last executing test programs:

6m6.043954559s ago: executing program 2 (id=4969):
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000d00), 0x4)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc0189436, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000f80)='cpuset.effective_mems\x00', 0x0, 0x0)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0x0], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r2}, 0x0, 0x0}, 0x20)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"})
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3}, 0x50)
r3 = bpf$ITER_CREATE(0xb, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001140)={0x6, 0x1e, 0x0, 0x0, 0x3, 0xb4, &(0x7f0000000ec0)=""/180, 0x41100, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000fc0)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001080)=[r2, 0xffffffffffffffff, r3, 0x1], &(0x7f00000010c0)=[{0x4, 0x3, 0x8, 0x7}, {0x3, 0x5, 0x3, 0x4}, {0x5, 0x1, 0x1, 0x6}, {0x1, 0x2, 0xc, 0x8}], 0x10, 0x1}, 0x94)
socket$kcm(0x11, 0x3, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xd000000000000000}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
close(0x3)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90224fc60100c024002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

6m4.807026507s ago: executing program 2 (id=4976):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, <r1=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000003000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

6m4.542741553s ago: executing program 2 (id=4982):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000018c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x3}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x4ecb14dfdbcba6a8, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r0}, 0x69)

6m4.276839599s ago: executing program 2 (id=4985):
socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c1300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000048aa008085000000040000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0], 0x50)
socket$kcm(0x10, 0x2, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={0x0, 0x0}, 0x28)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = socket$kcm(0x2a, 0x2, 0x0)
recvmsg(r2, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x120)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0xc)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r3, &(0x7f0000000140)="2669ad47e89d7b5efc2d551eac8acec6989b02680a515777b6b96907ce354bae0493e3d4682bee99beb5a81e29a0125fe858a64ec64f3c98bee55fa11c7411c98f8b21036d", &(0x7f00000003c0)=""/199}, 0x20)
r5 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r5, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000010c0)={r1, 0x0, 0x0}, 0x10)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0)
close(r6)
r7 = socket$kcm(0x1e, 0x1, 0x0)
sendmsg$kcm(r7, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0)
recvmsg(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1}, 0x100)
write$cgroup_devices(r6, &(0x7f00000005c0)=ANY=[], 0xfffffeff)
write$cgroup_pid(r6, 0x0, 0x0)

6m2.575922857s ago: executing program 2 (id=4990):
socket$kcm(0xa, 0x1, 0x0)
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x11c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x36}, 0x48)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0xa, 0x5, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x1000000000000002, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161)
sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380)}], 0x1, &(0x7f0000007880)=ANY=[@ANYBLOB="1100000000000000004003000100000000000000000000001c00000000000000000f00fd08000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="a00500000000000000000000240000000000000000000000070000009404000044108800000000000000000000000000000000001100000000000000000000000100"/76], 0x98}, 0x0)

6m2.298283963s ago: executing program 2 (id=4992):
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYRESDEC=0x0], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$PROG_BIND_MAP(0x23, 0x0, 0x0)
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590200000600002fb96dbcf706e10500000086ddffff1144ee162bd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000003c21880b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000001400)="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", 0x83f}], 0x3}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xff68ee1e9e54fff1, '\x00', 0x0, @fallback=0x842cb948c66bcef7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
r3 = syz_clone(0xef220100, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f0000000140)=r5)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000004800000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014004000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001b40)={r7, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_open_procfs$namespace(r3, &(0x7f0000000180)='ns/mnt\x00')

5m47.18604952s ago: executing program 32 (id=4992):
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYRESDEC=0x0], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$PROG_BIND_MAP(0x23, 0x0, 0x0)
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590200000600002fb96dbcf706e10500000086ddffff1144ee162bd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000003c21880b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000001400)="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", 0x83f}], 0x3}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xff68ee1e9e54fff1, '\x00', 0x0, @fallback=0x842cb948c66bcef7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
r3 = syz_clone(0xef220100, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f0000000140)=r5)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000004800000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014004000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001b40)={r7, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_open_procfs$namespace(r3, &(0x7f0000000180)='ns/mnt\x00')

6.112437344s ago: executing program 0 (id=6580):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f0000000180)=0x8000, 0x12)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x2, 0x1, 0x106)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r2 = socket$kcm(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000280)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fbfffffefff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001300)="b9fb0307683a0600000000000000", 0x0, 0xfffffffa, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50)

5.692308434s ago: executing program 0 (id=6584):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x208, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x100000000000000, 0x80001}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200ff11000000000e1208000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee40021146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x24040084)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001580)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018200000000000006c0000006c0000000200000000000000000000070000000000000000070000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d700000000000000000000000000000000a1d8"], 0x0, 0x86}, 0x28)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r5 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r5, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r5, &(0x7f0000000780)={&(0x7f0000000340)=@l2tp6={0xa, 0x0, 0x248, @mcast1, 0x4}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x238}, 0x4800)
close(r4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000002c0)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd63"], 0xffbf)
socket$kcm(0x29, 0x5, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/..\x00\x82q\xee !\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$inet(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001080)="5c00000027006b04400000006e6cfe000a887ea6ea656700004e000000000090f9c3dc90f8f41f8ecff32c6e020075e300250045586ccda718ad4b4460bc24eab556000000008b1094e6bcfc1c6a51f60a64c9f4d49380ce2e7d0a88", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

5.263268153s ago: executing program 5 (id=6585):
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@rc={0x1f, @none, 0xf1}, 0x80, &(0x7f0000003140)=[{&(0x7f0000000080)="32868a2e60", 0x5}, {&(0x7f00000002c0)="97f9ea06b7a8c418496351c29993f60363a67592076b4af8a597cdbe48fb7ffff0fac6d94b83562fe0f707c3b5", 0x2d}, {&(0x7f0000000540)="57172c2c7b7732fde04c040aed02a43e5aae0f207197965063e429704e26b3d10d02de55b1c3f08a1a058e71948cb8ccf37fb99d20f4afd22845458eda5ac736c9307f8257c59b41a9f67fad95af34569c4c9b008e6d8cf3fb995911043375c22671263a02de98a4a6c90a61592cbd9bb96c9a7786826a25cc581cd893ed378feeceec1f01be6322574bf96c4de1ebbcb764330c33876fd6b4e57b97e26ff89ca4f6d2541c76eec72c89e3e2f7f15f9bdf9017e53fd9f32f30d0c23c2d1566ca68eba8e4e6eb82b494c8b1193d7adc131f3cee3031b9703a49c5f6b821f5858b6078a96d169089af3232ffb9683192dce2f8461228ededddd1de97251096c90124cfa66264cc5affcf230bd9b0471432409cb35563d5a07b84f68e3c735d1f9e459ca8adab0698ead379ecd2677d9f09aec13337b0533625eb7d934fefaecc09bcaa47db0339680550eccddcbe6daaedfb850b8646ba6a921c79ba0509149bffb550a90a738cb8600228c8d2ae4a584abb40e52fd915c86a5753cb943f522902677804d98ca69564a1a8c6c56749a58dfef163d79e8049105a26f10c31083abc2fb2aaf0661deb19ee95716a98cdf8f0713c28f9cf4716f2d3087c666cf5a169e8f70601255e34bfc4484df558684aa7c98d969a8b98da8132834ce349bacb4cfd5eb2ea1a0bddb28eed8fed1a03b13696e44baf809ecb1cb43726a936d80a314756ae59eee4c373e3046421547006084dbcc891681c741f1819865d9b49db0b36a44329e86a40eb732a8d5bfbbb589e9d36966f86f789ef19b470f4951c2d37651ca3ea5d11e32f6bc75b3b712cc232dbe2c54c371a938b2cf57970914945020527b187fd79b84bde2184a708ae52f6aec4711aa109dc1b442c9917f8611c654c999597f3caa0e36fe6c55f20f81e1d81201525cd3c78beaae736a01f2f7f6fbd7d73bb9d39c1f206d9d487bc665fd609cbb2385df311e6b248a6759d0d901f6297772ad767ecbcbcde69d69329905bd6836f8c8390840017e120e1e290f73876b6ac9759eebb32cc2bef99c5347782b1316ae5718ae292970a84715d12a0562d683868256e65f8a6981a1d9b9674eac15e3ced32e113f444a6409237ba3b6ef4f5a0ae7debd008e8c933c3d7785cfa4824d474e258a58ab06ae2af508146b91647a3acff10a6bc21186dd92528f9102fab2fccd74aefb40d03ed6cd23b2ee70281452919921a62ae38cf29b8a57c869fb87d155c9ef43c416d5ef705274c989257721d203af4b09430fe0094986bcb2680d046eb29f08b600235b40eed01dbc7c8fc195f3641c8aa78c3f50dc91d7af4c904ba7508ccdd6cc0dfde9b58661427b2d526c51553140e7b1b55c0f6574b5f48c75140a0d143108773a828bc2cf8d3da5cfc3318f426a8dea7882a881df52ada8e4b17a3fe1559be3821a2fff1a6345b21d1035da3d12808741c3e55031193566108b03b61390023ff86123dff5ce2c860624c67a0d83c929b99fa816205fb8a902b47576c028c34ad7c7ea2c55a59fa0eee80c00a34773f58fcb302b8dd9d62f6244bcb2d5bf448c2a4b2305a4066dd051db09bbed2b8722441dcd8447ba4cb13ae468db2327c34956b7393b1b22ae2e165809d896866cec85ab35dc5eace29c6f814aa2a0e650524941cc1cfd0e8ca6a2e57ce595b53bc3ea6e1d120dcbe8c153433f2c16ebe23e9543e53cb22a2a65101332e53aafff068e78dee4e14d999cd772fa2319740a79214b7dd5ca4e4f5e0ba1ce0834129d6e794a047daad18e9002a38acd69f0ddf7ec6b7aaf7da739d952b85d89504ef2d45f48801d6fa72e7947fc514435619ce7e1129ce7566a90a81396f9cf81e1769f992b0a398d5df5155e3f2d167b8b95d747e29f1bad9bba821ea1a0289392e7ccd72b1f525768bc4e080796353a23efbb1b50f5359e545d6cb1b93b0c4d3f30e665e3a261a1c9fa2cb38fec38f0379f9045bfc18463871447a909916969afcb0f86de3d08ef9d7fe57c4be262739d2497e19dbfa16dc3172d6c609ba674c26d3df49bd15d1ff7c179742784782665f402811e10fb8235e03b62ec64e5570a68d4da1fabbda6ada1fbbada0286a94185de86d0ed986e06b4bb6eeb12452c6c83fa826ac22a88224b53bcbe40c6ce4445f8bf582a222a17614025f607a758118d1d48c90d425eca478580a3351b601c5cf0ce14dee16fead470d5995182852d234243e07811ad4ae705cc1d941e009a58a12224fdc9b6bb03c4d88fce7f7109761e59e0746e7e4b34af3388d1918e2f8669d7072a39c59d2ad95e3de1d347babb218ef0b1265ec3ca7de7b57f5e9c5f7f295799b3983fce4ff05179f9f9ccc951492ffdd5f1d42c20170c1e8061822ceaa2c760fa82be7f3e6edd885c95a9f792a45311c93d7b43e2797219236155b95e9779179175638dd823448dd371a3ad9838105e9268a5dee71b2fcbc7981d1a43bf8c135ab6d044dbc853c4b2991d163e0b89bcad4c3550a3244ca99dc32b8cbecd4c5e87cf2904d8ee3939a3d68bfa082066cc6a27ee12e8c48365122e833a4012613e05cf7c793f57a8c3886fcb6f22db699d09b02f0977abe3dfbc6b069fa6448db1c6325ffc98f2a78a25d820adf8c1fb369298ab455b0668635d38605f015279d49fe215b8248767811231e08103e5b2671499d0e41672d5bf821744d4a2ac442be80780ef7bde14e184f13012ef084451c330f634e39e2f7e90758552a0993bbf09738d9ebe3ec8bc47140469e9c1cde6b351eb7abd367663bd86b989b2adf558575791d8b0a432ad2570a0969fb47b1b89433f5dba8ba330b6d3a9333dddf7e1d305efca168024b1353137d819ca8db92c3a44403a58043627363631be1fa9395e1b0f5c7e0f94d840028598baa3691daba7c6fa8e5d15cda1ca4c7ffc993e87b7fc6dce5e5ba0f84a6928ec1f2a220cebac7d2e74fa31ab4a31b1414da9ac572577c6e3c4e6870614e8c78a9a28bf5fdc4e649b5055a0f850e42c66a6a82a1558cca00c95710c701aa549ed7c4a2b8726eebc5d3da52a9cac824e3d71c1fa81488474b554ec0c274217346826f69ccc3d855277f537fbb8ff958b98c4113d322b89fc09f9cc2dedee017efb60fa89a02d87ceb24de1c79a4dd5438ad3c0c8f82088ff16441b645846f54174bb41aeb67ea61b6c56a859a20bc1c01fbff75e3eb3b9118f4e0c05ad2a83ad0a8c6ddbddd3b7320fe122aea522b76e228ae13b884bdab972bf17d060cbc13dd8e611217276d96ef1c5e018b849a5bbd42033cb0a931f259f1dc2dae94f4577d4b81ce7d0e06dcb44e97e27789067837cabab4d8cb3cbf148e6c8bee4345757ef5cc75659936ac86a08018014c930758657d677372f05534d89998f44cedcde34970d74844d46ef98d128e61eae9def9a0fdd8821469357eba4d668b30c67e17118eb5f0441778dfc5148cbc89248a6eaacb4a8530e9d81eb6aacc211812033845abf47dfcac6cf4710623f7b165e60804deadf1992433fe339a572e9cc3e5647708627ed81f16d058919caf67f8bd9f410ff6d96be0f95974a6b89de933bd4af280449116fb9ee052d7d7a9622bfd64d93b81cd5415155e04ea9eee5c9272157f448d7eeda274576b9258b8de7855ae076eb6978da18a21f96089d4e28ea3c5b98ab5f444dd26ce02ac10391ccf888a5b2bffecae6c027e1d51e2f5ca9c84fad47296469b7081c2b90fafed62a7a9905ff05f0b47492b746799ce9d0275ed92039b0f422def60fd1aa9f67311f0b4ccacdd5852c80ab053de482213087d789feb431da73cdb3b1dcd5d671b2f4cda92f1ac532747c185b42e2e84ed0b169d331035c1484917338d2410b9512f5bd96da3c74c4a09c7ad354c81cd24a20604bdcca6971f6084e907d8864421f7c1a7bd8097b07707206a6c1e185410d0db3e3f0eaadcbab2c00779acf361489642ec498c0553674ab6bc3d7c14b6b68a7a1ab47482d684a6d000393d216442cbb1cb1f518cd40f877c94d99922d7dc27338fa06222591d82ef574f8c7ffaa990fe909fc42e6da12fd6f51baec207e2e1569f305138e8dd27218d0191473c3521417faca9e72b1a044708acb33615bcaa758437f172078778dd3948d3692552385d3230963f4bb873204851da47588a67686dff4e7b5b6659a5bfffeac1bfab1980b542599f1be9e4fcf0ca89594cab61a4cacf5f6712ec5ef34826354630d181126f02b178a934399f4b0c26bc05053efd3e23de7a10911e77c03a47dae2b70d80ffa4bba529ab889602a4543f1175e876d9b84b3687f58e7f003081aad5de355b49e80b582f0ca48adfbd2379147a5a9a7b32f581825013b6aa2d43a00c681b70821f9321736fa8dacf33d395500006b1154227b40aac2f9e4dec6b35d13ed4e5d2d1b059fbc4fd7c48cbf5441de4dd4d49821f09c0849ccdb647f3866b690ddfba796cd3063df23c8091eb2f3598c89356fef1366619bd789e733e0beff435ff248ca5a809952903ff33a85d3d08e1db22ecba4b3390969aef4afeea80745af0f3c82b4e6709d35c24dc50cdb68a489d7a89b4f0e6b75a65beaada3947af520a352ac0be7359368a68afc003e432466ea5729ec0bad723999c65b61c2f16f5f3caeb0036cdd99bcfca9f8269edeb358520ebe7d94c6687c4b3d002bc5a41c1c309cb659e5eceb614342e5e0698e0f4d38e591ecda17923d71703cedcca44d533081efa42cb8c18c0ecf7af11c4ae6e1f2e4ec62a41d4f392e1a7b917b747c2ad6e96d9d82c11cd9a0a6b04bf46a11a1225e07c8c13ad8405f5f5bf578db326ca97d58873700a3a590b335ca93df5e328942ffb4257ac0ef276bdb34f72014994b3a88ac546ee965152379516e81727c49f86aefec58c8481528bb2a306cd07717ae71a28ec63668bb59e0d05cd62caf9204401132b8f2b605db5238c02d8cbc7492371e00aeafe621272e1eff6f124d742279cc846ec376fd23b18e6561c8f799f3bb1e9792ef86beb77ad0ea7977f63f318665c9d277f5bceb5604215066beac77a8a03c33062778f3c2a4f67bbe58c926832778abcc2fe3a69748fd71af263d640d2c701da186fe43dc0d4e209411357e6990bd3ea04d8fb34d192c9d22f6ec4eaf4efd6ca6af63736e6cb8d9fbd9b66bacc61ceba91cdcb8c16da9d7cfc63fb3039ab99b73863c3196ed4d1e84ea2fd8c570ac383c0e5864fd468125866654727516fb10087dd264952035078b35fd6db5d9572768ce33dbd6d6655bcfcfa9650dfaac3c308cd4d48d0cf87e41b51f49af0daad89301dd3a824786edb4185728c1707501dccabf249e55925ca6c22c63a5ad8f9c8639dd5517ed0e42bf04863e7cfa65d6fef36a37b9856ee37f7b2655a86e57a0fc8e7b6e9612e830187722c1e66ce657083a3371f8217cd5da4e6747c6a71ba1d962121697671febac51ab65327a6d1c1462aaefb6d58c11e8997d574008c9f2474b5d59a5aefebd8fd0bff571d66e56fb9cf777d9ebf7dfe584f59acc341555d8f1dc73af2410c4e62c766cb582a2f84cec6fb2a92afba924f8bbd19fddb25bc8f4f6791f63918a61c57c1f8cf2297db44addc35609817817895b40d529243a4936884e061094b132522f6b0b389a73f10974e427cb4086fcf21db12dcf35848c9fec20c9f5d83aeafb2277c0d60e4e8e33c", 0xfbe}], 0x3}, 0x8080)

5.051050268s ago: executing program 5 (id=6587):
socket$kcm(0xa, 0x5, 0x0)
close(0xffffffffffffffff)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)

3.103405531s ago: executing program 5 (id=6590):
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, r0, 0x0, '\x00', 0x0, 0x0, 0x1}, 0x50)
openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'pimreg0\x00', 0x7c2})
close(0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x6d}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x4}, {0x65, 0x0, 0x6, 0x9}}, [@printk={@ld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x2, 0xa, 0x9}, {0x4, 0x0, 0x3, 0x9}, {}, {}, {0x15}}], {{0x5, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c230000)

2.729990789s ago: executing program 4 (id=6593):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000080))
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x15, 0x0, 0x2, 0xfffffffd}]})
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400006400400000791090000000000069010a00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @flow_dissector}, 0x48)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xcfa4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000780)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000000), 0x4)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0)
getpid()
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
write$cgroup_devices(0xffffffffffffffff, 0x0, 0xffdd)

1.408102849s ago: executing program 5 (id=6594):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f0000000180)=0x8000, 0x12)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x2, 0x1, 0x106)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r2 = socket$kcm(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000280)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fbfffffefff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001300)="b9fb0307683a0600000000000000", 0x0, 0xfffffffa, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.395225619s ago: executing program 3 (id=6595):
openat$tun(0xffffffffffffff9c, 0x0, 0x100, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0xf6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r0=>0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000400), &(0x7f0000000440)=[0x0, 0x0], 0x0, 0x5a, &(0x7f0000000600)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000100), &(0x7f0000000680), 0x8, 0x10d8, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x21, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{}, &(0x7f0000000580), &(0x7f00000005c0)=r1}, 0x20)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000080), 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x2}})
recvmsg$kcm(r2, &(0x7f0000001000)={&(0x7f0000000340)=@qipcrtr, 0x80, &(0x7f0000000e80)=[{&(0x7f0000001040)=""/244, 0xf4}, {&(0x7f0000000a80)=""/135, 0x87}, {&(0x7f0000000b40)}, {&(0x7f0000000b80)=""/123, 0x7b}, {&(0x7f0000000c40)=""/65, 0x41}, {&(0x7f0000000cc0)=""/248, 0xf8}, {&(0x7f0000000dc0)=""/161, 0xa1}], 0x7, &(0x7f0000000f00)=""/249, 0xf9}, 0x20)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x2, 0x4, 0x8, 0xf}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x8, 0x2, 0x4}, 0x50)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
mkdirat$cgroup(r2, &(0x7f0000000400)='syz0\x00', 0x1ff)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x19, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000020000000000000000000000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000000000085000000a500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r5, r3}, 0xc)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000540)={r2})

1.395032469s ago: executing program 4 (id=6596):
r0 = socket$kcm(0x2, 0x3, 0x106)
sendmsg$inet(r0, &(0x7f00000016c0)={&(0x7f0000000180)={0x2, 0xebff, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000540)="83ac6f4b9a2ffa25922fee4db5d86075d7965b13", 0x14}, {&(0x7f0000000000)="f4d808a706e14335cc5a706059b96481ef361e4dcfad", 0x16}], 0x2}, 0x0)

1.267311132s ago: executing program 0 (id=6598):
gettid()
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x8}, 0x63c4, 0x20000, 0xc2b6, 0x6, 0x4000000, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2000000020008107090f9becdb4cb96b02000020fd0000010064000000000000", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x61}, {0x6}]})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$TUNGETFILTER(r2, 0x801054db, &(0x7f0000000180)=""/2)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv6\x00\x00s/\x8br\bc_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x90ih\xecd\'%\x11c\x91l,'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)

1.216433423s ago: executing program 4 (id=6599):
r0 = socket$kcm(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xa000000, &(0x7f0000000080)=[{&(0x7f0000000040)="140000001c000b63d25a80648c2594f91c24fc60", 0x14}], 0x1}, 0x0)

1.208189843s ago: executing program 1 (id=6600):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000080))
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x15, 0x0, 0x2, 0xfffffffd}]})
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000400000791090000000000069010a00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @flow_dissector}, 0x48)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xcfa4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000780)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r4 = openat$cgroup_devices(r3, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r4, &(0x7f0000000200)=ANY=[@ANYBLOB='c 1223'], 0xa)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000000), 0x4)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0)
getpid()
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
write$cgroup_devices(0xffffffffffffffff, 0x0, 0xffdd)

994.568528ms ago: executing program 3 (id=6601):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000004a"], 0x48)
unlink(&(0x7f0000000000)='./file0\x00')
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffdd, &(0x7f0000000000)='/proc/0KgOq\xee\x00!\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x10, 0xb, &(0x7f00000009c0)=@framed={{0x18, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit]}, &(0x7f0000000040)='GPL\x00', 0x4, 0xaf, &(0x7f0000000a80)=""/175, 0x0, 0xa}, 0x94)
r1 = socket$kcm(0x11, 0x200000000000002, 0x300)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x541b, &(0x7f0000000080))

976.913448ms ago: executing program 5 (id=6602):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x6, &(0x7f00000001c0)=@framed={{}, [@exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x2, &(0x7f0000000940), 0x10}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x11200, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
r3 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r3, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0x1}, {0x0, 0x2}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0)
sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0)

904.30906ms ago: executing program 0 (id=6603):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xb7}, [], {0x95, 0x0, 0x0, 0xf000000}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x80)

807.120402ms ago: executing program 3 (id=6604):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_config_ext={0x6, 0x3}, 0x4021, 0x80, 0x9183, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) (async)
r0 = socket$kcm(0x2, 0x1000000000000002, 0x0)
write$cgroup_subtree(r0, &(0x7f00000001c0)=ANY=[], 0xfe33) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xffc0) (async, rerun: 64)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000002a00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x50) (async, rerun: 64)
socket$kcm(0xa, 0x0, 0x0) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async, rerun: 32)
getpid() (async, rerun: 32)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x4, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000500), 0x0, 0x2800, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x7) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4040)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x4040) (async)
openat$cgroup_procs(r2, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) (async, rerun: 32)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) (async, rerun: 32)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$inet(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0)

805.727262ms ago: executing program 4 (id=6605):
r0 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x3, 0x1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000100)="f4000900062b8825fe80000000200000dc8b850f238466cc00007a000036dc69611b51818462b400", 0x28}], 0x1}, 0x4000)

751.290883ms ago: executing program 1 (id=6606):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000001000)=ANY=[@ANYBLOB="9feb01001800000000000000440000004400000004000000050000000000000e040000000000000000000000000000010500000008000000010000000000000700000000000000000000000300000000030000000200000000000000006161"], 0x0, 0x60}, 0x28)

730.154774ms ago: executing program 0 (id=6607):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYRES16], 0xffd3)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x6, 0xfe, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x72bd1de2ad10d6f3, 0xfffffffffffffffc, 0xcfb5, 0x1, 0x0, 0x4, 0x0, 0x0, 0x84000, 0x0, 0x1}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x10c040, 0xac5d, 0x0, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(r1, 0x6, 0x9, &(0x7f0000000c40)=r1, 0x4)
r2 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x3, 0x0, 0x1}, 0xffffffffffffffff, 0x4000000000000, 0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3}, &(0x7f00000000c0), &(0x7f0000000100)=r2}, 0x20)

711.063464ms ago: executing program 5 (id=6608):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x208, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x100000000000000, 0x80001}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200ff11000000000e1208000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee40021146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x24040084)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001580)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018200000000000006c0000006c0000000200000000000000000000070000000000000000070000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d700000000000000000000000000000000a1d8"], 0x0, 0x86}, 0x28)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r5 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r5, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r5, &(0x7f0000000780)={&(0x7f0000000340)=@l2tp6={0xa, 0x0, 0x248, @mcast1, 0x4}, 0x80, &(0x7f0000000000)=[{0x0}], 0x1, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x238}, 0x4800)
close(r4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000002c0)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd63"], 0xffbf)
socket$kcm(0x29, 0x5, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/..\x00\x82q\xee !\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$inet(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001080)="5c00000027006b04400000006e6cfe000a887ea6ea656700004e000000000090f9c3dc90f8f41f8ecff32c6e020075e300250045586ccda718ad4b4460bc24eab556000000008b1094e6bcfc1c6a51f60a64c9f4d49380ce2e7d0a88", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

647.418806ms ago: executing program 4 (id=6609):
r0 = socket$kcm(0x2, 0x3, 0x106)
sendmsg$inet(r0, &(0x7f00000016c0)={&(0x7f0000000180)={0x2, 0xebff, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000540)="83ac6f4b9a2ffa25922fee4db5d86075d7965b13", 0x14}, {&(0x7f0000000000)="f4d808a706e14335cc5a706059b96481ef361e4dcfad", 0x16}], 0x2}, 0x0)

625.086246ms ago: executing program 3 (id=6610):
socket$kcm(0x2, 0x922000000001, 0x106)
r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x3, 0x0, 0x1}, 0xffffffffffffffff, 0x4000000000000, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f00000000c0), &(0x7f0000000100)=r0}, 0x20)

589.927127ms ago: executing program 1 (id=6611):
r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r2, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}, @ip_retopts={{0x28, 0x2c00, 0x7, {[@noop, @timestamp_addr={0x44, 0x14, 0x7, 0x1, 0x7, [{@rand_addr=0x64010101}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x5}]}]}}}], 0x48}, 0x200040c4)

552.400068ms ago: executing program 4 (id=6612):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f0000000180)=0x8000, 0x12)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x2, 0x1, 0x106)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket$kcm(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000280)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fbfffffefff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001300)="b9fb0307683a0600000000000000", 0x0, 0xfffffffa, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50)

477.54597ms ago: executing program 0 (id=6613):
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket$kcm(0x11, 0x2, 0x300)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000000800d900760000000000000027000000000000009500000000000000"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)

417.808091ms ago: executing program 1 (id=6614):
socket$kcm(0x29, 0x2, 0x0)
socket$kcm(0x2, 0x1, 0x0)
r0 = socket$kcm(0x21, 0x2, 0x2) (async)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xf6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
socket$kcm(0x21, 0x2, 0x2) (async)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000fcffffff00000000000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) (async)
socket$kcm(0x2, 0xa, 0x2) (async)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x2000000000009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b80, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x26e1, 0x0) (async)
r4 = socket$kcm(0x2, 0x200000000000001, 0x0)
setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f0000000500)=r3, 0x4)
sendmsg$inet(r4, &(0x7f00000004c0)={&(0x7f0000000240)={0x2, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x200440e4) (async)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x15, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc094, 0x2, @perf_bp={0x0, 0xa}, 0x4244, 0x0, 0x11000, 0x4, 0x2, 0x88000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xe000000000000000, 0xffffffffffffffff, 0x7)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={0xffffffffffffffff, 0x27, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
r7 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r7, 0x84, 0x83, &(0x7f0000000000), 0x8)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000fdffffffffffffff00f9c2ed0000afd45d7d472852376e3d397dc39457d3e20adf7881317a093ecc203063e8d1719659851d7d47c5ccf62aee186bcc18004d3fffd647049602c7d1378c485c2f7e40844a78ceaebefb078f8d1c9c3cdb362c8b7f89c964c42dbcfe6ab7160b653e8827ceee107d9bc4f9cd4feae2300e5949c339a1d5f79dce0946854648af27d2e9bf69c3e51caf1a58a4b4a4c7fd29e4b2c6e7a6d075004461d9060cce1bf2cdb1e8329452066ff51c3e9c0e85c1877a27c6fb28c88a3923a7f1ee9e45e510f043c8"], 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYRESOCT=r0, @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r9, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r6, 0x0, 0x69, 0xfd, &(0x7f00000001c0)="b9bfde342ff4d25a6506c601a0b573caccf0319c3baab16081d894c55d609477c01c29a5775a41aacc9ef073a90392a5c4b112f186cf187797de7853c7918a31785017cdb0e7d686b4cfabed183754640aaa9e0a7cb94be1103e52974d848f0598a836d423d82096dd", &(0x7f0000000580)=""/253, 0x505, 0x0, 0x4f, 0xa9, &(0x7f0000000680)="6470b5be69c27a231024cbd75b49b1526c243afa320ea780945082d78a194898c54018e998ab3f61ee45ffcccda49673042584f416b6f5838dc47d306e43d5f7fbb1b3318680ebec082166067659c0", &(0x7f0000000840)="1bbaea62fc5cf7d41deade998f4ea9c576fe5cc8aa324902c12b37c100e94baf0b37012b4fc4090c927a175f35fac6912d296b7f5f90b5d1387abf2202dbd87c99b04c203c9e668db645c234aa59871d91eaff47d15dd5f4deb0aaf28bcd01d0f6b01fb45dd5167c1a46c05368225e37bf8e6714ae1bf5c99fd986ecbd4f9702ed9b422cb437e11ad0f7928bd72b9c57aedd331ac569d85f33ce66395377db8b07bccfc1acfd462284", 0x4, 0x0, 0x10}, 0x50)

400.965672ms ago: executing program 3 (id=6615):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)='syzkaller\x00'}, 0x51)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9c, 0x10}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, &(0x7f0000000080), 0x0}, 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f086dd47e08906200060000021000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4012}, 0x48)

176.340576ms ago: executing program 1 (id=6616):
r0 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x42, &(0x7f0000001580), 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000680)="b90103600040f000009e0ff008001fffffe1000040004d3277fb86dd00017f02832d", 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.68914ms ago: executing program 1 (id=6617):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
socket$kcm(0x21, 0x7, 0x2)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0x2}, 0x10008, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket$kcm(0x11, 0x2, 0x300)
perf_event_open(&(0x7f0000000380)={0x0, 0xfffffec9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8020, 0xc8, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x9, 0x0, &(0x7f0000000000)="b9ff03076044238c9e", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x5e, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000040)={0x0, 0x0})
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={r4, 0x20, &(0x7f0000000500)={&(0x7f0000000100)=""/56, 0x38, 0x0, &(0x7f00000002c0)=""/26, 0x1a}}, 0x10)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfdef)
r5 = socket$kcm(0xa, 0x5, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x1b)
socket$kcm(0xa, 0x3, 0x3a)
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x890b, &(0x7f0000000000))
socketpair(0x25, 0x1, 0x2, &(0x7f0000000200))
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x5, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000600a8000600200002400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x8000000)
socket$kcm(0xf, 0x3, 0x2)

0s ago: executing program 3 (id=6618):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x6, &(0x7f00000001c0)=@framed={{}, [@exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x2, &(0x7f0000000940), 0x10}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x11200, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
r3 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r3, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0x1}, {0x0, 0x2}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0)
sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0)

kernel console output (not intermixed with test programs):

0.5643': attribute type 3 has an invalid length.
[ 1104.521156][T22110] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5643'.
[ 1106.347712][T22111] netlink: 'syz.5.5642': attribute type 21 has an invalid length.
[ 1106.546616][T22133] __nla_validate_parse: 2 callbacks suppressed
[ 1106.546652][T22133] netlink: 122896 bytes leftover after parsing attributes in process `syz.5.5653'.
[ 1106.658665][T22145] syz.3.5656[22145] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1106.658765][T22145] syz.3.5656[22145] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1106.829123][T22150] netlink: 'syz.0.5657': attribute type 2 has an invalid length.
[ 1106.831519][T22152] netlink: 'syz.1.5658': attribute type 25 has an invalid length.
[ 1106.857085][T22150] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5657'.
[ 1106.876164][T22152] netlink: 'syz.1.5658': attribute type 3 has an invalid length.
[ 1106.886071][T22152] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5658'.
[ 1106.984204][T22155] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5659'.
[ 1107.421087][T22165] netlink: 'syz.5.5663': attribute type 2 has an invalid length.
[ 1107.461426][T22165] netlink: 'syz.5.5663': attribute type 5 has an invalid length.
[ 1107.745762][T22174] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5666'.
[ 1107.932263][T22180] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5666'.
[ 1108.340732][T22187] netlink: 'syz.3.5671': attribute type 2 has an invalid length.
[ 1108.446415][T22187] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.5671'.
[ 1108.839692][T22190] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.5672'.
[ 1111.217462][T22190] debugfs: Directory '.!
' with parent 'ieee80211' already present!
[ 1111.250518][T22205] tipc: Started in network mode
[ 1111.257335][T22205] tipc: Node identity 9215a268, cluster identity 4711
[ 1111.274641][T22205] tipc: Node number set to 2450891368
[ 1111.519556][T22224] netlink: 'syz.0.5683': attribute type 2 has an invalid length.
[ 1111.568030][T22224] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5683'.
[ 1111.723744][T22234] netlink: 'syz.0.5689': attribute type 21 has an invalid length.
[ 1111.750356][T22234] netlink: 'syz.0.5689': attribute type 6 has an invalid length.
[ 1111.758903][T22234] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5689'.
[ 1111.768612][T22235] netlink: 'syz.4.5687': attribute type 10 has an invalid length.
[ 1111.783399][T22235] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5687'.
[ 1111.906315][T22244] netlink: 'syz.5.5692': attribute type 10 has an invalid length.
[ 1112.028062][T22254] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.5691'.
[ 1112.028751][T22253] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5694'.
[ 1112.081504][T22254] debugfs: Directory '.!
' with parent 'ieee80211' already present!
[ 1112.268212][T22258] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5694'.
[ 1114.932631][T22267] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1114.943718][T22269] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5698'.
[ 1114.962727][T22275] netlink: 'syz.0.5699': attribute type 2 has an invalid length.
[ 1114.974928][T22275] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5699'.
[ 1115.189251][T22286] netlink: 'syz.4.5704': attribute type 11 has an invalid length.
[ 1115.218906][T22286] netlink: 140 bytes leftover after parsing attributes in process `syz.4.5704'.
[ 1115.334034][T22293] netlink: 14 bytes leftover after parsing attributes in process `syz.5.5707'.
[ 1115.642523][T22303] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1115.654183][T22305] netlink: 'syz.1.5710': attribute type 2 has an invalid length.
[ 1115.767833][T22308] debugfs: Directory '.!
' with parent 'ieee80211' already present!
[ 1115.794731][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[ 1115.801069][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[ 1116.610216][T22322] __nla_validate_parse: 4 callbacks suppressed
[ 1116.610241][T22322] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.5716'.
[ 1117.063871][T22334] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5721'.
[ 1117.870490][T22320] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.5716'.
[ 1119.485361][T22337] netlink: 'syz.1.5722': attribute type 10 has an invalid length.
[ 1119.644914][T22342] netlink: 'syz.4.5725': attribute type 2 has an invalid length.
[ 1119.669669][T22342] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.5725'.
[ 1119.870789][T22351] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1120.777439][T22388] netlink: 72 bytes leftover after parsing attributes in process `syz.5.5736'.
[ 1121.668236][T22392] netlink: 'syz.1.5739': attribute type 2 has an invalid length.
[ 1121.680980][T22392] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.5739'.
[ 1121.844534][T22378] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5736'.
[ 1122.022109][T22399] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5742'.
[ 1122.073789][T22396] netlink: 'syz.4.5741': attribute type 4 has an invalid length.
[ 1122.090169][T22399] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1122.105327][T22396] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.5741'.
[ 1122.142139][T22399] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1122.182520][T22399] bond0 (unregistering): Released all slaves
[ 1122.253929][T22405] netlink: 'syz.5.5744': attribute type 21 has an invalid length.
[ 1122.271107][T22405] netlink: 128 bytes leftover after parsing attributes in process `syz.5.5744'.
[ 1122.306600][T22405] netlink: 3 bytes leftover after parsing attributes in process `syz.5.5744'.
[ 1122.484350][T22411] FAULT_INJECTION: forcing a failure.
[ 1122.484350][T22411] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1122.514659][T22411] CPU: 0 PID: 22411 Comm: syz.0.5746 Not tainted syzkaller #0
[ 1122.522188][T22411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1122.532264][T22411] Call Trace:
[ 1122.535561][T22411]  <TASK>
[ 1122.538505][T22411]  dump_stack_lvl+0x188/0x24e
[ 1122.543207][T22411]  ? show_regs_print_info+0x12/0x12
[ 1122.548525][T22411]  ? load_image+0x410/0x410
[ 1122.553054][T22411]  ? __lock_acquire+0x7c40/0x7c40
[ 1122.558110][T22411]  should_fail_ex+0x390/0x4c0
[ 1122.562811][T22411]  prepare_alloc_pages+0x1e1/0x5b0
[ 1122.567963][T22411]  __alloc_pages+0x130/0x4f0
[ 1122.572588][T22411]  ? zone_statistics+0x170/0x170
[ 1122.577558][T22411]  ? __lock_acquire+0x138a/0x7c40
[ 1122.582633][T22411]  __folio_alloc+0xe/0x30
[ 1122.586993][T22411]  vma_alloc_folio+0x499/0x900
[ 1122.591799][T22411]  wp_page_copy+0x24b/0x1660
[ 1122.596416][T22411]  ? lockdep_hardirqs_on+0x94/0x140
[ 1122.601637][T22411]  ? __lock_acquire+0x7c40/0x7c40
[ 1122.606697][T22411]  ? fault_dirty_shared_page+0x3c0/0x3c0
[ 1122.612348][T22411]  ? do_raw_spin_unlock+0x11d/0x230
[ 1122.617547][T22411]  ? _raw_spin_unlock+0x24/0x40
[ 1122.622395][T22411]  ? do_wp_page+0x678/0x16b0
[ 1122.626984][T22411]  handle_mm_fault+0x1b1b/0x3d40
[ 1122.631921][T22411]  ? mt_find+0x157/0x830
[ 1122.636173][T22411]  ? numa_migrate_prep+0x250/0x250
[ 1122.641288][T22411]  ? lock_mm_and_find_vma+0xae/0x2f0
[ 1122.646596][T22411]  do_user_addr_fault+0x58e/0xb20
[ 1122.651629][T22411]  exc_page_fault+0x60/0x100
[ 1122.656223][T22411]  asm_exc_page_fault+0x22/0x30
[ 1122.661079][T22411] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40
[ 1122.667667][T22411] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 <f3> a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90
[ 1122.687285][T22411] RSP: 0018:ffffc900040b76c8 EFLAGS: 00050206
[ 1122.693357][T22411] RAX: ffffffff84131101 RBX: 00000000000101d0 RCX: 000000000000f5d0
[ 1122.701328][T22411] RDX: 00000000000101d0 RSI: ffff888063500ce8 RDI: 0000200000001000
[ 1122.709292][T22411] RBP: 0000000000000000 R08: ffff8880635102b7 R09: 1ffff1100c6a2056
[ 1122.717261][T22411] R10: dffffc0000000000 R11: ffffed100c6a2057 R12: 00007ffffffeee30
[ 1122.725223][T22411] R13: 00000000000101d0 R14: ffff8880635000e8 R15: 0000200000000400
[ 1122.733192][T22411]  ? copyout+0xc1/0x120
[ 1122.737372][T22411]  copyout+0xe7/0x120
[ 1122.741363][T22411]  _copy_to_iter+0x482/0x1050
[ 1122.746058][T22411]  ? iov_iter_init+0x1f0/0x1f0
[ 1122.750827][T22411]  ? __virt_addr_valid+0x188/0x540
[ 1122.755942][T22411]  ? __virt_addr_valid+0x188/0x540
[ 1122.761049][T22411]  ? __virt_addr_valid+0x467/0x540
[ 1122.766157][T22411]  ? __phys_addr_symbol+0x2b/0x70
[ 1122.771183][T22411]  ? __check_object_size+0x4f6/0xa70
[ 1122.776475][T22411]  __skb_datagram_iter+0xde/0x740
[ 1122.781497][T22411]  ? skb_copy_datagram_iter+0x290/0x290
[ 1122.787036][T22411]  ? tipc_wait_for_rcvmsg+0x640/0x640
[ 1122.792403][T22411]  skb_copy_datagram_iter+0xd7/0x290
[ 1122.797687][T22411]  tipc_recvstream+0x6f2/0xe60
[ 1122.802482][T22411]  ? tipc_sendstream+0x70/0x70
[ 1122.807251][T22411]  ____sys_recvmsg+0x2c8/0x5b0
[ 1122.812034][T22411]  ? __sys_recvmsg_sock+0x40/0x40
[ 1122.817083][T22411]  ? import_iovec+0x6f/0xa0
[ 1122.821589][T22411]  ___sys_recvmsg+0x210/0x590
[ 1122.826296][T22411]  ? __sys_recvmsg+0x2a0/0x2a0
[ 1122.831077][T22411]  ? __fget_files+0x3fc/0x460
[ 1122.835765][T22411]  __x64_sys_recvmsg+0x20d/0x2e0
[ 1122.840702][T22411]  ? ___sys_recvmsg+0x590/0x590
[ 1122.845561][T22411]  ? lockdep_hardirqs_on+0x94/0x140
[ 1122.850757][T22411]  do_syscall_64+0x4c/0xa0
[ 1122.855167][T22411]  ? clear_bhb_loop+0x60/0xb0
[ 1122.859839][T22411]  ? clear_bhb_loop+0x60/0xb0
[ 1122.864513][T22411]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1122.870403][T22411] RIP: 0033:0x7f5c65d9de99
[ 1122.874814][T22411] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1122.894435][T22411] RSP: 002b:00007f5c66c91028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[ 1122.902941][T22411] RAX: ffffffffffffffda RBX: 00007f5c66025fa0 RCX: 00007f5c65d9de99
[ 1122.910907][T22411] RDX: 0000000000001f00 RSI: 0000200000000500 RDI: 0000000000000007
[ 1122.918870][T22411] RBP: 00007f5c66c91090 R08: 0000000000000000 R09: 0000000000000000
[ 1122.926850][T22411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1122.934829][T22411] R13: 00007f5c66026038 R14: 00007f5c66025fa0 R15: 00007fffce855b68
[ 1122.942821][T22411]  </TASK>
[ 1122.968888][T22419] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.5748'.
[ 1123.251181][T22433] netlink: 10 bytes leftover after parsing attributes in process `syz.1.5751'.
[ 1123.381012][T22437] netlink: 'syz.4.5753': attribute type 2 has an invalid length.
[ 1123.394809][T22437] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.5753'.
[ 1125.992797][T22439] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5754'.
[ 1126.188904][T22446] FAULT_INJECTION: forcing a failure.
[ 1126.188904][T22446] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1126.222968][T22446] CPU: 0 PID: 22446 Comm: syz.3.5757 Not tainted syzkaller #0
[ 1126.230493][T22446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1126.240658][T22446] Call Trace:
[ 1126.243965][T22446]  <TASK>
[ 1126.246919][T22446]  dump_stack_lvl+0x188/0x24e
[ 1126.251625][T22446]  ? show_regs_print_info+0x12/0x12
[ 1126.256856][T22446]  ? load_image+0x410/0x410
[ 1126.261385][T22446]  ? __lock_acquire+0x7c40/0x7c40
[ 1126.266442][T22446]  should_fail_ex+0x390/0x4c0
[ 1126.271158][T22446]  prepare_alloc_pages+0x1e1/0x5b0
[ 1126.276312][T22446]  __alloc_pages+0x130/0x4f0
[ 1126.280932][T22446]  ? zone_statistics+0x170/0x170
[ 1126.285913][T22446]  ? verify_lock_unused+0x140/0x140
[ 1126.291237][T22446]  __folio_alloc+0xe/0x30
[ 1126.295594][T22446]  vma_alloc_folio+0x499/0x900
[ 1126.300390][T22446]  ? mpol_shared_policy_lookup+0x147/0x1e0
[ 1126.306221][T22446]  shmem_alloc_and_acct_folio+0x463/0xbd0
[ 1126.311951][T22446]  ? shmem_replace_folio+0xdc0/0xdc0
[ 1126.317261][T22446]  ? xas_load+0x127/0x140
[ 1126.321587][T22446]  ? __filemap_get_folio+0x10f/0xde0
[ 1126.326965][T22446]  ? __filemap_get_folio+0xb43/0xde0
[ 1126.332249][T22446]  ? __filemap_get_folio+0x10f/0xde0
[ 1126.337534][T22446]  ? page_cache_prev_miss+0x380/0x380
[ 1126.342907][T22446]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 1126.348888][T22446]  ? do_user_addr_fault+0x8c7/0xb20
[ 1126.354145][T22446]  shmem_get_folio_gfp+0x1439/0x35e0
[ 1126.359451][T22446]  shmem_write_begin+0xee/0x3f0
[ 1126.364303][T22446]  generic_perform_write+0x2fa/0x5c0
[ 1126.369599][T22446]  ? generic_file_direct_write+0x330/0x330
[ 1126.375404][T22446]  ? __file_remove_privs+0x5f0/0x5f0
[ 1126.380682][T22446]  ? rwsem_write_trylock+0x135/0x1c0
[ 1126.385961][T22446]  ? clear_nonspinnable+0x60/0x60
[ 1126.390981][T22446]  ? generic_write_checks_count+0x363/0x440
[ 1126.396880][T22446]  __generic_file_write_iter+0x148/0x2a0
[ 1126.402711][T22446]  generic_file_write_iter+0xab/0x2e0
[ 1126.408135][T22446]  vfs_write+0x482/0x9a0
[ 1126.412403][T22446]  ? file_end_write+0x250/0x250
[ 1126.417270][T22446]  ? __fget_files+0x3fc/0x460
[ 1126.421965][T22446]  ? __fdget_pos+0x2ae/0x360
[ 1126.426565][T22446]  ? ksys_write+0x70/0x260
[ 1126.430995][T22446]  ksys_write+0x14d/0x260
[ 1126.435327][T22446]  ? __ia32_sys_read+0x80/0x80
[ 1126.440095][T22446]  ? lockdep_hardirqs_on+0x94/0x140
[ 1126.445291][T22446]  do_syscall_64+0x4c/0xa0
[ 1126.449705][T22446]  ? clear_bhb_loop+0x60/0xb0
[ 1126.454379][T22446]  ? clear_bhb_loop+0x60/0xb0
[ 1126.459069][T22446]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1126.464958][T22446] RIP: 0033:0x7f810419de99
[ 1126.469366][T22446] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1126.488962][T22446] RSP: 002b:00007f8105093028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1126.497398][T22446] RAX: ffffffffffffffda RBX: 00007f8104425fa0 RCX: 00007f810419de99
[ 1126.505366][T22446] RDX: 00000000002a979d RSI: 0000200000000000 RDI: 0000000000000007
[ 1126.513349][T22446] RBP: 00007f8105093090 R08: 0000000000000000 R09: 0000000000000000
[ 1126.521338][T22446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1126.529315][T22446] R13: 00007f8104426038 R14: 00007f8104425fa0 R15: 00007fff11726008
[ 1126.537298][T22446]  </TASK>
[ 1128.019607][T22472] __nla_validate_parse: 2 callbacks suppressed
[ 1128.019647][T22472] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.5762'.
[ 1128.901166][T22461] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5759'.
[ 1128.940536][T22472] sysfs: cannot create duplicate filename '/class/ieee80211/.!
'
[ 1128.954611][T22472] CPU: 1 PID: 22472 Comm: syz.0.5762 Not tainted syzkaller #0
[ 1128.962119][T22472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1128.972210][T22472] Call Trace:
[ 1128.975502][T22472]  <TASK>
[ 1128.978448][T22472]  dump_stack_lvl+0x188/0x24e
[ 1128.983166][T22472]  ? show_regs_print_info+0x12/0x12
[ 1128.988395][T22472]  ? load_image+0x410/0x410
[ 1128.992933][T22472]  sysfs_warn_dup+0x8a/0xa0
[ 1128.997461][T22472]  sysfs_do_create_link_sd+0xc0/0x110
[ 1129.002857][T22472]  device_add+0x83b/0x1050
[ 1129.007302][T22472]  wiphy_register+0x1d8b/0x2aa0
[ 1129.012201][T22472]  ? cfg80211_event_work+0x40/0x40
[ 1129.017340][T22472]  ? minstrel_ht_alloc+0x894/0xa20
[ 1129.022475][T22472]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[ 1129.028544][T22472]  ieee80211_register_hw+0x2d48/0x39f0
[ 1129.034012][T22472]  ? ieee80211_register_hw+0xf61/0x39f0
[ 1129.039556][T22472]  ? ieee80211_register_hw+0xf61/0x39f0
[ 1129.045103][T22472]  ? ieee80211_tasklet_handler+0x20/0x20
[ 1129.050733][T22472]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 1129.056625][T22472]  ? __debug_object_init+0xed/0x440
[ 1129.061824][T22472]  ? memset+0x1e/0x40
[ 1129.065800][T22472]  ? __hrtimer_init+0x189/0x270
[ 1129.070649][T22472]  mac80211_hwsim_new_radio+0x2927/0x4cd0
[ 1129.076376][T22472]  ? memcpy+0x3c/0x60
[ 1129.080358][T22472]  hwsim_new_radio_nl+0xab7/0xc90
[ 1129.085391][T22472]  genl_family_rcv_msg_doit+0x22f/0x350
[ 1129.090937][T22472]  ? end_current_label_crit_section+0x170/0x170
[ 1129.097180][T22472]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[ 1129.103081][T22472]  ? bpf_lsm_capable+0x5/0x10
[ 1129.107752][T22472]  ? security_capable+0x85/0xb0
[ 1129.112605][T22472]  genl_rcv_msg+0x601/0x790
[ 1129.117123][T22472]  ? genl_bind+0x360/0x360
[ 1129.121549][T22472]  ? hwsim_tx_info_frame_received_nl+0xe30/0xe30
[ 1129.127887][T22472]  netlink_rcv_skb+0x1ef/0x440
[ 1129.132651][T22472]  ? genl_bind+0x360/0x360
[ 1129.137069][T22472]  ? netlink_ack+0x1160/0x1160
[ 1129.141837][T22472]  ? down_read+0x1a8/0x2d0
[ 1129.146246][T22472]  genl_rcv+0x24/0x40
[ 1129.150222][T22472]  netlink_unicast+0x7ad/0x920
[ 1129.155004][T22472]  netlink_sendmsg+0x8ad/0xbd0
[ 1129.159831][T22472]  ? netlink_getsockopt+0x550/0x550
[ 1129.165044][T22472]  ? apparmor_socket_sendmsg+0x8a/0x330
[ 1129.170598][T22472]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1129.175882][T22472]  ? security_socket_sendmsg+0x7c/0xa0
[ 1129.181336][T22472]  ? netlink_getsockopt+0x550/0x550
[ 1129.186541][T22472]  ____sys_sendmsg+0x5ed/0x9a0
[ 1129.191312][T22472]  ? __sys_sendmsg_sock+0x30/0x30
[ 1129.196332][T22472]  ? __import_iovec+0x306/0x510
[ 1129.201200][T22472]  ? import_iovec+0x6f/0xa0
[ 1129.205718][T22472]  ___sys_sendmsg+0x2a2/0x360
[ 1129.210423][T22472]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1129.215240][T22472]  __se_sys_sendmsg+0x1c3/0x2b0
[ 1129.220117][T22472]  ? ct_nmi_exit+0x145/0x1c0
[ 1129.224702][T22472]  ? __x64_sys_sendmsg+0x80/0x80
[ 1129.229652][T22472]  ? lockdep_hardirqs_on+0x94/0x140
[ 1129.234850][T22472]  do_syscall_64+0x4c/0xa0
[ 1129.239261][T22472]  ? clear_bhb_loop+0x60/0xb0
[ 1129.243934][T22472]  ? clear_bhb_loop+0x60/0xb0
[ 1129.248606][T22472]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1129.254493][T22472] RIP: 0033:0x7f5c65d9de99
[ 1129.258911][T22472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1129.278531][T22472] RSP: 002b:00007f5c66c2e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1129.286955][T22472] RAX: ffffffffffffffda RBX: 00007f5c66026270 RCX: 00007f5c65d9de99
[ 1129.294955][T22472] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009
[ 1129.302924][T22472] RBP: 00007f5c65e33eaf R08: 0000000000000000 R09: 0000000000000000
[ 1129.310894][T22472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1129.318862][T22472] R13: 00007f5c66026308 R14: 00007f5c66026270 R15: 00007fffce855b68
[ 1129.326868][T22472]  </TASK>
[ 1129.548456][T22486] device wlan1 left promiscuous mode
[ 1129.568090][T22487] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5764'.
[ 1129.597573][T22486] netlink: 10 bytes leftover after parsing attributes in process `syz.4.5765'.
[ 1130.892780][T22505] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5771'.
[ 1131.068000][T22516] netlink: 72 bytes leftover after parsing attributes in process `syz.5.5771'.
[ 1131.138380][T22517] netlink: 'syz.1.5775': attribute type 3 has an invalid length.
[ 1131.168592][T22517] netlink: 'syz.1.5775': attribute type 1 has an invalid length.
[ 1131.285165][T22517] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5775'.
[ 1131.427484][T22515] device syzkaller0 entered promiscuous mode
[ 1131.466669][T22531] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5779'.
[ 1131.707272][T22538] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5779'.
[ 1133.314828][T22542] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[ 1133.324299][T22542] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[ 1133.335970][T22542] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[ 1133.783945][T22552] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5786'.
[ 1136.968925][T22585] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1137.307313][T22600] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5796'.
[ 1137.521780][T22605] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5796'.
[ 1138.084739][T22608] netlink: 144 bytes leftover after parsing attributes in process `syz.4.5799'.
[ 1138.094010][T22608] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[ 1138.447175][T22620] netlink: 'syz.5.5803': attribute type 29 has an invalid length.
[ 1138.777710][T22626] netlink: 168864 bytes leftover after parsing attributes in process `syz.5.5803'.
[ 1138.790484][T22626] netlink: zone id is out of range
[ 1138.798775][T22626] netlink: zone id is out of range
[ 1138.812048][T22626] netlink: zone id is out of range
[ 1138.825744][T22626] netlink: zone id is out of range
[ 1138.841653][T22626] netlink: zone id is out of range
[ 1138.854588][T22626] netlink: zone id is out of range
[ 1138.859764][T22626] netlink: zone id is out of range
[ 1138.883021][T22626] netlink: zone id is out of range
[ 1138.894772][T22626] netlink: zone id is out of range
[ 1140.661698][T22615] netlink: 'syz.4.5801': attribute type 2 has an invalid length.
[ 1140.670426][T22615] netlink: 'syz.4.5801': attribute type 5 has an invalid length.
[ 1140.684486][T22620] netlink: 'syz.5.5803': attribute type 29 has an invalid length.
[ 1140.823887][T22634] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1141.476423][T22650] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5811'.
[ 1141.510560][T22650] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5811'.
[ 1141.906620][T22660] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.5812'.
[ 1141.953880][T22662] netlink: 'syz.3.5814': attribute type 10 has an invalid length.
[ 1143.003009][T22678] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5818'.
[ 1143.056243][T22678] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5818'.
[ 1143.905661][T22686] netlink: 'syz.4.5822': attribute type 3 has an invalid length.
[ 1143.913881][T22686] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.5822'.
[ 1145.500607][T22684] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1145.573645][T22696] netlink: 'syz.5.5826': attribute type 10 has an invalid length.
[ 1145.632528][T22698] tipc: Started in network mode
[ 1145.652919][T22698] tipc: Node identity 9215a268, cluster identity 4711
[ 1145.675268][T22698] tipc: Node number set to 2450891368
[ 1145.711897][T22699] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.5827'.
[ 1146.463515][T22733] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5839'.
[ 1146.631851][T22736] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5839'.
[ 1146.851273][T22740] netlink: 'syz.1.5842': attribute type 10 has an invalid length.
[ 1146.890390][T22742] netlink: 188 bytes leftover after parsing attributes in process `syz.3.5843'.
[ 1147.166122][T22751] netlink: 'syz.1.5845': attribute type 1 has an invalid length.
[ 1147.174048][T22751] netlink: 'syz.1.5845': attribute type 3 has an invalid length.
[ 1147.233054][T22751] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5845'.
[ 1148.164922][   T48] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1148.166225][T22774] netlink: 'syz.1.5855': attribute type 1 has an invalid length.
[ 1148.173861][   T48] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1148.180189][T22774] netlink: 164 bytes leftover after parsing attributes in process `syz.1.5855'.
[ 1148.203994][   T48] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1148.219526][   T48] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1148.234792][   T48] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 1148.242143][   T48] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1149.612775][T22758] netlink: 'syz.4.5849': attribute type 10 has an invalid length.
[ 1150.238752][T22771] chnl_net:caif_netlink_parms(): no params data found
[ 1150.261747][T22792] netlink: 'syz.0.5860': attribute type 25 has an invalid length.
[ 1150.269956][   T48] Bluetooth: hci2: command 0x0409 tx timeout
[ 1150.286469][T22792] netlink: 'syz.0.5860': attribute type 28 has an invalid length.
[ 1150.443132][ T4994] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1150.464815][T22805] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5867'.
[ 1150.490220][T22806] FAULT_INJECTION: forcing a failure.
[ 1150.490220][T22806] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1150.503513][T22806] CPU: 1 PID: 22806 Comm: syz.4.5864 Not tainted syzkaller #0
[ 1150.511012][T22806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1150.521082][T22806] Call Trace:
[ 1150.524374][T22806]  <TASK>
[ 1150.527326][T22806]  dump_stack_lvl+0x188/0x24e
[ 1150.532037][T22806]  ? show_regs_print_info+0x12/0x12
[ 1150.537265][T22806]  ? load_image+0x410/0x410
[ 1150.541797][T22806]  ? _raw_spin_lock_irq+0xb7/0xf0
[ 1150.546863][T22806]  ? _raw_spin_unlock_irq+0x1f/0x40
[ 1150.552086][T22806]  ? lockdep_hardirqs_on+0x94/0x140
[ 1150.557308][T22806]  should_fail_ex+0x390/0x4c0
[ 1150.562014][T22806]  copy_page_from_iter_atomic+0x21d/0x12e0
[ 1150.567880][T22806]  ? pipe_zero+0x140/0x140
[ 1150.572322][T22806]  ? PageHeadHuge+0x8e/0x1c0
[ 1150.576935][T22806]  ? shmem_write_begin+0x1b4/0x3f0
[ 1150.582078][T22806]  generic_perform_write+0x34f/0x5c0
[ 1150.587401][T22806]  ? generic_file_direct_write+0x330/0x330
[ 1150.593240][T22806]  ? __file_remove_privs+0x5f0/0x5f0
[ 1150.598536][T22806]  ? rwsem_write_trylock+0x135/0x1c0
[ 1150.603830][T22806]  ? clear_nonspinnable+0x60/0x60
[ 1150.608884][T22806]  ? generic_write_checks_count+0x363/0x440
[ 1150.614804][T22806]  __generic_file_write_iter+0x148/0x2a0
[ 1150.620463][T22806]  generic_file_write_iter+0xab/0x2e0
[ 1150.625840][T22806]  vfs_write+0x482/0x9a0
[ 1150.630093][T22806]  ? file_end_write+0x250/0x250
[ 1150.634984][T22806]  ? __fget_files+0x3fc/0x460
[ 1150.639684][T22806]  ? __fdget_pos+0x2ae/0x360
[ 1150.644290][T22806]  ? ksys_write+0x70/0x260
[ 1150.648716][T22806]  ksys_write+0x14d/0x260
[ 1150.653103][T22806]  ? __ia32_sys_read+0x80/0x80
[ 1150.657880][T22806]  ? lockdep_hardirqs_on+0x94/0x140
[ 1150.663089][T22806]  do_syscall_64+0x4c/0xa0
[ 1150.667501][T22806]  ? clear_bhb_loop+0x60/0xb0
[ 1150.672169][T22806]  ? clear_bhb_loop+0x60/0xb0
[ 1150.676851][T22806]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1150.682742][T22806] RIP: 0033:0x7f1d3119de99
[ 1150.687163][T22806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1150.706871][T22806] RSP: 002b:00007f1d32086028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1150.715298][T22806] RAX: ffffffffffffffda RBX: 00007f1d31425fa0 RCX: 00007f1d3119de99
[ 1150.723264][T22806] RDX: 00000000002a979d RSI: 0000200000000000 RDI: 0000000000000007
[ 1150.731226][T22806] RBP: 00007f1d32086090 R08: 0000000000000000 R09: 0000000000000000
[ 1150.739187][T22806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1150.747156][T22806] R13: 00007f1d31426038 R14: 00007f1d31425fa0 R15: 00007ffe58e11db8
[ 1150.755144][T22806]  </TASK>
[ 1150.816073][ T4994] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1150.868290][T22816] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5869'.
[ 1150.974006][ T4994] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1151.032267][T22815] netlink: 72 bytes leftover after parsing attributes in process `syz.5.5869'.
[ 1151.069499][T22771] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1151.080643][T22771] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1151.091674][T22771] device bridge_slave_0 entered promiscuous mode
[ 1151.139830][ T4994] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1152.172654][T22852] netlink: 'syz.0.5882': attribute type 3 has an invalid length.
[ 1152.183131][T22852] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.5882'.
[ 1152.355762][   T48] Bluetooth: hci2: command 0x041b tx timeout
[ 1153.353671][T22771] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1153.362291][T22771] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1153.371036][T22771] device bridge_slave_1 entered promiscuous mode
[ 1153.387022][T22842] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5878'.
[ 1153.403907][T22842] net_ratelimit: 144 callbacks suppressed
[ 1153.403920][T22842] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1153.426124][T22843] netlink: 'syz.4.5878': attribute type 21 has an invalid length.
[ 1153.433965][T22843] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5878'.
[ 1153.448257][T22843] netlink: 'syz.4.5878': attribute type 4 has an invalid length.
[ 1153.458056][T22843] netlink: 'syz.4.5878': attribute type 5 has an invalid length.
[ 1153.466195][T22843] netlink: 3 bytes leftover after parsing attributes in process `syz.4.5878'.
[ 1153.501596][T22771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1153.562063][T22771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1153.712097][T22771] team0: Port device team_slave_0 added
[ 1153.740167][T22771] team0: Port device team_slave_1 added
[ 1153.827179][T22771] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1153.851439][T22771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1153.941887][T22771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1153.983161][T22771] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1154.009672][T22771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1154.051629][T22771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1154.122370][ T4994] tipc: Left network mode
[ 1154.193260][T22771] device hsr_slave_0 entered promiscuous mode
[ 1154.246782][T22771] device hsr_slave_1 entered promiscuous mode
[ 1154.284776][T22771] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1154.292412][T22771] Cannot create hsr debugfs directory
[ 1154.424542][   T48] Bluetooth: hci2: command 0x040f tx timeout
[ 1154.591473][T22886] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5892'.
[ 1154.643643][T22892] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1154.737519][T22886] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5892'.
[ 1154.933301][T22902] netlink: 'syz.5.5895': attribute type 3 has an invalid length.
[ 1154.962273][T22902] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.5895'.
[ 1156.514524][   T48] Bluetooth: hci2: command 0x0419 tx timeout
[ 1157.291308][T22933] netlink: 'syz.0.5906': attribute type 10 has an invalid length.
[ 1157.948587][T22771] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1157.990096][T22771] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1158.009663][T22771] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1158.072547][T22771] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1158.203361][T22962] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5915'.
[ 1158.363139][T22968] FAULT_INJECTION: forcing a failure.
[ 1158.363139][T22968] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1158.385069][T22970] netlink: 72 bytes leftover after parsing attributes in process `syz.5.5915'.
[ 1158.422730][T22968] CPU: 0 PID: 22968 Comm: syz.4.5917 Not tainted syzkaller #0
[ 1158.430267][T22968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1158.440347][T22968] Call Trace:
[ 1158.443636][T22968]  <TASK>
[ 1158.446569][T22968]  dump_stack_lvl+0x188/0x24e
[ 1158.451258][T22968]  ? show_regs_print_info+0x12/0x12
[ 1158.456466][T22968]  ? load_image+0x410/0x410
[ 1158.460975][T22968]  ? __lock_acquire+0x7c40/0x7c40
[ 1158.466015][T22968]  ? snprintf+0xe5/0x140
[ 1158.470264][T22968]  should_fail_ex+0x390/0x4c0
[ 1158.474946][T22968]  _copy_to_user+0x2c/0x130
[ 1158.479455][T22968]  simple_read_from_buffer+0xe3/0x150
[ 1158.484829][T22968]  proc_fail_nth_read+0x1a6/0x220
[ 1158.489860][T22968]  ? proc_fault_inject_write+0x310/0x310
[ 1158.495497][T22968]  ? fsnotify_perm+0x248/0x550
[ 1158.500264][T22968]  ? proc_fault_inject_write+0x310/0x310
[ 1158.505898][T22968]  vfs_read+0x2db/0x960
[ 1158.510066][T22968]  ? kernel_read+0x1e0/0x1e0
[ 1158.514663][T22968]  ? __fget_files+0x28/0x460
[ 1158.519259][T22968]  ? __fget_files+0x3fc/0x460
[ 1158.523940][T22968]  ? __fdget_pos+0x2ae/0x360
[ 1158.528528][T22968]  ? ksys_read+0x70/0x260
[ 1158.532859][T22968]  ksys_read+0x14d/0x260
[ 1158.537103][T22968]  ? vfs_write+0x9a0/0x9a0
[ 1158.541528][T22968]  ? lockdep_hardirqs_on+0x94/0x140
[ 1158.546727][T22968]  do_syscall_64+0x4c/0xa0
[ 1158.551144][T22968]  ? clear_bhb_loop+0x60/0xb0
[ 1158.555819][T22968]  ? clear_bhb_loop+0x60/0xb0
[ 1158.560494][T22968]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1158.566385][T22968] RIP: 0033:0x7f1d3115e6ce
[ 1158.570799][T22968] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1158.590663][T22968] RSP: 002b:00007f1d32064fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1158.599080][T22968] RAX: ffffffffffffffda RBX: 00007f1d320656c0 RCX: 00007f1d3115e6ce
[ 1158.607059][T22968] RDX: 000000000000000f RSI: 00007f1d320650a0 RDI: 0000000000000004
[ 1158.615031][T22968] RBP: 00007f1d32065090 R08: 0000000000000000 R09: 0000000000000000
[ 1158.623000][T22968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1158.630968][T22968] R13: 00007f1d31426128 R14: 00007f1d31426090 R15: 00007ffe58e11db8
[ 1158.638950][T22968]  </TASK>
[ 1161.355061][ T4994] bond0: (slave wlan1): Releasing backup interface
[ 1161.482513][T23010] netlink: 'syz.5.5927': attribute type 29 has an invalid length.
[ 1161.526546][T22771] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1162.378066][T23026] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5932'.
[ 1163.562735][T23010] netlink: 'syz.5.5927': attribute type 29 has an invalid length.
[ 1163.623320][T23028] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[ 1163.654207][T23028] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[ 1163.670370][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1163.694299][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1163.713391][T23028] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[ 1163.796970][T22771] 8021q: adding VLAN 0 to HW filter on device team0
[ 1163.857703][ T4994] device hsr_slave_0 left promiscuous mode
[ 1163.893002][ T4994] device hsr_slave_1 left promiscuous mode
[ 1163.914703][ T4994] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1163.934517][ T4994] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1163.958187][ T4994] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1163.967475][T23048] syz.4.5939[23048] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1163.967577][T23048] syz.4.5939[23048] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1163.985313][ T4994] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1164.016697][ T4994] batman_adv: batadv0: Interface deactivated: vlan1
[ 1164.023362][ T4994] batman_adv: batadv0: Removing interface: vlan1
[ 1164.132588][ T4994] device veth1_macvtap left promiscuous mode
[ 1164.145529][ T4994] device veth0_macvtap left promiscuous mode
[ 1164.152380][ T4994] device veth1_vlan left promiscuous mode
[ 1164.174672][ T4994] device veth0_vlan left promiscuous mode
[ 1165.103043][ T4994] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1165.140312][ T4994] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1165.179807][ T4994] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[ 1165.421926][ T4994] bond0 (unregistering): Released all slaves
[ 1165.469117][T23053] -1: renamed from syzkaller0
[ 1165.483868][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1165.493461][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1165.521243][ T4361] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1165.528463][ T4361] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1165.536827][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1165.586714][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1165.603389][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1165.655688][ T4298] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1165.662832][ T4298] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1165.737796][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1165.758842][T23078] netlink: 'syz.0.5946': attribute type 29 has an invalid length.
[ 1165.785677][T20870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1165.871507][T20870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1165.905791][T20870] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1165.939465][T20870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1165.980895][T20870] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1166.025576][T23078] netlink: 'syz.0.5946': attribute type 29 has an invalid length.
[ 1166.039645][T22771] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1166.064277][T22771] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1166.097054][T20870] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1166.106257][T20870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1166.136767][T20870] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1166.181869][T20870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1166.208380][T20870] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1166.240886][T20870] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1166.737892][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1166.751379][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1166.776863][T22771] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1166.813239][T20127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1166.830939][T20127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1166.863556][T20127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1166.873090][T20127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1166.895463][T22771] device veth0_vlan entered promiscuous mode
[ 1166.926647][T20127] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1166.946867][T20127] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1166.971820][T22771] device veth1_vlan entered promiscuous mode
[ 1167.028693][T20127] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1167.044018][T20127] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1167.103693][T20127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1167.139741][T20127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1167.177768][T22771] device veth0_macvtap entered promiscuous mode
[ 1167.227583][T22771] device veth1_macvtap entered promiscuous mode
[ 1167.297028][T22771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1167.348345][T22771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1167.387253][T22771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1167.421261][T22771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1167.440422][T22771] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1167.453384][T20127] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1167.474222][T20127] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1167.491760][T20127] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1167.502579][T20127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1167.519893][T22771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1167.544995][T22771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1167.562397][T22771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1167.587155][T22771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1167.608883][T22771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1167.631912][T22771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1167.653801][T22771] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1167.671330][T20127] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1167.689238][T20127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1167.707947][T22771] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1167.723769][T22771] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1167.741533][T22771] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1167.758548][T22771] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1167.973751][T23131] -1: renamed from syzkaller0
[ 1168.015140][ T4298] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1168.023001][ T4298] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1168.086494][T20870] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1168.140983][ T4298] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1168.160929][ T4298] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1168.222011][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1168.920819][T23157] netlink: 'syz.3.5959': attribute type 29 has an invalid length.
[ 1168.959752][T23157] netlink: 'syz.3.5959': attribute type 29 has an invalid length.
[ 1169.259876][T23172] netlink: 'syz.5.5964': attribute type 21 has an invalid length.
[ 1169.301554][T23172] netlink: 168 bytes leftover after parsing attributes in process `syz.5.5964'.
[ 1170.610882][T23201] netlink: 180 bytes leftover after parsing attributes in process `syz.1.5970'.
[ 1170.702286][T23201] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5970'.
[ 1170.771498][T23199] -1: renamed from syzkaller0
[ 1172.174236][T23218] netlink: 'syz.3.5974': attribute type 5 has an invalid length.
[ 1172.183218][T23220] netlink: 'syz.0.5975': attribute type 10 has an invalid length.
[ 1172.431866][T23223] netlink: 'syz.4.5976': attribute type 10 has an invalid length.
[ 1172.450690][T23223] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5976'.
[ 1173.039896][T23242] netlink: 14 bytes leftover after parsing attributes in process `syz.5.5982'.
[ 1173.905403][T23271] netlink: 'syz.3.5992': attribute type 10 has an invalid length.
[ 1174.175248][T23272] netlink: 'syz.1.5991': attribute type 20 has an invalid length.
[ 1174.259442][T23273] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1174.346115][T23273] netlink: 1 bytes leftover after parsing attributes in process `syz.1.5991'.
[ 1174.557960][T23280] netlink: 'syz.5.5994': attribute type 1 has an invalid length.
[ 1174.616401][T23280] netlink: 'syz.5.5994': attribute type 4 has an invalid length.
[ 1174.649871][T23280] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.5994'.
[ 1174.699311][T23281] netlink: 'syz.5.5994': attribute type 5 has an invalid length.
[ 1174.898450][T23295] netlink: 'syz.0.5999': attribute type 41 has an invalid length.
[ 1175.556783][T20034] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1175.573737][T20034] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1175.585909][T20034] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1175.611616][T20034] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1175.634693][T20034] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1175.654229][T20034] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1176.142907][T23295] device netdevsim0 left promiscuous mode
[ 1176.169416][T23309] netlink: 'syz.5.6004': attribute type 21 has an invalid length.
[ 1176.218408][T23309] netlink: 128 bytes leftover after parsing attributes in process `syz.5.6004'.
[ 1176.913288][T23310] chnl_net:caif_netlink_parms(): no params data found
[ 1177.112016][T23310] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1177.192587][T23310] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1177.228300][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[ 1177.235304][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[ 1177.239430][T23310] device bridge_slave_0 entered promiscuous mode
[ 1177.399881][   T34] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1177.445978][T23310] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1177.453193][T23310] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1177.478199][T23310] device bridge_slave_1 entered promiscuous mode
[ 1177.520698][T23343] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6012'.
[ 1177.663698][   T34] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1177.703712][T23347] netlink: 72 bytes leftover after parsing attributes in process `syz.5.6012'.
[ 1177.712937][T20034] Bluetooth: hci3: command 0x0409 tx timeout
[ 1178.030564][T23310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1179.371828][   T34] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1179.799835][T20034] Bluetooth: hci3: command 0x041b tx timeout
[ 1181.069562][T23310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1181.084585][T23373] netlink: 'syz.4.6019': attribute type 5 has an invalid length.
[ 1181.146937][   T34] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1181.220343][T23310] team0: Port device team_slave_0 added
[ 1181.229472][T23310] team0: Port device team_slave_1 added
[ 1181.290441][T23310] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1181.309748][T23310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1181.354517][T23310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1181.404902][T23310] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1181.412211][T23310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1181.457964][T23310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1181.483658][T23381] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6024'.
[ 1181.617510][T23310] device hsr_slave_0 entered promiscuous mode
[ 1181.652615][T23310] device hsr_slave_1 entered promiscuous mode
[ 1181.663649][T23310] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1181.686752][T23310] Cannot create hsr debugfs directory
[ 1181.864470][T20034] Bluetooth: hci3: command 0x040f tx timeout
[ 1181.965490][T23407] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6029'.
[ 1183.692405][T23441] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6035'.
[ 1183.954456][T20034] Bluetooth: hci3: command 0x0419 tx timeout
[ 1184.057441][T23421] netlink: 'syz.5.6032': attribute type 5 has an invalid length.
[ 1184.084571][T23436] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6035'.
[ 1184.914269][T23467] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6042'.
[ 1185.076300][T23472] netlink: 72 bytes leftover after parsing attributes in process `syz.5.6042'.
[ 1185.540018][T23496] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6047'.
[ 1186.797884][T23506] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6048'.
[ 1188.255077][T23501] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6048'.
[ 1188.530920][T23310] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1188.587674][T23310] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1188.705289][T23310] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1188.769751][T23310] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1188.926573][T23521] netlink: 'syz.0.6049': attribute type 5 has an invalid length.
[ 1189.277844][   T34] bond0: (slave wlan1): Releasing backup interface
[ 1189.425354][T23531] netlink: 'syz.5.6055': attribute type 21 has an invalid length.
[ 1189.433305][T23531] netlink: 'syz.5.6055': attribute type 1 has an invalid length.
[ 1189.454824][T23531] netlink: 100 bytes leftover after parsing attributes in process `syz.5.6055'.
[ 1189.702873][T23537] netlink: 'syz.0.6057': attribute type 10 has an invalid length.
[ 1189.721463][T23536] netlink: 'syz.0.6057': attribute type 10 has an invalid length.
[ 1189.786093][   T34] device hsr_slave_0 left promiscuous mode
[ 1189.873730][   T34] device hsr_slave_1 left promiscuous mode
[ 1189.883623][   T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1189.904612][   T34] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1189.923866][   T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1189.954563][   T34] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1189.988549][   T34] batman_adv: batadv0: Interface deactivated: veth0_vlan
[ 1190.000166][   T34] batman_adv: batadv0: Removing interface: veth0_vlan
[ 1190.024086][   T34] batman_adv: batadv0: Interface deactivated: vlan1
[ 1190.052734][   T34] batman_adv: batadv0: Removing interface: vlan1
[ 1190.060397][   T34] device bridge_slave_1 left promiscuous mode
[ 1190.067250][   T34] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1190.155542][   T34] device bridge_slave_0 left promiscuous mode
[ 1190.163078][   T34] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1190.255586][   T34] device veth1_macvtap left promiscuous mode
[ 1190.261668][   T34] device veth0_macvtap left promiscuous mode
[ 1190.274103][   T34] device veth1_vlan left promiscuous mode
[ 1190.298609][   T34] device veth0_vlan left promiscuous mode
[ 1190.376973][T23576] netlink: 72 bytes leftover after parsing attributes in process `syz.5.6061'.
[ 1190.888523][T23588] syz.0.6068[23588] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1190.888619][T23588] syz.0.6068[23588] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1191.800823][   T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1192.078915][   T34] bond0 (unregistering): Released all slaves
[ 1192.178912][T23310] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1192.186369][T23559] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6061'.
[ 1192.206174][T23565] netlink: 'syz.3.6063': attribute type 21 has an invalid length.
[ 1192.215282][T23565] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6063'.
[ 1192.229298][T23565] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6063'.
[ 1192.262311][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1192.280316][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1192.327942][T23310] 8021q: adding VLAN 0 to HW filter on device team0
[ 1192.391295][T20127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1192.404235][T20127] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1192.460887][T20127] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1192.468088][T20127] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1192.509662][T20127] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1192.540527][T20127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1192.581910][T20127] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1192.632342][T20127] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1192.639531][T20127] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1192.712440][T20127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1192.758562][T20127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1192.796619][T20127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1192.816709][T20127] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1192.850321][T20127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1192.886967][T20127] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1192.935588][T20127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1192.965196][T20127] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1192.980122][T20127] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1193.010107][T23310] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1193.039759][T23310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1193.105097][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1193.114631][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1193.200044][T23644] FAULT_INJECTION: forcing a failure.
[ 1193.200044][T23644] name failslab, interval 1, probability 0, space 0, times 0
[ 1193.242609][T23644] CPU: 0 PID: 23644 Comm: syz.0.6080 Not tainted syzkaller #0
[ 1193.250132][T23644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1193.260219][T23644] Call Trace:
[ 1193.263510][T23644]  <TASK>
[ 1193.266448][T23644]  dump_stack_lvl+0x188/0x24e
[ 1193.271144][T23644]  ? show_regs_print_info+0x12/0x12
[ 1193.276368][T23644]  ? load_image+0x410/0x410
[ 1193.280891][T23644]  ? __might_sleep+0xd0/0xd0
[ 1193.285496][T23644]  ? __lock_acquire+0x7c40/0x7c40
[ 1193.290546][T23644]  should_fail_ex+0x390/0x4c0
[ 1193.295245][T23644]  should_failslab+0x5/0x20
[ 1193.299757][T23644]  slab_pre_alloc_hook+0x59/0x300
[ 1193.304796][T23644]  ? sock_kmalloc+0x92/0xf0
[ 1193.309317][T23644]  __kmem_cache_alloc_node+0x4f/0x270
[ 1193.314719][T23644]  ? sock_kmalloc+0x92/0xf0
[ 1193.319247][T23644]  __kmalloc+0xa3/0x240
[ 1193.323430][T23644]  sock_kmalloc+0x92/0xf0
[ 1193.327772][T23644]  ____sys_sendmsg+0x1bf/0x9a0
[ 1193.332548][T23644]  ? __sys_sendmsg_sock+0x30/0x30
[ 1193.337579][T23644]  ? __import_iovec+0x306/0x510
[ 1193.342435][T23644]  ? import_iovec+0x6f/0xa0
[ 1193.346938][T23644]  ___sys_sendmsg+0x2a2/0x360
[ 1193.351615][T23644]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1193.356390][T23644]  ? __lock_acquire+0x7c40/0x7c40
[ 1193.361430][T23644]  __se_sys_sendmsg+0x1c3/0x2b0
[ 1193.366275][T23644]  ? perf_trace_preemptirq_template+0x268/0x320
[ 1193.372512][T23644]  ? __x64_sys_sendmsg+0x80/0x80
[ 1193.377454][T23644]  ? lockdep_hardirqs_on+0x94/0x140
[ 1193.382655][T23644]  do_syscall_64+0x4c/0xa0
[ 1193.387241][T23644]  ? clear_bhb_loop+0x60/0xb0
[ 1193.391909][T23644]  ? clear_bhb_loop+0x60/0xb0
[ 1193.396578][T23644]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1193.402479][T23644] RIP: 0033:0x7f5c65d9de99
[ 1193.406891][T23644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1193.426487][T23644] RSP: 002b:00007f5c66c91028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1193.434897][T23644] RAX: ffffffffffffffda RBX: 00007f5c66025fa0 RCX: 00007f5c65d9de99
[ 1193.442856][T23644] RDX: 0000000000000000 RSI: 0000200000007940 RDI: 0000000000000016
[ 1193.450820][T23644] RBP: 00007f5c66c91090 R08: 0000000000000000 R09: 0000000000000000
[ 1193.458781][T23644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1193.466741][T23644] R13: 00007f5c66026038 R14: 00007f5c66025fa0 R15: 00007fffce855b68
[ 1193.474721][T23644]  </TASK>
[ 1193.622704][T23653] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6082'.
[ 1193.779649][T23657] netlink: 72 bytes leftover after parsing attributes in process `syz.5.6082'.
[ 1194.299584][T23673] netlink: 'syz.4.6088': attribute type 29 has an invalid length.
[ 1194.362308][T23679] netlink: 'syz.0.6089': attribute type 29 has an invalid length.
[ 1194.418446][T23681] FAULT_INJECTION: forcing a failure.
[ 1194.418446][T23681] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1194.447275][T23681] CPU: 0 PID: 23681 Comm: syz.0.6089 Not tainted syzkaller #0
[ 1194.454791][T23681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1194.464867][T23681] Call Trace:
[ 1194.468168][T23681]  <TASK>
[ 1194.471115][T23681]  dump_stack_lvl+0x188/0x24e
[ 1194.475820][T23681]  ? show_regs_print_info+0x12/0x12
[ 1194.481045][T23681]  ? load_image+0x410/0x410
[ 1194.485567][T23681]  ? __lock_acquire+0x7c40/0x7c40
[ 1194.490770][T23681]  should_fail_ex+0x390/0x4c0
[ 1194.495451][T23681]  _copy_from_user+0x2c/0x170
[ 1194.500123][T23681]  ___sys_recvmsg+0x170/0x590
[ 1194.504814][T23681]  ? __sys_recvmsg+0x2a0/0x2a0
[ 1194.509583][T23681]  ? common_file_perm+0x171/0x1c0
[ 1194.514611][T23681]  ? __fget_files+0x3fc/0x460
[ 1194.519294][T23681]  __x64_sys_recvmsg+0x20d/0x2e0
[ 1194.524227][T23681]  ? ct_nmi_exit+0x145/0x1c0
[ 1194.528810][T23681]  ? ___sys_recvmsg+0x590/0x590
[ 1194.533669][T23681]  ? lockdep_hardirqs_on+0x94/0x140
[ 1194.538871][T23681]  do_syscall_64+0x4c/0xa0
[ 1194.543287][T23681]  ? clear_bhb_loop+0x60/0xb0
[ 1194.547959][T23681]  ? clear_bhb_loop+0x60/0xb0
[ 1194.552637][T23681]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1194.558530][T23681] RIP: 0033:0x7f5c65d9de99
[ 1194.562937][T23681] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1194.582535][T23681] RSP: 002b:00007f5c66c70028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[ 1194.590946][T23681] RAX: ffffffffffffffda RBX: 00007f5c66026090 RCX: 00007f5c65d9de99
[ 1194.598918][T23681] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000003
[ 1194.606885][T23681] RBP: 00007f5c66c70090 R08: 0000000000000000 R09: 0000000000000000
[ 1194.614853][T23681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1194.622816][T23681] R13: 00007f5c66026128 R14: 00007f5c66026090 R15: 00007fffce855b68
[ 1194.630795][T23681]  </TASK>
[ 1196.119162][T23673] netlink: 'syz.4.6088': attribute type 29 has an invalid length.
[ 1196.151697][T23679] netlink: 'syz.0.6089': attribute type 29 has an invalid length.
[ 1196.193699][T20869] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1196.215268][T20869] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1196.255713][T23310] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1196.369507][ T4994] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1196.390078][ T4994] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1196.503468][ T4994] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1196.539838][ T4994] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1196.581247][T23310] device veth0_vlan entered promiscuous mode
[ 1196.583124][T23691] netlink: 'syz.5.6092': attribute type 29 has an invalid length.
[ 1196.658146][ T4994] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1196.677613][ T4994] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1196.791652][T23691] netlink: 'syz.5.6092': attribute type 29 has an invalid length.
[ 1196.825985][T23310] device veth1_vlan entered promiscuous mode
[ 1196.851941][T23704] netlink: 'syz.4.6095': attribute type 21 has an invalid length.
[ 1196.954467][T23310] device veth0_macvtap entered promiscuous mode
[ 1196.965053][ T4994] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1196.974250][ T4994] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1196.991682][ T4994] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1197.015621][ T4994] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1197.034296][T23310] device veth1_macvtap entered promiscuous mode
[ 1197.060178][ T4994] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1197.082579][ T4994] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1197.125698][T23713] netlink: 'syz.4.6098': attribute type 21 has an invalid length.
[ 1197.159042][T23713] netlink: 'syz.4.6098': attribute type 1 has an invalid length.
[ 1197.213713][T23310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1197.232380][T23310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1197.265353][T23310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1197.289339][T23310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1197.325397][T23310] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1197.384537][ T4994] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1197.393978][ T4994] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1197.432675][T23310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1197.479772][T23310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1197.504605][T23310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1197.538840][T23310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1197.559519][T23310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1197.580842][T23310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1197.624353][T23310] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1197.661749][T23310] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1197.691438][T23310] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1197.725288][T23310] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1197.770730][T23310] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1197.880573][ T4994] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1197.890766][ T4994] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1198.486911][T23729] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6101'.
[ 1198.699299][T23725] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6101'.
[ 1198.709814][T20127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1198.752091][T20127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1198.800893][T23741] netlink: 'syz.5.6104': attribute type 2 has an invalid length.
[ 1198.827199][ T4994] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1198.891884][   T48] Bluetooth: hci2: ISO packet for unknown connection handle 2622
[ 1198.895533][ T4995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1198.918107][ T4995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1198.931950][ T4994] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1199.771836][T20034] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1199.789280][T20034] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1199.801965][T20034] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1199.816935][T20034] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1199.824922][T20034] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1199.832215][T20034] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1199.870534][T23774] validate_nla: 1 callbacks suppressed
[ 1199.870551][T23774] netlink: 'syz.1.6116': attribute type 10 has an invalid length.
[ 1200.104770][T20869] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1200.231219][T20869] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1200.274646][T23781] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6118'.
[ 1200.422495][T23786] netlink: 72 bytes leftover after parsing attributes in process `syz.5.6118'.
[ 1200.489423][T23784] netlink: 'syz.4.6121': attribute type 1 has an invalid length.
[ 1200.564882][T23784] netlink: 157116 bytes leftover after parsing attributes in process `syz.4.6121'.
[ 1200.687330][T23795] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.6121'.
[ 1200.762389][T23795] netlink: zone id is out of range
[ 1200.838602][T23795] netlink: zone id is out of range
[ 1201.739197][T20869] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1201.787846][T23795] netlink: zone id is out of range
[ 1201.794001][T23795] netlink: zone id is out of range
[ 1201.805263][T23795] netlink: zone id is out of range
[ 1201.811800][T23795] netlink: zone id is out of range
[ 1201.817937][T23795] netlink: zone id is out of range
[ 1201.840787][T23795] netlink: zone id is out of range
[ 1201.852390][T23795] netlink: zone id is out of range
[ 1201.862407][T23795] netlink: zone id is out of range
[ 1201.875511][T20034] Bluetooth: hci0: command 0x0409 tx timeout
[ 1201.952983][T20869] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1202.080979][T23809] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.6123'.
[ 1202.291882][T23770] chnl_net:caif_netlink_parms(): no params data found
[ 1202.496576][T23809] netlink: 'syz.1.6123': attribute type 1 has an invalid length.
[ 1202.515037][T23809] netlink: 'syz.1.6123': attribute type 3 has an invalid length.
[ 1202.523006][T23809] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6123'.
[ 1202.606582][T23816] netlink: 'syz.3.6124': attribute type 21 has an invalid length.
[ 1202.636957][T23816] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6124'.
[ 1202.683358][T23813] delete_channel: no stack
[ 1202.822693][T23770] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1202.857133][T23770] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1202.919361][T23770] device bridge_slave_0 entered promiscuous mode
[ 1202.979240][T23827] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6127'.
[ 1203.020981][T23770] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1203.055420][T23770] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1203.091402][T23770] device bridge_slave_1 entered promiscuous mode
[ 1203.137864][T23836] netlink: 'syz.3.6128': attribute type 6 has an invalid length.
[ 1203.228157][T23770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1203.277813][T23770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1203.576632][T23770] team0: Port device team_slave_0 added
[ 1203.605206][T23847] __nla_validate_parse: 2 callbacks suppressed
[ 1203.605230][T23847] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6132'.
[ 1203.833811][T23770] team0: Port device team_slave_1 added
[ 1203.921113][T23770] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1203.944557][T20034] Bluetooth: hci0: command 0x041b tx timeout
[ 1203.950978][T23770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1203.977232][T23770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1204.254247][T23865] netlink: 72 bytes leftover after parsing attributes in process `syz.5.6134'.
[ 1206.034747][T20034] Bluetooth: hci0: command 0x040f tx timeout
[ 1206.175726][T23770] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1206.182725][T23770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1206.209615][T23770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1206.248945][T23858] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6134'.
[ 1206.343271][T23770] device hsr_slave_0 entered promiscuous mode
[ 1206.362145][T23770] device hsr_slave_1 entered promiscuous mode
[ 1206.426010][T23770] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1206.437071][T23770] Cannot create hsr debugfs directory
[ 1206.506238][T23876] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6139'.
[ 1206.964084][T23889] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.6144'.
[ 1207.045251][T23887] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6145'.
[ 1207.078210][T23887] device hsr_slave_0 left promiscuous mode
[ 1207.106171][T23887] device hsr_slave_1 left promiscuous mode
[ 1207.594103][T20869] device hsr_slave_0 left promiscuous mode
[ 1207.609751][T20869] device hsr_slave_1 left promiscuous mode
[ 1207.619509][T20869] device bridge_slave_1 left promiscuous mode
[ 1207.631253][T20869] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1207.671773][T20869] device bridge_slave_0 left promiscuous mode
[ 1207.691473][T20869] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1207.765981][T20869] device veth0_macvtap left promiscuous mode
[ 1207.792465][T20869] device veth1_vlan left promiscuous mode
[ 1207.802557][T20869] device veth0_vlan left promiscuous mode
[ 1207.823714][T23917] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6149'.
[ 1208.114830][T20034] Bluetooth: hci0: command 0x0419 tx timeout
[ 1208.973949][T23934] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6150'.
[ 1209.844557][T23908] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6149'.
[ 1209.861126][T23928] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6150'.
[ 1210.393684][T23950] netlink: 16399 bytes leftover after parsing attributes in process `syz.5.6158'.
[ 1211.991811][T23973] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6165'.
[ 1212.545348][T23968] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6165'.
[ 1213.301671][T23770] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1213.396266][T23770] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1213.482508][T23770] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1213.541163][T23770] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1214.271082][T23770] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1214.375890][T20870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1214.395410][T20870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1214.438177][T23770] 8021q: adding VLAN 0 to HW filter on device team0
[ 1214.507702][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1214.545680][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1214.585647][   T34] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1214.592839][   T34] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1214.945184][T24000] device syzkaller0 entered promiscuous mode
[ 1214.962764][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1214.981684][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1215.033927][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1215.085476][   T34] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1215.092646][   T34] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1215.172427][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1215.496822][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1215.515579][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1215.556328][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1215.987761][T24041] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6179'.
[ 1217.263615][T24068] netlink: 72 bytes leftover after parsing attributes in process `syz.5.6189'.
[ 1217.930087][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1217.940149][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1217.950579][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1217.959693][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1217.978600][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1217.997769][T24034] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6179'.
[ 1218.038237][T24064] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6189'.
[ 1218.072150][T23770] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1218.113087][T23770] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1218.144667][T20127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1218.163842][T20127] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1218.482869][T24083] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.6193'.
[ 1218.961749][ T4994] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1218.979605][ T4994] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1219.009320][T23770] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1219.135789][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1219.162489][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1219.185766][T24116] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6201'.
[ 1219.242373][ T4994] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1219.266822][ T4994] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1219.297869][T24122] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6201'.
[ 1219.333346][T23770] device veth0_vlan entered promiscuous mode
[ 1219.343412][ T4994] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1219.363578][ T4994] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1219.397153][T23770] device veth1_vlan entered promiscuous mode
[ 1219.481712][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1219.497675][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1219.523750][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1219.549456][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1219.573036][T23770] device veth0_macvtap entered promiscuous mode
[ 1219.598758][T23770] device veth1_macvtap entered promiscuous mode
[ 1219.639708][T23770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1219.664747][T23770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1219.690799][T23770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1219.730693][T23770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1219.744554][T23770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1219.770178][T23770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1219.806014][T23770] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1219.846299][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1219.863844][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1219.892707][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1219.952604][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1219.977246][T24133] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6203'.
[ 1220.013064][T23770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1220.036390][T23770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1220.069623][T23770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1220.096723][T23770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1220.134485][T23770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1220.164494][T23770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1220.177279][T24142] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6203'.
[ 1220.196564][T23770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1220.216260][T23770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1220.247833][T23770] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1220.272240][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1220.326524][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1220.365518][T23770] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1220.393443][T23770] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1220.417079][T23770] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1220.426875][T23770] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1220.588495][ T4994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1220.624585][ T4994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1220.680034][ T4994] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1220.703512][T20127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1220.720105][T20127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1220.743510][ T4994] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1220.801512][T24156] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6209'.
[ 1220.988810][T24160] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1220.996169][T24160] IPv6: NLM_F_CREATE should be set when creating new route
[ 1221.003525][T24160] IPv6: NLM_F_CREATE should be set when creating new route
[ 1221.010934][T24160] IPv6: NLM_F_CREATE should be set when creating new route
[ 1221.109596][T24165] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6212'.
[ 1221.265391][T24165] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6212'.
[ 1222.108643][T24195] syz.5.6226[24195] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1222.108750][T24195] syz.5.6226[24195] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1222.546980][   T48] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1222.569627][   T48] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1222.595921][   T48] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1222.604075][   T48] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1222.612071][   T48] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 1222.621162][   T48] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1222.899471][T24203] chnl_net:caif_netlink_parms(): no params data found
[ 1223.102239][T24203] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1223.110883][T24203] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1223.119160][T24203] device bridge_slave_0 entered promiscuous mode
[ 1223.128586][T24203] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1223.135849][T24203] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1223.144025][T24203] device bridge_slave_1 entered promiscuous mode
[ 1223.168790][T24203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1223.181190][T24203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1223.207975][T24203] team0: Port device team_slave_0 added
[ 1223.214075][T24215] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6231'.
[ 1223.277380][T24203] team0: Port device team_slave_1 added
[ 1223.343246][T24203] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1223.351076][T24203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1223.381205][T24215] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6231'.
[ 1223.381675][T24203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1223.409425][T24203] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1223.420563][T24203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1223.452749][T24203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1224.193440][T24203] device hsr_slave_0 entered promiscuous mode
[ 1224.200640][T24203] device hsr_slave_1 entered promiscuous mode
[ 1224.219898][T24230] netlink: 'syz.1.6236': attribute type 21 has an invalid length.
[ 1224.230145][T24230] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6236'.
[ 1224.241291][T24230] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6236'.
[ 1224.397068][ T4361] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1224.549060][ T4361] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1224.639864][ T4361] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1224.664719][   T48] Bluetooth: hci1: command 0x0409 tx timeout
[ 1224.836351][ T4361] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1224.878404][T24250] netlink: 'syz.3.6243': attribute type 27 has an invalid length.
[ 1224.966595][T24250] bond0: (slave bond_slave_0): Releasing backup interface
[ 1224.982653][T24261] netlink: 72 bytes leftover after parsing attributes in process `syz.5.6245'.
[ 1225.049147][T24254] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6245'.
[ 1225.251118][T24265] netlink: 'syz.0.6249': attribute type 21 has an invalid length.
[ 1225.408714][T24269] netlink: 'syz.3.6251': attribute type 13 has an invalid length.
[ 1225.449979][T24269] netlink: 24859 bytes leftover after parsing attributes in process `syz.3.6251'.
[ 1225.528465][T24272] FAULT_INJECTION: forcing a failure.
[ 1225.528465][T24272] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1225.549424][T24272] CPU: 0 PID: 24272 Comm: syz.1.6250 Not tainted syzkaller #0
[ 1225.557011][T24272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1225.567081][T24272] Call Trace:
[ 1225.570371][T24272]  <TASK>
[ 1225.573315][T24272]  dump_stack_lvl+0x188/0x24e
[ 1225.578016][T24272]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1225.584192][T24272]  ? show_regs_print_info+0x12/0x12
[ 1225.589392][T24272]  ? load_image+0x410/0x410
[ 1225.593903][T24272]  should_fail_ex+0x390/0x4c0
[ 1225.598586][T24272]  _copy_from_user+0x2c/0x170
[ 1225.603260][T24272]  ____sys_sendmsg+0x31a/0x9a0
[ 1225.608030][T24272]  ? __sys_sendmsg_sock+0x30/0x30
[ 1225.613057][T24272]  ? __import_iovec+0x306/0x510
[ 1225.617912][T24272]  ? import_iovec+0x6f/0xa0
[ 1225.622418][T24272]  ___sys_sendmsg+0x2a2/0x360
[ 1225.627099][T24272]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1225.631911][T24272]  ? __lock_acquire+0x7c40/0x7c40
[ 1225.636960][T24272]  __se_sys_sendmsg+0x1c3/0x2b0
[ 1225.641808][T24272]  ? perf_trace_preemptirq_template+0x268/0x320
[ 1225.648047][T24272]  ? __x64_sys_sendmsg+0x80/0x80
[ 1225.652996][T24272]  ? lockdep_hardirqs_on+0x94/0x140
[ 1225.658195][T24272]  do_syscall_64+0x4c/0xa0
[ 1225.662611][T24272]  ? clear_bhb_loop+0x60/0xb0
[ 1225.667281][T24272]  ? clear_bhb_loop+0x60/0xb0
[ 1225.671955][T24272]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1225.677841][T24272] RIP: 0033:0x7f791c79de99
[ 1225.682248][T24272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1225.701844][T24272] RSP: 002b:00007f791d608028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1225.710254][T24272] RAX: ffffffffffffffda RBX: 00007f791ca25fa0 RCX: 00007f791c79de99
[ 1225.718217][T24272] RDX: 0000000000000000 RSI: 0000200000007940 RDI: 0000000000000016
[ 1225.726189][T24272] RBP: 00007f791d608090 R08: 0000000000000000 R09: 0000000000000000
[ 1225.734150][T24272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1225.742121][T24272] R13: 00007f791ca26038 R14: 00007f791ca25fa0 R15: 00007ffc11cc1658
[ 1225.750102][T24272]  </TASK>
[ 1225.869822][T24273] netlink: 188 bytes leftover after parsing attributes in process `syz.3.6251'.
[ 1226.555809][T24305] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6261'.
[ 1226.583095][T24308] netlink: 'syz.0.6262': attribute type 29 has an invalid length.
[ 1226.683287][T24308] netlink: 'syz.0.6262': attribute type 29 has an invalid length.
[ 1226.714843][T24311] netlink: 'syz.0.6262': attribute type 29 has an invalid length.
[ 1226.751395][T24312] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6261'.
[ 1226.754637][   T48] Bluetooth: hci1: command 0x041b tx timeout
[ 1226.995183][T24322] netlink: 'syz.5.6266': attribute type 29 has an invalid length.
[ 1227.815698][T24323] FAULT_INJECTION: forcing a failure.
[ 1227.815698][T24323] name failslab, interval 1, probability 0, space 0, times 0
[ 1227.843214][T24323] CPU: 0 PID: 24323 Comm: syz.5.6266 Not tainted syzkaller #0
[ 1227.850720][T24323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1227.860783][T24323] Call Trace:
[ 1227.864078][T24323]  <TASK>
[ 1227.867019][T24323]  dump_stack_lvl+0x188/0x24e
[ 1227.871715][T24323]  ? show_regs_print_info+0x12/0x12
[ 1227.876930][T24323]  ? load_image+0x410/0x410
[ 1227.881450][T24323]  ? __lock_acquire+0x7c40/0x7c40
[ 1227.886489][T24323]  ? _raw_spin_unlock_irq+0x1f/0x40
[ 1227.891702][T24323]  should_fail_ex+0x390/0x4c0
[ 1227.896401][T24323]  should_failslab+0x5/0x20
[ 1227.900924][T24323]  slab_pre_alloc_hook+0x59/0x300
[ 1227.905955][T24323]  ? acct_exit_ns+0xe0/0xe0
[ 1227.910475][T24323]  kmem_cache_alloc+0x56/0x2f0
[ 1227.915252][T24323]  ? taskstats_exit+0x150/0x9e0
[ 1227.920122][T24323]  taskstats_exit+0x150/0x9e0
[ 1227.924817][T24323]  ? sync_mm_rss+0x211/0x350
[ 1227.929427][T24323]  do_exit+0x94b/0x2570
[ 1227.933600][T24323]  ? cgroup_freezing+0x1c/0x340
[ 1227.938468][T24323]  ? put_task_struct+0x80/0x80
[ 1227.943252][T24323]  ? ct_nmi_exit+0x145/0x1c0
[ 1227.947871][T24323]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 1227.953876][T24323]  ? lock_chain_count+0x20/0x20
[ 1227.958751][T24323]  do_group_exit+0x229/0x2e0
[ 1227.963365][T24323]  ? lockdep_hardirqs_on+0x94/0x140
[ 1227.968584][T24323]  get_signal+0x1259/0x1340
[ 1227.973121][T24323]  arch_do_signal_or_restart+0xc4/0x1310
[ 1227.978776][T24323]  ? __fget_files+0x3fc/0x460
[ 1227.983470][T24323]  ? get_sigframe_size+0x10/0x10
[ 1227.988443][T24323]  ? exit_to_user_mode_loop+0x3b/0x110
[ 1227.993927][T24323]  exit_to_user_mode_loop+0x70/0x110
[ 1227.999227][T24323]  exit_to_user_mode_prepare+0xee/0x180
[ 1228.004790][T24323]  syscall_exit_to_user_mode+0x16/0x40
[ 1228.010257][T24323]  do_syscall_64+0x58/0xa0
[ 1228.014687][T24323]  ? clear_bhb_loop+0x60/0xb0
[ 1228.019380][T24323]  ? clear_bhb_loop+0x60/0xb0
[ 1228.024073][T24323]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1228.029979][T24323] RIP: 0033:0x7f4fbd99de99
[ 1228.034405][T24323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1228.054026][T24323] RSP: 002b:00007f4fbe784028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[ 1228.062462][T24323] RAX: fffffffffffffe00 RBX: 00007f4fbdc26090 RCX: 00007f4fbd99de99
[ 1228.070443][T24323] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000003
[ 1228.078424][T24323] RBP: 00007f4fbe784090 R08: 0000000000000000 R09: 0000000000000000
[ 1228.086404][T24323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1228.094381][T24323] R13: 00007f4fbdc26128 R14: 00007f4fbdc26090 R15: 00007ffe582d04b8
[ 1228.102377][T24323]  </TASK>
[ 1228.834686][   T48] Bluetooth: hci1: command 0x040f tx timeout
[ 1229.265173][T24322] netlink: 'syz.5.6266': attribute type 29 has an invalid length.
[ 1229.406724][T24203] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1229.487716][T24340] netlink: 'syz.5.6272': attribute type 29 has an invalid length.
[ 1230.690648][T24203] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1230.719814][T24342] netlink: 'syz.3.6273': attribute type 21 has an invalid length.
[ 1230.734922][T24340] netlink: 'syz.5.6272': attribute type 29 has an invalid length.
[ 1230.774458][T24203] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1230.821266][T24203] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1230.904712][   T48] Bluetooth: hci1: command 0x0419 tx timeout
[ 1231.107773][T24203] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1231.168659][ T4994] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1231.197516][ T4994] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1231.247484][T24203] 8021q: adding VLAN 0 to HW filter on device team0
[ 1231.300114][ T4994] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1231.385887][ T4994] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1231.404989][ T4994] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1231.412157][ T4994] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1231.454829][ T4994] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1231.842101][T24387] netlink: 72 bytes leftover after parsing attributes in process `syz.5.6283'.
[ 1232.205985][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1232.255787][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1232.274409][   T34] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1232.281578][   T34] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1232.334793][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1232.352023][T24376] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6283'.
[ 1233.885533][T24414] netlink: 'syz.0.6294': attribute type 2 has an invalid length.
[ 1233.893336][T24414] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.6294'.
[ 1234.106836][T24416] FAULT_INJECTION: forcing a failure.
[ 1234.106836][T24416] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1234.120488][T24416] CPU: 0 PID: 24416 Comm: syz.0.6295 Not tainted syzkaller #0
[ 1234.127979][T24416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1234.138061][T24416] Call Trace:
[ 1234.141362][T24416]  <TASK>
[ 1234.144322][T24416]  dump_stack_lvl+0x188/0x24e
[ 1234.149058][T24416]  ? show_regs_print_info+0x12/0x12
[ 1234.154276][T24416]  ? load_image+0x410/0x410
[ 1234.158789][T24416]  ? __lock_acquire+0x7c40/0x7c40
[ 1234.163839][T24416]  should_fail_ex+0x390/0x4c0
[ 1234.168538][T24416]  _copy_from_user+0x2c/0x170
[ 1234.173227][T24416]  ___sys_sendmsg+0x1c3/0x360
[ 1234.177926][T24416]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1234.182742][T24416]  ? __lock_acquire+0x7c40/0x7c40
[ 1234.187831][T24416]  __se_sys_sendmsg+0x1c3/0x2b0
[ 1234.192701][T24416]  ? __x64_sys_sendmsg+0x80/0x80
[ 1234.197680][T24416]  ? lockdep_hardirqs_on+0x94/0x140
[ 1234.202892][T24416]  do_syscall_64+0x4c/0xa0
[ 1234.207320][T24416]  ? clear_bhb_loop+0x60/0xb0
[ 1234.212007][T24416]  ? clear_bhb_loop+0x60/0xb0
[ 1234.216695][T24416]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1234.222590][T24416] RIP: 0033:0x7fec41b9de99
[ 1234.227018][T24416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1234.246625][T24416] RSP: 002b:00007fec42aca028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1234.255047][T24416] RAX: ffffffffffffffda RBX: 00007fec41e25fa0 RCX: 00007fec41b9de99
[ 1234.263018][T24416] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005
[ 1234.270994][T24416] RBP: 00007fec42aca090 R08: 0000000000000000 R09: 0000000000000000
[ 1234.278967][T24416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1234.286940][T24416] R13: 00007fec41e26038 R14: 00007fec41e25fa0 R15: 00007fff8f11fc18
[ 1234.294957][T24416]  </TASK>
[ 1234.665776][T24420] netlink: 'syz.0.6297': attribute type 2 has an invalid length.
[ 1234.673746][T24420] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.6297'.
[ 1235.261618][T20869] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1235.329688][T24399] mac80211_hwsim hwsim73 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1235.371377][T24401] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6286'.
[ 1235.397767][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1235.413565][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1235.426717][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1235.436188][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1235.445038][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1235.502475][T20869] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1235.528412][T20869] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1235.541403][T20869] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1235.550578][T20869] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1235.562819][T24203] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1235.563146][T24437] netlink: 'syz.1.6304': attribute type 29 has an invalid length.
[ 1235.712146][T24437] netlink: 'syz.1.6304': attribute type 29 has an invalid length.
[ 1236.231296][ T4361] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1236.239631][ T4361] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1236.255443][ T4361] batman_adv: batadv0: Interface deactivated: vlan1
[ 1236.262101][ T4361] batman_adv: batadv0: Removing interface: vlan1
[ 1236.277933][ T4361] device bridge_slave_1 left promiscuous mode
[ 1236.284366][ T4361] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1236.297987][ T4361] device bridge_slave_0 left promiscuous mode
[ 1236.304250][ T4361] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1236.403516][ T4361] device veth0_vlan left promiscuous mode
[ 1237.018296][T24464] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6312'.
[ 1237.623398][T24454] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6310'.
[ 1237.640325][T24454] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6310'.
[ 1237.660945][T24459] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6312'.
[ 1237.784770][T20869] wlan1: Trigger new scan to find an IBSS to join
[ 1238.667538][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[ 1238.675177][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[ 1239.680350][T24484] netlink: 'syz.0.6319': attribute type 29 has an invalid length.
[ 1240.434743][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1240.446848][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1240.491672][T24484] netlink: 'syz.0.6319': attribute type 29 has an invalid length.
[ 1240.505491][T24486] netlink: 'syz.0.6319': attribute type 29 has an invalid length.
[ 1240.540716][T24203] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1240.744764][T20127] wlan1: Trigger new scan to find an IBSS to join
[ 1241.070306][T24506] netlink: 'syz.0.6326': attribute type 21 has an invalid length.
[ 1241.080318][T24506] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6326'.
[ 1241.462498][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1241.481775][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1241.515512][T24203] device veth0_vlan entered promiscuous mode
[ 1241.530574][T24203] device veth1_vlan entered promiscuous mode
[ 1241.547771][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1241.559511][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1241.568604][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1241.577277][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1241.601364][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1241.613993][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1241.638223][T24203] device veth0_macvtap entered promiscuous mode
[ 1241.650232][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1241.663146][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1241.683478][T24203] device veth1_macvtap entered promiscuous mode
[ 1241.692781][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1241.709193][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1241.733475][T24203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1241.744342][T24203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1241.755811][T24203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1241.767221][T24203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1241.777618][T24203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1241.795890][T24203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1241.812399][T24203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1241.829463][T24203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1241.843039][T24203] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1241.863151][T20870] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1241.880126][T20870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1241.904783][T24203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1241.923914][T24203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1241.934667][T24203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1241.952428][T24203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1241.963505][T24203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1241.981148][T24203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1241.991675][T24203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1242.008373][T24203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1242.024457][T24203] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1242.033176][T20870] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1242.045778][T20870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1242.061666][T24203] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1242.078650][T24203] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1242.088094][T24203] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1242.097350][T24203] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1242.405218][ T4995] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1242.413083][ T4995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1242.473669][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1242.516682][ T4994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1242.526234][T24522] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6331'.
[ 1242.554468][ T4994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1242.596203][T24525] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.6329'.
[ 1242.602828][ T4994] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1243.270001][T24528] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6331'.
[ 1243.286503][T24546] netlink: 'syz.5.6336': attribute type 29 has an invalid length.
[ 1243.372144][T24553] FAULT_INJECTION: forcing a failure.
[ 1243.372144][T24553] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1243.407940][T24553] CPU: 1 PID: 24553 Comm: syz.4.6337 Not tainted syzkaller #0
[ 1243.415461][T24553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1243.425537][T24553] Call Trace:
[ 1243.428827][T24553]  <TASK>
[ 1243.431775][T24553]  dump_stack_lvl+0x188/0x24e
[ 1243.436480][T24553]  ? show_regs_print_info+0x12/0x12
[ 1243.441699][T24553]  ? load_image+0x410/0x410
[ 1243.446224][T24553]  ? __lock_acquire+0x7c40/0x7c40
[ 1243.451283][T24553]  should_fail_ex+0x390/0x4c0
[ 1243.456081][T24553]  prepare_alloc_pages+0x1e1/0x5b0
[ 1243.461226][T24553]  __alloc_pages+0x130/0x4f0
[ 1243.465847][T24553]  ? zone_statistics+0x170/0x170
[ 1243.470811][T24553]  ? verify_lock_unused+0x140/0x140
[ 1243.476033][T24553]  __folio_alloc+0xe/0x30
[ 1243.480368][T24553]  vma_alloc_folio+0x499/0x900
[ 1243.485132][T24553]  ? mpol_shared_policy_lookup+0x147/0x1e0
[ 1243.490939][T24553]  shmem_alloc_and_acct_folio+0x463/0xbd0
[ 1243.496665][T24553]  ? shmem_replace_folio+0xdc0/0xdc0
[ 1243.501960][T24553]  ? xas_load+0x127/0x140
[ 1243.506287][T24553]  ? __filemap_get_folio+0x10f/0xde0
[ 1243.511574][T24553]  ? __filemap_get_folio+0xb43/0xde0
[ 1243.516854][T24553]  ? __filemap_get_folio+0x10f/0xde0
[ 1243.522138][T24553]  ? page_cache_prev_miss+0x380/0x380
[ 1243.527511][T24553]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 1243.533491][T24553]  ? do_user_addr_fault+0x8c7/0xb20
[ 1243.538692][T24553]  shmem_get_folio_gfp+0x1439/0x35e0
[ 1243.544007][T24553]  shmem_write_begin+0xee/0x3f0
[ 1243.548859][T24553]  generic_perform_write+0x2fa/0x5c0
[ 1243.554153][T24553]  ? generic_file_direct_write+0x330/0x330
[ 1243.559959][T24553]  ? __file_remove_privs+0x5f0/0x5f0
[ 1243.565238][T24553]  ? rwsem_write_trylock+0x135/0x1c0
[ 1243.570518][T24553]  ? clear_nonspinnable+0x60/0x60
[ 1243.575536][T24553]  ? generic_write_checks_count+0x363/0x440
[ 1243.581428][T24553]  __generic_file_write_iter+0x148/0x2a0
[ 1243.587060][T24553]  generic_file_write_iter+0xab/0x2e0
[ 1243.592429][T24553]  vfs_write+0x482/0x9a0
[ 1243.596673][T24553]  ? file_end_write+0x250/0x250
[ 1243.601524][T24553]  ? __fget_files+0x3fc/0x460
[ 1243.606207][T24553]  ? __fdget_pos+0x2ae/0x360
[ 1243.610792][T24553]  ? ksys_write+0x70/0x260
[ 1243.615206][T24553]  ksys_write+0x14d/0x260
[ 1243.619537][T24553]  ? __ia32_sys_read+0x80/0x80
[ 1243.624300][T24553]  ? lockdep_hardirqs_on+0x94/0x140
[ 1243.629501][T24553]  do_syscall_64+0x4c/0xa0
[ 1243.633910][T24553]  ? clear_bhb_loop+0x60/0xb0
[ 1243.638594][T24553]  ? clear_bhb_loop+0x60/0xb0
[ 1243.643267][T24553]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1243.649160][T24553] RIP: 0033:0x7fdef279de99
[ 1243.653662][T24553] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1243.673262][T24553] RSP: 002b:00007fdef35de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1243.681670][T24553] RAX: ffffffffffffffda RBX: 00007fdef2a26090 RCX: 00007fdef279de99
[ 1243.689646][T24553] RDX: 00000000002a979d RSI: 0000200000000000 RDI: 0000000000000007
[ 1243.697610][T24553] RBP: 00007fdef35de090 R08: 0000000000000000 R09: 0000000000000000
[ 1243.705576][T24553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1243.713539][T24553] R13: 00007fdef2a26128 R14: 00007fdef2a26090 R15: 00007fffc3e696a8
[ 1243.721518][T24553]  </TASK>
[ 1244.828734][ T4298] wlan1: Trigger new scan to find an IBSS to join
[ 1245.718229][T20869] wlan1: Creating new IBSS network, BSSID 5e:f2:2a:d4:7e:49
[ 1245.879542][T24546] netlink: 'syz.5.6336': attribute type 29 has an invalid length.
[ 1246.187002][T24570] netlink: 'syz.0.6343': attribute type 20 has an invalid length.
[ 1247.588119][T24586] netlink: 'syz.1.6349': attribute type 10 has an invalid length.
[ 1248.080957][T24586] device veth0_vlan left promiscuous mode
[ 1248.174738][T24586] device veth0_vlan entered promiscuous mode
[ 1248.333413][T24586] team0: Device veth0_vlan failed to register rx_handler
[ 1248.637074][T24607] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6353'.
[ 1248.704630][T24593] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6349'.
[ 1248.746365][T24593] netlink: 'syz.1.6349': attribute type 1 has an invalid length.
[ 1248.754181][T24593] netlink: 6 bytes leftover after parsing attributes in process `syz.1.6349'.
[ 1248.836758][T24602] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6353'.
[ 1249.428620][T24613] device syzkaller0 entered promiscuous mode
[ 1249.639485][T24620] FAULT_INJECTION: forcing a failure.
[ 1249.639485][T24620] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1249.677642][T24620] CPU: 0 PID: 24620 Comm: syz.1.6359 Not tainted syzkaller #0
[ 1249.685165][T24620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1249.695260][T24620] Call Trace:
[ 1249.698565][T24620]  <TASK>
[ 1249.701530][T24620]  dump_stack_lvl+0x188/0x24e
[ 1249.706260][T24620]  ? show_regs_print_info+0x12/0x12
[ 1249.711501][T24620]  ? load_image+0x410/0x410
[ 1249.716046][T24620]  ? __lock_acquire+0x7c40/0x7c40
[ 1249.721137][T24620]  should_fail_ex+0x390/0x4c0
[ 1249.725869][T24620]  _copy_from_user+0x2c/0x170
[ 1249.730588][T24620]  ___sys_recvmsg+0x170/0x590
[ 1249.735325][T24620]  ? __sys_recvmsg+0x2a0/0x2a0
[ 1249.740151][T24620]  ? common_file_perm+0x171/0x1c0
[ 1249.745251][T24620]  ? __fget_files+0x3fc/0x460
[ 1249.750009][T24620]  __x64_sys_recvmsg+0x20d/0x2e0
[ 1249.754995][T24620]  ? ___sys_recvmsg+0x590/0x590
[ 1249.759935][T24620]  ? lockdep_hardirqs_on+0x94/0x140
[ 1249.765190][T24620]  do_syscall_64+0x4c/0xa0
[ 1249.769649][T24620]  ? clear_bhb_loop+0x60/0xb0
[ 1249.774369][T24620]  ? clear_bhb_loop+0x60/0xb0
[ 1249.779098][T24620]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1249.785027][T24620] RIP: 0033:0x7f791c79de99
[ 1249.789490][T24620] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1249.809131][T24620] RSP: 002b:00007f791d608028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[ 1249.817584][T24620] RAX: ffffffffffffffda RBX: 00007f791ca25fa0 RCX: 00007f791c79de99
[ 1249.825590][T24620] RDX: 0000000000000001 RSI: 00002000000007c0 RDI: 0000000000000003
[ 1249.833598][T24620] RBP: 00007f791d608090 R08: 0000000000000000 R09: 0000000000000000
[ 1249.841778][T24620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1249.849784][T24620] R13: 00007f791ca26038 R14: 00007f791ca25fa0 R15: 00007ffc11cc1658
[ 1249.857853][T24620]  </TASK>
[ 1253.605630][T24637] netlink: 10 bytes leftover after parsing attributes in process `syz.4.6364'.
[ 1254.264068][T24650] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6368'.
[ 1254.440072][T24659] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6368'.
[ 1257.773649][T24666] device syzkaller0 entered promiscuous mode
[ 1258.130512][T24690] syz.1.6381[24690] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1258.130580][T24690] syz.1.6381[24690] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1260.543033][T24710] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6389'.
[ 1260.746383][T24710] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6389'.
[ 1261.216306][T24732] FAULT_INJECTION: forcing a failure.
[ 1261.216306][T24732] name failslab, interval 1, probability 0, space 0, times 0
[ 1261.231761][T24732] CPU: 0 PID: 24732 Comm: syz.1.6397 Not tainted syzkaller #0
[ 1261.239249][T24732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1261.249321][T24732] Call Trace:
[ 1261.252612][T24732]  <TASK>
[ 1261.255546][T24732]  dump_stack_lvl+0x188/0x24e
[ 1261.260236][T24732]  ? show_regs_print_info+0x12/0x12
[ 1261.265441][T24732]  ? load_image+0x410/0x410
[ 1261.269953][T24732]  ? __might_sleep+0xd0/0xd0
[ 1261.274542][T24732]  ? __lock_acquire+0x7c40/0x7c40
[ 1261.279574][T24732]  should_fail_ex+0x390/0x4c0
[ 1261.284256][T24732]  should_failslab+0x5/0x20
[ 1261.288752][T24732]  slab_pre_alloc_hook+0x59/0x300
[ 1261.293768][T24732]  ? perf_tp_event+0xa8e/0xc10
[ 1261.298533][T24732]  ? ip_options_get+0x4c/0x4e0
[ 1261.303293][T24732]  __kmem_cache_alloc_node+0x4f/0x270
[ 1261.308662][T24732]  ? ip_options_get+0x4c/0x4e0
[ 1261.313420][T24732]  __kmalloc+0xa3/0x240
[ 1261.317579][T24732]  ip_options_get+0x4c/0x4e0
[ 1261.322183][T24732]  ip_cmsg_send+0x4fc/0xa50
[ 1261.326693][T24732]  udp_sendmsg+0xc67/0x23d0
[ 1261.331203][T24732]  ? release_sock+0x2b/0x1b0
[ 1261.335793][T24732]  ? ip_skb_dst_mtu+0x9b0/0x9b0
[ 1261.340642][T24732]  ? udp_cmsg_send+0x350/0x350
[ 1261.345409][T24732]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 1261.351389][T24732]  ? lock_chain_count+0x20/0x20
[ 1261.356245][T24732]  ? __local_bh_enable_ip+0x136/0x1c0
[ 1261.361609][T24732]  ? _local_bh_enable+0xa0/0xa0
[ 1261.366450][T24732]  ? do_raw_spin_unlock+0x11d/0x230
[ 1261.371640][T24732]  ? inet_sendmsg+0x109/0x2a0
[ 1261.376320][T24732]  ? inet_sendmsg+0x109/0x2a0
[ 1261.380995][T24732]  ? inet_send_prepare+0x250/0x250
[ 1261.386130][T24732]  ____sys_sendmsg+0x5ed/0x9a0
[ 1261.390899][T24732]  ? __sys_sendmsg_sock+0x30/0x30
[ 1261.395916][T24732]  ? __import_iovec+0x306/0x510
[ 1261.400770][T24732]  ? import_iovec+0x6f/0xa0
[ 1261.405272][T24732]  ___sys_sendmsg+0x2a2/0x360
[ 1261.409968][T24732]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1261.414755][T24732]  ? __lock_acquire+0x7c40/0x7c40
[ 1261.419800][T24732]  __se_sys_sendmsg+0x1c3/0x2b0
[ 1261.424653][T24732]  ? ct_nmi_exit+0x145/0x1c0
[ 1261.429244][T24732]  ? __x64_sys_sendmsg+0x80/0x80
[ 1261.434191][T24732]  ? lockdep_hardirqs_on+0x94/0x140
[ 1261.439386][T24732]  do_syscall_64+0x4c/0xa0
[ 1261.443823][T24732]  ? clear_bhb_loop+0x60/0xb0
[ 1261.448497][T24732]  ? clear_bhb_loop+0x60/0xb0
[ 1261.453174][T24732]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1261.459063][T24732] RIP: 0033:0x7f791c79de99
[ 1261.463471][T24732] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1261.483072][T24732] RSP: 002b:00007f791d608028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1261.491485][T24732] RAX: ffffffffffffffda RBX: 00007f791ca25fa0 RCX: 00007f791c79de99
[ 1261.499449][T24732] RDX: 0000000000000000 RSI: 0000200000007940 RDI: 0000000000000016
[ 1261.507500][T24732] RBP: 00007f791d608090 R08: 0000000000000000 R09: 0000000000000000
[ 1261.515465][T24732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1261.523426][T24732] R13: 00007f791ca26038 R14: 00007f791ca25fa0 R15: 00007ffc11cc1658
[ 1261.531410][T24732]  </TASK>
[ 1263.032594][T24737] device syzkaller0 entered promiscuous mode
[ 1265.090842][T24748] netlink: 'syz.3.6401': attribute type 33 has an invalid length.
[ 1265.098900][T24748] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6401'.
[ 1265.110335][T24755] mac80211_hwsim hwsim73 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1265.120797][T24774] netlink: 15999 bytes leftover after parsing attributes in process `syz.4.6409'.
[ 1265.246903][T24780] netlink: 'syz.0.6410': attribute type 29 has an invalid length.
[ 1265.303599][T24780] netlink: 'syz.0.6410': attribute type 29 has an invalid length.
[ 1265.336367][T24787] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6412'.
[ 1265.472176][T24792] netlink: 'syz.1.6415': attribute type 11 has an invalid length.
[ 1265.488733][T24792] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6415'.
[ 1265.501775][T24793] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6412'.
[ 1266.341081][T24790] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1267.795907][T20869] wlan1: Trigger new scan to find an IBSS to join
[ 1270.429171][T24817] device syzkaller0 entered promiscuous mode
[ 1270.830617][ T4361] wlan1: Trigger new scan to find an IBSS to join
[ 1271.464673][   T48] Bluetooth: hci2: command 0x0406 tx timeout
[ 1273.462029][T20869] wlan1: Creating new IBSS network, BSSID 8a:47:f5:d1:74:1f
[ 1275.286857][T24828] netlink: 'syz.0.6423': attribute type 21 has an invalid length.
[ 1275.473485][T24847] netlink: 'syz.0.6432': attribute type 11 has an invalid length.
[ 1275.512935][T24847] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.6432'.
[ 1275.690558][T24865] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6437'.
[ 1275.886892][T24865] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6437'.
[ 1276.301428][T24846] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1280.382030][T24877] netlink: 'syz.1.6440': attribute type 10 has an invalid length.
[ 1280.441924][T24877] team0 (unregistering): Port device team_slave_0 removed
[ 1280.492522][T24877] team0 (unregistering): Port device team_slave_1 removed
[ 1280.834010][T24895] netlink: 'syz.4.6446': attribute type 10 has an invalid length.
[ 1281.090424][T24895] team0: Port device geneve1 added
[ 1281.419746][T24915] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6456'.
[ 1281.584828][T24921] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6456'.
[ 1284.562905][T24958] netlink: 'syz.4.6469': attribute type 11 has an invalid length.
[ 1284.581587][T24958] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6469'.
[ 1284.784012][T24967] netlink: 'syz.3.6473': attribute type 4 has an invalid length.
[ 1284.821062][T24967] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6473'.
[ 1284.929870][T24972] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6475'.
[ 1285.482649][T24956] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1288.124020][T24987] netlink: 'syz.1.6481': attribute type 10 has an invalid length.
[ 1288.182864][T24997] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6484'.
[ 1288.380276][T25003] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6484'.
[ 1288.580133][T25015] netlink: 'syz.5.6490': attribute type 11 has an invalid length.
[ 1288.609644][T25015] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.6490'.
[ 1289.393438][T25013] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1291.686088][T25035] FAULT_INJECTION: forcing a failure.
[ 1291.686088][T25035] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1291.734579][T25035] CPU: 1 PID: 25035 Comm: syz.5.6496 Not tainted syzkaller #0
[ 1291.742092][T25035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1291.752164][T25035] Call Trace:
[ 1291.755452][T25035]  <TASK>
[ 1291.758398][T25035]  dump_stack_lvl+0x188/0x24e
[ 1291.763102][T25035]  ? show_regs_print_info+0x12/0x12
[ 1291.768314][T25035]  ? load_image+0x410/0x410
[ 1291.772830][T25035]  ? __lock_acquire+0x7c40/0x7c40
[ 1291.777877][T25035]  ? snprintf+0xe5/0x140
[ 1291.782133][T25035]  should_fail_ex+0x390/0x4c0
[ 1291.786824][T25035]  _copy_to_user+0x2c/0x130
[ 1291.791333][T25035]  simple_read_from_buffer+0xe3/0x150
[ 1291.796719][T25035]  proc_fail_nth_read+0x1a6/0x220
[ 1291.801754][T25035]  ? proc_fault_inject_write+0x310/0x310
[ 1291.807487][T25035]  ? fsnotify_perm+0x248/0x550
[ 1291.812255][T25035]  ? proc_fault_inject_write+0x310/0x310
[ 1291.817894][T25035]  vfs_read+0x2db/0x960
[ 1291.822065][T25035]  ? kernel_read+0x1e0/0x1e0
[ 1291.826662][T25035]  ? __fget_files+0x28/0x460
[ 1291.831263][T25035]  ? __fget_files+0x3fc/0x460
[ 1291.835959][T25035]  ? __fdget_pos+0x2ae/0x360
[ 1291.840648][T25035]  ? ksys_read+0x70/0x260
[ 1291.844992][T25035]  ksys_read+0x14d/0x260
[ 1291.849249][T25035]  ? vfs_write+0x9a0/0x9a0
[ 1291.853681][T25035]  ? lockdep_hardirqs_on+0x94/0x140
[ 1291.858894][T25035]  do_syscall_64+0x4c/0xa0
[ 1291.863317][T25035]  ? clear_bhb_loop+0x60/0xb0
[ 1291.868001][T25035]  ? clear_bhb_loop+0x60/0xb0
[ 1291.872683][T25035]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1291.878586][T25035] RIP: 0033:0x7f4fbd95e6ce
[ 1291.883014][T25035] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1291.902627][T25035] RSP: 002b:00007f4fbe7a4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1291.911054][T25035] RAX: ffffffffffffffda RBX: 00007f4fbe7a56c0 RCX: 00007f4fbd95e6ce
[ 1291.919028][T25035] RDX: 000000000000000f RSI: 00007f4fbe7a50a0 RDI: 0000000000000004
[ 1291.927004][T25035] RBP: 00007f4fbe7a5090 R08: 0000000000000000 R09: 0000000000000000
[ 1291.934979][T25035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1291.942952][T25035] R13: 00007f4fbdc26038 R14: 00007f4fbdc25fa0 R15: 00007ffe582d04b8
[ 1291.950943][T25035]  </TASK>
[ 1296.659408][T25054] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.6503'.
[ 1296.850701][T25062] netlink: 'syz.1.6506': attribute type 11 has an invalid length.
[ 1296.890626][T25062] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6506'.
[ 1297.228806][T25076] device pim6reg1 entered promiscuous mode
[ 1297.681294][T25061] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1300.110983][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[ 1300.117352][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[ 1300.210754][T25088] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1300.218263][T25088] IPv6: NLM_F_CREATE should be set when creating new route
[ 1300.225631][T25088] IPv6: NLM_F_CREATE should be set when creating new route
[ 1300.233011][T25088] IPv6: NLM_F_CREATE should be set when creating new route
[ 1300.449568][T25095] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.6517'.
[ 1302.184862][T20034] Bluetooth: hci3: command 0x0406 tx timeout
[ 1302.410847][T25102] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6519'.
[ 1302.482121][T25108] netlink: 'syz.5.6521': attribute type 28 has an invalid length.
[ 1302.551587][T25114] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6519'.
[ 1303.509847][ T4361] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1305.418578][T25128] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1305.425911][T25128] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1305.473685][T25129] device bridge_slave_1 left promiscuous mode
[ 1305.502467][T25129] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1305.528737][T25129] device bridge_slave_0 left promiscuous mode
[ 1305.537320][T25129] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1305.741567][T25137] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1305.749055][T25137] IPv6: NLM_F_CREATE should be set when creating new route
[ 1305.756689][T25137] IPv6: NLM_F_CREATE should be set when creating new route
[ 1305.764113][T25137] IPv6: NLM_F_CREATE should be set when creating new route
[ 1306.480157][T25163] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6541'.
[ 1306.561082][T25163] netlink: 72 bytes leftover after parsing attributes in process `syz.5.6541'.
[ 1306.578934][T25166] netlink: 'syz.4.6542': attribute type 2 has an invalid length.
[ 1306.588228][T25166] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6542'.
[ 1307.403656][T25176] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.6545'.
[ 1308.901757][T25168] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1308.909181][T25168] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1308.926056][T25171] device bridge_slave_1 left promiscuous mode
[ 1308.932401][T25171] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1308.942131][T25171] device bridge_slave_0 left promiscuous mode
[ 1308.958235][T25171] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1309.067675][T25175] netlink: 'syz.4.6546': attribute type 21 has an invalid length.
[ 1309.085894][T25178] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1309.126371][T25186] netlink: 56843 bytes leftover after parsing attributes in process `syz.5.6549'.
[ 1309.293759][T25192] netlink: 'syz.0.6552': attribute type 10 has an invalid length.
[ 1310.301873][T25208] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6559'.
[ 1310.481055][T25212] netlink: 72 bytes leftover after parsing attributes in process `syz.5.6559'.
[ 1310.688194][T25215] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1310.695581][T25215] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1310.743423][T25222] device bridge_slave_1 left promiscuous mode
[ 1310.755885][T25222] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1310.772863][T25222] device bridge_slave_0 left promiscuous mode
[ 1310.788377][T25222] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1311.309853][T25237] netlink: 'syz.3.6569': attribute type 11 has an invalid length.
[ 1311.318031][T25237] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6569'.
[ 1311.330527][T25236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1312.681830][T25226] netlink: 'syz.1.6564': attribute type 10 has an invalid length.
[ 1313.063262][T25253] netlink: 'syz.3.6577': attribute type 21 has an invalid length.
[ 1313.118797][T25253] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6577'.
[ 1313.176569][T25253] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6577'.
[ 1313.211652][T25250] netlink: 'syz.1.6575': attribute type 10 has an invalid length.
[ 1313.231873][T25250] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6575'.
[ 1313.285251][T25250] net_ratelimit: 140 callbacks suppressed
[ 1313.285284][T25250] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check.
[ 1313.319983][T25263] netlink: 'syz.0.6580': attribute type 11 has an invalid length.
[ 1313.355475][T25263] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.6580'.
[ 1313.383956][T25265] netlink: 16098 bytes leftover after parsing attributes in process `syz.5.6581'.
[ 1313.394330][T25262] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1313.732239][T25276] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6584'.
[ 1317.981399][T25303] netlink: 'syz.5.6594': attribute type 11 has an invalid length.
[ 1318.029839][T25303] __nla_validate_parse: 1 callbacks suppressed
[ 1318.029859][T25303] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.6594'.
[ 1318.076388][T25312] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6598'.
[ 1318.098924][T25302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1318.681470][T25338] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6608'.
[ 1318.854261][T25347] netlink: 72 bytes leftover after parsing attributes in process `syz.5.6608'.
[ 1346.189620][T21935] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { P25346 } 2654 jiffies s: 243281 root: 0x0/T
[ 1346.224452][T21935] rcu: blocking rcu_node structures (internal RCU debug):