x360
[  332.511137][ T8344]  __import_iovec+0x6c/0x510
[  332.515797][ T8344]  import_iovec+0x6f/0xa0
[  332.520190][ T8344]  ___sys_sendmsg+0x252/0x360
[  332.524936][ T8344]  ? __sys_sendmsg+0x2a0/0x2a0
[  332.529778][ T8344]  ? __lock_acquire+0x7c40/0x7c40
[  332.534887][ T8344]  __se_sys_sendmsg+0x1c3/0x2b0
[  332.539798][ T8344]  ? __x64_sys_sendmsg+0x80/0x80
[  332.544812][ T8344]  ? lockdep_hardirqs_on+0x94/0x140
[  332.550066][ T8344]  do_syscall_64+0x4c/0xa0
[  332.554712][ T8344]  ? clear_bhb_loop+0x60/0xb0
[  332.559441][ T8344]  ? clear_bhb_loop+0x60/0xb0
[  332.564187][ T8344]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  332.570129][ T8344] RIP: 0033:0x7f3fb399de99
[  332.574586][ T8344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  332.594246][ T8344] RSP: 002b:00007f3fb491a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  332.602723][ T8344] RAX: ffffffffffffffda RBX: 00007f3fb3c25fa0 RCX: 00007f3fb399de99
[  332.610851][ T8344] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003
[  332.618904][ T8344] RBP: 00007f3fb491a090 R08: 0000000000000000 R09: 0000000000000000
[  332.627017][ T8344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  332.635036][ T8344] R13: 00007f3fb3c26038 R14: 00007f3fb3c25fa0 R15: 00007ffe0d3a8a78
[  332.643103][ T8344]  </TASK>
[  335.935454][ T8351] validate_nla: 5 callbacks suppressed
[  335.935474][ T8351] netlink: 'syz.4.1291': attribute type 29 has an invalid length.
[  335.970237][ T8351] netlink: 'syz.4.1291': attribute type 29 has an invalid length.
[  335.981735][ T8351] netlink: 'syz.4.1291': attribute type 29 has an invalid length.
[  336.017408][ T8351] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1291'.
[  336.129605][ T8351] netlink: 'syz.4.1291': attribute type 29 has an invalid length.
[  336.672609][ T8364] netlink: 'syz.4.1296': attribute type 21 has an invalid length.
[  336.693777][ T8364] netlink: 'syz.4.1296': attribute type 20 has an invalid length.
[  337.113695][ T8380] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1302'.
[  337.842752][ T8393] netlink: 'syz.0.1306': attribute type 29 has an invalid length.
[  339.939351][ T6022] wlan1: Trigger new scan to find an IBSS to join
[  340.750448][ T8391] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1305'.
[  340.768032][ T8393] netlink: 'syz.0.1306': attribute type 29 has an invalid length.
[  340.784370][ T8398] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1306'.
[  341.447359][ T8424] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1315'.
[  341.513294][ T8430] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1318'.
[  341.574218][ T8429] FAULT_INJECTION: forcing a failure.
[  341.574218][ T8429] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  341.616222][ T8429] CPU: 0 PID: 8429 Comm: syz.2.1317 Not tainted syzkaller #0
[  341.623705][ T8429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  341.633950][ T8429] Call Trace:
[  341.637290][ T8429]  <TASK>
[  341.640271][ T8429]  dump_stack_lvl+0x188/0x24e
[  341.645018][ T8429]  ? show_regs_print_info+0x12/0x12
[  341.650302][ T8429]  ? load_image+0x410/0x410
[  341.654889][ T8429]  ? __lock_acquire+0x7c40/0x7c40
[  341.659983][ T8429]  ? perf_trace_run_bpf_submit+0xf3/0x1c0
[  341.665786][ T8429]  should_fail_ex+0x390/0x4c0
[  341.670544][ T8429]  _copy_from_user+0x2c/0x170
[  341.675289][ T8429]  ___sys_sendmsg+0x1c3/0x360
[  341.680048][ T8429]  ? __sys_sendmsg+0x2a0/0x2a0
[  341.684923][ T8429]  ? __lock_acquire+0x7c40/0x7c40
[  341.690059][ T8429]  __se_sys_sendmsg+0x1c3/0x2b0
[  341.694972][ T8429]  ? perf_trace_preemptirq_template+0x268/0x320
[  341.701285][ T8429]  ? __x64_sys_sendmsg+0x80/0x80
[  341.706319][ T8429]  ? lockdep_hardirqs_on+0x94/0x140
[  341.711581][ T8429]  do_syscall_64+0x4c/0xa0
[  341.716062][ T8429]  ? clear_bhb_loop+0x60/0xb0
[  341.720806][ T8429]  ? clear_bhb_loop+0x60/0xb0
[  341.725811][ T8429]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  341.731768][ T8429] RIP: 0033:0x7f3fb399de99
[  341.736244][ T8429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  341.756094][ T8429] RSP: 002b:00007f3fb491a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  341.764673][ T8429] RAX: ffffffffffffffda RBX: 00007f3fb3c25fa0 RCX: 00007f3fb399de99
[  341.772715][ T8429] RDX: 0000000000000040 RSI: 0000200000000080 RDI: 000000000000000b
[  341.780743][ T8429] RBP: 00007f3fb491a090 R08: 0000000000000000 R09: 0000000000000000
[  341.788777][ T8429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  341.796811][ T8429] R13: 00007f3fb3c26038 R14: 00007f3fb3c25fa0 R15: 00007ffe0d3a8a78
[  341.804883][ T8429]  </TASK>
[  342.116331][ T8439] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1321'.
[  344.841896][ T8443] ==================================================================
[  344.850134][ T8443] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6c9/0x920
[  344.857989][ T8443] Write of size 96 at addr ffff888077e32d90 by task syz.4.1322/8443
[  344.866018][ T8443] 
[  344.868375][ T8443] CPU: 0 PID: 8443 Comm: syz.4.1322 Not tainted syzkaller #0
[  344.875790][ T8443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  344.885975][ T8443] Call Trace:
[  344.889292][ T8443]  <TASK>
[  344.892252][ T8443]  dump_stack_lvl+0x188/0x24e
[  344.896984][ T8443]  ? __lock_acquire+0x7c40/0x7c40
[  344.902041][ T8443]  ? show_regs_print_info+0x12/0x12
[  344.907271][ T8443]  ? load_image+0x410/0x410
[  344.911803][ T8443]  ? __virt_addr_valid+0x467/0x540
[  344.916942][ T8443]  ? __bpf_get_stackid+0x6c9/0x920
[  344.922086][ T8443]  print_report+0xa8/0x210
[  344.926547][ T8443]  kasan_report+0x10b/0x140
[  344.931175][ T8443]  ? __bpf_get_stackid+0x6c9/0x920
[  344.936408][ T8443]  kasan_check_range+0x235/0x290
[  344.941380][ T8443]  ? __bpf_get_stackid+0x6c9/0x920
[  344.946517][ T8443]  memcpy+0x3c/0x60
[  344.950396][ T8443]  __bpf_get_stackid+0x6c9/0x920
[  344.955365][ T8443]  bpf_get_stackid_pe+0x33f/0x400
[  344.960422][ T8443]  bpf_prog_ee9fdca00c0e1e15+0x28/0x3d
[  344.965900][ T8443]  bpf_overflow_handler+0x50b/0x790
[  344.971123][ T8443]  ? bpf_overflow_handler+0xd9/0x790
[  344.976436][ T8443]  ? perf_swevent_overflow+0x230/0x230
[  344.981937][ T8443]  ? mark_lock+0x94/0x320
[  344.986409][ T8443]  ? __perf_event_account_interrupt+0x187/0x280
[  344.992690][ T8443]  __perf_event_overflow+0x457/0x630
[  344.998008][ T8443]  ? perf_swevent_event+0x1d5/0x570
[  345.003248][ T8443]  perf_swevent_event+0x315/0x570
[  345.008306][ T8443]  ? perf_tp_event+0xc10/0xc10
[  345.013105][ T8443]  ? mark_lock+0x94/0x320
[  345.017493][ T8443]  ___perf_sw_event+0x498/0x6d0
[  345.022375][ T8443]  ? ___perf_sw_event+0x184/0x6d0
[  345.027607][ T8443]  ? perf_swevent_put_recursion_context+0xb0/0xb0
[  345.034069][ T8443]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  345.040086][ T8443]  ? lock_chain_count+0x20/0x20
[  345.044991][ T8443]  __perf_sw_event+0x135/0x260
[  345.049844][ T8443]  do_user_addr_fault+0x497/0xb20
[  345.054914][ T8443]  ? trace_hardirqs_off_finish+0x86/0x180
[  345.060692][ T8443]  exc_page_fault+0x60/0x100
[  345.065416][ T8443]  asm_exc_page_fault+0x22/0x30
[  345.070383][ T8443] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40
[  345.077022][ T8443] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 <f3> a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90
[  345.096691][ T8443] RSP: 0018:ffffc9000cdef628 EFLAGS: 00050206
[  345.102879][ T8443] RAX: ffffffff84131101 RBX: 0000000000000e88 RCX: 0000000000000e88
[  345.110889][ T8443] RDX: 0000000000000e88 RSI: ffff88807abb2000 RDI: 0000200000002200
[  345.119146][ T8443] RBP: 0000000000000000 R08: ffff88807abb2e87 R09: 1ffff1100f5765d0
[  345.127160][ T8443] R10: dffffc0000000000 R11: ffffed100f5765d1 R12: 00007fffffffe178
[  345.135248][ T8443] R13: 0000000000000e88 R14: ffff88807abb2000 R15: 0000200000002200
[  345.143287][ T8443]  ? copyout+0xc1/0x120
[  345.147488][ T8443]  copyout+0xe7/0x120
[  345.151505][ T8443]  _copy_to_iter+0x482/0x1050
[  345.156252][ T8443]  ? iov_iter_init+0x1f0/0x1f0
[  345.161046][ T8443]  ? __virt_addr_valid+0x188/0x540
[  345.166211][ T8443]  ? __virt_addr_valid+0x467/0x540
[  345.171363][ T8443]  ? __phys_addr_symbol+0x2b/0x70
[  345.176598][ T8443]  ? __check_object_size+0x4f6/0xa70
[  345.181913][ T8443]  __skb_datagram_iter+0xde/0x740
[  345.186967][ T8443]  ? sock_load_diag_module+0x130/0x130
[  345.192482][ T8443]  ? skb_copy_datagram_iter+0x290/0x290
[  345.198061][ T8443]  skb_copy_datagram_iter+0xd7/0x290
[  345.203381][ T8443]  netlink_recvmsg+0x2d0/0xe00
[  345.208187][ T8443]  ? netlink_sendmsg+0xbd0/0xbd0
[  345.213158][ T8443]  ? aa_af_perm+0x340/0x340
[  345.217689][ T8443]  ? __might_fault+0xa6/0x120
[  345.222390][ T8443]  ? bpf_lsm_socket_recvmsg+0x5/0x10
[  345.227791][ T8443]  ? security_socket_recvmsg+0x85/0xb0
[  345.233285][ T8443]  ? netlink_sendmsg+0xbd0/0xbd0
[  345.238339][ T8443]  ____sys_recvmsg+0x2c8/0x5b0
[  345.243142][ T8443]  ? __sys_recvmsg_sock+0x40/0x40
[  345.248205][ T8443]  ? import_iovec+0x6f/0xa0
[  345.252752][ T8443]  ___sys_recvmsg+0x210/0x590
[  345.257461][ T8443]  ? __sys_recvmsg+0x2a0/0x2a0
[  345.262351][ T8443]  ? __fget_files+0x3fc/0x460
[  345.267150][ T8443]  __x64_sys_recvmsg+0x20d/0x2e0
[  345.272144][ T8443]  ? ___sys_recvmsg+0x590/0x590
[  345.277028][ T8443]  ? syscall_enter_from_user_mode+0x2a/0x80
[  345.282953][ T8443]  do_syscall_64+0x4c/0xa0
[  345.287403][ T8443]  ? clear_bhb_loop+0x60/0xb0
[  345.292112][ T8443]  ? clear_bhb_loop+0x60/0xb0
[  345.297166][ T8443]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  345.303086][ T8443] RIP: 0033:0x7f1786f9de99
[  345.307520][ T8443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  345.327246][ T8443] RSP: 002b:00007f1787ecb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  345.335708][ T8443] RAX: ffffffffffffffda RBX: 00007f1787225fa0 RCX: 00007f1786f9de99
[  345.343727][ T8443] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000008
[  345.351739][ T8443] RBP: 00007f1787033eaf R08: 0000000000000000 R09: 0000000000000000
[  345.359737][ T8443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  345.367735][ T8443] R13: 00007f1787226038 R14: 00007f1787225fa0 R15: 00007ffe24fdff38
[  345.375839][ T8443]  </TASK>
[  345.378893][ T8443] 
[  345.381235][ T8443] Allocated by task 8443:
[  345.385583][ T8443]  kasan_set_track+0x4b/0x70
[  345.390206][ T8443]  __kasan_kmalloc+0x8e/0xa0
[  345.395035][ T8443]  __kmalloc_node+0xb2/0x240
[  345.399662][ T8443]  bpf_map_area_alloc+0x47/0xe0
[  345.404533][ T8443]  prealloc_elems_and_freelist+0x86/0x1c0
[  345.410273][ T8443]  stack_map_alloc+0x386/0x510
[  345.415060][ T8443]  map_create+0x524/0xff0
[  345.419419][ T8443]  __sys_bpf+0x38b/0x780
[  345.423692][ T8443]  __x64_sys_bpf+0x78/0x90
[  345.428176][ T8443]  do_syscall_64+0x4c/0xa0
[  345.432617][ T8443]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  345.438623][ T8443] 
[  345.440966][ T8443] The buggy address belongs to the object at ffff888077e32d80
[  345.440966][ T8443]  which belongs to the cache kmalloc-cg-64 of size 64
[  345.455382][ T8443] The buggy address is located 16 bytes inside of
[  345.455382][ T8443]  64-byte region [ffff888077e32d80, ffff888077e32dc0)
[  345.468525][ T8443] 
[  345.470870][ T8443] The buggy address belongs to the physical page:
[  345.477396][ T8443] page:ffffea0001df8c80 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888077e32e80 pfn:0x77e32
[  345.488972][ T8443] memcg:ffff888078d15001
[  345.493252][ T8443] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff)
[  345.500838][ T8443] raw: 00fff00000000200 ffffea0001618340 dead000000000006 ffff888017442780
[  345.509526][ T8443] raw: ffff888077e32e80 0000000080200018 00000001ffffffff ffff888078d15001
[  345.518123][ T8443] page dumped because: kasan: bad access detected
[  345.524567][ T8443] page_owner tracks the page as allocated
[  345.530311][ T8443] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 4283, tgid 4283 (syz-executor), ts 120401616069, free_ts 120401041744
[  345.548738][ T8443]  post_alloc_hook+0x173/0x1a0
[  345.553537][ T8443]  get_page_from_freelist+0x206b/0x2180
[  345.559115][ T8443]  __alloc_pages+0x1ec/0x4f0
[  345.563731][ T8443]  alloc_slab_page+0x5d/0x180
[  345.568433][ T8443]  new_slab+0x87/0x2d0
[  345.572521][ T8443]  ___slab_alloc+0xbc5/0x1240
[  345.577217][ T8443]  __kmem_cache_alloc_node+0x126/0x270
[  345.582704][ T8443]  kmalloc_trace+0x26/0xe0
[  345.587169][ T8443]  alloc_fdtable+0xca/0x2c0
[  345.591790][ T8443]  dup_fd+0x743/0xa20
[  345.595887][ T8443]  copy_files+0x72/0xe0
[  345.600153][ T8443]  copy_process+0x1862/0x40c0
[  345.604919][ T8443]  kernel_clone+0x24b/0x900
[  345.609477][ T8443]  __x64_sys_clone+0x1a7/0x220
[  345.614284][ T8443]  do_syscall_64+0x4c/0xa0
[  345.618753][ T8443]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  345.624779][ T8443] page last free stack trace:
[  345.629480][ T8443]  free_unref_page_prepare+0x8e5/0x9e0
[  345.635081][ T8443]  free_unref_page+0x2e/0x3f0
[  345.639885][ T8443]  __vunmap+0x874/0xa40
[  345.644100][ T8443]  __do_replace+0x86d/0x980
[  345.648742][ T8443]  do_ip6t_set_ctl+0xb3d/0xe10
[  345.653728][ T8443]  nf_setsockopt+0x25f/0x280
[  345.658355][ T8443]  __sys_setsockopt+0x2bf/0x3d0
[  345.663258][ T8443]  __x64_sys_setsockopt+0xb1/0xc0
[  345.668855][ T8443]  do_syscall_64+0x4c/0xa0
[  345.673399][ T8443]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  345.679330][ T8443] 
[  345.681693][ T8443] Memory state around the buggy address:
[  345.687358][ T8443]  ffff888077e32c80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  345.695455][ T8443]  ffff888077e32d00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  345.703573][ T8443] >ffff888077e32d80: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc
[  345.711751][ T8443]                                   ^
[  345.717202][ T8443]  ffff888077e32e00: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  345.725840][ T8443]  ffff888077e32e80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  345.733939][ T8443] ==================================================================
[  345.742129][ T8443] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  345.749377][ T8443] CPU: 0 PID: 8443 Comm: syz.4.1322 Not tainted syzkaller #0
[  345.756779][ T8443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  345.767234][ T8443] Call Trace:
[  345.770543][ T8443]  <TASK>
[  345.773513][ T8443]  dump_stack_lvl+0x188/0x24e
[  345.778433][ T8443]  ? memcpy+0x3c/0x60
[  345.782535][ T8443]  ? show_regs_print_info+0x12/0x12
[  345.787769][ T8443]  ? load_image+0x410/0x410
[  345.792313][ T8443]  panic+0x2d3/0x710
[  345.796248][ T8443]  ? bpf_jit_dump+0xd0/0xd0
[  345.800788][ T8443]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  345.806807][ T8443]  ? _raw_spin_unlock+0x40/0x40
[  345.811698][ T8443]  ? print_memory_metadata+0x314/0x400
[  345.817199][ T8443]  check_panic_on_warn+0x80/0xa0
[  345.822182][ T8443]  ? __bpf_get_stackid+0x6c9/0x920
[  345.827379][ T8443]  end_report+0x66/0x110
[  345.831664][ T8443]  kasan_report+0x118/0x140
[  345.836212][ T8443]  ? __bpf_get_stackid+0x6c9/0x920
[  345.841376][ T8443]  kasan_check_range+0x235/0x290
[  345.846356][ T8443]  ? __bpf_get_stackid+0x6c9/0x920
[  345.851525][ T8443]  memcpy+0x3c/0x60
[  345.855361][ T8443]  __bpf_get_stackid+0x6c9/0x920
[  345.860333][ T8443]  bpf_get_stackid_pe+0x33f/0x400
[  345.865396][ T8443]  bpf_prog_ee9fdca00c0e1e15+0x28/0x3d
[  345.870896][ T8443]  bpf_overflow_handler+0x50b/0x790
[  345.876127][ T8443]  ? bpf_overflow_handler+0xd9/0x790
[  345.881452][ T8443]  ? perf_swevent_overflow+0x230/0x230
[  345.886947][ T8443]  ? mark_lock+0x94/0x320
[  345.891498][ T8443]  ? __perf_event_account_interrupt+0x187/0x280
[  345.897782][ T8443]  __perf_event_overflow+0x457/0x630
[  345.903109][ T8443]  ? perf_swevent_event+0x1d5/0x570
[  345.908465][ T8443]  perf_swevent_event+0x315/0x570
[  345.913534][ T8443]  ? perf_tp_event+0xc10/0xc10
[  345.918434][ T8443]  ? mark_lock+0x94/0x320
[  345.922970][ T8443]  ___perf_sw_event+0x498/0x6d0
[  345.927864][ T8443]  ? ___perf_sw_event+0x184/0x6d0
[  345.932926][ T8443]  ? perf_swevent_put_recursion_context+0xb0/0xb0
[  345.939589][ T8443]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  345.945900][ T8443]  ? lock_chain_count+0x20/0x20
[  345.950807][ T8443]  __perf_sw_event+0x135/0x260
[  345.955876][ T8443]  do_user_addr_fault+0x497/0xb20
[  345.961075][ T8443]  ? trace_hardirqs_off_finish+0x86/0x180
[  345.966835][ T8443]  exc_page_fault+0x60/0x100
[  345.971459][ T8443]  asm_exc_page_fault+0x22/0x30
[  345.976436][ T8443] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40
[  345.983056][ T8443] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 <f3> a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90
[  346.002693][ T8443] RSP: 0018:ffffc9000cdef628 EFLAGS: 00050206
[  346.008791][ T8443] RAX: ffffffff84131101 RBX: 0000000000000e88 RCX: 0000000000000e88
[  346.016871][ T8443] RDX: 0000000000000e88 RSI: ffff88807abb2000 RDI: 0000200000002200
[  346.024865][ T8443] RBP: 0000000000000000 R08: ffff88807abb2e87 R09: 1ffff1100f5765d0
[  346.032862][ T8443] R10: dffffc0000000000 R11: ffffed100f5765d1 R12: 00007fffffffe178
[  346.040956][ T8443] R13: 0000000000000e88 R14: ffff88807abb2000 R15: 0000200000002200
[  346.048971][ T8443]  ? copyout+0xc1/0x120
[  346.053165][ T8443]  copyout+0xe7/0x120
[  346.057200][ T8443]  _copy_to_iter+0x482/0x1050
[  346.061912][ T8443]  ? iov_iter_init+0x1f0/0x1f0
[  346.066796][ T8443]  ? __virt_addr_valid+0x188/0x540
[  346.071942][ T8443]  ? __virt_addr_valid+0x467/0x540
[  346.077087][ T8443]  ? __phys_addr_symbol+0x2b/0x70
[  346.082144][ T8443]  ? __check_object_size+0x4f6/0xa70
[  346.087465][ T8443]  __skb_datagram_iter+0xde/0x740
[  346.092544][ T8443]  ? sock_load_diag_module+0x130/0x130
[  346.098031][ T8443]  ? skb_copy_datagram_iter+0x290/0x290
[  346.103604][ T8443]  skb_copy_datagram_iter+0xd7/0x290
[  346.108917][ T8443]  netlink_recvmsg+0x2d0/0xe00
[  346.113748][ T8443]  ? netlink_sendmsg+0xbd0/0xbd0
[  346.118738][ T8443]  ? aa_af_perm+0x340/0x340
[  346.123273][ T8443]  ? __might_fault+0xa6/0x120
[  346.128088][ T8443]  ? bpf_lsm_socket_recvmsg+0x5/0x10
[  346.133417][ T8443]  ? security_socket_recvmsg+0x85/0xb0
[  346.138990][ T8443]  ? netlink_sendmsg+0xbd0/0xbd0
[  346.143956][ T8443]  ____sys_recvmsg+0x2c8/0x5b0
[  346.148753][ T8443]  ? __sys_recvmsg_sock+0x40/0x40
[  346.153817][ T8443]  ? import_iovec+0x6f/0xa0
[  346.158358][ T8443]  ___sys_recvmsg+0x210/0x590
[  346.163082][ T8443]  ? __sys_recvmsg+0x2a0/0x2a0
[  346.167887][ T8443]  ? __fget_files+0x3fc/0x460
[  346.172631][ T8443]  __x64_sys_recvmsg+0x20d/0x2e0
[  346.177615][ T8443]  ? ___sys_recvmsg+0x590/0x590
[  346.182511][ T8443]  ? syscall_enter_from_user_mode+0x2a/0x80
[  346.188526][ T8443]  do_syscall_64+0x4c/0xa0
[  346.193073][ T8443]  ? clear_bhb_loop+0x60/0xb0
[  346.197871][ T8443]  ? clear_bhb_loop+0x60/0xb0
[  346.202610][ T8443]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  346.208624][ T8443] RIP: 0033:0x7f1786f9de99
[  346.213065][ T8443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  346.232706][ T8443] RSP: 002b:00007f1787ecb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  346.241252][ T8443] RAX: ffffffffffffffda RBX: 00007f1787225fa0 RCX: 00007f1786f9de99
[  346.249253][ T8443] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000008
[  346.257266][ T8443] RBP: 00007f1787033eaf R08: 0000000000000000 R09: 0000000000000000
[  346.265345][ T8443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  346.273339][ T8443] R13: 00007f1787226038 R14: 00007f1787225fa0 R15: 00007ffe24fdff38
[  346.281436][ T8443]  </TASK>
[  346.285075][ T8443] Kernel Offset: disabled
[  346.289416][ T8443] Rebooting in 86400 seconds..