last executing test programs:

19.036262555s ago: executing program 0 (id=2837):
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x3, 0x0, 0x0, 0x6, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x200c8000, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
r3 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x826a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async)
r4 = syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0)
close(0x3) (async)
r5 = syz_clone(0xa49a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff}) (async)
r7 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000017c0)='cgroup.threads\x00', 0x2, 0x0)
r8 = syz_clone(0x84400, &(0x7f0000001800)="a876d1beb09d4d2554914bdda3848b8cd5fda93893b0e504f531085a0709cb0e76e490d7cd65c119ebc36de1bfff743180e94c9cbc51737ef161c3c3897d6e3e8dfb58d5f09d6093de7373f5e327dcfefd85e7c7356645370dfebefa165a51a6ee649ca892edf92b1516a06542f15dba69f0e4dd7b7dcdf48204f2ce028474b498a885db49c5fc6eaf89509993036f07f97c0b06032787c7e309d5600178ada9a62ce6de", 0xa4, &(0x7f00000018c0), &(0x7f0000001900), &(0x7f0000001940)="95601827f4b8671ddd0ff159d05920cca9581ba7799d9520cecf2a37249d5b691260cbb4cf96e86851694709f7eb53afca36736fc5233ed592b1f4d0e711379e01c533fbb35bc7923be3440eeb69706b95911562f2bd07985e8b9a665a9f5aa48d5b950f0ba4ce68352c5d97d17b63ae229e418f3da880d97eb12803e9448f7143817958017f6c01d8b269a9d8bf48b239ec91e07376809fcd87ea18b38c2c0a01f40cc48758ae7523864377c408349f82f7bd73a0f4cc4dacac327872d3b0646ec237fd2d59855521dc1b2b604179f9b6c7202c8f42ef525d44b9f0310f7d808ebe2dc5da94520e7db33216b475acc4b92c1a") (async)
r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001a40)='cgroup.freeze\x00', 0x0, 0x0) (async, rerun: 32)
socketpair(0x27, 0x6, 0x8001, &(0x7f0000001a80)={<r10=>0xffffffffffffffff}) (rerun: 32)
sendmsg$unix(r6, &(0x7f0000001bc0)={&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001780)=[{&(0x7f00000001c0)="3f9535dc7e168a02ab7f4314007c9675291a7ad63a810e1919410f430c53c1d8347eb4a6bee43463c2a7e5be81f89c3292767660368d451be7e482163cfab897fd5e433d17b3d7198eeb30ae7816c7287f2fe63d712d8791e6020fc4cda77f8b1cff8a27b57fb5b09094a54131614f10d3867d75a2b9c9ded42b19c23f9cf68012fa4ba21fc6ad8758ebdcf57b9718b42f0d23d09047c6063b7c99b11b82c5f347fb1bc329ce21136598131183e8c843edb1732f240a1c2671811bf7bd62c1fcbe65b5f6e5c99e121c9fda63b4", 0xcd}, {&(0x7f00000002c0)="2944014cded8e43e76597a02390a381a0c6a672d782b5a69cd7561", 0x1b}, {&(0x7f0000000780)="0c7779fa33854adbdc9ddd34a31276d4b68c5c4c6d4e006937acecd23da4ecfc8a55088e3b63095f43723ec9e72967da0d92679603339d68a7c76eb4b017a302b296444800a72cb4450916dc1c009223d4dde41901063554199e483e029222c3982f28c8912d55350549fe1dec6ff11c9936da9d6639c57a6e986e0a362b01029ac7d67c9100e81f87259609f0a1696eced74d4bf6a6ced81c7250193845ec4b93dc07a9c484cbe1c47441f9182ad212399fa57fb721881ba6baec276d766005e21b5ea353ec377e115b2e3a9767a369884611f5bfef3f74207b642d01a1fb5370a4176a25a6a69207ba2d4baee9cce79d9feb237b58af0b69a2385c1805703aac1e9f738bf9d467a0d57ea265e9d40bf8363ae439748911701541bfa59d252d3dfe752d7015f8739411b6d4e8e21a73bfe082d4253fdd58d2866adca3ad7bff482bca3e13bf5c005cb27c61b3af81a94f32071f5b272ad9664d59dec85cdb1cdb5a61006ec498dc723e130bc2a83bdc91d7c45ea40f43e038b0c84231edec8892c3515473a1bbd49387da7e4e437fc3dbce458a224fe41d8349cc7cc8719906a0614ec3ac2c3314f30356d2307540a5e3913b4be7dc38a2fa526072a791419a3bb8ce8bbd284e0fac8dbcfbec3b1ee090fe1ae9ca086bec2ea2f0d47cc8c9f27a5ccd8e6a61a80852f5a77eef413ef2d3839e620d456d531a60a60a412981e59cccad0ef30c9f7512a51fd10d3487362df419ba37b5c8f67b066e91b3e9d29c4fe6e8ad145e7ea538e2965cb662ffe629fc642b2356de9786b1b090379c990f8ee92583200417c19649e0e4dfddb7b31a5596326b8beab7692a27dde899258d20c92d3ba4a50307764382fdf13e3092a837a7ce4f6e2dd0895e1151afaea5c6329a6600c1ae6e8752767aaf6c98c7fa1afa5954871009629c023c8a95f14531591f1746324f0329279926e97c5a956ee3857a50cae2814db23c4158655338d8d40c5acc783c113decf9704de299aedad1155535c583a2bda81b97f327ed3db9a8677bace9b328f211c5ace076e53797cac7a7c3353839c57ba30fe0c4dc8cd1cfda2d63e7d82631c75c59be34143cbb84414c642f7b27462ffecc8d486e396a518c976da66e33da52a94106f957535ae360dca79d53d29f219c0f98feb2b5708b416789d1c9e8e651b4fc5e7a048437af790ca0dbd00f8164cfa5f9ea4f1864d1b9c8212b40f28b8de8cc8cc7bca51dc45bae67af2eb7731cb702279a176b6e901e6517e448e2c2e13f33f933ca2264a7b46e8c409e06410ebd521e5de7981025e5386c14e41066141863ef3a179a9564613e726d5d2869778078ef45587770c94485e91562bef48bc6470401a12fcab0996afedbbc1c4aeeb43ba13ace21409d2269c9d6815736448299e536a6b01887eef29efbced0ab3cde4274520febd8f9198b53f0694d2dc8d1753f55048170630a26153f1f7b218427ce014f76ae777352cd0a8d7e8bd4d3ecfab8c8664fca686c756276125a627c427ebdcfc24aceb6b1ef4608465c2595c91affd93ca588f429a474cf3e1d0246f7be3e88fcea21045d8800ac7a45222684a0b22d71854659eb73ffd7f4366d92fb7a80769959f504ac09c2c52ed4ef55b214b98999fe956af44a896dc3df687391cf6b96cdd9b04ecc378e9057609d8aeea231fc159ab265bb17a4f8ff9c7a903cf64c895fa5bb5e919ce31870649fadf97d692d76ea20a77013d557433248539d17f7b2a6676164179a2cac4a446fc06964a73a02c83b3bf777f1d9e0e3f338800d2fd77cd80a389f3425eefff7f74462c7becfe77ecf5d746a553572b6ff690a2ada938edd567cbdd69f51515d671af474b09bfd507f8cc988938d303b33ef6bdf21a6051ff732e4185f159e056c282822f4a3075a14965e75247f410bd7c8a4aadedc660e7463228d8b4df570e45fa0b6f252c4b76e6250c2b77cd4c07521f211e82067dbd7d2f1581a6e0ace8817d30273d7c9f43d55e053a61598cef68b644b126c3e0a89d6d17e1c5356a9311c70ef4a701a04892a5a6d135fa0d8c46c30e88c81147a6c6c2edd43e4eb8b29625dc8bd092e7d69160cf84c11cfe48157b020188099e47a3f0d88f71d3a06138787964bc1d50b0f16d2a3dacbb38b522c1388c28ed312ed2073648cd5ea47f80c9c70484671123c6b7612a28216696e78bc510d1747574714e35d7fb7f46742c5b00e2c7bc2588df0e7bcb15b6e9c4c1b5696ae7fbc3eeea2f6935e14e56780b6885116c8561ea7e62483142de64a414a6a9d74048edf532e21b2668dcc6fd3a93ee4ffe25dd7717e8937cdabc816f40c2ea20568003c2bc1305b4f3507a894621babd94f6f3144434853ce2cc86d4bca9590d1362197abee45275cec72be63bfa564254e11c7ffb37a464d5a7059f029dbae77465a3c08e7b25a1a8da5c2fe490de216fe075ad358e02eb4371a581d25dcdd3f576224821620cfbe7be6be39336b69aab17e2f4e6f8996f5bafda279a557f32c189b8559dc4d6133312c501641ce4584d7298677a938175c8b7164d83402e8f9a7ec2d70ce085a2a12e6b61668f6267f830167ffb727b8b5c2ea3cbadfdda8c1d2e324bca48a1469fca0dd5cb580fdd1b047f879e519e86c3ff8d9a001c3b82892a06156461a49711325dd8ea412296d5c825e3dc89877e8d843ccd8ded419778ebfb4532f5428891f092f31e980df3d03b980c9f549c3e880713a9800423d52de6f6763295ca7686d31349574ed8a33d890362d096369a69df74a86086984408b5c852a2140069342cb55b891dfcd003cfdc99f59a96ad6ee4e1be3f15af6037ddade2dc4b1fa9cbf06a270f02750b4094ba079636ac6e55749dc4a9e7f7dd5e9bc080620eda5e94c642fbfea94a163471c25b0b34961c0d40af0bc46295ac6995196f2a6867bfb47169bc735fdbff1282555447dc7546cfaf6670dc6880ea719677ca60d3f1fd6efc8fdc44176286996ddf33a8f4864df1c88f209703d428ca4c33518ed4aa5be5786f1e53c710bfe9aa5ddcccc58bdcc887c94564bf61f40b4b4ca722025172fdc3f869289ec00953ae64da43beb0684f7bb554b87802f5efa42a722bf88a8d8cee7f1f121515805a8fd164d88ac70d54eb7737f0011628ec2b8e4644fbbcaf6730ccbf3c5ed69669e62ce04b4590eb25c59c061e634e5360178288acfb4f9a0de97e37dff9d334573ae1e2275178027642d516d0681f986d5a0f68ebf8ac6b25715ad9bf002a4cce7b0bbbb81673a005aa655589a990ce8be83240c630e64ef6597093ac9293f59cdf324efd2d43ab215a033c0a4133d16544ca86c644d85d052b9309b783033c02648b6eb2fa335dad49242a21b34a240051c37cf88f07c960b6c9f34d8b5c219b62a3bde5004a6312fbc5e25e7256ab3eac716abd52783cfb33e93fc4c7276a3421bb4819ad9dada1919fa656f31aed2785fa3f22f4f550325d4180acb8451e0a5f2bb8d3ba8f5e7d0a788f2b4d97aeba60a535d68d21e84fa2c461791297ebe1120f6acfcc6a3a23a40e5a9c7de64f72652b6fe58dde22dbb8b8ba9e1c671e9f081421dd4939c7911192fe3bf3def12b4da12487e1d80ed5999c3c55a90b5d2170ccefff2283164aaa19cb505744330296cdaddfc87fa7dcbaf5ee638689a49e587227db6cde5533d807bfb94bf2dbd33ac21e9a0cd70fab8b81124e8f4c74662f4c60bd62a32dd192e03cf1bf6061c7d2e4fd7d9d58d823e03512d37bd98ea5d2accea19eab150a1fc29e65e337c5b6b4c1de164cb00ee47cb839423a71792d9400b93722a937ec61a4b59855b198f0abec2c1c1b9b0c9a317dd3cdb989b44b06c9a333a932f718b17de88480d11f6a3da0ba8d7e1664c6dc18cc564c0d7159083d620b6259ea6008e82920db1693273db9317d214f580e2c0d26e96c8739fde74f7f2ea5f61d9e810d7122911246c2b98a302a67c6b6b61030a50351743980fcb279af4eff2cea5cc19c3d7bc1e778bfc701ebbbc1fa570769561a36fdbe192f8708e370a3a57d78b10451a1e9f9bc20e12f231af6dc3ea21fe7b99c805a06c52ce960020f4d5270a2517a5e27b9de6588385959cdd89f2c6caf3d2bfc3edcd39ead03e14d5e728935cecc644a5576e82372ff97ed917e7aa36f20f9e8c494f903cf0b59f7e168f7b8c27a760be6cdf81ac70e1f8fae537f6b6c48ab81b40d8c1aaf265f794855ce6baf8717ed9a061e73b2324b6293bde2a4cb63d0b27c720deb85bad7e129608cce774eace73c2dda62eac4739f551e4938bcf048454ab4e275c2df0adef0f99dd2642a0449aecfe826626423f6287ae011ba2977bf1ca5ee725dfaa9b633b12e9f5be29af03e9a26329906c1273ecfbebe3abec557b2f9881a96de45f5f59e5561f5d400767013449f6c96b1938f5e26334f20b8c078f1d042ce785ce297fdc1a04bdb888dbba7a7e9a4db3810e4d6fead07fa75ab592a9b55876adc700872b8f7cd06815efec5aa716e6583991a097877a9455608e8bde9100edfdded1179862a6cbb23c5bbff67079dcbd259937cea09f751c6fa62060a58d829a13d613143bc5d2ba90d5986e279883c7f279d288ad14f2b6096936ca2dd2550dd506cb380710aae9b96692143dc01d27ae6d5a618c610a1b02614d03e93aa1d6dab8bb6c30ed102b1e135f6a10e81ee7a1779326771902da3b894b5898b5a1ba71b1ee9e8d8964b0a97195a46990fdc110e7d1fd9faf597e01c5936c7983dfb50bb9747b7d7ef15c5588ee0b2b987b82dadf421ab8c5b625b3a745762b3be029cdf32106b9755e0330f83227c106d263f0398b82e66a39d5fc21eb85a2198f3ca54fb41a88ada73cc6d2408e1ad41433cc6c71fdc0f01f3f43f682e4ca364df19290692ca8cd94b3f4fc5099f184319d6aa1bb3896dd3f94b7ddc712c4077afdb2fbc142f4b74557970c8d79e42b221f789dc8dade2f97917e7ea2d159f7d6979cdaa266e59ada365b60d8b9015dcbd3e6edee756ffa20487603b522502e75bda6c4fcd5edb4086bd96e41ceaf591b9ad0c0efb223f478c9465eeb2014024d167b26d379e0708a80b4dbea3294bcda57e4ad8f19ea43c76fd77091735dc53d7cd3a6f09ee4139928f2c4a23a9b26ca19aa5c9d07064d8275b101d6156759892871ea791f40fa65fabf9fa6c8dc527d1f8b54a222215c0dd9f5fa56194da1b06dc72c4c7578a594e9d8e5c44eaf3286a2af924a9ffe349afdb7f66bc23887b873922652c71d1d3027a6452accdb94a2672a8772cc619ad920ba841954c6d80900c6e97ed53d5396c86f715746ac12bafb0c006aac12745fa00c2ab643d15ad8ea1fffc85856af97ad816ad84ae83f4f0f293d7229e07aef3bc4e63f69b9ef5baaa5fd85511b3aac5da335f9269b2deb9b57de939c7562d07712f9cfe65b32f32f70e4d42b78f5af089edfcd12b998c9408f4eaf818dd22694eaeba61805eac9b05eafe5972a952d80d66985cf337becebe92e077cffef2e9b8a3fc78b743dfca5d166c8cef51778a189106be7fe86402ba00410f13843d5a1830bf83f7e7d0cefd07af32fab860cb64a8a9fbfaa4b62c0559929eb24d22396ae6c523ed18ee7915b230ec81eef90f086a501965bb40a9353d5410a8dd342e4ceecbb5607bbbd705a4b8d2c42bf9e0919edacdb5a993cfa3a526b6440762992e95af7f95f3c4e604bc01af35abab026724db8d117e68da55790fd894876efdaa3034fa3813631e29f936a1af6752de437148031edeb8c", 0x1000}], 0x3, &(0x7f0000001ac0)=[@rights={{0x28, 0x1, 0x1, [r0, r1, r3, r0, r3, r7]}}, @cred={{0x1c, 0x1, 0x2, {r8, 0xee01, 0xee01}}}, @rights={{0x2c, 0x1, 0x1, [r3, r9, r3, r0, r0, r10, r1]}}, @cred={{0x1c, 0x1, 0x2, {r4}}}, @cred={{0x1c, 0x1, 0x2, {r2, 0xffffffffffffffff, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r5, 0xee01, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r4, 0xee00, 0xee00}}}], 0xf8, 0x80}, 0x48820)

19.035523415s ago: executing program 1 (id=2838):
socket$kcm(0x29, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0x10, 0x3, 0x10)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
openat$cgroup_subtree(r3, &(0x7f0000001100), 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a80258c6394f90424fc60100005000a000200053582c137153e37fd500180fc0b09000300", 0x33fe0}], 0x1}, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x2)
perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r4 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={<r5=>0xffffffffffffffff})
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
recvmsg$unix(r5, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040), 0x4)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x4, @ipv4={'\x00', '\xff\xff', @remote}, 0x9}, 0x80, 0x0}, 0x4000080)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2042)
r6 = socket$kcm(0xa, 0x5, 0x0)
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, @perf_config_ext={0x8, 0x100000001}, 0x880, 0x800, 0x0, 0x0, 0x0, 0x7, 0xffff, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x959, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x50)
setsockopt$sock_attach_bpf(r6, 0x0, 0x21, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000000)='cpu<5\x00\x00\x00\x00')
r7 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c18800bac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0], 0x0, 0xa3, &(0x7f0000000240)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0xb, 0x8, 0x8, &(0x7f0000000380)}}, 0x10)

18.58421148s ago: executing program 0 (id=2843):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x53}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffc}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="000000000100001100001a000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

18.416192475s ago: executing program 1 (id=2844):
sendmsg$sock(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001c40)}, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001680)=ANY=[@ANYBLOB="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"/2728], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff45, 0x10, &(0x7f0000000040)}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x108, 0xe, 0x0, &(0x7f0000000340)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xfeff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001500030000120800040043000000a8001600a400014020000c00ffffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0)

18.314848518s ago: executing program 0 (id=2847):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000540)=""/246, 0xf6}, {&(0x7f0000000240)=""/205, 0xcd}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f00000006c0)=""/188, 0xbc}, {&(0x7f0000000f40)=""/213, 0xd5}, {&(0x7f0000002100)=""/4077, 0xfed}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000b00)=""/231, 0xe7}, {&(0x7f0000000480)=""/176, 0xb0}, {&(0x7f0000000c00)=""/208, 0xd0}], 0xa}, 0x40012100)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000140)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d8150019001105142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aebfb0daa7b0cd39e4edbb57a5025ccca9e020000000000000040fad95667e006dcbd63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a", 0xd9}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0)
recvmsg(r0, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x10002)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/1423], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000380)="7c53310100f9ff61efd106939fc1", 0x0, 0x4000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x2101)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000000c0)={r0})

17.823919345s ago: executing program 3 (id=2848):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f00000002c0)='cpuset.cpus\x00', 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f00000007c0)=ANY=[], 0x6)
r2 = socket$kcm(0x29, 0x5, 0x0)
sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000300)="f6e5ae22b289c957102c80c8fb1c2cfe46665098d2f9f8bdb197cc8dcaa02bdefcf0b2f9b18f32d29ea5f85cc396e014e3093263395ab29abf4ccf1bb6ed8e867d493751f289bce50d9959545cf0ea98b3544861707e2bdb37f2c3ec3f04d5df47320ccce90e08f8f7206169bb9b88d90d862ca12d00c022019fe46563769bd712dcc5e718de7e49d383819d2567c6eeee3ec98b73e2671ec3a24ed2e1e4c460c17381941351351f821c6ff164744afdb51338ce2fd5ee1ee16628d46cd22ae90f167c4e785525b7c7b35457720909671ad259d6ba0cf43758dccef2ee56ace749150eb51f33cfc42a01bc56d80c551c66a2796a91bb202404d0da74f67f93", 0xff}, {&(0x7f0000000400)="5200169305b4691df9d59464c7c4e4c401792b7060cd4179fd09d66aa2ffd3db7ad451c95d0bc003caa597fdbc37daf26365c6fb07ec8a139b6c31b517baf5dfe94e16702ff89ccc4f3b8062fa5f8e30bcf1d7ca8ca049053727efba8117f7a1dbb097a8c603110205d20aedd631596097247c1da1ff4e379ef8cf5c98705a93f85e8d6d372ff06ee4cc885b7d5ffeb18bc35c76aaeea452a1b642a5418da03d1143ff5c049b75990cbe49c544adf32a06f594d6db320239afcd7e9773dca81d7ab2795b85ff9333f5f2dbbc7217e55c", 0xd0}, {&(0x7f0000000500)="4242aa8ff75bc060b1583ac587e16e687596937dc1d2a7c6b35bbdb580278b53c8819cd7475bfeeee5da8b5dcd3571135b3317115722ca29f237451b2c43bd4a37fdba120ad18c78ebd06c10c5b369b43c503d0191b465f6cc266d8775a79db180af7146e66cfd4a535048076dc2f54b7e61765cd67aca8398722b3d2fc4dd8e301ac841a0056dd9ca61f0443c526e7ba0219ccdc9cd32441cb9c87e473aaea99065779bde90cf7236ccd221", 0xac}, {&(0x7f00000005c0)="b4aff040a54694618fb0707b798cf731b83f07f67bc08a9ab916e1faa836027e4c185bb788fea6fda62d3df5e1e99e81c22b373b8e39854cc21fa58bdffff7f0039cced25263a26b68", 0x49}, {&(0x7f0000000640)="62d4bea8b33a7e869e78985868769385f4ab43be5c2b8c162e11958027269f46798f125450d0935a36cb93b48c8b141d3137143adc89e803b84639c07238e38f9f969b65470279147e392b8e9d54db475c987abb126fefc46d666244958253eb3f6a9b6e76a974a91acf84a2bba3b46f82962bc7d08144d973023c440aa06fb7eb", 0x81}, {&(0x7f0000000700)="b16ca36646364a714a16facefb9030db7093e583e63a7599d2a08e46b446b67edfdc6e6215cbd2a49de61b8ca4f81c8b78079b267b658327cd2f6ea6c585712045bb9b7b5340b3c517a76b655a62db0da2e837a4", 0x54}, {&(0x7f0000000780)="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", 0xfb}, {&(0x7f0000000880)="ce0a365e89d2a8951f40693ebcb07844c838d4d55ea3baad7dd3a37b6975866e8af26ab271f1c27cd16b44c68e00ca27ce627ec7066b730b46c0d923fee541639e52eb22387cf0570c8cec8b1de0e42f7f", 0x51}], 0x8}, 0x8000)
r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0xc, &(0x7f00000001c0)=@framed={{}, [@printk={@lu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000001040)=@base={0x7, 0x0, 0x3fd, 0x1, 0x88, 0xffffffffffffffff, 0x1}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000000c0)='./cgroup.net/syz0\x00')
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b904020000", 0x2}], 0x1}, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x33fe0)

17.628076661s ago: executing program 2 (id=2849):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0xb}]}}, 0x0, 0x32}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000010c0)={r4, 0x20, &(0x7f0000001080)={0x0, 0x0, <r5=>0x0, 0x0}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r5, 0x4)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000800000000000000000850000004100000095000000000000004be98911ed523cf4451d51e400cbd30efbb0a73ceb2b050a456c3a6cfd127868ad3fe3f9a9b946c97f9fc091e4c3f4b0a0d7ed298717a480c48868162ff933958cb6a5265519fee4cb1b8b93f0b164770fd40c7a8060ce72beff7cda177e281ef0b7a1a97b2c8c5617bff8c9441a45fd951df19a9c6e933500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0xfffff000, 0xfe71, 0xffffffffffffff40, &(0x7f0000000080)="85d77444c5a569f1e21b08c0f264", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x3b)
recvmsg$unix(r0, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x0)
sendmsg(r1, &(0x7f0000000a40)={&(0x7f0000000340)=@nl=@unspec, 0x80, &(0x7f0000000800)=[{&(0x7f0000000640)="234ca10fe23bf36aa0cb79e7b81713399d9e893d638962cde20a65a8bde0c9df31de08c47996b4a56c3f74d437ae4499ce2ddb7697d61d98ef8958f5d22073c95480dad5172503847df7a50633ef7ba72803ccc6c5f333d45905d289553848fe4b6a362e422ef2edc0496cd9a9ba57b18c6ed9c8ac93129241a45282c1307582887038668a2d83f130831012ff513150e4bc85e3", 0x94}, {&(0x7f0000000700)="bfc4fabb2bb7ba6fad28bb33489b166ff5936f757b9e24cf41d06bf10ddb894b09b69a2b747ede19f9f838772565ca0bf2549f8293719c195fb2d31c5051687fa8bb4d6bc461cfee85a35c611802c08d114005ad1bb3f5aac8b9b0d34fdd85048c7527b400cc66d310a75b2e4f72467edd6c4c694c5351ae3ffe3dfca3d300fdbd4782962810c0ce3ba79fe80c35b56293ca7b0a64b5dcd0377472c2dafb03e95b39565ca899bd21c0ff4f94516a856af26fa4481b2f0eff05a57191c7fb341d02f61dfb996a334337eedbeca17f42e58d9e4dad1304eb6cd9f2ca", 0xdb}], 0x2, &(0x7f0000000840)=[{0xf0, 0x10c, 0x4, "41da9b85388b56c6698e86048e7dcedc50d1690d5c157a9804226c4b995c8da9ee090cdaba1baf803e574f3690d5dc46fa4da6884d7598256a1040eba31a9ddd751f72bcf9c97e8444b6a5f070249aca4a12c22ffcb6ffd39bb4ed4b22ea0df680dcad0176f3b15d00d87309736b33aa87f6882a364a9597bd90ccaa826f7a4c8547e67df6a8089a80036a9acdf10f28d4e695c22c24917a4f8af65ae791c039a48b67ef4c4ba980aa1c5e0be789f6f537362e788441e7314c5d00ee4555b5352534b5bcc90528339faa0ad45b8fb2c4df7343af1c20a36db586a4"}, {0x88, 0x112, 0x6, "03ee9ebdce6f05b4b17d6de0d577194f2be110c79804f66af4ceca9db7fb8f5a86f63fed76c0527ba862aea96eb5121c0fa9efb6f2e67bd7aff09731d1ab3f248119fe16fbc8727f89d734d2f1d5d39fae4f84d9432ad88cc81dda926483d5cb7c6786e5b37c1a945d724f69e4f83b688ddb11c6"}, {0x60, 0x0, 0x9, "29b92a3af1031fc4ff4b731b5dda3d62902ea9cf7021fb949ec02edbe1d34229d0c64db98a2b2d054748a63fbb1df139f45880f311501a2ede19ab0b08210d5dba28f62f83ceee0c8acb"}], 0x1d8}, 0x20000000)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0)=r7, 0x4)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000)=r7, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x34}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x70)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r7, &(0x7f0000000200), &(0x7f0000000240)=""/7, 0x4}, 0x20)
bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@o_path={&(0x7f0000000140)='./file0\x00', r7}, 0x18)

17.534852524s ago: executing program 3 (id=2850):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x472b}, 0x0, 0xffffffffffffffff, r0, 0x0)
r1 = syz_clone(0x40188100, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="060700"})
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r3 = perf_event_open(0x0, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x65, 0x0, 0x0)
r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r4, <r5=>0xffffffffffffffff}, 0x4)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000840)={r4, 0x58, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0}}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_ext={0x1c, 0x19, &(0x7f0000000a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x68d6}, [@jmp={0x5, 0x1, 0x2, 0x3, 0x7, 0x0, 0x4}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_val={0x18, 0xb, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x33b3f439}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xe}, @map_val={0x18, 0x2, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x800}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}]}, &(0x7f0000000080)='syzkaller\x00', 0xc, 0x2a, &(0x7f0000000780)=""/42, 0x40f00, 0x33, '\x00', r6, 0x0, r4, 0x8, &(0x7f0000000880)={0xb, 0x3}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0xd, 0xfffffff2, 0x9}, 0x10, 0x400000, r4, 0x0, &(0x7f0000000900)=[r4], 0x0, 0x10, 0xec7}, 0x94)
close(r4)
bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r4}, 0x8)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x22, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x2, r3, 0x8)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xb}, 0x100000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000080000002800000005000000030000000100000f030000000200000001000000030000004494a5000000000000000f010000000000002e5f00"], &(0x7f00000014c0)=""/2, 0x45, 0x2, 0x1}, 0x28)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0x3, '\x00', r6, r4, 0x0, 0x2, 0x3}, 0x50)
openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x341c40, 0x0)

17.386439709s ago: executing program 2 (id=2851):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = gettid()
r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8855b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xea37d383afb94786, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x8006, 0x98, 0x0, 0x40000002, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
r4 = socket$kcm(0x2, 0x1000000000000006, 0x0)
setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r0, 0x10b, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0], ""/16, <r5=>0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0xf7, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000100), &(0x7f0000000140), 0x8, 0x4000095, 0x8, 0x8, &(0x7f00000000c0)}}, 0x10)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000440)=r5)
sendmsg$inet(r4, &(0x7f0000007940)={0x0, 0x0, 0x0}, 0x0)

17.266791723s ago: executing program 1 (id=2852):
r0 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x101, @local, 0x6}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000180)="02", 0x1}, {&(0x7f0000000000)="94ccb3233d9fb8e4549a8a82", 0xc}], 0x2}, 0x24009080) (async)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x0, 0x0)
r2 = socket$kcm(0x11, 0x200000000000002, 0x300)
recvmsg$unix(r2, 0x0, 0x11)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32)
write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000200)={'full', 0x20, 0xfffffffffffffffe}, 0x2f) (rerun: 32)
openat$tun(0xffffffffffffff9c, 0x0, 0x418400, 0x0) (async)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[], 0x230}, 0x0)
r3 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x92c0199, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) (async)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'syz_tun\x00', 0x1000})
r4 = socket$kcm(0x29, 0x5, 0x0) (async)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f0, &(0x7f0000000080)) (async)
ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000240)={r5, r1}) (async)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000400)="ba7f", 0x2}], 0x1}, 0x0)

17.206227634s ago: executing program 0 (id=2853):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1000000000000000030000000200000000000000", @ANYBLOB="8fda0a7a749dedeb5c9bdd2d34e01a9289a967a5a0e8a0c13ae47ebf06c1e1e872515cda3cc574f32f836e763a4ae1713a81c01d06de5066c11cec734ad5a992cd0eb0c7fa24be7d03a4d43f4661b3c5810bdf0071c2879fd8c5b3f36ed6401880423061f4bf2a30d4c59e830ed451303f64a3c4b0e426c1f776694a70d1d8969cb290200bb0d0c9d57a58a15e5cea66ccefb0e5d02e0e62c1f5fee94b70f251619f6f32ad7851589c7e10268fe9cc5dd8bf33f402c1b1274b12ec906fed3cd9d75c4f3c297e1d92f57f59", @ANYBLOB="0000050000000032e43601164cdd00"/27, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000100200"/28], 0x50)
perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x28, 0x1, 0x0, 0xfd, 0x0, 0x7, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b07, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x53a1bd76, 0x7, 0x2, 0xa, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc6, &(0x7f0000000840)=""/198, 0x40f00, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
close(r1)
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1f, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xba, &(0x7f000000cf3d)=""/186, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000140)={r1, r0}, 0xc)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x880, 0x0, 0x0, 0x5, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x21, 0x2, 0x2)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7030000000000008500000087000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9, 0x8080, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x314ba514, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x7c, &(0x7f00000000c0)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000400110000000a600e41b0000900ac00060411000000160012000a00037c0248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa10000000000000701000000feffffbfa40000000000000708000000feffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000340)="c1dfb080cd21d308098ee688b5c6", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r7 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x907}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x1f4, 0x12, 0x0, &(0x7f00000001c0)="ffffffff7f833e9762a536c801d72069a00e", 0x0, 0x304, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x8}, 0x50)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0)
close(r9)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000))
ioctl$SIOCSIFHWADDR(r9, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100"})
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x4008, r7}, 0x18)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r10, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)

16.693406461s ago: executing program 2 (id=2854):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18010000000000000000000000000000850000002e00000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc)
r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r0, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0)=[0x0], ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x6, 0x8, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x56, &(0x7f0000000280)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x6c, 0x8, 0x8, &(0x7f0000000340)}}, 0x10)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x100, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000600)={'veth1_to_batadv\x00'})
r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0xeb, '\x00', r2, r4, 0x0, 0x0, 0x2}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18010000000000000000000000000000850000002e00000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) (async)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r0, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x56, &(0x7f0000000280)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x6c, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) (async)
openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x100, 0x0) (async)
ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000600)={'veth1_to_batadv\x00'}) (async)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) (async)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0xeb, '\x00', r2, r4, 0x0, 0x0, 0x2}, 0x50) (async)

16.547987906s ago: executing program 1 (id=2855):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20)
r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x5, 0x2, 0x7, 0x1, 0x1, 0x10000}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r3}, &(0x7f0000000540), &(0x7f0000000580)=r4}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r5, 0x0, 0x0}, 0x10) (async)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x7, 0x2, 0x1, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a", 0x35}], 0x1, 0x0, 0x0, 0x7400}, 0x10) (async, rerun: 64)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b9040a000000e8fe55a1180015000600142603600e120900", 0x26}], 0x1}, 0x0) (async)
r6 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="0439000020"], 0x33fe0) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)

16.540703966s ago: executing program 3 (id=2856):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x53}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffc}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="000000000100000000031a000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

16.523512506s ago: executing program 2 (id=2857):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
close(r1)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x301)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) (async)
ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[], 0x27)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r3, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r4) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'})

16.331954753s ago: executing program 0 (id=2858):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="bdaa000000000000711010000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x2102)
write$cgroup_subtree(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000020060007538e486dd630ace2211057300fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa"], 0xcfa4)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@bloom_filter={0x1e, 0x2, 0x8001, 0x6, 0x6d03db79e9fb3fbc, r2, 0xffff, '\x00', 0x0, r2, 0x5, 0x0, 0x1, 0x9}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0x1, 0x58, &(0x7f0000000200)}, 0x10)
socket$kcm(0x21, 0x7, 0xa)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0)
r5 = socket$kcm(0x2, 0x6, 0x0)
setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0)=r4, 0x4)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x1, 0x4, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r6, @ANYBLOB="000000000000000000bfa200000000000007020000f8ffffffb703000008000000b704000014e5edb387000000008500"/65], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x3, 0x2, 0x6, 0x8000, 0x208a, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4}, 0x50)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000740)={r7, 0x0, 0x0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{}, &(0x7f0000000400), &(0x7f0000000440)=r0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRES16=r7], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f0000000900)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
r8 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r8, 0x84, 0x21, 0x0, 0x0)
socket$kcm(0x2, 0x5, 0x84)
close(0xffffffffffffffff)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5}, {0x2}]}, 0x94)
write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='veth0'], 0x12)
socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
close(r10)
recvmsg$unix(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0)

16.330667522s ago: executing program 3 (id=2859):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0xb}]}}, 0x0, 0x32}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000010c0)={r4, 0x20, &(0x7f0000001080)={0x0, 0x0, <r5=>0x0, 0x0}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r5, 0x4)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000800000000000000000850000004100000095000000000000004be98911ed523cf4451d51e400cbd30efbb0a73ceb2b050a456c3a6cfd127868ad3fe3f9a9b946c97f9fc091e4c3f4b0a0d7ed298717a480c48868162ff933958cb6a5265519fee4cb1b8b93f0b164770fd40c7a8060ce72beff7cda177e281ef0b7a1a97b2c8c5617bff8c9441a45fd951df19a9c6e933500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0xfffff000, 0xfe71, 0xffffffffffffff40, &(0x7f0000000080)="85d77444c5a569f1e21b08c0f264", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x3b)
recvmsg$unix(r0, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x0)
sendmsg(r1, &(0x7f0000000a40)={&(0x7f0000000340)=@nl=@unspec, 0x80, &(0x7f0000000800)=[{&(0x7f0000000640)="234ca10fe23bf36aa0cb79e7b81713399d9e893d638962cde20a65a8bde0c9df31de08c47996b4a56c3f74d437ae4499ce2ddb7697d61d98ef8958f5d22073c95480dad5172503847df7a50633ef7ba72803ccc6c5f333d45905d289553848fe4b6a362e422ef2edc0496cd9a9ba57b18c6ed9c8ac93129241a45282c1307582887038668a2d83f130831012ff513150e4bc85e3", 0x94}, {&(0x7f0000000700)="bfc4fabb2bb7ba6fad28bb33489b166ff5936f757b9e24cf41d06bf10ddb894b09b69a2b747ede19f9f838772565ca0bf2549f8293719c195fb2d31c5051687fa8bb4d6bc461cfee85a35c611802c08d114005ad1bb3f5aac8b9b0d34fdd85048c7527b400cc66d310a75b2e4f72467edd6c4c694c5351ae3ffe3dfca3d300fdbd4782962810c0ce3ba79fe80c35b56293ca7b0a64b5dcd0377472c2dafb03e95b39565ca899bd21c0ff4f94516a856af26fa4481b2f0eff05a57191c7fb341d02f61dfb996a334337eedbeca17f42e58d9e4dad1304eb6cd9f2ca", 0xdb}], 0x2, &(0x7f0000000840)=[{0xf0, 0x10c, 0x4, "41da9b85388b56c6698e86048e7dcedc50d1690d5c157a9804226c4b995c8da9ee090cdaba1baf803e574f3690d5dc46fa4da6884d7598256a1040eba31a9ddd751f72bcf9c97e8444b6a5f070249aca4a12c22ffcb6ffd39bb4ed4b22ea0df680dcad0176f3b15d00d87309736b33aa87f6882a364a9597bd90ccaa826f7a4c8547e67df6a8089a80036a9acdf10f28d4e695c22c24917a4f8af65ae791c039a48b67ef4c4ba980aa1c5e0be789f6f537362e788441e7314c5d00ee4555b5352534b5bcc90528339faa0ad45b8fb2c4df7343af1c20a36db586a4"}, {0x88, 0x112, 0x6, "03ee9ebdce6f05b4b17d6de0d577194f2be110c79804f66af4ceca9db7fb8f5a86f63fed76c0527ba862aea96eb5121c0fa9efb6f2e67bd7aff09731d1ab3f248119fe16fbc8727f89d734d2f1d5d39fae4f84d9432ad88cc81dda926483d5cb7c6786e5b37c1a945d724f69e4f83b688ddb11c6"}, {0x60, 0x0, 0x9, "29b92a3af1031fc4ff4b731b5dda3d62902ea9cf7021fb949ec02edbe1d34229d0c64db98a2b2d054748a63fbb1df139f45880f311501a2ede19ab0b08210d5dba28f62f83ceee0c8acb"}], 0x1d8}, 0x20000000)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0)=r7, 0x4)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000)=r7, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x34}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x70)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r7, &(0x7f0000000200), &(0x7f0000000240)=""/7, 0x4}, 0x20)
bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@o_path={&(0x7f0000000140)='./file0\x00', r7}, 0x18)

16.320451373s ago: executing program 1 (id=2860):
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
socket$kcm(0x2, 0x5, 0x84)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0)
close(r2)
ioctl$SIOCSIFHWADDR(r2, 0x8b18, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @local})
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000080))
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
perf_event_open(&(0x7f0000004100)={0x5, 0x80, 0x0, 0x3, 0x87, 0x0, 0x0, 0x1, 0x100, 0x5, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7ffd, 0x2, @perf_config_ext={0xffff8880b8627a20, 0x1}, 0x11098, 0xfffffffffffffffe, 0x465, 0x5, 0x0, 0x3, 0xc, 0x0, 0xb, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a00913a09b51bcb3cc5a05f"], 0xfe33)
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={0x0, 0x6}, 0x100000, 0x200, 0xffffffff, 0x0, 0x9, 0x2c, 0x3, 0x0, 0x0, 0x0, 0x100000032}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0xfffffffb}, 0x48)
ioctl$TUNSETLINK(r2, 0x400454cd, 0x1)
recvmsg$kcm(r3, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x222)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff})
r5 = socket$kcm(0x2a, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0xd3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x891a, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8b26, &(0x7f0000000280)={'wlan1\x00'})
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x1c, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

16.169258258s ago: executing program 2 (id=2861):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@ldst={0x1, 0x2, 0x3, 0xb, 0x9, 0xfffffffffffffffc, 0x4}, @printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x922000000003, 0x11)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000fcffffff0000000000000000850000003600000085000000d00000"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_int(r4, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
write$cgroup_subtree(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB='8-N:0/N'], 0x6a)
perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0xd, 0x8, 0x8, 0x5, 0x0, 0x80000000, 0x2002, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xffffafe5, 0x0, @perf_config_ext={0x100000000, 0xfffffffffffff819}, 0x2000, 0x1, 0x0, 0x5, 0x2, 0x2, 0x8001, 0x0, 0xd2, 0x0, 0xfb}, 0x0, 0x3, 0xffffffffffffffff, 0x2)
r6 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r6, 0x29, 0x14, &(0x7f0000000100), 0x120)
setsockopt$sock_attach_bpf(r6, 0x29, 0x15, &(0x7f0000000100), 0x3d)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x40001, 0x0)
ioctl$TUNSETOFFLOAD(r7, 0x400454d0, 0x8)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3)
sendmsg(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000300)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e21, 0x4}}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000003c0)}, {&(0x7f0000000440)="f5e04d0874d2", 0x6}, {&(0x7f0000000580)="7374bb4770383bf0cad937f2270878e9283aba05a8ba6b9b7131d64a57c00ed5d8404102db64e6d0af57", 0x2a}, {&(0x7f0000000800)}], 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x240}, 0x40)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0xe, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f0080048e0050000000000008877fbac141516e0000001440404feb180008903040000845013f2325f003901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0103461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c)
r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x1}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="8500000005000000070000000000000095000000000000005bee1ea01c7814c00980e99a5df1f0614e1942612258708ff9dfaef11bd5504710e1d85587ee4727c9802ba8f5bd83e27c5585207b4e19cee40a9cab915f98eeb1e5a448c0d934224a13ed92a919f303d06b06833168000000000000000000000000f828967cd7352bed054c35edcb5548bcc8573fa4bcd1b87b8bc4a080d48368c87caa011f9f43f44dce6f7896caa82c8cc94a6f9f01ea49effd5ddd45908a22dc23876180f09a80e42135896d93fc510cbde2b03f40dab9c5904a59c5a7a47d173f8001e59332bbea03c2b6"], &(0x7f0000000040)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, r9, 0x14, &(0x7f00000000c0)={0x0, 0x11}, 0x1, 0x10, &(0x7f0000000000), 0xa, 0x0, 0xffffffffffffffff, 0x4c}, 0x70)
r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r10, 0xc004743e, 0x110e22fff6)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

15.967765824s ago: executing program 1 (id=2862):
r0 = socket$kcm(0x2c, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x10, 0x100000000002, 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r5, 0x0, 0x0}, 0x10) (async)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r5, 0x0, 0x0}, 0x10)
sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) (async)
sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000)
sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$kcm(0x2, 0x2, 0x0)
socket$kcm(0x29, 0x0, 0x0) (async)
r6 = socket$kcm(0x29, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f00000000c0)={r0}) (async)
ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f00000000c0)={r0})
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="140000002a000b6c8c1200f90429fc", 0xf}], 0x1}, 0x0)
close(r7)
socket$kcm(0x2c, 0x3, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x72bd1de2ad10b2f3, 0x63, 0xcfb5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x84000, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) (async)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001a80)={&(0x7f0000001880)=ANY=[@ANYBLOB="9feb0100180000000000000064000000640000000600000000030000000200000000000000020000000100000f0100000000000000000000000000000099000000000000000c00000000000000000000000c00000000000000000100000f03000000000000000000000000000000a58e9300005f5f5f00"/130], &(0x7f00000019c0)=""/173, 0x82, 0xad, 0x1}, 0x20)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) (async)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x89a0, &(0x7f0000000140)='%d\xf1\xfa\xbc$j\xfef;q1\x95\xf4\xe4\x13\x95k#Jz.F\xce\xfb\x9c\x19\xf3v\x88\x91\xbct\xb0\x1bLq\x15\x00\xad\t\x13\xf5U\x02\xc9d6q\xc3\xa5\xcf\x01t\r%\xad-\x13\xb0 U\xaaC\xc388\x13\xc6H\x0f \x03\x9e\xa98\xa1\xc3\xe9\x06C\xd4\xb5\x18}4\xa9yA8\x1fQ\xdfN\x8e\xd7m\xee\xb8N\x98\xef\xff\xddR\xec~c\xcb\x93\x84\x7f\\x6\xedZ\x82\xa0\x1by\x17\x1a\xc8\x98\x99\x0f')
ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8940, &(0x7f0000000080))
close(r8) (async)
close(r8)

15.906238467s ago: executing program 3 (id=2863):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0xc)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xe, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYRESHEX=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f0000000340)='cpuset.cpus\x00', 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000180)=ANY=[@ANYBLOB='1-6:5/'], 0x31)

15.728828612s ago: executing program 3 (id=2864):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50)
socketpair(0x1, 0x1, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x11, 0x4, 0x4, 0x9}, 0x50)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x2905, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb889, 0x4, @perf_config_ext={0x0, 0x101}, 0x100904, 0x0, 0x0, 0x0, 0x1, 0xb, 0x0, 0x0, 0x40, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000b80)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000200000000240000090000b8c10000000000e1c4c9988aab1a34137ba942b94e4b222e12af1f062137d38b3aeb01ab243a3b103f1146b43856d4995321ad503e4e4eaf650aa1f533dd74a16157080b5f4a09cfcca288c6b90b9c0eddd7d709a5f7b8e2b1d42bbbedda53ecc0ec7fde3eedaf1a6a9005418dedf49455c9ecd42c4589d724462e453f18ca4a2ac78c9719bdae144ec0c976851197326c96a6c1c1a9bd"], 0x0, 0x26}, 0x28)
r2 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r2, 0x0, 0xfe33)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0)
close(r3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
recvmsg$unix(r4, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x808e}, 0x40000100)
syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)="aeb8b149371165b311dc8ff0")
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x44020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x5452, &(0x7f0000000000)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86\xae\xa5\xea?\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc8<s,\xb023Z{\x9f\xc2\x94+e?\x87\x95\x8e\r\t\x0er\x92\xe2\t\xc4S\xd4\xd2\x87.&`\x95\'=0\r\xd2n\xf5\xcd\x9b\x15Oo\xd8Nj0\xe2\xe5A\xb2\xc3\xf7\xc8\xe7 \"+\xd6\x9e\x18\xec\xb7H\xf9\vd\xebE\x9dtI\xe5\xb5\x8e3\x19<\xdeS\xf4\xe6\xba\x0er\xfc]\xcbd@\xe8R#(u\xe1\x9b\xb7\xd5\x82\xab;\xdb\xa2\x9e\xe8W;\x86\x89\x99\xa1\x99\x1b\xbd\xaf\x11\xcf\x1d\xb5n\xe3&\x1b Z|\x18\n/\xe4\x83\xb5\xdd\xed\xd8\xba\xe8\x8d{@\xd1\x00'/432)
write$cgroup_devices(r3, &(0x7f00000005c0)=ANY=[], 0xfffffeff)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r5}, 0xc)
r6 = socket$kcm(0x2a, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000001f80)={&(0x7f0000001d00)=@ll={0x11, 0x3, 0x0, 0x1, 0x7}, 0x80, 0x0}, 0x0)
r7 = openat$cgroup_ro(r2, &(0x7f0000000340)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0)
r8 = socket$kcm(0x2, 0x922000000001, 0x106)
setsockopt$sock_attach_bpf(r8, 0x1, 0x14, 0x0, 0x8)
close(r7)
openat$cgroup_ro(r3, &(0x7f0000000200)='pids.current\x00', 0x26e1, 0x0)

15.569719717s ago: executing program 2 (id=2865):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x6002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2f}, 0x50) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2f}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000280)=""/252, 0x1a, 0xfc, 0x0, 0x7}, 0x28) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000280)=""/252, 0x1a, 0xfc, 0x0, 0x7}, 0x28)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r0, 0xb)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1, 0x6, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x0, 0x4}, 0x50)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x520, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xa99, 0x3}, 0x8500, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x30, &(0x7f0000000140), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x30, &(0x7f0000000140), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000440)=""/183}, 0x20) (async)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000440)=""/183}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x10, 0x3, &(0x7f0000000300)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x10, 0x3, &(0x7f0000000300)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080))

15.387386133s ago: executing program 0 (id=2866):
r0 = perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x4, 0x0, 0xfe, 0x0, 0x800, 0x20000, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0xc920000, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0xb, 0xb3, 0xa, 0x8, 0x0, 0x0, 0x10, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x7, 0x30000000000}, 0x2, 0x0, 0xc7, 0x7, 0x9, 0x800, 0x1, 0x0, 0x9, 0x0, 0xa2}, r1, 0x2, r0, 0x8)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001600)="5c00000014006b03000000d86e6c1d0002840900000400000000822be3f58e76ff0165f450e71b0075e3002500028d459e37000f0000000000bfd367b47e51f60a64d9f4d4938037e784f869526f9aff94890f4c4a6a639086a6d0bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0}}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x1, 0x3, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', r3, @fallback=0x2d, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$cgroup_procs(r4, &(0x7f0000000080)='tasks\x00', 0x2, 0x0)
syz_clone(0x21000000, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x80000000001fe)

323.517149ms ago: executing program 32 (id=2866):
r0 = perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x4, 0x0, 0xfe, 0x0, 0x800, 0x20000, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0xc920000, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0xb, 0xb3, 0xa, 0x8, 0x0, 0x0, 0x10, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x7, 0x30000000000}, 0x2, 0x0, 0xc7, 0x7, 0x9, 0x800, 0x1, 0x0, 0x9, 0x0, 0xa2}, r1, 0x2, r0, 0x8)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001600)="5c00000014006b03000000d86e6c1d0002840900000400000000822be3f58e76ff0165f450e71b0075e3002500028d459e37000f0000000000bfd367b47e51f60a64d9f4d4938037e784f869526f9aff94890f4c4a6a639086a6d0bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0}}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x1, 0x3, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', r3, @fallback=0x2d, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$cgroup_procs(r4, &(0x7f0000000080)='tasks\x00', 0x2, 0x0)
syz_clone(0x21000000, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x80000000001fe)

250.953992ms ago: executing program 33 (id=2862):
r0 = socket$kcm(0x2c, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x10, 0x100000000002, 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r5, 0x0, 0x0}, 0x10) (async)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r5, 0x0, 0x0}, 0x10)
sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) (async)
sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000)
sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$kcm(0x2, 0x2, 0x0)
socket$kcm(0x29, 0x0, 0x0) (async)
r6 = socket$kcm(0x29, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f00000000c0)={r0}) (async)
ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f00000000c0)={r0})
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="140000002a000b6c8c1200f90429fc", 0xf}], 0x1}, 0x0)
close(r7)
socket$kcm(0x2c, 0x3, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x72bd1de2ad10b2f3, 0x63, 0xcfb5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x84000, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) (async)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001a80)={&(0x7f0000001880)=ANY=[@ANYBLOB="9feb0100180000000000000064000000640000000600000000030000000200000000000000020000000100000f0100000000000000000000000000000099000000000000000c00000000000000000000000c00000000000000000100000f03000000000000000000000000000000a58e9300005f5f5f00"/130], &(0x7f00000019c0)=""/173, 0x82, 0xad, 0x1}, 0x20)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) (async)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x89a0, &(0x7f0000000140)='%d\xf1\xfa\xbc$j\xfef;q1\x95\xf4\xe4\x13\x95k#Jz.F\xce\xfb\x9c\x19\xf3v\x88\x91\xbct\xb0\x1bLq\x15\x00\xad\t\x13\xf5U\x02\xc9d6q\xc3\xa5\xcf\x01t\r%\xad-\x13\xb0 U\xaaC\xc388\x13\xc6H\x0f \x03\x9e\xa98\xa1\xc3\xe9\x06C\xd4\xb5\x18}4\xa9yA8\x1fQ\xdfN\x8e\xd7m\xee\xb8N\x98\xef\xff\xddR\xec~c\xcb\x93\x84\x7f\\x6\xedZ\x82\xa0\x1by\x17\x1a\xc8\x98\x99\x0f')
ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8940, &(0x7f0000000080))
close(r8) (async)
close(r8)

111.474866ms ago: executing program 34 (id=2865):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x6002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2f}, 0x50) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2f}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000280)=""/252, 0x1a, 0xfc, 0x0, 0x7}, 0x28) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000280)=""/252, 0x1a, 0xfc, 0x0, 0x7}, 0x28)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r0, 0xb)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1, 0x6, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x0, 0x4}, 0x50)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x520, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xa99, 0x3}, 0x8500, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x30, &(0x7f0000000140), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x30, &(0x7f0000000140), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000440)=""/183}, 0x20) (async)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000440)=""/183}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x10, 0x3, &(0x7f0000000300)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x10, 0x3, &(0x7f0000000300)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080))

0s ago: executing program 35 (id=2864):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50)
socketpair(0x1, 0x1, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x11, 0x4, 0x4, 0x9}, 0x50)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x2905, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb889, 0x4, @perf_config_ext={0x0, 0x101}, 0x100904, 0x0, 0x0, 0x0, 0x1, 0xb, 0x0, 0x0, 0x40, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000b80)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000200000000240000090000b8c10000000000e1c4c9988aab1a34137ba942b94e4b222e12af1f062137d38b3aeb01ab243a3b103f1146b43856d4995321ad503e4e4eaf650aa1f533dd74a16157080b5f4a09cfcca288c6b90b9c0eddd7d709a5f7b8e2b1d42bbbedda53ecc0ec7fde3eedaf1a6a9005418dedf49455c9ecd42c4589d724462e453f18ca4a2ac78c9719bdae144ec0c976851197326c96a6c1c1a9bd"], 0x0, 0x26}, 0x28)
r2 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r2, 0x0, 0xfe33)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0)
close(r3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
recvmsg$unix(r4, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x808e}, 0x40000100)
syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)="aeb8b149371165b311dc8ff0")
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x44020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x5452, &(0x7f0000000000)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86\xae\xa5\xea?\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc8<s,\xb023Z{\x9f\xc2\x94+e?\x87\x95\x8e\r\t\x0er\x92\xe2\t\xc4S\xd4\xd2\x87.&`\x95\'=0\r\xd2n\xf5\xcd\x9b\x15Oo\xd8Nj0\xe2\xe5A\xb2\xc3\xf7\xc8\xe7 \"+\xd6\x9e\x18\xec\xb7H\xf9\vd\xebE\x9dtI\xe5\xb5\x8e3\x19<\xdeS\xf4\xe6\xba\x0er\xfc]\xcbd@\xe8R#(u\xe1\x9b\xb7\xd5\x82\xab;\xdb\xa2\x9e\xe8W;\x86\x89\x99\xa1\x99\x1b\xbd\xaf\x11\xcf\x1d\xb5n\xe3&\x1b Z|\x18\n/\xe4\x83\xb5\xdd\xed\xd8\xba\xe8\x8d{@\xd1\x00'/432)
write$cgroup_devices(r3, &(0x7f00000005c0)=ANY=[], 0xfffffeff)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r5}, 0xc)
r6 = socket$kcm(0x2a, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000001f80)={&(0x7f0000001d00)=@ll={0x11, 0x3, 0x0, 0x1, 0x7}, 0x80, 0x0}, 0x0)
r7 = openat$cgroup_ro(r2, &(0x7f0000000340)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0)
r8 = socket$kcm(0x2, 0x922000000001, 0x106)
setsockopt$sock_attach_bpf(r8, 0x1, 0x14, 0x0, 0x8)
close(r7)
openat$cgroup_ro(r3, &(0x7f0000000200)='pids.current\x00', 0x26e1, 0x0)

kernel console output (not intermixed with test programs):

sim_free+0x220/0x220
[  401.591088][T13073]  ? rcu_is_watching+0x15/0xb0
[  401.595859][T13073]  ? kstrndup+0xbd/0x140
[  401.600134][T13073]  hwsim_new_radio_nl+0xdc9/0x1a90
[  401.605257][T13073]  ? __nla_validate+0x50/0x50
[  401.609955][T13073]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  401.616294][T13073]  ? __nla_parse+0x40/0x50
[  401.620715][T13073]  ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[  401.627145][T13073]  genl_family_rcv_msg_doit+0x211/0x310
[  401.632699][T13073]  ? end_current_label_crit_section+0x170/0x170
[  401.638973][T13073]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  401.644878][T13073]  ? bpf_lsm_capable+0x9/0x10
[  401.649577][T13073]  ? security_capable+0x89/0xb0
[  401.654435][T13073]  genl_rcv_msg+0x619/0x7a0
[  401.658946][T13073]  ? genl_bind+0x360/0x360
[  401.663360][T13073]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  401.669692][T13073]  ? perf_trace_lock+0xfc/0x3b0
[  401.674546][T13073]  netlink_rcv_skb+0x241/0x4d0
[  401.679314][T13073]  ? genl_bind+0x360/0x360
[  401.683732][T13073]  ? netlink_ack+0x1180/0x1180
[  401.688503][T13073]  ? __lock_acquire+0x7d40/0x7d40
[  401.693532][T13073]  ? down_read+0x1ac/0x2e0
[  401.697949][T13073]  genl_rcv+0x28/0x40
[  401.701930][T13073]  netlink_unicast+0x751/0x8d0
[  401.706702][T13073]  netlink_sendmsg+0x8d0/0xbf0
[  401.711475][T13073]  ? netlink_getsockopt+0x590/0x590
[  401.716677][T13073]  ? aa_sock_msg_perm+0x94/0x150
[  401.721619][T13073]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  401.726910][T13073]  ? security_socket_sendmsg+0x80/0xa0
[  401.732366][T13073]  ? netlink_getsockopt+0x590/0x590
[  401.737570][T13073]  ____sys_sendmsg+0x5ba/0x960
[  401.742439][T13073]  ? __asan_memset+0x22/0x40
[  401.747032][T13073]  ? __sys_sendmsg_sock+0x30/0x30
[  401.752054][T13073]  ? __import_iovec+0x5f2/0x850
[  401.756922][T13073]  ? import_iovec+0x73/0xa0
[  401.761423][T13073]  ___sys_sendmsg+0x2a6/0x360
[  401.766105][T13073]  ? __sys_sendmsg+0x2a0/0x2a0
[  401.770912][T13073]  __se_sys_sendmsg+0x1c2/0x2b0
[  401.775764][T13073]  ? __x64_sys_sendmsg+0x80/0x80
[  401.780712][T13073]  ? lockdep_hardirqs_on+0x98/0x150
[  401.785916][T13073]  do_syscall_64+0x55/0xb0
[  401.790332][T13073]  ? clear_bhb_loop+0x40/0x90
[  401.795111][T13073]  ? clear_bhb_loop+0x40/0x90
[  401.799796][T13073]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  401.805793][T13073] RIP: 0033:0x7f00a4d9ce59
[  401.810208][T13073] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  401.829815][T13073] RSP: 002b:00007f00a5c01028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  401.838233][T13073] RAX: ffffffffffffffda RBX: 00007f00a5015fa0 RCX: 00007f00a4d9ce59
[  401.846205][T13073] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006
[  401.854186][T13073] RBP: 00007f00a4e32d6f R08: 0000000000000000 R09: 0000000000000000
[  401.862156][T13073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  401.870124][T13073] R13: 00007f00a5016038 R14: 00007f00a5015fa0 R15: 00007ffeff75ec18
[  401.878110][T13073]  </TASK>
[  402.427628][T13103] netlink: 'syz.1.2061': attribute type 7 has an invalid length.
[  402.457050][T13103] netlink: 'syz.1.2061': attribute type 1 has an invalid length.
[  402.506464][T13103] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2061'.
[  402.578128][T13105] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.2061'.
[  402.922541][T13118] netlink: 'syz.0.2065': attribute type 21 has an invalid length.
[  402.969157][T13118] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2065'.
[  403.024297][T13121] syzkaller1: tun_chr_ioctl cmd 2147767521
[  403.049983][T13117] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2065'.
[  403.094906][T13117] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  403.149456][T13118] netlink: 203756 bytes leftover after parsing attributes in process `syz.0.2065'.
[  403.177964][T13118] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô'
[  403.199318][T13118] CPU: 1 PID: 13118 Comm: syz.0.2065 Not tainted syzkaller #0
[  403.206861][T13118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  403.216961][T13118] Call Trace:
[  403.220282][T13118]  <TASK>
[  403.223258][T13118]  dump_stack_lvl+0x18c/0x250
[  403.228002][T13118]  ? show_regs_print_info+0x20/0x20
[  403.233257][T13118]  ? load_image+0x420/0x420
[  403.237867][T13118]  sysfs_warn_dup+0x8e/0xa0
[  403.242425][T13118]  sysfs_do_create_link_sd+0xc0/0x110
[  403.247857][T13118]  device_add_class_symlinks+0x1cf/0x240
[  403.253556][T13118]  device_add+0x507/0xc50
[  403.257967][T13118]  wiphy_register+0x1dad/0x2ae0
[  403.262941][T13118]  ? cfg80211_event_work+0x40/0x40
[  403.268106][T13118]  ? minstrel_ht_alloc+0x88a/0x990
[  403.273303][T13118]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[  403.279450][T13118]  ieee80211_register_hw+0x3464/0x4250
[  403.285053][T13118]  ? ieee80211_tasklet_handler+0x20/0x20
[  403.290744][T13118]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  403.296706][T13118]  ? __debug_object_init+0xec/0x450
[  403.301979][T13118]  ? __asan_memset+0x22/0x40
[  403.306628][T13118]  ? __hrtimer_init+0x186/0x270
[  403.311550][T13118]  mac80211_hwsim_new_radio+0x2a00/0x4d10
[  403.317410][T13118]  ? mac80211_hwsim_free+0x220/0x220
[  403.322748][T13118]  ? rcu_is_watching+0x15/0xb0
[  403.327570][T13118]  ? kstrndup+0xbd/0x140
[  403.331906][T13118]  hwsim_new_radio_nl+0xdc9/0x1a90
[  403.337106][T13118]  ? __nla_validate+0x50/0x50
[  403.341884][T13118]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  403.348327][T13118]  ? __nla_parse+0x40/0x50
[  403.352815][T13118]  ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[  403.359209][T13118]  genl_family_rcv_msg_doit+0x211/0x310
[  403.364781][T13118]  ? end_current_label_crit_section+0x170/0x170
[  403.371054][T13118]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  403.376998][T13118]  ? bpf_lsm_capable+0x9/0x10
[  403.381692][T13118]  ? security_capable+0x89/0xb0
[  403.386625][T13118]  genl_rcv_msg+0x619/0x7a0
[  403.391174][T13118]  ? genl_bind+0x360/0x360
[  403.395608][T13118]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  403.401961][T13118]  ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0
[  403.408606][T13118]  netlink_rcv_skb+0x241/0x4d0
[  403.413396][T13118]  ? genl_bind+0x360/0x360
[  403.417838][T13118]  ? netlink_ack+0x1180/0x1180
[  403.422678][T13118]  ? __lock_acquire+0x7d40/0x7d40
[  403.427755][T13118]  ? net_generic+0x1e/0x240
[  403.432306][T13118]  ? down_read+0x1ac/0x2e0
[  403.436756][T13118]  genl_rcv+0x28/0x40
[  403.440762][T13118]  netlink_unicast+0x751/0x8d0
[  403.445575][T13118]  netlink_sendmsg+0x8d0/0xbf0
[  403.450353][T13118]  ? perf_trace_lock+0x304/0x3b0
[  403.455351][T13118]  ? netlink_getsockopt+0x590/0x590
[  403.460582][T13118]  ? aa_sock_msg_perm+0x94/0x150
[  403.465547][T13118]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  403.470845][T13118]  ? security_socket_sendmsg+0x80/0xa0
[  403.476316][T13118]  ? netlink_getsockopt+0x590/0x590
[  403.481539][T13118]  ____sys_sendmsg+0x5ba/0x960
[  403.486343][T13118]  ? __asan_memset+0x22/0x40
[  403.490975][T13118]  ? __sys_sendmsg_sock+0x30/0x30
[  403.496014][T13118]  ? __import_iovec+0x5f2/0x850
[  403.500911][T13118]  ? import_iovec+0x73/0xa0
[  403.505447][T13118]  ___sys_sendmsg+0x2a6/0x360
[  403.510163][T13118]  ? __sys_sendmsg+0x2a0/0x2a0
[  403.515097][T13118]  __se_sys_sendmsg+0x1c2/0x2b0
[  403.519980][T13118]  ? __x64_sys_sendmsg+0x80/0x80
[  403.524977][T13118]  ? lockdep_hardirqs_on+0x98/0x150
[  403.530207][T13118]  do_syscall_64+0x55/0xb0
[  403.534649][T13118]  ? clear_bhb_loop+0x40/0x90
[  403.539347][T13118]  ? clear_bhb_loop+0x40/0x90
[  403.544052][T13118]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  403.549968][T13118] RIP: 0033:0x7f8e1719ce59
[  403.554429][T13118] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  403.574162][T13118] RSP: 002b:00007f8e180ca028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  403.582611][T13118] RAX: ffffffffffffffda RBX: 00007f8e17416090 RCX: 00007f8e1719ce59
[  403.590601][T13118] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a
[  403.598589][T13118] RBP: 00007f8e17232d6f R08: 0000000000000000 R09: 0000000000000000
[  403.606580][T13118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  403.614574][T13118] R13: 00007f8e17416128 R14: 00007f8e17416090 R15: 00007ffdc48a33c8
[  403.622609][T13118]  </TASK>
[  403.989596][T13139] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2072'.
[  404.176808][T13142] netlink: 'syz.3.2073': attribute type 10 has an invalid length.
[  405.258601][T13169] netlink: 'syz.2.2081': attribute type 9 has an invalid length.
[  405.270949][T13169] __nla_validate_parse: 1 callbacks suppressed
[  405.270964][T13169] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2081'.
[  406.483220][T13196] mac80211_hwsim hwsim24 wlan1: entered promiscuous mode
[  406.531961][T13200] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2090'.
[  406.551561][T13200] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2090'.
[  406.572508][T13200] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2090'.
[  406.580097][T13189] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.2086'.
[  406.596052][T13200] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2090'.
[  406.695879][T13202] netlink: 3890 bytes leftover after parsing attributes in process `syz.1.2090'.
[  406.735159][T13185] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.2086'.
[  407.549643][T13224] netlink: 'syz.1.2099': attribute type 29 has an invalid length.
[  407.575410][T13224] netlink: 'syz.1.2099': attribute type 29 has an invalid length.
[  407.616266][T13224] netlink: 'syz.1.2099': attribute type 29 has an invalid length.
[  407.692581][T13228] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2098'.
[  407.964703][T13231] netlink: 'syz.2.2100': attribute type 10 has an invalid length.
[  408.164941][T13231] team0 (unregistering): Port device C removed
[  408.201967][T13231] team0 (unregistering): Port device team_slave_1 removed
[  408.218509][T13231] team0 (unregistering): Port device wlan1 removed
[  408.231862][T13231] team0 (unregistering): Port device geneve1 removed
[  408.306218][T13224] netlink: 'syz.1.2099': attribute type 29 has an invalid length.
[  408.331946][T13237] netlink: 'syz.1.2099': attribute type 29 has an invalid length.
[  408.345605][T13236] netlink: 'syz.0.2102': attribute type 10 has an invalid length.
[  408.368876][T13236] team0: Device nlmon0 is of different type
[  408.560240][T13238] netlink: 'syz.0.2102': attribute type 10 has an invalid length.
[  408.572088][T13238] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.2102'.
[  409.831490][T13258] netlink: 'syz.2.2106': attribute type 10 has an invalid length.
[  409.846092][T13258] hsr_slave_0: left promiscuous mode
[  409.892540][T13258] hsr_slave_1: left promiscuous mode
[  410.515665][T13272] validate_nla: 1 callbacks suppressed
[  410.515680][T13272] netlink: 'syz.3.2112': attribute type 6 has an invalid length.
[  410.533082][T13272] __nla_validate_parse: 1 callbacks suppressed
[  410.533096][T13272] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2112'.
[  411.298407][T13286] netlink: 'syz.0.2116': attribute type 9 has an invalid length.
[  411.317937][T13286] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.2116'.
[  412.084549][T13315] syzkaller0: entered promiscuous mode
[  412.098311][T13315] syzkaller0: entered allmulticast mode
[  412.642771][T13335] netlink: 'syz.0.2130': attribute type 11 has an invalid length.
[  412.675293][T13335] netlink: 184116 bytes leftover after parsing attributes in process `syz.0.2130'.
[  413.666116][T13345] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.2132'.
[  414.620635][T13331] netlink: 'syz.1.2129': attribute type 11 has an invalid length.
[  414.628550][T13331] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2129'.
[  414.638673][T13344] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2132'.
[  414.648483][T13335] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô'
[  414.675466][T13335] CPU: 0 PID: 13335 Comm: syz.0.2130 Not tainted syzkaller #0
[  414.682973][T13335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  414.693049][T13335] Call Trace:
[  414.696354][T13335]  <TASK>
[  414.699298][T13335]  dump_stack_lvl+0x18c/0x250
[  414.703975][T13335]  ? show_regs_print_info+0x20/0x20
[  414.709167][T13335]  ? load_image+0x420/0x420
[  414.713676][T13335]  sysfs_warn_dup+0x8e/0xa0
[  414.718175][T13335]  sysfs_do_create_link_sd+0xc0/0x110
[  414.723541][T13335]  device_add_class_symlinks+0x1cf/0x240
[  414.729178][T13335]  device_add+0x507/0xc50
[  414.733507][T13335]  wiphy_register+0x1dad/0x2ae0
[  414.738372][T13335]  ? cfg80211_event_work+0x40/0x40
[  414.743474][T13335]  ? minstrel_ht_alloc+0x88a/0x990
[  414.748595][T13335]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[  414.754666][T13335]  ieee80211_register_hw+0x3464/0x4250
[  414.760139][T13335]  ? ieee80211_tasklet_handler+0x20/0x20
[  414.765766][T13335]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  414.771663][T13335]  ? __debug_object_init+0xec/0x450
[  414.776861][T13335]  ? __asan_memset+0x22/0x40
[  414.781447][T13335]  ? __hrtimer_init+0x186/0x270
[  414.786294][T13335]  mac80211_hwsim_new_radio+0x2a00/0x4d10
[  414.792027][T13335]  ? mac80211_hwsim_free+0x220/0x220
[  414.797305][T13335]  ? rcu_is_watching+0x15/0xb0
[  414.802064][T13335]  ? kstrndup+0xbd/0x140
[  414.806313][T13335]  hwsim_new_radio_nl+0xdc9/0x1a90
[  414.811422][T13335]  ? __nla_validate+0x50/0x50
[  414.816108][T13335]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  414.822441][T13335]  ? __nla_parse+0x40/0x50
[  414.826856][T13335]  ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[  414.833194][T13335]  genl_family_rcv_msg_doit+0x211/0x310
[  414.838733][T13335]  ? end_current_label_crit_section+0x170/0x170
[  414.844975][T13335]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  414.850870][T13335]  ? bpf_lsm_capable+0x9/0x10
[  414.855545][T13335]  ? security_capable+0x89/0xb0
[  414.860398][T13335]  genl_rcv_msg+0x619/0x7a0
[  414.864900][T13335]  ? genl_bind+0x360/0x360
[  414.869314][T13335]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  414.875639][T13335]  ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0
[  414.882228][T13335]  ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0
[  414.888820][T13335]  netlink_rcv_skb+0x241/0x4d0
[  414.893580][T13335]  ? genl_bind+0x360/0x360
[  414.897991][T13335]  ? netlink_ack+0x1180/0x1180
[  414.902754][T13335]  ? __lock_acquire+0x7d40/0x7d40
[  414.907773][T13335]  ? net_generic+0x1e/0x240
[  414.912270][T13335]  ? down_read+0x1ac/0x2e0
[  414.916688][T13335]  genl_rcv+0x28/0x40
[  414.920667][T13335]  netlink_unicast+0x751/0x8d0
[  414.925433][T13335]  netlink_sendmsg+0x8d0/0xbf0
[  414.930200][T13335]  ? netlink_getsockopt+0x590/0x590
[  414.935404][T13335]  ? aa_sock_msg_perm+0x94/0x150
[  414.940338][T13335]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  414.945618][T13335]  ? security_socket_sendmsg+0x80/0xa0
[  414.951077][T13335]  ? netlink_getsockopt+0x590/0x590
[  414.956268][T13335]  ____sys_sendmsg+0x5ba/0x960
[  414.961033][T13335]  ? __asan_memset+0x22/0x40
[  414.965631][T13335]  ? __sys_sendmsg_sock+0x30/0x30
[  414.970658][T13335]  ? __import_iovec+0x5f2/0x850
[  414.975508][T13335]  ? import_iovec+0x73/0xa0
[  414.980008][T13335]  ___sys_sendmsg+0x2a6/0x360
[  414.984688][T13335]  ? __sys_sendmsg+0x2a0/0x2a0
[  414.989482][T13335]  __se_sys_sendmsg+0x1c2/0x2b0
[  414.994328][T13335]  ? __x64_sys_sendmsg+0x80/0x80
[  414.999271][T13335]  ? lockdep_hardirqs_on+0x98/0x150
[  415.004509][T13335]  do_syscall_64+0x55/0xb0
[  415.008930][T13335]  ? clear_bhb_loop+0x40/0x90
[  415.013605][T13335]  ? clear_bhb_loop+0x40/0x90
[  415.018277][T13335]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  415.024168][T13335] RIP: 0033:0x7f8e1719ce59
[  415.028578][T13335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  415.048180][T13335] RSP: 002b:00007f8e180eb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  415.056587][T13335] RAX: ffffffffffffffda RBX: 00007f8e17415fa0 RCX: 00007f8e1719ce59
[  415.064553][T13335] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  415.072516][T13335] RBP: 00007f8e17232d6f R08: 0000000000000000 R09: 0000000000000000
[  415.080478][T13335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  415.088442][T13335] R13: 00007f8e17416038 R14: 00007f8e17415fa0 R15: 00007ffdc48a33c8
[  415.096420][T13335]  </TASK>
[  415.265160][T13351] netlink: 'syz.0.2136': attribute type 9 has an invalid length.
[  415.273059][T13351] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.2136'.
[  415.365487][T13349] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2134'.
[  415.884819][T13377] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.2141'.
[  416.070030][T13386] geneve1: entered promiscuous mode
[  416.077566][T13386] geneve1: entered allmulticast mode
[  416.244504][T13392] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2145'.
[  416.566180][T13398] netlink: 'syz.3.2147': attribute type 10 has an invalid length.
[  416.744213][T13400] netlink: 'syz.2.2149': attribute type 10 has an invalid length.
[  416.764560][T13402] netlink: 'syz.0.2148': attribute type 28 has an invalid length.
[  420.020522][T13430] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2157'.
[  420.879412][T13472] netlink: 'syz.2.2169': attribute type 33 has an invalid length.
[  420.907106][T13472] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2169'.
[  420.929401][T13472] openvswitch: netlink: Key type 29 is not supported
[  421.193375][T13487] netlink: 'syz.2.2173': attribute type 11 has an invalid length.
[  421.247508][T13490] netlink: 'syz.2.2173': attribute type 2 has an invalid length.
[  421.259146][T13490] netlink: 1045 bytes leftover after parsing attributes in process `syz.2.2173'.
[  421.720494][T13507] netlink: 'syz.3.2177': attribute type 1 has an invalid length.
[  421.738629][T13507] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.2177'.
[  421.802555][T13509] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2181'.
[  421.891502][T13512] netlink: 'syz.0.2180': attribute type 41 has an invalid length.
[  421.912330][T13514] netlink: 'syz.0.2180': attribute type 41 has an invalid length.
[  422.185150][T13524] netlink: 'syz.0.2185': attribute type 21 has an invalid length.
[  422.193680][T13524] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2185'.
[  422.206911][T13524] netlink: 'syz.0.2185': attribute type 5 has an invalid length.
[  422.215037][T13524] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2185'.
[  422.328855][T13535] netlink: 'syz.2.2188': attribute type 29 has an invalid length.
[  422.333401][T13531] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2187'.
[  422.338136][T13535] netlink: 'syz.2.2188': attribute type 29 has an invalid length.
[  422.342356][T13535] netlink: 'syz.2.2188': attribute type 29 has an invalid length.
[  422.383427][T13535] netlink: 'syz.2.2188': attribute type 29 has an invalid length.
[  422.396914][T13535] netlink: 'syz.2.2188': attribute type 29 has an invalid length.
[  422.633409][T13545] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.2193'.
[  422.979237][T13541] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2191'.
[  425.116277][T13612] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2211'.
[  426.029075][T13645] __nla_validate_parse: 1 callbacks suppressed
[  426.029097][T13645] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2222'.
[  426.216301][T13650] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  426.302453][T13650] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.2231'.
[  426.897285][T13667] netlink: 161608 bytes leftover after parsing attributes in process `syz.1.2229'.
[  427.190576][T10178] tipc: Subscription rejected, illegal request
[  427.548375][T13706] validate_nla: 6 callbacks suppressed
[  427.548442][T13706] netlink: 'syz.3.2240': attribute type 6 has an invalid length.
[  427.578196][T13706] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2240'.
[  427.603028][T13706] IPv6: Can't replace route, no match found
[  427.969401][T13714] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.2242'.
[  428.082186][T13716] netlink: 208052 bytes leftover after parsing attributes in process `syz.3.2243'.
[  428.145007][T13716] netlink: 'syz.3.2243': attribute type 1 has an invalid length.
[  428.194957][T13716] netlink: 'syz.3.2243': attribute type 2 has an invalid length.
[  428.218596][T13716] netlink: 'syz.3.2243': attribute type 3 has an invalid length.
[  428.279082][T13716] netlink: 'syz.3.2243': attribute type 4 has an invalid length.
[  431.293765][T13738] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.2251'.
[  431.315698][T13738] netlink: 6324 bytes leftover after parsing attributes in process `syz.3.2251'.
[  431.324857][T13738] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2251'.
[  431.352445][T13736] netlink: 'syz.2.2252': attribute type 1 has an invalid length.
[  431.387950][T13738] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode
[  431.396316][T13736] netlink: 'syz.2.2252': attribute type 3 has an invalid length.
[  431.405454][T13738] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode
[  431.415530][T13736] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2252'.
[  431.464053][T13733] mac80211_hwsim hwsim24 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  431.489930][T13741] netlink: 'syz.0.2250': attribute type 3 has an invalid length.
[  431.499624][T13741] netlink: 16066 bytes leftover after parsing attributes in process `syz.0.2250'.
[  432.167920][T13765] netlink: 'syz.3.2259': attribute type 2 has an invalid length.
[  432.189685][T13765] netlink: 'syz.3.2259': attribute type 1 has an invalid length.
[  432.222222][T13765] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2259'.
[  432.624666][T13772] netlink: 'syz.0.2261': attribute type 6 has an invalid length.
[  432.719451][T13772] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2261'.
[  432.731094][T13780] IPv6: Can't replace route, no match found
[  432.878971][T13789] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2265'.
[  436.114286][T13804] lo: entered allmulticast mode
[  436.148151][T13805] lo: entered promiscuous mode
[  436.152967][T13805] lo: left allmulticast mode
[  436.380040][T13818] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2274'.
[  436.389533][T13818] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  436.714316][T13836] netlink: 'syz.1.2279': attribute type 16 has an invalid length.
[  436.739006][T13836] netlink: 'syz.1.2279': attribute type 3 has an invalid length.
[  436.765754][T13836] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2279'.
[  436.824967][T13840] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2281'.
[  436.880570][T13837] lo: entered allmulticast mode
[  436.897191][T13837] lo: entered promiscuous mode
[  436.902327][T13837] lo: left allmulticast mode
[  437.154982][T13858] netlink: 'syz.2.2285': attribute type 3 has an invalid length.
[  437.163942][T13858] netlink: 'syz.2.2285': attribute type 1 has an invalid length.
[  437.178098][T13858] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.2285'.
[  437.195352][T13859] A link change request failed with some changes committed already. Interface Q±6ã�`Ò˜ may have been left with an inconsistent configuration, please check.
[  437.701718][T13874] netlink: 'syz.3.2293': attribute type 10 has an invalid length.
[  437.716224][T13874] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.2293'.
[  438.186022][T13895] netlink: 'syz.0.2301': attribute type 9 has an invalid length.
[  438.784898][T13912] netlink: 'syz.2.2304': attribute type 29 has an invalid length.
[  438.880369][T13912] netlink: 'syz.2.2304': attribute type 29 has an invalid length.
[  438.889566][T13914] netlink: 'syz.2.2304': attribute type 29 has an invalid length.
[  438.978385][T13910] netlink: 'syz.2.2304': attribute type 29 has an invalid length.
[  438.986837][T13912] netlink: 'syz.2.2304': attribute type 29 has an invalid length.
[  440.079679][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  440.086278][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  440.231882][ T5778] Bluetooth: hci0: unexpected event 0x16 length: 151 > 6
[  440.779388][T13970] netlink: 'syz.1.2320': attribute type 1 has an invalid length.
[  440.897592][T13970] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.2320'.
[  443.810729][T13980] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2324'.
[  443.847036][T13980] netlink: 'syz.1.2324': attribute type 3 has an invalid length.
[  443.860878][T13980] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2324'.
[  444.056030][T13988] netlink: 'syz.3.2325': attribute type 39 has an invalid length.
[  445.139871][ T5778] Bluetooth: hci0: unexpected event 0x31 length: 15 > 6
[  445.671651][T14014] netlink: 'syz.3.2332': attribute type 2 has an invalid length.
[  445.691142][T14014] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2332'.
[  445.866062][T14015] netlink: 22 bytes leftover after parsing attributes in process `syz.3.2332'.
[  445.928796][T14015] netlink: 'syz.3.2332': attribute type 9 has an invalid length.
[  446.035267][T14015] netlink: 399 bytes leftover after parsing attributes in process `syz.3.2332'.
[  446.493351][T14021] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2335'.
[  446.571754][T14029] netlink: 'syz.1.2337': attribute type 10 has an invalid length.
[  446.616976][T14029] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  446.824011][ T5783] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  446.848133][ T5783] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  446.861880][ T5783] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  446.876590][ T5783] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  446.897020][ T5783] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  446.905344][ T5783] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  447.233936][T14034] chnl_net:caif_netlink_parms(): no params data found
[  447.516076][T14034] bridge0: port 1(bridge_slave_0) entered blocking state
[  447.523241][T14034] bridge0: port 1(bridge_slave_0) entered disabled state
[  447.554774][T14034] bridge_slave_0: entered allmulticast mode
[  447.580331][T14034] bridge_slave_0: entered promiscuous mode
[  447.600516][T14034] bridge0: port 2(bridge_slave_1) entered blocking state
[  447.622388][T14034] bridge0: port 2(bridge_slave_1) entered disabled state
[  447.632758][T14034] bridge_slave_1: entered allmulticast mode
[  447.641645][T14034] bridge_slave_1: entered promiscuous mode
[  447.692271][T14055] netlink: 9427 bytes leftover after parsing attributes in process `syz.3.2342'.
[  447.714189][T14034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  447.730527][T14057] netlink: 14556 bytes leftover after parsing attributes in process `syz.1.2343'.
[  447.747958][T14034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  447.814229][T14034] team0: Port device team_slave_0 added
[  447.834947][T14034] team0: Port device team_slave_1 added
[  447.949340][T14034] batman_adv: batadv0: Adding interface: batadv_slave_0
[  447.965632][T14034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  448.015221][T14034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  448.045853][T14034] batman_adv: batadv0: Adding interface: batadv_slave_1
[  448.060095][T14034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  448.089849][T14034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  448.226714][T14034] hsr_slave_0: entered promiscuous mode
[  448.238037][T14034] hsr_slave_1: entered promiscuous mode
[  448.245299][T14034] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  448.252885][T14034] Cannot create hsr debugfs directory
[  448.938687][T14034] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  448.955519][ T5783] Bluetooth: hci3: command tx timeout
[  449.147448][T14093] netlink: 'syz.3.2352': attribute type 9 has an invalid length.
[  449.163592][T14093] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2352'.
[  449.198055][T14034] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  449.303142][T14094] netlink: 'syz.3.2352': attribute type 9 has an invalid length.
[  449.326797][T14094] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2352'.
[  449.429081][T14034] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  449.544099][T14109] netlink: 'syz.3.2356': attribute type 2 has an invalid length.
[  449.558662][T14109] netlink: 'syz.3.2356': attribute type 1 has an invalid length.
[  449.577412][T14034] team0: Port device netdevsim0 removed
[  449.588660][T14109] netlink: 198036 bytes leftover after parsing attributes in process `syz.3.2356'.
[  449.599179][T14034] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  449.912867][T14034] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  450.484147][T14034] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  450.500268][T14034] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  450.520546][T14034] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  450.670303][T14034] 8021q: adding VLAN 0 to HW filter on device bond0
[  450.720120][T14034] 8021q: adding VLAN 0 to HW filter on device team0
[  450.757301][ T9030] bridge0: port 1(bridge_slave_0) entered blocking state
[  450.765352][ T9030] bridge0: port 1(bridge_slave_0) entered forwarding state
[  450.835958][ T9014] bridge0: port 2(bridge_slave_1) entered blocking state
[  450.843174][ T9014] bridge0: port 2(bridge_slave_1) entered forwarding state
[  450.852453][T14130] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2364'.
[  450.909207][T14130] debugfs: Directory '!!ô!' with parent 'ieee80211' already present!
[  451.055861][ T5783] Bluetooth: hci3: command tx timeout
[  451.932327][T14034] 8021q: adding VLAN 0 to HW filter on device batadv0
[  452.037245][T14034] veth0_vlan: entered promiscuous mode
[  452.051641][T14034] veth1_vlan: entered promiscuous mode
[  452.168060][T14034] veth0_macvtap: entered promiscuous mode
[  452.196485][T14034] veth1_macvtap: entered promiscuous mode
[  452.267473][T14034] batman_adv: batadv0: Interface activated: batadv_slave_0
[  452.293553][T14034] batman_adv: batadv0: Interface activated: batadv_slave_1
[  452.331159][T14034] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  452.363067][T14034] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  452.425728][T14034] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  452.438890][T14160] netlink: 'syz.3.2371': attribute type 6 has an invalid length.
[  452.447333][T14034] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  452.457883][T14160] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2371'.
[  453.115958][ T5783] Bluetooth: hci3: command tx timeout
[  453.152173][ T9014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  453.207980][ T9014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  453.318940][ T8846] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  453.328048][ T8846] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  453.507818][T14173] netlink: 'syz.1.2375': attribute type 10 has an invalid length.
[  454.503692][T14185] netlink: 'syz.0.2378': attribute type 19 has an invalid length.
[  454.535471][T14185] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2378'.
[  455.210323][ T5783] Bluetooth: hci3: command tx timeout
[  456.849631][T14201] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2382'.
[  456.869063][T14201] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  457.358790][ T5778] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  457.376205][ T5778] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  457.384214][ T5778] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  457.405125][ T5778] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  457.415270][ T5778] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  457.422616][ T5778] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  457.945596][T14229] TCP: TCP_TX_DELAY enabled
[  458.074429][ T9032] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  458.207668][ T9032] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  458.270223][T14210] chnl_net:caif_netlink_parms(): no params data found
[  458.437396][ T9032] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  458.631066][ T9032] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  458.663058][T14210] bridge0: port 1(bridge_slave_0) entered blocking state
[  458.680922][T14210] bridge0: port 1(bridge_slave_0) entered disabled state
[  458.700248][T14210] bridge_slave_0: entered allmulticast mode
[  458.707903][T14210] bridge_slave_0: entered promiscuous mode
[  458.725916][T14246] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2399'.
[  458.804972][T14210] bridge0: port 2(bridge_slave_1) entered blocking state
[  458.812348][T14210] bridge0: port 2(bridge_slave_1) entered disabled state
[  458.825594][T14210] bridge_slave_1: entered allmulticast mode
[  458.843209][T14210] bridge_slave_1: entered promiscuous mode
[  458.929670][T14210] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  458.992922][T14210] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  459.061407][T14210] team0: Port device team_slave_0 added
[  459.071332][T14210] team0: Port device team_slave_1 added
[  459.156164][T14210] batman_adv: batadv0: Adding interface: batadv_slave_0
[  459.163257][T14210] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  459.203262][T14210] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  459.306078][T14210] batman_adv: batadv0: Adding interface: batadv_slave_1
[  459.333718][T14210] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  459.389465][T14210] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  459.515800][ T5783] Bluetooth: hci4: command tx timeout
[  459.863054][T14210] hsr_slave_0: entered promiscuous mode
[  459.888519][T14210] hsr_slave_1: entered promiscuous mode
[  459.929184][T14210] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  459.936886][T14210] Cannot create hsr debugfs directory
[  461.198475][T14331] sctp: [Deprecated]: syz.2.2418 (pid 14331) Use of struct sctp_assoc_value in delayed_ack socket option.
[  461.198475][T14331] Use struct sctp_sack_info instead
[  461.596841][ T5783] Bluetooth: hci4: command tx timeout
[  461.799510][T14354] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2422'.
[  461.876526][T14354] openvswitch: netlink: Geneve option length err (len 1788, max 255).
[  462.742881][T14210] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  462.774924][T14210] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  462.825419][T14210] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  462.857082][T14210] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  463.089132][T14390] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2430'.
[  463.401979][T14210] 8021q: adding VLAN 0 to HW filter on device bond0
[  463.409352][T14401] tap1: tun_chr_ioctl cmd 2147767520
[  463.417479][T14400] tap1: tun_chr_ioctl cmd 1074025677
[  463.422929][T14400] tap1: linktype set to 805
[  463.543074][T14210] 8021q: adding VLAN 0 to HW filter on device team0
[  463.675454][ T5783] Bluetooth: hci4: command tx timeout
[  463.744175][T14414] netlink: 'syz.2.2433': attribute type 9 has an invalid length.
[  463.761608][T14414] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2433'.
[  463.770215][ T9039] bridge0: port 1(bridge_slave_0) entered blocking state
[  463.778147][ T9039] bridge0: port 1(bridge_slave_0) entered forwarding state
[  463.861368][ T8855] bridge0: port 2(bridge_slave_1) entered blocking state
[  463.868536][ T8855] bridge0: port 2(bridge_slave_1) entered forwarding state
[  464.524127][T14446] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2441'.
[  464.550762][ T9032] hsr_slave_0: left promiscuous mode
[  464.570185][ T9032] hsr_slave_1: left promiscuous mode
[  464.616861][ T9032] veth1_vlan: left promiscuous mode
[  464.624770][ T9032] veth0_vlan: left promiscuous mode
[  464.825593][T14461] delete_channel: no stack
[  464.830168][T14461] delete_channel: no stack
[  465.755291][ T5783] Bluetooth: hci4: command tx timeout
[  465.827808][T14469] bond0: entered promiscuous mode
[  465.832873][T14469] bond_slave_1: entered promiscuous mode
[  465.881215][T14469] batadv0: entered promiscuous mode
[  465.922953][T14469] bond0: entered allmulticast mode
[  465.944346][T14469] bond_slave_1: entered allmulticast mode
[  465.955265][T14469] batadv0: entered allmulticast mode
[  466.133922][T14210] 8021q: adding VLAN 0 to HW filter on device batadv0
[  466.335700][T14485] FAULT_INJECTION: forcing a failure.
[  466.335700][T14485] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  466.366904][T14485] CPU: 1 PID: 14485 Comm: syz.2.2447 Not tainted syzkaller #0
[  466.374412][T14485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  466.384493][T14485] Call Trace:
[  466.387786][T14485]  <TASK>
[  466.390735][T14485]  dump_stack_lvl+0x18c/0x250
[  466.395436][T14485]  ? show_regs_print_info+0x20/0x20
[  466.400652][T14485]  ? load_image+0x420/0x420
[  466.405175][T14485]  ? __might_fault+0xaa/0x120
[  466.409871][T14485]  ? __lock_acquire+0x7d40/0x7d40
[  466.414919][T14485]  should_fail_ex+0x39d/0x4d0
[  466.419624][T14485]  _copy_from_user+0x2f/0xe0
[  466.424236][T14485]  __sys_bpf+0x23e/0x890
[  466.428505][T14485]  ? bpf_link_show_fdinfo+0x390/0x390
[  466.433909][T14485]  ? lock_chain_count+0x20/0x20
[  466.438787][T14485]  __x64_sys_bpf+0x7c/0x90
[  466.443220][T14485]  do_syscall_64+0x55/0xb0
[  466.447659][T14485]  ? clear_bhb_loop+0x40/0x90
[  466.452361][T14485]  ? clear_bhb_loop+0x40/0x90
[  466.457073][T14485]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  466.462995][T14485] RIP: 0033:0x7f183899ce59
[  466.467429][T14485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  466.487057][T14485] RSP: 002b:00007f1839774028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  466.495466][T14485] RAX: ffffffffffffffda RBX: 00007f1838c15fa0 RCX: 00007f183899ce59
[  466.503429][T14485] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a
[  466.511392][T14485] RBP: 00007f1839774090 R08: 0000000000000000 R09: 0000000000000000
[  466.519360][T14485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  466.527346][T14485] R13: 00007f1838c16038 R14: 00007f1838c15fa0 R15: 00007fff9274d238
[  466.535331][T14485]  </TASK>
[  466.555281][T14210] veth0_vlan: entered promiscuous mode
[  466.568503][T14210] veth1_vlan: entered promiscuous mode
[  466.602037][T14491] netlink: 'syz.0.2448': attribute type 29 has an invalid length.
[  466.613137][T14210] veth0_macvtap: entered promiscuous mode
[  466.630533][T14491] netlink: 'syz.0.2448': attribute type 29 has an invalid length.
[  466.665147][T14489] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.2448'.
[  466.690066][T14210] veth1_macvtap: entered promiscuous mode
[  466.808795][T14492] netlink: 'syz.0.2448': attribute type 39 has an invalid length.
[  466.924162][T14210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  466.930262][T14500] netlink: 'syz.2.2450': attribute type 29 has an invalid length.
[  466.952155][T14210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  466.968520][T14210] batman_adv: batadv0: Interface activated: batadv_slave_0
[  466.988375][T14500] netlink: 'syz.2.2450': attribute type 29 has an invalid length.
[  467.021671][T14501] netlink: 'syz.2.2450': attribute type 29 has an invalid length.
[  467.057772][T14210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  467.073504][T14210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  467.090787][T14210] batman_adv: batadv0: Interface activated: batadv_slave_1
[  467.112793][T14210] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  467.125866][T14210] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  467.134755][T14210] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  467.145915][T14210] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  467.376253][ T9037] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  467.401241][ T9037] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  467.544690][T10165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  467.570539][T10165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  467.662961][T14509] netlink: 'syz.1.2452': attribute type 29 has an invalid length.
[  467.710261][T14509] netlink: 'syz.1.2452': attribute type 29 has an invalid length.
[  467.747800][T14512] netlink: 'syz.1.2452': attribute type 29 has an invalid length.
[  467.867957][T14514] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2379'.
[  467.914036][T14514] ipvlan1: entered promiscuous mode
[  467.920111][T14514] ipvlan1: entered allmulticast mode
[  467.942282][T14514] veth0_vlan: entered allmulticast mode
[  467.978652][T14514] bridge0: port 3(ipvlan1) entered blocking state
[  468.000868][T14514] bridge0: port 3(ipvlan1) entered disabled state
[  468.060746][T14514] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  468.245890][T14524] FAULT_INJECTION: forcing a failure.
[  468.245890][T14524] name failslab, interval 1, probability 0, space 0, times 1
[  468.302497][T14524] CPU: 1 PID: 14524 Comm: syz.0.2458 Not tainted syzkaller #0
[  468.310016][T14524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  468.320083][T14524] Call Trace:
[  468.323365][T14524]  <TASK>
[  468.326295][T14524]  dump_stack_lvl+0x18c/0x250
[  468.330975][T14524]  ? show_regs_print_info+0x20/0x20
[  468.336174][T14524]  ? load_image+0x420/0x420
[  468.340677][T14524]  ? __might_sleep+0xe0/0xe0
[  468.345306][T14524]  ? __lock_acquire+0x7d40/0x7d40
[  468.350332][T14524]  ? verify_lock_unused+0x140/0x140
[  468.355533][T14524]  should_fail_ex+0x39d/0x4d0
[  468.360225][T14524]  should_failslab+0x9/0x20
[  468.364729][T14524]  slab_pre_alloc_hook+0x59/0x310
[  468.369811][T14524]  ? bpf_prog_test_run_skb+0x245/0x18c0
[  468.375405][T14524]  ? bpf_prog_test_run_skb+0x245/0x18c0
[  468.380946][T14524]  __kmem_cache_alloc_node+0x53/0x250
[  468.386319][T14524]  ? bpf_prog_test_run_skb+0x245/0x18c0
[  468.391863][T14524]  __kmalloc+0xa4/0x230
[  468.396022][T14524]  bpf_prog_test_run_skb+0x245/0x18c0
[  468.401396][T14524]  ? __fget_files+0x28/0x4b0
[  468.406006][T14524]  ? __fget_files+0x28/0x4b0
[  468.410600][T14524]  ? __fget_files+0x43d/0x4b0
[  468.415283][T14524]  ? cpu_online+0x60/0x60
[  468.419611][T14524]  bpf_prog_test_run+0x321/0x390
[  468.424548][T14524]  __sys_bpf+0x49d/0x890
[  468.428791][T14524]  ? bpf_link_show_fdinfo+0x390/0x390
[  468.434171][T14524]  ? lock_chain_count+0x20/0x20
[  468.439021][T14524]  __x64_sys_bpf+0x7c/0x90
[  468.443453][T14524]  do_syscall_64+0x55/0xb0
[  468.447889][T14524]  ? clear_bhb_loop+0x40/0x90
[  468.452586][T14524]  ? clear_bhb_loop+0x40/0x90
[  468.457274][T14524]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  468.463173][T14524] RIP: 0033:0x7f1d1af9ce59
[  468.467597][T14524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  468.487228][T14524] RSP: 002b:00007f1d1bdf5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  468.495643][T14524] RAX: ffffffffffffffda RBX: 00007f1d1b215fa0 RCX: 00007f1d1af9ce59
[  468.503613][T14524] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a
[  468.511582][T14524] RBP: 00007f1d1bdf5090 R08: 0000000000000000 R09: 0000000000000000
[  468.519556][T14524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  468.527525][T14524] R13: 00007f1d1b216038 R14: 00007f1d1b215fa0 R15: 00007ffdb1225928
[  468.535501][T14524]  </TASK>
[  468.580838][T14525] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2459'.
[  468.699060][T14525] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2459'.
[  468.854378][ T5778] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  468.881683][ T5778] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  468.891489][ T5778] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  468.919413][ T5778] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  468.935285][ T5778] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  468.945794][ T5778] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  469.030562][T14542] validate_nla: 2 callbacks suppressed
[  469.030581][T14542] netlink: 'syz.3.2465': attribute type 3 has an invalid length.
[  469.065678][T14542] netlink: 201336 bytes leftover after parsing attributes in process `syz.3.2465'.
[  469.485849][T14551] FAULT_INJECTION: forcing a failure.
[  469.485849][T14551] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  469.499388][T14551] CPU: 0 PID: 14551 Comm: syz.1.2468 Not tainted syzkaller #0
[  469.506878][T14551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  469.516940][T14551] Call Trace:
[  469.520214][T14551]  <TASK>
[  469.523140][T14551]  dump_stack_lvl+0x18c/0x250
[  469.527830][T14551]  ? show_regs_print_info+0x20/0x20
[  469.533045][T14551]  ? load_image+0x420/0x420
[  469.537555][T14551]  ? __lock_acquire+0x7d40/0x7d40
[  469.542580][T14551]  ? __virt_addr_valid+0x18c/0x540
[  469.547716][T14551]  should_fail_ex+0x39d/0x4d0
[  469.552403][T14551]  _copy_from_user+0x2f/0xe0
[  469.556997][T14551]  bpf_prog_test_run_skb+0x26c/0x18c0
[  469.562395][T14551]  ? __fget_files+0x28/0x4b0
[  469.566992][T14551]  ? __fget_files+0x28/0x4b0
[  469.571587][T14551]  ? __fget_files+0x43d/0x4b0
[  469.576272][T14551]  ? cpu_online+0x60/0x60
[  469.580609][T14551]  bpf_prog_test_run+0x321/0x390
[  469.585559][T14551]  __sys_bpf+0x49d/0x890
[  469.589808][T14551]  ? bpf_link_show_fdinfo+0x390/0x390
[  469.595201][T14551]  ? lock_chain_count+0x20/0x20
[  469.600075][T14551]  __x64_sys_bpf+0x7c/0x90
[  469.604485][T14551]  do_syscall_64+0x55/0xb0
[  469.608903][T14551]  ? clear_bhb_loop+0x40/0x90
[  469.613578][T14551]  ? clear_bhb_loop+0x40/0x90
[  469.618255][T14551]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  469.624148][T14551] RIP: 0033:0x7f193959ce59
[  469.628564][T14551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  469.648170][T14551] RSP: 002b:00007f193a4d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  469.656584][T14551] RAX: ffffffffffffffda RBX: 00007f1939815fa0 RCX: 00007f193959ce59
[  469.664551][T14551] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a
[  469.672517][T14551] RBP: 00007f193a4d9090 R08: 0000000000000000 R09: 0000000000000000
[  469.680483][T14551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  469.688449][T14551] R13: 00007f1939816038 R14: 00007f1939815fa0 R15: 00007ffcb63125f8
[  469.696431][T14551]  </TASK>
[  469.766977][T14547] C: renamed from team_slave_0 (while UP)
[  469.769881][T14542] netlink: 'syz.3.2465': attribute type 10 has an invalid length.
[  469.781650][T14542] netlink: 209280 bytes leftover after parsing attributes in process `syz.3.2465'.
[  469.792947][T14542] openvswitch: netlink: Flow key attr not present in new flow.
[  469.829969][T14547] netlink: 'syz.0.2467': attribute type 4 has an invalid length.
[  469.852023][T14547] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2467'.
[  469.867487][T14547] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  470.062931][T14561] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2471'.
[  470.082028][T14561] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  470.222400][T14535] chnl_net:caif_netlink_parms(): no params data found
[  470.468955][T14583] FAULT_INJECTION: forcing a failure.
[  470.468955][T14583] name failslab, interval 1, probability 0, space 0, times 0
[  470.481947][T14583] CPU: 1 PID: 14583 Comm: syz.1.2477 Not tainted syzkaller #0
[  470.489435][T14583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  470.499513][T14583] Call Trace:
[  470.502795][T14583]  <TASK>
[  470.505719][T14583]  dump_stack_lvl+0x18c/0x250
[  470.510423][T14583]  ? show_regs_print_info+0x20/0x20
[  470.515631][T14583]  ? load_image+0x420/0x420
[  470.520138][T14583]  ? __might_sleep+0xe0/0xe0
[  470.524728][T14583]  ? __lock_acquire+0x7d40/0x7d40
[  470.529758][T14583]  should_fail_ex+0x39d/0x4d0
[  470.534459][T14583]  should_failslab+0x9/0x20
[  470.538976][T14583]  slab_pre_alloc_hook+0x59/0x310
[  470.544008][T14583]  ? sk_prot_alloc+0xe7/0x210
[  470.548702][T14583]  ? sk_prot_alloc+0xe7/0x210
[  470.553400][T14583]  __kmem_cache_alloc_node+0x53/0x250
[  470.558784][T14583]  ? sk_prot_alloc+0xe7/0x210
[  470.563460][T14583]  __kmalloc+0xa4/0x230
[  470.567619][T14583]  sk_prot_alloc+0xe7/0x210
[  470.572125][T14583]  ? sk_alloc+0x24/0x360
[  470.576368][T14583]  sk_alloc+0x3a/0x360
[  470.580440][T14583]  ? bpf_ctx_init+0x163/0x1a0
[  470.585132][T14583]  ? bpf_prog_test_run_skb+0x279/0x18c0
[  470.590691][T14583]  bpf_prog_test_run_skb+0x3d1/0x18c0
[  470.596070][T14583]  ? __fget_files+0x28/0x4b0
[  470.600662][T14583]  ? __fget_files+0x43d/0x4b0
[  470.605350][T14583]  ? cpu_online+0x60/0x60
[  470.609684][T14583]  bpf_prog_test_run+0x321/0x390
[  470.614623][T14583]  __sys_bpf+0x49d/0x890
[  470.618865][T14583]  ? bpf_link_show_fdinfo+0x390/0x390
[  470.624254][T14583]  ? lock_chain_count+0x20/0x20
[  470.629108][T14583]  __x64_sys_bpf+0x7c/0x90
[  470.633522][T14583]  do_syscall_64+0x55/0xb0
[  470.637936][T14583]  ? clear_bhb_loop+0x40/0x90
[  470.642613][T14583]  ? clear_bhb_loop+0x40/0x90
[  470.647290][T14583]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  470.653183][T14583] RIP: 0033:0x7f193959ce59
[  470.657592][T14583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  470.677194][T14583] RSP: 002b:00007f193a4d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  470.685603][T14583] RAX: ffffffffffffffda RBX: 00007f1939815fa0 RCX: 00007f193959ce59
[  470.693567][T14583] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a
[  470.701529][T14583] RBP: 00007f193a4d9090 R08: 0000000000000000 R09: 0000000000000000
[  470.709500][T14583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  470.717468][T14583] R13: 00007f1939816038 R14: 00007f1939815fa0 R15: 00007ffcb63125f8
[  470.725445][T14583]  </TASK>
[  471.035996][ T5783] Bluetooth: hci2: command tx timeout
[  471.093014][T14587] netlink: 'syz.0.2478': attribute type 4 has an invalid length.
[  471.193528][T14535] bridge0: port 1(bridge_slave_0) entered blocking state
[  471.208173][T14535] bridge0: port 1(bridge_slave_0) entered disabled state
[  471.225359][T14535] bridge_slave_0: entered allmulticast mode
[  471.236307][T14535] bridge_slave_0: entered promiscuous mode
[  471.515563][T14535] bridge0: port 2(bridge_slave_1) entered blocking state
[  471.522739][T14535] bridge0: port 2(bridge_slave_1) entered disabled state
[  471.557203][T14535] bridge_slave_1: entered allmulticast mode
[  471.564526][T14535] bridge_slave_1: entered promiscuous mode
[  471.798979][T14535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  471.813269][T14617] FAULT_INJECTION: forcing a failure.
[  471.813269][T14617] name failslab, interval 1, probability 0, space 0, times 0
[  471.833115][T14535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  471.842863][T14617] CPU: 0 PID: 14617 Comm: syz.3.2487 Not tainted syzkaller #0
[  471.850351][T14617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  471.860421][T14617] Call Trace:
[  471.863713][T14617]  <TASK>
[  471.866662][T14617]  dump_stack_lvl+0x18c/0x250
[  471.871356][T14617]  ? show_regs_print_info+0x20/0x20
[  471.876567][T14617]  ? load_image+0x420/0x420
[  471.881080][T14617]  ? __might_sleep+0xe0/0xe0
[  471.885686][T14617]  ? __lock_acquire+0x7d40/0x7d40
[  471.890731][T14617]  should_fail_ex+0x39d/0x4d0
[  471.895431][T14617]  should_failslab+0x9/0x20
[  471.899947][T14617]  slab_pre_alloc_hook+0x59/0x310
[  471.904993][T14617]  ? apparmor_sk_alloc_security+0x77/0x100
[  471.910809][T14617]  __kmem_cache_alloc_node+0x53/0x250
[  471.916190][T14617]  ? apparmor_sk_alloc_security+0x77/0x100
[  471.921996][T14617]  kmalloc_trace+0x2a/0xe0
[  471.926410][T14617]  apparmor_sk_alloc_security+0x77/0x100
[  471.932043][T14617]  security_sk_alloc+0x6e/0xa0
[  471.936803][T14617]  sk_prot_alloc+0x101/0x210
[  471.941395][T14617]  ? sk_alloc+0x24/0x360
[  471.945638][T14617]  sk_alloc+0x3a/0x360
[  471.949701][T14617]  ? bpf_ctx_init+0x163/0x1a0
[  471.954369][T14617]  ? bpf_prog_test_run_skb+0x279/0x18c0
[  471.960017][T14617]  bpf_prog_test_run_skb+0x3d1/0x18c0
[  471.965404][T14617]  ? __fget_files+0x28/0x4b0
[  471.969993][T14617]  ? __fget_files+0x43d/0x4b0
[  471.974676][T14617]  ? cpu_online+0x60/0x60
[  471.979008][T14617]  bpf_prog_test_run+0x321/0x390
[  471.983949][T14617]  __sys_bpf+0x49d/0x890
[  471.988202][T14617]  ? bpf_link_show_fdinfo+0x390/0x390
[  471.993586][T14617]  ? lock_chain_count+0x20/0x20
[  471.998436][T14617]  __x64_sys_bpf+0x7c/0x90
[  472.002844][T14617]  do_syscall_64+0x55/0xb0
[  472.007258][T14617]  ? clear_bhb_loop+0x40/0x90
[  472.011931][T14617]  ? clear_bhb_loop+0x40/0x90
[  472.016606][T14617]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  472.022500][T14617] RIP: 0033:0x7f2b6539ce59
[  472.026915][T14617] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  472.046511][T14617] RSP: 002b:00007f2b661ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  472.054916][T14617] RAX: ffffffffffffffda RBX: 00007f2b65615fa0 RCX: 00007f2b6539ce59
[  472.062881][T14617] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a
[  472.070842][T14617] RBP: 00007f2b661ed090 R08: 0000000000000000 R09: 0000000000000000
[  472.078806][T14617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  472.086774][T14617] R13: 00007f2b65616038 R14: 00007f2b65615fa0 R15: 00007ffd014b6b38
[  472.094755][T14617]  </TASK>
[  472.127397][T14535] team0: Port device team_slave_0 added
[  472.136632][T14535] team0: Port device team_slave_1 added
[  472.172998][T14535] batman_adv: batadv0: Adding interface: batadv_slave_0
[  472.197179][T14535] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  472.231854][T14535] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  472.351468][T14535] batman_adv: batadv0: Adding interface: batadv_slave_1
[  472.365157][T14535] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  472.411343][T14535] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  472.621900][T14535] hsr_slave_0: entered promiscuous mode
[  472.640044][T14535] hsr_slave_1: entered promiscuous mode
[  472.658988][T14535] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  472.675173][T14535] Cannot create hsr debugfs directory
[  472.935746][T14658] FAULT_INJECTION: forcing a failure.
[  472.935746][T14658] name failslab, interval 1, probability 0, space 0, times 0
[  472.976305][T14658] CPU: 0 PID: 14658 Comm: syz.3.2498 Not tainted syzkaller #0
[  472.983813][T14658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  472.993889][T14658] Call Trace:
[  472.997184][T14658]  <TASK>
[  473.000133][T14658]  dump_stack_lvl+0x18c/0x250
[  473.004850][T14658]  ? show_regs_print_info+0x20/0x20
[  473.010073][T14658]  ? load_image+0x420/0x420
[  473.014598][T14658]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  473.020613][T14658]  ? __asan_memset+0x22/0x40
[  473.025232][T14658]  should_fail_ex+0x39d/0x4d0
[  473.029932][T14658]  should_failslab+0x9/0x20
[  473.034440][T14658]  slab_pre_alloc_hook+0x59/0x310
[  473.039474][T14658]  kmem_cache_alloc+0x5a/0x2d0
[  473.044239][T14658]  ? slab_build_skb+0x2b/0x3f0
[  473.049038][T14658]  slab_build_skb+0x2b/0x3f0
[  473.053631][T14658]  bpf_prog_test_run_skb+0x3ef/0x18c0
[  473.059009][T14658]  ? __fget_files+0x28/0x4b0
[  473.063598][T14658]  ? __fget_files+0x43d/0x4b0
[  473.068285][T14658]  ? cpu_online+0x60/0x60
[  473.072619][T14658]  bpf_prog_test_run+0x321/0x390
[  473.077556][T14658]  __sys_bpf+0x49d/0x890
[  473.081801][T14658]  ? bpf_link_show_fdinfo+0x390/0x390
[  473.087179][T14658]  ? lock_chain_count+0x20/0x20
[  473.092036][T14658]  __x64_sys_bpf+0x7c/0x90
[  473.096449][T14658]  do_syscall_64+0x55/0xb0
[  473.100861][T14658]  ? clear_bhb_loop+0x40/0x90
[  473.105535][T14658]  ? clear_bhb_loop+0x40/0x90
[  473.110211][T14658]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  473.116103][T14658] RIP: 0033:0x7f2b6539ce59
[  473.120516][T14658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  473.140115][T14658] RSP: 002b:00007f2b661ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  473.148525][T14658] RAX: ffffffffffffffda RBX: 00007f2b65615fa0 RCX: 00007f2b6539ce59
[  473.156491][T14658] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a
[  473.164459][T14658] RBP: 00007f2b661ed090 R08: 0000000000000000 R09: 0000000000000000
[  473.172418][T14658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  473.180379][T14658] R13: 00007f2b65616038 R14: 00007f2b65615fa0 R15: 00007ffd014b6b38
[  473.188354][T14658]  </TASK>
[  473.208908][ T5783] Bluetooth: hci2: command tx timeout
[  473.901343][T14683] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.2507'.
[  473.953603][T14686] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2507'.
[  473.977799][T14686] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  474.704166][T14535] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  474.735653][T14535] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  474.764150][T14535] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  474.802641][T14535] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  474.935361][T14713] netlink: 'syz.1.2511': attribute type 4 has an invalid length.
[  474.958960][T14713] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2511'.
[  475.197933][T14723] FAULT_INJECTION: forcing a failure.
[  475.197933][T14723] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  475.241627][T14723] CPU: 0 PID: 14723 Comm: syz.1.2514 Not tainted syzkaller #0
[  475.249128][T14723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  475.259175][T14723] Call Trace:
[  475.262448][T14723]  <TASK>
[  475.265372][T14723]  dump_stack_lvl+0x18c/0x250
[  475.270050][T14723]  ? show_regs_print_info+0x20/0x20
[  475.275244][T14723]  ? load_image+0x420/0x420
[  475.279749][T14723]  ? __might_fault+0xaa/0x120
[  475.284417][T14723]  ? __lock_acquire+0x7d40/0x7d40
[  475.289437][T14723]  should_fail_ex+0x39d/0x4d0
[  475.294113][T14723]  _copy_to_user+0x2f/0xa0
[  475.298525][T14723]  bpf_test_finish+0x19f/0x650
[  475.303287][T14723]  ? dst_hold+0x70/0x70
[  475.307436][T14723]  ? convert_skb_to___skb+0x420/0x420
[  475.312805][T14723]  ? slab_build_skb+0x25f/0x3f0
[  475.317647][T14723]  bpf_prog_test_run_skb+0x1122/0x18c0
[  475.323113][T14723]  ? cpu_online+0x60/0x60
[  475.327437][T14723]  bpf_prog_test_run+0x321/0x390
[  475.332367][T14723]  __sys_bpf+0x49d/0x890
[  475.336601][T14723]  ? bpf_link_show_fdinfo+0x390/0x390
[  475.341974][T14723]  ? lock_chain_count+0x20/0x20
[  475.346823][T14723]  __x64_sys_bpf+0x7c/0x90
[  475.351228][T14723]  do_syscall_64+0x55/0xb0
[  475.355636][T14723]  ? clear_bhb_loop+0x40/0x90
[  475.360310][T14723]  ? clear_bhb_loop+0x40/0x90
[  475.364982][T14723]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  475.370872][T14723] RIP: 0033:0x7f193959ce59
[  475.375280][T14723] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  475.394875][T14723] RSP: 002b:00007f193a4d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  475.403278][T14723] RAX: ffffffffffffffda RBX: 00007f1939815fa0 RCX: 00007f193959ce59
[  475.411239][T14723] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a
[  475.419207][T14723] RBP: 00007f193a4d9090 R08: 0000000000000000 R09: 0000000000000000
[  475.427168][T14723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  475.435132][T14723] R13: 00007f1939816038 R14: 00007f1939815fa0 R15: 00007ffcb63125f8
[  475.443115][T14723]  </TASK>
[  475.457089][T14535] 8021q: adding VLAN 0 to HW filter on device bond0
[  475.485180][ T5783] Bluetooth: hci2: command tx timeout
[  475.554564][T14535] 8021q: adding VLAN 0 to HW filter on device team0
[  475.681872][T10165] bridge0: port 1(bridge_slave_0) entered blocking state
[  475.689083][T10165] bridge0: port 1(bridge_slave_0) entered forwarding state
[  475.759253][T14727] netlink: 'syz.1.2518': attribute type 2 has an invalid length.
[  475.795236][T14727] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.2518'.
[  475.894832][T10182] bridge0: port 2(bridge_slave_1) entered blocking state
[  475.902070][T10182] bridge0: port 2(bridge_slave_1) entered forwarding state
[  476.004000][T10167] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  476.033724][T10167] batman_adv: batadv0: Removing interface: batadv_slave_0
[  477.109214][T14776] FAULT_INJECTION: forcing a failure.
[  477.109214][T14776] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  477.143163][T14776] CPU: 1 PID: 14776 Comm: syz.1.2526 Not tainted syzkaller #0
[  477.150675][T14776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  477.160760][T14776] Call Trace:
[  477.164053][T14776]  <TASK>
[  477.166997][T14776]  dump_stack_lvl+0x18c/0x250
[  477.171703][T14776]  ? show_regs_print_info+0x20/0x20
[  477.176930][T14776]  ? load_image+0x420/0x420
[  477.181453][T14776]  ? __might_fault+0xaa/0x120
[  477.186150][T14776]  ? __lock_acquire+0x7d40/0x7d40
[  477.191200][T14776]  should_fail_ex+0x39d/0x4d0
[  477.195912][T14776]  _copy_to_user+0x2f/0xa0
[  477.200349][T14776]  bpf_test_finish+0x25a/0x650
[  477.205140][T14776]  ? dst_hold+0x70/0x70
[  477.209324][T14776]  ? convert_skb_to___skb+0x420/0x420
[  477.214723][T14776]  ? slab_build_skb+0x25f/0x3f0
[  477.219594][T14776]  bpf_prog_test_run_skb+0x1122/0x18c0
[  477.225093][T14776]  ? cpu_online+0x60/0x60
[  477.229444][T14776]  bpf_prog_test_run+0x321/0x390
[  477.234404][T14776]  __sys_bpf+0x49d/0x890
[  477.238669][T14776]  ? bpf_link_show_fdinfo+0x390/0x390
[  477.244071][T14776]  ? lock_chain_count+0x20/0x20
[  477.248971][T14776]  __x64_sys_bpf+0x7c/0x90
[  477.253412][T14776]  do_syscall_64+0x55/0xb0
[  477.257844][T14776]  ? clear_bhb_loop+0x40/0x90
[  477.262547][T14776]  ? clear_bhb_loop+0x40/0x90
[  477.267249][T14776]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  477.273166][T14776] RIP: 0033:0x7f193959ce59
[  477.277594][T14776] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  477.297216][T14776] RSP: 002b:00007f193a4d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  477.305651][T14776] RAX: ffffffffffffffda RBX: 00007f1939815fa0 RCX: 00007f193959ce59
[  477.313642][T14776] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a
[  477.321629][T14776] RBP: 00007f193a4d9090 R08: 0000000000000000 R09: 0000000000000000
[  477.329614][T14776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  477.337597][T14776] R13: 00007f1939816038 R14: 00007f1939815fa0 R15: 00007ffcb63125f8
[  477.345684][T14776]  </TASK>
[  477.411476][T10167] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  477.424827][T10167] bond_slave_1 (unregistering): left promiscuous mode
[  477.446030][T10167] bond_slave_1 (unregistering): left allmulticast mode
[  477.527258][ T5783] Bluetooth: hci2: command tx timeout
[  477.835449][T14782] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.2527'.
[  478.250836][T10167] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  478.260778][T10167] batadv0 (unregistering): left promiscuous mode
[  478.269319][T10167] batadv0 (unregistering): left allmulticast mode
[  478.316778][T10167] bond0 (unregistering): Released all slaves
[  478.955033][T14535] 8021q: adding VLAN 0 to HW filter on device batadv0
[  479.084317][T14535] veth0_vlan: entered promiscuous mode
[  479.111813][T14535] veth1_vlan: entered promiscuous mode
[  479.262103][T14535] veth0_macvtap: entered promiscuous mode
[  479.288582][T14535] veth1_macvtap: entered promiscuous mode
[  479.341820][T14535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  479.377189][T14535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  479.398570][T14535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  479.431601][T14535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  479.472250][T14535] batman_adv: batadv0: Interface activated: batadv_slave_0
[  479.511889][T14535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  479.535228][T14535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  479.539183][T14836] FAULT_INJECTION: forcing a failure.
[  479.539183][T14836] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  479.564515][T14535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  479.578843][T14836] CPU: 0 PID: 14836 Comm: syz.0.2536 Not tainted syzkaller #0
[  479.585111][T14535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  479.586320][T14836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  479.606199][T14836] Call Trace:
[  479.606877][T14535] batman_adv: batadv0: Interface activated: batadv_slave_1
[  479.609474][T14836]  <TASK>
[  479.609484][T14836]  dump_stack_lvl+0x18c/0x250
[  479.624284][T14836]  ? show_regs_print_info+0x20/0x20
[  479.629304][T14535] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  479.629488][T14836]  ? load_image+0x420/0x420
[  479.642672][T14836]  ? __might_fault+0xaa/0x120
[  479.645540][T14535] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  479.647350][T14836]  ? __lock_acquire+0x7d40/0x7d40
[  479.661045][T14836]  should_fail_ex+0x39d/0x4d0
[  479.664340][T14535] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  479.665737][T14836]  _copy_to_user+0x2f/0xa0
[  479.665763][T14836]  bpf_test_finish+0x4e7/0x650
[  479.665791][T14836]  ? dst_hold+0x70/0x70
[  479.665810][T14836]  ? convert_skb_to___skb+0x420/0x420
[  479.665836][T14836]  ? slab_build_skb+0x25f/0x3f0
[  479.665856][T14836]  bpf_prog_test_run_skb+0x1122/0x18c0
[  479.665896][T14836]  ? cpu_online+0x60/0x60
[  479.665917][T14836]  bpf_prog_test_run+0x321/0x390
[  479.665939][T14836]  __sys_bpf+0x49d/0x890
[  479.665957][T14836]  ? bpf_link_show_fdinfo+0x390/0x390
[  479.683900][T14535] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  479.687900][T14836]  ? lock_chain_count+0x20/0x20
[  479.687932][T14836]  __x64_sys_bpf+0x7c/0x90
[  479.687952][T14836]  do_syscall_64+0x55/0xb0
[  479.687970][T14836]  ? clear_bhb_loop+0x40/0x90
[  479.749487][T14836]  ? clear_bhb_loop+0x40/0x90
[  479.754194][T14836]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  479.760109][T14836] RIP: 0033:0x7f1d1af9ce59
[  479.764541][T14836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  479.784163][T14836] RSP: 002b:00007f1d1bdf5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  479.792599][T14836] RAX: ffffffffffffffda RBX: 00007f1d1b215fa0 RCX: 00007f1d1af9ce59
[  479.800562][T14836] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a
[  479.808525][T14836] RBP: 00007f1d1bdf5090 R08: 0000000000000000 R09: 0000000000000000
[  479.816492][T14836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  479.824470][T14836] R13: 00007f1d1b216038 R14: 00007f1d1b215fa0 R15: 00007ffdb1225928
[  479.832440][T14836]  </TASK>
[  480.060552][T10168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  480.089835][T10168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  480.130719][T10167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  480.139569][T10167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  480.150767][T14847] netlink: 'syz.0.2538': attribute type 1 has an invalid length.
[  481.109806][ T5778] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  481.135388][ T5778] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  481.143840][ T5778] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  481.154123][ T5778] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  481.163360][ T5778] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  481.172992][ T5778] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  481.320430][T14880] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.2546'.
[  481.354638][T14883] FAULT_INJECTION: forcing a failure.
[  481.354638][T14883] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  481.373122][ T9032] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  481.391406][T14883] CPU: 1 PID: 14883 Comm: syz.2.2547 Not tainted syzkaller #0
[  481.398909][T14883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  481.408985][T14883] Call Trace:
[  481.412303][T14883]  <TASK>
[  481.415249][T14883]  dump_stack_lvl+0x18c/0x250
[  481.419944][T14883]  ? show_regs_print_info+0x20/0x20
[  481.425139][T14883]  ? load_image+0x420/0x420
[  481.429633][T14883]  ? __lock_acquire+0x7d40/0x7d40
[  481.434658][T14883]  ? snprintf+0xe9/0x140
[  481.438929][T14883]  should_fail_ex+0x39d/0x4d0
[  481.443611][T14883]  _copy_to_user+0x2f/0xa0
[  481.448022][T14883]  simple_read_from_buffer+0xe7/0x150
[  481.453399][T14883]  proc_fail_nth_read+0x1e8/0x260
[  481.458425][T14883]  ? proc_fault_inject_write+0x360/0x360
[  481.464058][T14883]  ? fsnotify_perm+0x271/0x5e0
[  481.468815][T14883]  ? proc_fault_inject_write+0x360/0x360
[  481.474448][T14883]  vfs_read+0x28b/0x970
[  481.478607][T14883]  ? kernel_read+0x1e0/0x1e0
[  481.483201][T14883]  ? __fget_files+0x28/0x4b0
[  481.487793][T14883]  ? __fget_files+0x28/0x4b0
[  481.492384][T14883]  ? __fget_files+0x43d/0x4b0
[  481.497066][T14883]  ? __fdget_pos+0x2a3/0x330
[  481.501649][T14883]  ? ksys_read+0x75/0x260
[  481.505977][T14883]  ksys_read+0x150/0x260
[  481.510220][T14883]  ? vfs_write+0x990/0x990
[  481.514634][T14883]  ? lockdep_hardirqs_on+0x98/0x150
[  481.519833][T14883]  do_syscall_64+0x55/0xb0
[  481.524242][T14883]  ? clear_bhb_loop+0x40/0x90
[  481.528916][T14883]  ? clear_bhb_loop+0x40/0x90
[  481.533589][T14883]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  481.539481][T14883] RIP: 0033:0x7f530375d68e
[  481.543889][T14883] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  481.563500][T14883] RSP: 002b:00007f5304654fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  481.571917][T14883] RAX: ffffffffffffffda RBX: 00007f53046556c0 RCX: 00007f530375d68e
[  481.579889][T14883] RDX: 000000000000000f RSI: 00007f53046550a0 RDI: 0000000000000004
[  481.587951][T14883] RBP: 00007f5304655090 R08: 0000000000000000 R09: 0000000000000000
[  481.595917][T14883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  481.603883][T14883] R13: 00007f5303a16038 R14: 00007f5303a15fa0 R15: 00007ffdda86a908
[  481.611864][T14883]  </TASK>
[  481.630191][T14884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  481.734391][ T9032] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  483.275413][ T5783] Bluetooth: hci0: command tx timeout
[  483.330871][ T9032] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  483.356031][T14873] chnl_net:caif_netlink_parms(): no params data found
[  483.441692][T14910] FAULT_INJECTION: forcing a failure.
[  483.441692][T14910] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  483.455884][T14910] CPU: 1 PID: 14910 Comm: syz.3.2555 Not tainted syzkaller #0
[  483.463378][T14910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  483.473454][T14910] Call Trace:
[  483.476753][T14910]  <TASK>
[  483.479706][T14910]  dump_stack_lvl+0x18c/0x250
[  483.484419][T14910]  ? show_regs_print_info+0x20/0x20
[  483.489641][T14910]  ? load_image+0x420/0x420
[  483.494176][T14910]  ? __might_fault+0xaa/0x120
[  483.498880][T14910]  ? __lock_acquire+0x7d40/0x7d40
[  483.503934][T14910]  should_fail_ex+0x39d/0x4d0
[  483.508639][T14910]  _copy_from_user+0x2f/0xe0
[  483.513246][T14910]  __sys_bpf+0x23e/0x890
[  483.517501][T14910]  ? bpf_link_show_fdinfo+0x390/0x390
[  483.522891][T14910]  ? lock_chain_count+0x20/0x20
[  483.527758][T14910]  __x64_sys_bpf+0x7c/0x90
[  483.532175][T14910]  do_syscall_64+0x55/0xb0
[  483.536593][T14910]  ? clear_bhb_loop+0x40/0x90
[  483.541284][T14910]  ? clear_bhb_loop+0x40/0x90
[  483.545965][T14910]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  483.551858][T14910] RIP: 0033:0x7f2b6539ce59
[  483.556273][T14910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  483.575883][T14910] RSP: 002b:00007f2b661ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  483.584298][T14910] RAX: ffffffffffffffda RBX: 00007f2b65615fa0 RCX: 00007f2b6539ce59
[  483.592266][T14910] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a
[  483.600229][T14910] RBP: 00007f2b661ed090 R08: 0000000000000000 R09: 0000000000000000
[  483.608196][T14910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  483.616166][T14910] R13: 00007f2b65616038 R14: 00007f2b65615fa0 R15: 00007ffd014b6b38
[  483.624145][T14910]  </TASK>
[  483.681180][ T9032] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  483.886709][T14873] bridge0: port 1(bridge_slave_0) entered blocking state
[  483.893984][T14873] bridge0: port 1(bridge_slave_0) entered disabled state
[  483.901307][T14873] bridge_slave_0: entered allmulticast mode
[  483.912543][T14873] bridge_slave_0: entered promiscuous mode
[  483.931901][T14873] bridge0: port 2(bridge_slave_1) entered blocking state
[  483.940688][T14873] bridge0: port 2(bridge_slave_1) entered disabled state
[  483.957003][T14873] bridge_slave_1: entered allmulticast mode
[  483.979111][T14873] bridge_slave_1: entered promiscuous mode
[  483.989408][T14923] netlink: 'syz.3.2558': attribute type 27 has an invalid length.
[  484.031171][T14873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  484.043677][T14873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  484.198707][T14873] team0: Port device team_slave_0 added
[  484.249156][T14873] team0: Port device team_slave_1 added
[  484.347543][T14873] batman_adv: batadv0: Adding interface: batadv_slave_0
[  484.375032][T14873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  484.464290][T14873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  484.698544][T14948] FAULT_INJECTION: forcing a failure.
[  484.698544][T14948] name failslab, interval 1, probability 0, space 0, times 0
[  484.723423][T14948] CPU: 1 PID: 14948 Comm: syz.3.2565 Not tainted syzkaller #0
[  484.730955][T14948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  484.741035][T14948] Call Trace:
[  484.744337][T14948]  <TASK>
[  484.747286][T14948]  dump_stack_lvl+0x18c/0x250
[  484.751994][T14948]  ? show_regs_print_info+0x20/0x20
[  484.757221][T14948]  ? load_image+0x420/0x420
[  484.761758][T14948]  ? __might_sleep+0xe0/0xe0
[  484.766378][T14948]  ? __lock_acquire+0x7d40/0x7d40
[  484.771426][T14948]  ? verify_lock_unused+0x140/0x140
[  484.776653][T14948]  should_fail_ex+0x39d/0x4d0
[  484.781369][T14948]  should_failslab+0x9/0x20
[  484.785896][T14948]  slab_pre_alloc_hook+0x59/0x310
[  484.790946][T14948]  ? bpf_prog_test_run_skb+0x245/0x18c0
[  484.796518][T14948]  ? bpf_prog_test_run_skb+0x245/0x18c0
[  484.802097][T14948]  __kmem_cache_alloc_node+0x53/0x250
[  484.807504][T14948]  ? bpf_prog_test_run_skb+0x245/0x18c0
[  484.813079][T14948]  __kmalloc+0xa4/0x230
[  484.817272][T14948]  bpf_prog_test_run_skb+0x245/0x18c0
[  484.822675][T14948]  ? __fget_files+0x28/0x4b0
[  484.827292][T14948]  ? __fget_files+0x28/0x4b0
[  484.831908][T14948]  ? __fget_files+0x43d/0x4b0
[  484.836595][T14948]  ? cpu_online+0x60/0x60
[  484.840930][T14948]  bpf_prog_test_run+0x321/0x390
[  484.845870][T14948]  __sys_bpf+0x49d/0x890
[  484.850114][T14948]  ? bpf_link_show_fdinfo+0x390/0x390
[  484.855495][T14948]  ? lock_chain_count+0x20/0x20
[  484.860347][T14948]  __x64_sys_bpf+0x7c/0x90
[  484.864763][T14948]  do_syscall_64+0x55/0xb0
[  484.869175][T14948]  ? clear_bhb_loop+0x40/0x90
[  484.873849][T14948]  ? clear_bhb_loop+0x40/0x90
[  484.878531][T14948]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  484.884425][T14948] RIP: 0033:0x7f2b6539ce59
[  484.888837][T14948] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  484.908444][T14948] RSP: 002b:00007f2b661ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  484.916857][T14948] RAX: ffffffffffffffda RBX: 00007f2b65615fa0 RCX: 00007f2b6539ce59
[  484.924826][T14948] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a
[  484.932792][T14948] RBP: 00007f2b661ed090 R08: 0000000000000000 R09: 0000000000000000
[  484.940759][T14948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  484.948732][T14948] R13: 00007f2b65616038 R14: 00007f2b65615fa0 R15: 00007ffd014b6b38
[  484.956715][T14948]  </TASK>
[  485.021834][T14873] batman_adv: batadv0: Adding interface: batadv_slave_1
[  485.029081][T14873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  485.087541][T14873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  485.172816][T14956] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2566'.
[  485.284149][T14959] delete_channel: no stack
[  485.363924][ T5783] Bluetooth: hci0: command tx timeout
[  485.541334][T14873] hsr_slave_0: entered promiscuous mode
[  485.573814][T14873] hsr_slave_1: entered promiscuous mode
[  485.591588][T14873] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  485.612390][T14873] Cannot create hsr debugfs directory
[  485.824747][T14979] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2570'.
[  486.181452][ T9032] gretap0 (unregistering): left allmulticast mode
[  486.188627][ T9032] gretap0 (unregistering): left promiscuous mode
[  486.196359][ T9032] Ÿë
: port 1(gretap0) entered disabled state
[  486.402177][T15009] FAULT_INJECTION: forcing a failure.
[  486.402177][T15009] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  486.443233][T15009] CPU: 1 PID: 15009 Comm: syz.3.2575 Not tainted syzkaller #0
[  486.450769][T15009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  486.460866][T15009] Call Trace:
[  486.464180][T15009]  <TASK>
[  486.467153][T15009]  dump_stack_lvl+0x18c/0x250
[  486.471898][T15009]  ? show_regs_print_info+0x20/0x20
[  486.477157][T15009]  ? load_image+0x420/0x420
[  486.481728][T15009]  ? __lock_acquire+0x7d40/0x7d40
[  486.486808][T15009]  ? __virt_addr_valid+0x18c/0x540
[  486.491981][T15009]  should_fail_ex+0x39d/0x4d0
[  486.496736][T15009]  _copy_from_user+0x2f/0xe0
[  486.501375][T15009]  bpf_prog_test_run_skb+0x26c/0x18c0
[  486.506778][T15009]  ? __fget_files+0x28/0x4b0
[  486.511383][T15009]  ? __fget_files+0x28/0x4b0
[  486.515995][T15009]  ? __fget_files+0x43d/0x4b0
[  486.520718][T15009]  ? cpu_online+0x60/0x60
[  486.525084][T15009]  bpf_prog_test_run+0x321/0x390
[  486.530054][T15009]  __sys_bpf+0x49d/0x890
[  486.534320][T15009]  ? bpf_link_show_fdinfo+0x390/0x390
[  486.539745][T15009]  ? lock_chain_count+0x20/0x20
[  486.544632][T15009]  __x64_sys_bpf+0x7c/0x90
[  486.549076][T15009]  do_syscall_64+0x55/0xb0
[  486.553526][T15009]  ? clear_bhb_loop+0x40/0x90
[  486.558229][T15009]  ? clear_bhb_loop+0x40/0x90
[  486.562933][T15009]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  486.568854][T15009] RIP: 0033:0x7f2b6539ce59
[  486.573294][T15009] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  486.592923][T15009] RSP: 002b:00007f2b661ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  486.601360][T15009] RAX: ffffffffffffffda RBX: 00007f2b65615fa0 RCX: 00007f2b6539ce59
[  486.609345][T15009] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a
[  486.617334][T15009] RBP: 00007f2b661ed090 R08: 0000000000000000 R09: 0000000000000000
[  486.625320][T15009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  486.633337][T15009] R13: 00007f2b65616038 R14: 00007f2b65615fa0 R15: 00007ffd014b6b38
[  486.641358][T15009]  </TASK>
[  486.656962][T15011] ref_ctr_offset mismatch. inode: 0x42 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe
[  487.098930][T15002] bridge0: port 3(team0) entered blocking state
[  487.117741][T15002] bridge0: port 3(team0) entered disabled state
[  487.130034][T15002] team0: entered allmulticast mode
[  487.145948][T15002] team_slave_0: entered allmulticast mode
[  487.153817][T15002] team_slave_1: entered allmulticast mode
[  487.258934][T15002] team0: entered promiscuous mode
[  487.264543][T15002] team_slave_0: entered promiscuous mode
[  487.278596][T15002] team_slave_1: entered promiscuous mode
[  487.308555][T15002] bridge0: port 3(team0) entered blocking state
[  487.318530][T15002] bridge0: port 3(team0) entered forwarding state
[  487.435768][ T5783] Bluetooth: hci0: command tx timeout
[  488.337512][T15051] netlink: 194488 bytes leftover after parsing attributes in process `syz.2.2582'.
[  488.413453][T15049] netlink: 206468 bytes leftover after parsing attributes in process `syz.0.2583'.
[  488.431012][T15049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2583'.
[  488.544628][T15057] FAULT_INJECTION: forcing a failure.
[  488.544628][T15057] name failslab, interval 1, probability 0, space 0, times 0
[  488.588067][ T9032] hsr_slave_0: left promiscuous mode
[  488.598155][T15057] CPU: 0 PID: 15057 Comm: syz.3.2584 Not tainted syzkaller #0
[  488.605645][T15057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  488.615722][T15057] Call Trace:
[  488.619012][T15057]  <TASK>
[  488.621959][T15057]  dump_stack_lvl+0x18c/0x250
[  488.626668][T15057]  ? show_regs_print_info+0x20/0x20
[  488.631882][T15057]  ? load_image+0x420/0x420
[  488.636405][T15057]  ? __might_sleep+0xe0/0xe0
[  488.641014][T15057]  ? __lock_acquire+0x7d40/0x7d40
[  488.646050][T15057]  should_fail_ex+0x39d/0x4d0
[  488.650736][T15057]  should_failslab+0x9/0x20
[  488.655240][T15057]  slab_pre_alloc_hook+0x59/0x310
[  488.660272][T15057]  ? sk_prot_alloc+0xe7/0x210
[  488.664957][T15057]  ? sk_prot_alloc+0xe7/0x210
[  488.669632][T15057]  __kmem_cache_alloc_node+0x53/0x250
[  488.675003][T15057]  ? sk_prot_alloc+0xe7/0x210
[  488.679677][T15057]  __kmalloc+0xa4/0x230
[  488.683834][T15057]  sk_prot_alloc+0xe7/0x210
[  488.688336][T15057]  ? sk_alloc+0x24/0x360
[  488.692580][T15057]  sk_alloc+0x3a/0x360
[  488.696644][T15057]  ? bpf_ctx_init+0x163/0x1a0
[  488.701316][T15057]  ? bpf_prog_test_run_skb+0x279/0x18c0
[  488.706862][T15057]  bpf_prog_test_run_skb+0x3d1/0x18c0
[  488.712237][T15057]  ? __fget_files+0x28/0x4b0
[  488.716825][T15057]  ? __fget_files+0x43d/0x4b0
[  488.721507][T15057]  ? cpu_online+0x60/0x60
[  488.725833][T15057]  bpf_prog_test_run+0x321/0x390
[  488.730772][T15057]  __sys_bpf+0x49d/0x890
[  488.735014][T15057]  ? bpf_link_show_fdinfo+0x390/0x390
[  488.740398][T15057]  ? lock_chain_count+0x20/0x20
[  488.745255][T15057]  __x64_sys_bpf+0x7c/0x90
[  488.749665][T15057]  do_syscall_64+0x55/0xb0
[  488.754072][T15057]  ? clear_bhb_loop+0x40/0x90
[  488.758746][T15057]  ? clear_bhb_loop+0x40/0x90
[  488.763423][T15057]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  488.769314][T15057] RIP: 0033:0x7f2b6539ce59
[  488.773721][T15057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  488.793328][T15057] RSP: 002b:00007f2b661ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  488.801740][T15057] RAX: ffffffffffffffda RBX: 00007f2b65615fa0 RCX: 00007f2b6539ce59
[  488.809705][T15057] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a
[  488.817671][T15057] RBP: 00007f2b661ed090 R08: 0000000000000000 R09: 0000000000000000
[  488.825634][T15057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  488.833593][T15057] R13: 00007f2b65616038 R14: 00007f2b65615fa0 R15: 00007ffd014b6b38
[  488.841573][T15057]  </TASK>
[  488.897984][ T9032] hsr_slave_1: left promiscuous mode
[  489.515331][ T5783] Bluetooth: hci0: command tx timeout
[  492.908003][T15080] netlink: 'syz.3.2591': attribute type 2 has an invalid length.
[  492.917719][T15080] netlink: 'syz.3.2591': attribute type 8 has an invalid length.
[  492.926243][T15080] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2591'.
[  492.951833][T15087] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2593'.
[  493.131869][T14873] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  493.139713][T15092] FAULT_INJECTION: forcing a failure.
[  493.139713][T15092] name failslab, interval 1, probability 0, space 0, times 0
[  493.162111][T15092] CPU: 1 PID: 15092 Comm: syz.0.2595 Not tainted syzkaller #0
[  493.169607][T15092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  493.175790][T14873] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  493.179656][T15092] Call Trace:
[  493.179665][T15092]  <TASK>
[  493.192540][T15092]  dump_stack_lvl+0x18c/0x250
[  493.197239][T15092]  ? show_regs_print_info+0x20/0x20
[  493.202453][T15092]  ? load_image+0x420/0x420
[  493.206974][T15092]  ? __might_sleep+0xe0/0xe0
[  493.211581][T15092]  ? __lock_acquire+0x7d40/0x7d40
[  493.216625][T15092]  should_fail_ex+0x39d/0x4d0
[  493.221331][T15092]  should_failslab+0x9/0x20
[  493.225851][T15092]  slab_pre_alloc_hook+0x59/0x310
[  493.230891][T15092]  ? apparmor_sk_alloc_security+0x77/0x100
[  493.236710][T15092]  __kmem_cache_alloc_node+0x53/0x250
[  493.242105][T15092]  ? apparmor_sk_alloc_security+0x77/0x100
[  493.247922][T15092]  kmalloc_trace+0x2a/0xe0
[  493.252354][T15092]  apparmor_sk_alloc_security+0x77/0x100
[  493.258004][T15092]  security_sk_alloc+0x6e/0xa0
[  493.262794][T15092]  sk_prot_alloc+0x101/0x210
[  493.267399][T15092]  ? sk_alloc+0x24/0x360
[  493.271666][T15092]  sk_alloc+0x3a/0x360
[  493.275761][T15092]  ? bpf_ctx_init+0x163/0x1a0
[  493.280458][T15092]  ? bpf_prog_test_run_skb+0x279/0x18c0
[  493.286030][T15092]  bpf_prog_test_run_skb+0x3d1/0x18c0
[  493.291426][T15092]  ? __fget_files+0x28/0x4b0
[  493.296034][T15092]  ? __fget_files+0x43d/0x4b0
[  493.300734][T15092]  ? cpu_online+0x60/0x60
[  493.305073][T15092]  bpf_prog_test_run+0x321/0x390
[  493.310035][T15092]  __sys_bpf+0x49d/0x890
[  493.314301][T15092]  ? bpf_link_show_fdinfo+0x390/0x390
[  493.319707][T15092]  ? lock_chain_count+0x20/0x20
[  493.324580][T15092]  __x64_sys_bpf+0x7c/0x90
[  493.329007][T15092]  do_syscall_64+0x55/0xb0
[  493.333430][T15092]  ? clear_bhb_loop+0x40/0x90
[  493.338121][T15092]  ? clear_bhb_loop+0x40/0x90
[  493.342819][T15092]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  493.348732][T15092] RIP: 0033:0x7f1d1af9ce59
[  493.353158][T15092] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  493.372779][T15092] RSP: 002b:00007f1d1bdf5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  493.381214][T15092] RAX: ffffffffffffffda RBX: 00007f1d1b215fa0 RCX: 00007f1d1af9ce59
[  493.389205][T15092] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a
[  493.397188][T15092] RBP: 00007f1d1bdf5090 R08: 0000000000000000 R09: 0000000000000000
[  493.405170][T15092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  493.413153][T15092] R13: 00007f1d1b216038 R14: 00007f1d1b215fa0 R15: 00007ffdb1225928
[  493.421151][T15092]  </TASK>
[  493.471756][T14873] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  493.566183][T14873] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  493.600765][T15099] netlink: 'syz.0.2597': attribute type 4 has an invalid length.
[  493.699346][T15104] netlink: 'syz.0.2597': attribute type 4 has an invalid length.
[  493.858344][T14873] 8021q: adding VLAN 0 to HW filter on device bond0
[  493.912837][T14873] 8021q: adding VLAN 0 to HW filter on device team0
[  493.953386][ T9037] bridge0: port 1(bridge_slave_0) entered blocking state
[  493.960604][ T9037] bridge0: port 1(bridge_slave_0) entered forwarding state
[  493.993617][T15108] netlink: 'syz.3.2599': attribute type 10 has an invalid length.
[  494.024001][T15108] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2599'.
[  494.064362][T15108] batman_adv: batadv0: Adding interface: veth0_vlan
[  494.105255][T15108] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  494.155836][T15108] batman_adv: batadv0: Interface activated: veth0_vlan
[  494.206901][T15117] netlink: 'syz.0.2601': attribute type 21 has an invalid length.
[  494.214772][T15117] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2601'.
[  494.265118][T10167] bridge0: port 2(bridge_slave_1) entered blocking state
[  494.272301][T10167] bridge0: port 2(bridge_slave_1) entered forwarding state
[  494.517899][T15126] netlink: 'syz.3.2602': attribute type 29 has an invalid length.
[  494.528281][T15126] netlink: 'syz.3.2602': attribute type 29 has an invalid length.
[  494.566756][T15126] netlink: 'syz.3.2602': attribute type 29 has an invalid length.
[  494.590511][T15126] netlink: 'syz.3.2602': attribute type 29 has an invalid length.
[  494.861288][T14873] 8021q: adding VLAN 0 to HW filter on device batadv0
[  494.978305][T14873] veth0_vlan: entered promiscuous mode
[  495.005522][T15140] FAULT_INJECTION: forcing a failure.
[  495.005522][T15140] name failslab, interval 1, probability 0, space 0, times 0
[  495.022561][T14873] veth1_vlan: entered promiscuous mode
[  495.031421][T15140] CPU: 0 PID: 15140 Comm: syz.3.2604 Not tainted syzkaller #0
[  495.038907][T15140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  495.048959][T15140] Call Trace:
[  495.052231][T15140]  <TASK>
[  495.055158][T15140]  dump_stack_lvl+0x18c/0x250
[  495.059835][T15140]  ? show_regs_print_info+0x20/0x20
[  495.065025][T15140]  ? load_image+0x420/0x420
[  495.069521][T15140]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  495.075502][T15140]  ? __asan_memset+0x22/0x40
[  495.080087][T15140]  should_fail_ex+0x39d/0x4d0
[  495.084765][T15140]  should_failslab+0x9/0x20
[  495.089265][T15140]  slab_pre_alloc_hook+0x59/0x310
[  495.094287][T15140]  kmem_cache_alloc+0x5a/0x2d0
[  495.099048][T15140]  ? slab_build_skb+0x2b/0x3f0
[  495.103815][T15140]  slab_build_skb+0x2b/0x3f0
[  495.108404][T15140]  bpf_prog_test_run_skb+0x3ef/0x18c0
[  495.113774][T15140]  ? __fget_files+0x28/0x4b0
[  495.118363][T15140]  ? __fget_files+0x43d/0x4b0
[  495.123050][T15140]  ? cpu_online+0x60/0x60
[  495.127376][T15140]  bpf_prog_test_run+0x321/0x390
[  495.132319][T15140]  __sys_bpf+0x49d/0x890
[  495.136556][T15140]  ? bpf_link_show_fdinfo+0x390/0x390
[  495.141929][T15140]  ? lock_chain_count+0x20/0x20
[  495.146780][T15140]  __x64_sys_bpf+0x7c/0x90
[  495.151188][T15140]  do_syscall_64+0x55/0xb0
[  495.155597][T15140]  ? clear_bhb_loop+0x40/0x90
[  495.160266][T15140]  ? clear_bhb_loop+0x40/0x90
[  495.164937][T15140]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  495.170828][T15140] RIP: 0033:0x7f2b6539ce59
[  495.175239][T15140] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  495.194836][T15140] RSP: 002b:00007f2b661ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  495.203243][T15140] RAX: ffffffffffffffda RBX: 00007f2b65615fa0 RCX: 00007f2b6539ce59
[  495.211205][T15140] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a
[  495.219168][T15140] RBP: 00007f2b661ed090 R08: 0000000000000000 R09: 0000000000000000
[  495.227133][T15140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  495.235099][T15140] R13: 00007f2b65616038 R14: 00007f2b65615fa0 R15: 00007ffd014b6b38
[  495.243080][T15140]  </TASK>
[  495.381198][T14873] veth0_macvtap: entered promiscuous mode
[  495.414599][T14873] veth1_macvtap: entered promiscuous mode
[  495.471057][T15153] syzkaller0: entered promiscuous mode
[  495.494183][T15153] syzkaller0: entered allmulticast mode
[  495.524243][T15155] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2607'.
[  495.615596][T14873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  495.647721][T14873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  495.693871][T14873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  495.733601][T14873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  495.744639][T14873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  495.755918][T14873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  495.772354][T14873] batman_adv: batadv0: Interface activated: batadv_slave_0
[  495.874271][T14873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  495.885009][T14873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  495.905518][T14873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  495.923628][T14873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  495.934201][T14873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  495.956689][T14873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  495.978248][T14873] batman_adv: batadv0: Interface activated: batadv_slave_1
[  496.090058][T14873] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  496.115490][T14873] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  496.134042][T14873] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  496.143201][T14873] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  496.381271][T10165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  496.424419][T10165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  496.476925][T10168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  496.484786][T10168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  496.584624][T15191] delete_channel: no stack
[  496.589848][T15191] delete_channel: no stack
[  496.683636][T15196] FAULT_INJECTION: forcing a failure.
[  496.683636][T15196] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  496.715519][T15196] CPU: 0 PID: 15196 Comm: syz.3.2615 Not tainted syzkaller #0
[  496.723031][T15196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  496.733109][T15196] Call Trace:
[  496.736405][T15196]  <TASK>
[  496.739352][T15196]  dump_stack_lvl+0x18c/0x250
[  496.744058][T15196]  ? show_regs_print_info+0x20/0x20
[  496.749279][T15196]  ? load_image+0x420/0x420
[  496.753813][T15196]  ? __might_fault+0xaa/0x120
[  496.758517][T15196]  ? __lock_acquire+0x7d40/0x7d40
[  496.763568][T15196]  should_fail_ex+0x39d/0x4d0
[  496.768273][T15196]  _copy_to_user+0x2f/0xa0
[  496.772713][T15196]  bpf_test_finish+0x19f/0x650
[  496.777503][T15196]  ? dst_hold+0x70/0x70
[  496.781684][T15196]  ? convert_skb_to___skb+0x420/0x420
[  496.787086][T15196]  ? slab_build_skb+0x25f/0x3f0
[  496.791959][T15196]  bpf_prog_test_run_skb+0x1122/0x18c0
[  496.797462][T15196]  ? cpu_online+0x60/0x60
[  496.801812][T15196]  bpf_prog_test_run+0x321/0x390
[  496.806776][T15196]  __sys_bpf+0x49d/0x890
[  496.811042][T15196]  ? bpf_link_show_fdinfo+0x390/0x390
[  496.816447][T15196]  ? lock_chain_count+0x20/0x20
[  496.821323][T15196]  __x64_sys_bpf+0x7c/0x90
[  496.825761][T15196]  do_syscall_64+0x55/0xb0
[  496.830206][T15196]  ? clear_bhb_loop+0x40/0x90
[  496.834911][T15196]  ? clear_bhb_loop+0x40/0x90
[  496.839612][T15196]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  496.845531][T15196] RIP: 0033:0x7f2b6539ce59
[  496.849963][T15196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  496.869588][T15196] RSP: 002b:00007f2b661ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  496.878035][T15196] RAX: ffffffffffffffda RBX: 00007f2b65615fa0 RCX: 00007f2b6539ce59
[  496.886030][T15196] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a
[  496.894030][T15196] RBP: 00007f2b661ed090 R08: 0000000000000000 R09: 0000000000000000
[  496.902021][T15196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  496.910014][T15196] R13: 00007f2b65616038 R14: 00007f2b65615fa0 R15: 00007ffd014b6b38
[  496.918018][T15196]  </TASK>
[  497.812132][T15238] FAULT_INJECTION: forcing a failure.
[  497.812132][T15238] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  497.873772][T15238] CPU: 1 PID: 15238 Comm: syz.0.2625 Not tainted syzkaller #0
[  497.881285][T15238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  497.891356][T15238] Call Trace:
[  497.894653][T15238]  <TASK>
[  497.897596][T15238]  dump_stack_lvl+0x18c/0x250
[  497.902301][T15238]  ? show_regs_print_info+0x20/0x20
[  497.907513][T15238]  ? load_image+0x420/0x420
[  497.912031][T15238]  ? __might_fault+0xaa/0x120
[  497.916728][T15238]  ? __lock_acquire+0x7d40/0x7d40
[  497.921771][T15238]  should_fail_ex+0x39d/0x4d0
[  497.926474][T15238]  _copy_to_user+0x2f/0xa0
[  497.930912][T15238]  bpf_test_finish+0x25a/0x650
[  497.935698][T15238]  ? dst_hold+0x70/0x70
[  497.939868][T15238]  ? convert_skb_to___skb+0x420/0x420
[  497.945265][T15238]  ? slab_build_skb+0x25f/0x3f0
[  497.950139][T15238]  bpf_prog_test_run_skb+0x1122/0x18c0
[  497.955658][T15238]  ? cpu_online+0x60/0x60
[  497.960005][T15238]  bpf_prog_test_run+0x321/0x390
[  497.964968][T15238]  __sys_bpf+0x49d/0x890
[  497.969230][T15238]  ? bpf_link_show_fdinfo+0x390/0x390
[  497.974723][T15238]  ? lock_chain_count+0x20/0x20
[  497.979598][T15238]  __x64_sys_bpf+0x7c/0x90
[  497.984031][T15238]  do_syscall_64+0x55/0xb0
[  497.988458][T15238]  ? clear_bhb_loop+0x40/0x90
[  497.993154][T15238]  ? clear_bhb_loop+0x40/0x90
[  497.997855][T15238]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  498.003767][T15238] RIP: 0033:0x7f1d1af9ce59
[  498.008194][T15238] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  498.027821][T15238] RSP: 002b:00007f1d1bdf5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  498.036261][T15238] RAX: ffffffffffffffda RBX: 00007f1d1b215fa0 RCX: 00007f1d1af9ce59
[  498.044247][T15238] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a
[  498.052230][T15238] RBP: 00007f1d1bdf5090 R08: 0000000000000000 R09: 0000000000000000
[  498.060209][T15238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  498.068192][T15238] R13: 00007f1d1b216038 R14: 00007f1d1b215fa0 R15: 00007ffdb1225928
[  498.076193][T15238]  </TASK>
[  498.200025][T15243] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.2627'.
[  501.178241][T15249] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2629'.
[  501.206534][T15249] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2629'.
[  501.244729][T15254] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2629'.
[  501.306040][T15249] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2629'.
[  501.612399][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  501.625172][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  502.419293][T15279] FAULT_INJECTION: forcing a failure.
[  502.419293][T15279] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  502.435583][T15279] CPU: 0 PID: 15279 Comm: syz.0.2638 Not tainted syzkaller #0
[  502.443081][T15279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  502.453155][T15279] Call Trace:
[  502.456440][T15279]  <TASK>
[  502.459401][T15279]  dump_stack_lvl+0x18c/0x250
[  502.464079][T15279]  ? show_regs_print_info+0x20/0x20
[  502.469283][T15279]  ? load_image+0x420/0x420
[  502.473782][T15279]  ? __might_fault+0xaa/0x120
[  502.478461][T15279]  ? __lock_acquire+0x7d40/0x7d40
[  502.483485][T15279]  should_fail_ex+0x39d/0x4d0
[  502.488167][T15279]  _copy_to_user+0x2f/0xa0
[  502.492579][T15279]  bpf_test_finish+0x4e7/0x650
[  502.497346][T15279]  ? dst_hold+0x70/0x70
[  502.501502][T15279]  ? convert_skb_to___skb+0x420/0x420
[  502.506884][T15279]  ? slab_build_skb+0x25f/0x3f0
[  502.511729][T15279]  bpf_prog_test_run_skb+0x1122/0x18c0
[  502.517289][T15279]  ? cpu_online+0x60/0x60
[  502.521614][T15279]  bpf_prog_test_run+0x321/0x390
[  502.526562][T15279]  __sys_bpf+0x49d/0x890
[  502.530813][T15279]  ? bpf_link_show_fdinfo+0x390/0x390
[  502.536190][T15279]  ? lock_chain_count+0x20/0x20
[  502.541046][T15279]  __x64_sys_bpf+0x7c/0x90
[  502.545474][T15279]  do_syscall_64+0x55/0xb0
[  502.549890][T15279]  ? clear_bhb_loop+0x40/0x90
[  502.554584][T15279]  ? clear_bhb_loop+0x40/0x90
[  502.559270][T15279]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  502.565166][T15279] RIP: 0033:0x7f1d1af9ce59
[  502.569578][T15279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  502.589182][T15279] RSP: 002b:00007f1d1bdf5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  502.597590][T15279] RAX: ffffffffffffffda RBX: 00007f1d1b215fa0 RCX: 00007f1d1af9ce59
[  502.605555][T15279] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a
[  502.613520][T15279] RBP: 00007f1d1bdf5090 R08: 0000000000000000 R09: 0000000000000000
[  502.621483][T15279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  502.629447][T15279] R13: 00007f1d1b216038 R14: 00007f1d1b215fa0 R15: 00007ffdb1225928
[  502.637420][T15279]  </TASK>
[  502.721682][T15282] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.2639'.
[  502.737104][T15283] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.2639'.
[  502.810892][T15289] validate_nla: 2 callbacks suppressed
[  502.810909][T15289] netlink: 'syz.0.2641': attribute type 1 has an invalid length.
[  502.853066][T15289] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.2641'.
[  503.166739][T15307] ref_ctr_offset mismatch. inode: 0x7a offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe
[  503.192089][T15307] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.2646'.
[  503.210085][T15307] netlink: 'syz.3.2646': attribute type 10 has an invalid length.
[  503.256801][T15307] hsr0: entered promiscuous mode
[  503.268823][T15307] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  503.306439][T15311] FAULT_INJECTION: forcing a failure.
[  503.306439][T15311] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  503.320502][T15307] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  503.330739][T15311] CPU: 1 PID: 15311 Comm: syz.2.2648 Not tainted syzkaller #0
[  503.338218][T15311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  503.348311][T15311] Call Trace:
[  503.351603][T15311]  <TASK>
[  503.354544][T15311]  dump_stack_lvl+0x18c/0x250
[  503.359244][T15311]  ? show_regs_print_info+0x20/0x20
[  503.364454][T15311]  ? load_image+0x420/0x420
[  503.368977][T15311]  ? __lock_acquire+0x7d40/0x7d40
[  503.374017][T15311]  ? snprintf+0xe9/0x140
[  503.378279][T15311]  should_fail_ex+0x39d/0x4d0
[  503.382982][T15311]  _copy_to_user+0x2f/0xa0
[  503.387419][T15311]  simple_read_from_buffer+0xe7/0x150
[  503.392915][T15311]  proc_fail_nth_read+0x1e8/0x260
[  503.397963][T15311]  ? proc_fault_inject_write+0x360/0x360
[  503.403603][T15311]  ? fsnotify_perm+0x271/0x5e0
[  503.408359][T15311]  ? proc_fault_inject_write+0x360/0x360
[  503.413990][T15311]  vfs_read+0x28b/0x970
[  503.418149][T15311]  ? kernel_read+0x1e0/0x1e0
[  503.422740][T15311]  ? __fget_files+0x28/0x4b0
[  503.427334][T15311]  ? __fget_files+0x28/0x4b0
[  503.431918][T15311]  ? __fget_files+0x43d/0x4b0
[  503.436598][T15311]  ? __fdget_pos+0x2a3/0x330
[  503.441183][T15311]  ? ksys_read+0x75/0x260
[  503.445551][T15311]  ksys_read+0x150/0x260
[  503.449813][T15311]  ? vfs_write+0x990/0x990
[  503.454243][T15311]  ? lockdep_hardirqs_on+0x98/0x150
[  503.459452][T15311]  do_syscall_64+0x55/0xb0
[  503.463868][T15311]  ? clear_bhb_loop+0x40/0x90
[  503.468657][T15311]  ? clear_bhb_loop+0x40/0x90
[  503.473345][T15311]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  503.479249][T15311] RIP: 0033:0x7f530375d68e
[  503.483666][T15311] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  503.503367][T15311] RSP: 002b:00007f5304654fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  503.511779][T15311] RAX: ffffffffffffffda RBX: 00007f53046556c0 RCX: 00007f530375d68e
[  503.519743][T15311] RDX: 000000000000000f RSI: 00007f53046550a0 RDI: 0000000000000004
[  503.527708][T15311] RBP: 00007f5304655090 R08: 0000000000000000 R09: 0000000000000000
[  503.535675][T15311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  503.543636][T15311] R13: 00007f5303a16038 R14: 00007f5303a15fa0 R15: 00007ffdda86a908
[  503.551615][T15311]  </TASK>
[  503.557104][T15307] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  503.605473][T15307] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  503.647360][T15316] netlink: 'syz.0.2649': attribute type 3 has an invalid length.
[  503.684631][T15316] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.2649'.
[  504.266627][T15337] netlink: 'syz.2.2656': attribute type 29 has an invalid length.
[  504.294575][T15337] netlink: 'syz.2.2656': attribute type 29 has an invalid length.
[  504.506504][T15357] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.2662'.
[  504.848884][T15371] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes.
[  505.323659][T15381] syzkaller0: tun_chr_ioctl cmd 2148553947
[  508.265467][T15397] __nla_validate_parse: 1 callbacks suppressed
[  508.265484][T15397] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2676'.
[  508.281532][T15392] netlink: 'syz.0.2675': attribute type 11 has an invalid length.
[  508.928550][T15443] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2690'.
[  509.284270][T15453] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.2694'.
[  509.310332][T15453] netlink: 3064 bytes leftover after parsing attributes in process `syz.2.2694'.
[  509.318393][T15456] netlink: 668 bytes leftover after parsing attributes in process `syz.1.2695'.
[  509.349603][T15456] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  509.371537][T15456] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  509.372638][T15453] netlink: 'syz.2.2694': attribute type 1 has an invalid length.
[  509.403237][T15453] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.2694'.
[  509.672161][T15472] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.2699'.
[  509.763833][T15478] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app
[  509.976073][T15485] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2704'.
[  510.280309][T15493] netlink: 'syz.3.2707': attribute type 4 has an invalid length.
[  510.294405][T15493] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2707'.
[  510.338127][T15493] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  510.913487][T15507] bridge_slave_1: left allmulticast mode
[  510.927829][T15507] bridge_slave_1: left promiscuous mode
[  510.955210][T15507] bridge0: port 2(bridge_slave_1) entered disabled state
[  511.157199][T15507] bridge_slave_0: left allmulticast mode
[  511.164302][T15507] bridge_slave_0: left promiscuous mode
[  511.189042][T15507] bridge0: port 1(bridge_slave_0) entered disabled state
[  512.016721][T15525] netlink: 'syz.1.2717': attribute type 21 has an invalid length.
[  512.055134][T15525] netlink: 16174 bytes leftover after parsing attributes in process `syz.1.2717'.
[  512.333189][T15525] netlink: 'syz.1.2717': attribute type 2 has an invalid length.
[  512.896739][T15536] netlink: 'syz.3.2721': attribute type 1 has an invalid length.
[  512.955594][T10168] wlan1: Trigger new scan to find an IBSS to join
[  513.216505][ T9037] gretap0 (unregistering): left allmulticast mode
[  513.228538][ T9037] gretap0 (unregistering): left promiscuous mode
[  513.239481][ T9037] Ÿë
: port 1(gretap0) entered disabled state
[  513.336653][T15561] netlink: 'syz.0.2729': attribute type 21 has an invalid length.
[  513.350855][T15561] __nla_validate_parse: 2 callbacks suppressed
[  513.350879][T15561] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2729'.
[  513.368996][T15561] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2729'.
[  514.137603][T15586] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2738'.
[  515.597366][T15612] netlink: 'syz.1.2744': attribute type 10 has an invalid length.
[  515.644667][T15612] team0: Device hsr_slave_0 failed to register rx_handler
[  515.905601][T15619] netlink: 212912 bytes leftover after parsing attributes in process `syz.0.2747'.
[  515.922482][T15619] openvswitch: netlink: IP tunnel dst address not specified
[  515.944506][T15621] netlink: 'syz.2.2748': attribute type 28 has an invalid length.
[  515.955315][T15621] netlink: 'syz.2.2748': attribute type 29 has an invalid length.
[  515.963359][T15621] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2748'.
[  517.757537][T15637] netlink: 'syz.0.2754': attribute type 5 has an invalid length.
[  517.829325][ T9037] veth1_macvtap: left promiscuous mode
[  517.834997][ T9037] veth0_macvtap: left promiscuous mode
[  517.915537][ T9032] wlan1: Trigger new scan to find an IBSS to join
[  518.243642][ T9037] team0 (unregistering): Port device geneve1 removed
[  518.347356][T15653] netlink: 'syz.2.2759': attribute type 6 has an invalid length.
[  518.393832][T15653] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2759'.
[  519.785021][T10182] wlan1: Creating new IBSS network, BSSID b2:92:3b:24:cd:e5
[  519.808444][T15671] delete_channel: no stack
[  519.813300][T15671] delete_channel: no stack
[  521.354555][ T9037] team0 (unregistering): Port device team_slave_1 removed
[  522.529813][T15703] netlink: 'syz.1.2771': attribute type 10 has an invalid length.
[  522.559632][T15703] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2771'.
[  522.596943][T15703] ipvlan1: entered promiscuous mode
[  522.619453][T15703] ipvlan1: entered allmulticast mode
[  522.661134][T15703] veth0_vlan: entered allmulticast mode
[  522.705415][T15703] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  523.332840][T15721] netlink: 'syz.0.2777': attribute type 10 has an invalid length.
[  523.735591][T15732] mac80211_hwsim hwsim44 wlan1: entered promiscuous mode
[  523.751814][T15732] mac80211_hwsim hwsim44 wlan1: entered allmulticast mode
[  523.784628][T15732] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2780'.
[  524.586024][ T5783] Bluetooth: hci4: ISO packet for unknown connection handle 2
[  528.071037][T15785] netlink: 'syz.2.2797': attribute type 3 has an invalid length.
[  528.091489][T15785] netlink: 'syz.2.2797': attribute type 1 has an invalid length.
[  528.105344][T15785] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.2797'.
[  528.127307][T15786] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2796'.
[  528.461752][ T5783] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4
[  528.823244][T15799] syzkaller0: entered promiscuous mode
[  528.843529][T15799] syzkaller0: entered allmulticast mode
[  530.903024][T15824] netlink: 'syz.3.2808': attribute type 10 has an invalid length.
[  530.910994][T15824] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2808'.
[  530.922158][T15824] batman_adv: batadv0: Adding interface: virt_wifi0
[  530.930399][T15824] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  530.958408][T15824] batman_adv: batadv0: Interface activated: virt_wifi0
[  531.386767][T15846] netlink: 'syz.3.2815': attribute type 1 has an invalid length.
[  531.394543][T15846] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.2815'.
[  531.559312][T15854] mac80211_hwsim hwsim51 wlan1: entered promiscuous mode
[  531.575435][T15854] mac80211_hwsim hwsim51 wlan1: entered allmulticast mode
[  531.629918][T15844] syzkaller0: entered promiscuous mode
[  531.647175][T15844] syzkaller0: entered allmulticast mode
[  532.179883][T15880] netlink: 'syz.3.2827': attribute type 21 has an invalid length.
[  533.288952][T15913] netlink: 192188 bytes leftover after parsing attributes in process `syz.1.2838'.
[  533.298621][T15913] openvswitch: netlink: Key 9 has unexpected len 3064 expected 4
[  533.387323][T15917] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2838'.
[  533.747791][T15929] veth1_macvtap: left promiscuous mode
[  533.753333][T15929] macsec0: entered allmulticast mode
[  533.810110][T15929] veth1_macvtap: entered promiscuous mode
[  533.821010][T15929] veth1_macvtap: entered allmulticast mode
[  533.827799][T15929] macsec0: entered promiscuous mode
[  534.077997][T15944] netlink: 'syz.2.2845': attribute type 3 has an invalid length.
[  534.101412][T15943] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2844'.
[  534.160808][T15944] netlink: 'syz.2.2845': attribute type 1 has an invalid length.
[  534.181155][T15943] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  534.205818][T15944] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.2845'.
[  534.254558][T15945] netlink: 'syz.0.2847': attribute type 29 has an invalid length.
[  534.306528][T15945] netlink: 'syz.0.2847': attribute type 29 has an invalid length.
[  534.317372][T15948] netlink: 'syz.0.2847': attribute type 29 has an invalid length.
[  534.355838][T15945] netlink: 'syz.0.2847': attribute type 25 has an invalid length.
[  534.372808][T15945] netlink: 'syz.0.2847': attribute type 3 has an invalid length.
[  534.419750][T15945] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2847'.
[  534.420043][T15948] netlink: 'syz.0.2847': attribute type 29 has an invalid length.
[  534.488766][T15945] netlink: 'syz.0.2847': attribute type 29 has an invalid length.
[  534.584842][T15950] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2848'.
[  535.114029][T15964] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2852'.
[  535.284601][T15969] netlink: 'syz.0.2853': attribute type 4 has an invalid length.
[  535.807202][T15981] netlink: 14380 bytes leftover after parsing attributes in process `syz.1.2855'.
[  535.906350][T15985] syzkaller0: entered promiscuous mode
[  535.933986][T15985] syzkaller0: entered allmulticast mode
[  553.393372][T16040] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  553.406928][T16040] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  553.415831][T16040] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  553.428998][T16040] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  553.437682][T16040] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  553.445132][T16040] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  553.575302][ T5783] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  553.584730][ T5783] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  553.593097][ T5783] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  553.602646][ T5783] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  553.610589][ T5783] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  553.618377][ T5783] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  553.762167][ T5783] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  553.771068][ T5783] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  553.780100][ T5783] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  553.788495][ T5783] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  553.796550][ T5783] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  553.804404][ T5783] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  553.864193][T16040] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  553.881080][T16040] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  553.890439][T16040] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  553.902434][T16040] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  553.912108][T16040] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  553.925546][T16040] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  554.087139][ T9041] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  555.515628][T16040] Bluetooth: hci1: command tx timeout
[  555.676521][T16040] Bluetooth: hci5: command tx timeout
[  555.839663][T16040] Bluetooth: hci6: command tx timeout
[  555.995525][T16040] Bluetooth: hci7: command tx timeout
[  557.595362][T16040] Bluetooth: hci1: command tx timeout
[  557.755282][T16040] Bluetooth: hci5: command tx timeout
[  557.915336][T16040] Bluetooth: hci6: command tx timeout
[  558.079025][T16040] Bluetooth: hci7: command tx timeout
[  559.675412][T16040] Bluetooth: hci1: command tx timeout
[  559.835233][T16040] Bluetooth: hci5: command tx timeout
[  559.998015][T16040] Bluetooth: hci6: command tx timeout
[  560.165211][T16040] Bluetooth: hci7: command tx timeout
[  561.755344][T16040] Bluetooth: hci1: command tx timeout
[  561.915995][T16040] Bluetooth: hci5: command tx timeout
[  562.075259][T16040] Bluetooth: hci6: command tx timeout
[  562.235417][T16040] Bluetooth: hci7: command tx timeout
[  570.159417][ T5783] Bluetooth: hci3: command 0x0406 tx timeout
[  595.835411][  T969] page_pool_release_retry() stalled pool shutdown 1 inflight 60 sec
[  615.982811][ T5778] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  615.993000][T16062] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  616.000939][T16062] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  616.009679][T16062] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  616.022629][T16062] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[  616.033628][T16062] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  616.062505][T16062] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  616.076816][T16062] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  616.084689][T16062] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  616.092968][T16062] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  616.108981][T16062] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3
[  616.117272][T16062] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  616.437120][T16067] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  616.446814][T16067] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  616.454694][T16067] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  616.463538][T16067] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  616.478656][T16067] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3
[  616.486156][T16067] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  616.600034][T16069] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  616.609515][T16069] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  616.617531][T16069] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  616.626467][T16069] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  616.646980][T16069] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3
[  616.655349][T16069] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  642.505096][    C1] rcu: INFO: rcu_preempt self-detected stall on CPU
[  642.511754][    C1] rcu: 	1-....: (10211 ticks this GP) idle=d734/1/0x4000000000000000 softirq=57108/57110 fqs=4998
[  642.523430][    C1] rcu: 	         hardirqs   softirqs   csw/system
[  642.529844][    C1] rcu: 	 number:  1125772          0            0
[  642.536247][    C1] rcu: 	cputime:    17961      34518           39   ==> 52510(ms)
[  642.544047][    C1] rcu: 	(t=10503 jiffies g=67629 q=1817 ncpus=2)
[  642.550375][    C1] CPU: 1 PID: 16014 Comm: syz.2.2865 Not tainted syzkaller #0
[  642.557829][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  642.567881][    C1] RIP: 0010:rcu_read_unlock_special+0x83/0x4d0
[  642.574042][    C1] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 0e fd 91 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 20 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08
[  642.593645][    C1] RSP: 0018:ffffc900001f0b20 EFLAGS: 00000206
[  642.599705][    C1] RAX: de23a746060ff000 RBX: 1ffff9200003e168 RCX: de23a746060ff000
[  642.607674][    C1] RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: ffffffff8b1c9a20
[  642.615645][    C1] RBP: ffffc900001f0c00 R08: ffffffff8e8b502f R09: 1ffffffff1d16a05
[  642.623605][    C1] R10: dffffc0000000000 R11: fffffbfff1d16a06 R12: ffffffff8d137300
[  642.631566][    C1] R13: dffffc0000000000 R14: ffff8880b8f3cf50 R15: 1ffff110171e79ea
[  642.639529][    C1] FS:  00007f53046556c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  642.648453][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  642.655025][    C1] CR2: 0000000100000000 CR3: 000000005cf93000 CR4: 00000000003506e0
[  642.662991][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000200000000300
[  642.670956][    C1] DR3: 0000200000000300 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  642.678919][    C1] Call Trace:
[  642.682192][    C1]  <IRQ>
[  642.685035][    C1]  ? __rcu_read_unlock+0xd0/0xd0
[  642.689978][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  642.696132][    C1]  ? read_lock_is_recursive+0x20/0x20
[  642.701502][    C1]  __rcu_read_unlock+0x7c/0xd0
[  642.706264][    C1]  ? ieee80211_rx_napi+0xd4/0x3d0
[  642.711358][    C1]  ieee80211_rx_napi+0x225/0x3d0
[  642.716295][    C1]  ? ieee80211_rx_list+0x32d0/0x32d0
[  642.721577][    C1]  ? skb_dequeue+0x124/0x160
[  642.726166][    C1]  ieee80211_handle_queued_frames+0x106/0x1a0
[  642.732231][    C1]  tasklet_action_common+0x302/0x4d0
[  642.737512][    C1]  ? detach_timer+0x2b0/0x2b0
[  642.742179][    C1]  ? trace_raw_output_tasklet+0xc0/0xc0
[  642.747729][    C1]  handle_softirqs+0x280/0x820
[  642.752487][    C1]  ? __irq_exit_rcu+0xd3/0x190
[  642.757247][    C1]  ? do_softirq+0x1a0/0x1a0
[  642.761746][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  642.766939][    C1]  __irq_exit_rcu+0xd3/0x190
[  642.771519][    C1]  ? irq_exit_rcu+0x20/0x20
[  642.776017][    C1]  irq_exit_rcu+0x9/0x20
[  642.780245][    C1]  sysvec_apic_timer_interrupt+0xa4/0xc0
[  642.785877][    C1]  </IRQ>
[  642.788806][    C1]  <TASK>
[  642.791732][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  642.797709][    C1] RIP: 0010:finish_task_switch+0x26a/0x8f0
[  642.803508][    C1] Code: 0f 84 33 01 00 00 48 85 db 0f 85 52 01 00 00 0f 1f 44 00 00 4c 8b 75 d0 4c 89 e7 e8 60 54 34 09 e8 3b 2e 30 00 fb 4c 8b 65 c0 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0
[  642.823450][    C1] RSP: 0018:ffffc9001193f7d8 EFLAGS: 00000286
[  642.829511][    C1] RAX: de23a746060ff000 RBX: 0000000000000000 RCX: de23a746060ff000
[  642.837474][    C1] RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: ffffffff8b1c9a20
[  642.845435][    C1] RBP: ffffc9001193f830 R08: ffffffff8e8b502f R09: 1ffffffff1d16a05
[  642.853396][    C1] R10: dffffc0000000000 R11: fffffbfff1d16a06 R12: ffff8880623f1e00
[  642.861359][    C1] R13: dffffc0000000000 R14: ffff888022dc0000 R15: ffff8880b8f3cac8
[  642.869336][    C1]  ? finish_task_switch+0x265/0x8f0
[  642.874537][    C1]  __schedule+0x155b/0x45a0
[  642.879056][    C1]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  642.885031][    C1]  ? asan.module_dtor+0x20/0x20
[  642.889886][    C1]  ? lockdep_hardirqs_on+0x98/0x150
[  642.895087][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  642.901243][    C1]  ? preempt_schedule+0xc0/0xd0
[  642.906085][    C1]  preempt_schedule_common+0x82/0xc0
[  642.911364][    C1]  preempt_schedule+0xc0/0xd0
[  642.916033][    C1]  ? schedule_preempt_disabled+0x20/0x20
[  642.921657][    C1]  ? _raw_spin_unlock_irqrestore+0xc0/0x120
[  642.927544][    C1]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  642.933427][    C1]  ? _raw_spin_unlock+0x40/0x40
[  642.938272][    C1]  preempt_schedule_thunk+0x1a/0x30
[  642.943504][    C1]  try_to_wake_up+0x781/0x1190
[  642.948267][    C1]  wake_up_q+0xb6/0x100
[  642.952435][    C1]  futex_wake+0x42a/0x4f0
[  642.956776][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  642.962936][    C1]  ? futex_wake_mark+0x150/0x150
[  642.967872][    C1]  ? do_futex+0x336/0x3e0
[  642.972200][    C1]  do_futex+0x35d/0x3e0
[  642.976351][    C1]  ? __ia32_sys_get_robust_list+0x110/0x110
[  642.982232][    C1]  ? lock_chain_count+0x20/0x20
[  642.987078][    C1]  __se_sys_futex+0x3a9/0x440
[  642.991747][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  642.997903][    C1]  ? __x64_sys_futex+0xf0/0xf0
[  643.002667][    C1]  ? __x64_sys_futex+0x21/0xf0
[  643.007422][    C1]  do_syscall_64+0x55/0xb0
[  643.011832][    C1]  ? clear_bhb_loop+0x40/0x90
[  643.016502][    C1]  ? clear_bhb_loop+0x40/0x90
[  643.021175][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  643.027059][    C1] RIP: 0033:0x7f530379ce59
[  643.031464][    C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  643.051062][    C1] RSP: 002b:00007f53046550e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  643.059470][    C1] RAX: ffffffffffffffda RBX: 00007f5303a15fa8 RCX: 00007f530379ce59
[  643.067431][    C1] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5303a15fac
[  643.075390][    C1] RBP: 00007f5303a15fa0 R08: 0000000000745aa7 R09: 0000000000000000
[  643.083355][    C1] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000
[  643.091316][    C1] R13: 00007f5303a16038 R14: 00007ffdda86a820 R15: 00007ffdda86a908
[  643.099295][    C1]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)