last executing test programs:

58.530911187s ago: executing program 3 (id=1047):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005345c0f63cdc2e82818254950ee03568b8809a1f04c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab66c1aae9314d7381fcfeb970bea672010000000000000043144648a07a975bd89dc398712376610faa54f12495b4659be8673086f6f3543205d4bc4ce05b8b961103673dff7f158052e62bfbdcddde6985f3f1ac5d9a94cc53207899762a07282a1914452d11858e795a3ca30a101af5574f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5ed44039aab46419496362e54cfad05b4004ac71a003d7b85d07191bed4e5a8908263722d4146f7ed569985439baa355cf3d8731f5e7a237bc06d035a8d601f21746d880819f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c5b9f87d988c9fbd2b9d9b4e2d71753b1549fa734f0b2e5fcf9549804cddad721971637f9c9730a9cc384eed30345979db9c93e1c52f42cad0a4d4f9436d3f39b0ed09c395dc6e970366087a8e4daeeb1b017006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f710c490ecd085d2811a7555c53030000007f00000000bfa6478eb96b079c277e2910b7ccdc3d672ed34aa65278c549e2abb549ad954884289130bc71cee2b7de62bf48129ae1af052a2d46a6165eb0954dac7265f1f425735acf6377793946b3229e861d8ea49806b3b533345d36ecef9df700000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c000000aaae37f044bcadeb0f6846582b7653665aa336db9f0384d3c7ddf79c2e0000000000000000000000000000000000000000000000e154aa0d3e41986a668ee1e5ef93a8ceac75f44aae95e26742f895f287111f8ee86f7e3ffb63cfb0e345cf7fc63dd2b0d30977899c6f03640040af4db71f7452bfc79a05118d8bb42b63b195771e42f9942ec626bd4b5461b74324012164e8"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="02"], 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000840}, 0x4010)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080))
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x5, 0x1}, 0x8, 0x0, 0x7, 0xd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x40)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000200)={0xffffffffffffffff, 0x1}, 0xc)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000640)="42643d523cfcd452facfa8a87b6cc7df4c3753bf69ce5e9c6b42bfcd6881ef8cf245c8cf87303189e946d9b112fd658e8c7b277ec9fd7aec0860dc9c7a2f6ebfa4ba83677d1b52009bf570e111"}, 0x20)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'dvmrp1\x00', 0x2})
ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000340)={0x1, &(0x7f0000000100)=[{0x6, 0xff}]})
ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x2, 0x7, 0x1, 0xf67}]})
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x2, 0x0, @void, @value}, 0x10)

57.183425943s ago: executing program 3 (id=1054):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = perf_event_open$cgroup(&(0x7f0000000540)={0x1, 0x80, 0xfc, 0x5e, 0xdd, 0x6, 0x0, 0x1, 0x200, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000004c0), 0x4}, 0x8, 0x0, 0x7fffffff, 0x8, 0x7, 0x1, 0x1, 0x0, 0xa3, 0x0, 0x5e}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x8)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f00000005c0)={0x1, 0x0, [0x0]})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x21, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
recvmsg(r2, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$tipc(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000940)="03e93f5531c8e57bd746cfee3a211977691a3fdde016aeedb45bc9fbce78179f32a452e30f9d2277d5df3dcc9e8ab3ae8fdc669f287d69052278caaf88cc7b639502dab5bb68b51d2a62762537009deadb670fa35aa83a5b9315ea015d18f5cb8c01851eb0146134", 0x68}, {&(0x7f0000000400)="1dbc4b8cba654ec077305c3590383dcca4c61edfcb4d6e9b1c3c2dca", 0x1c}], 0x2, 0x0, 0x0, 0x400c800}, 0x4048014)
close(r3)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xea4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r4 = syz_clone(0x93aa335ce0eb1661, &(0x7f0000000180)="efb67700f32e0f9f1e254f609c1ca1d0cc34aab8345133ee3515343c13f62ccb0e6c403c524f264845fd74e67cada3708c835c7a9314ce5e6b40b62fb4e1b1895a2f4e75129a4658c4dd7e8d46671833ad6756d238b73ff8c2a1cdc0c54337bb141172", 0x63, &(0x7f0000000080), &(0x7f0000000200), &(0x7f0000000280)="294e2f34e91a9474c6f26b251d16f87cb87f78a39c2b0fae18ea193d99b39ebb2c6e3bae466862c1b0869390ff258b58acff78ca296db5f1bb8d99fa1dc0ec178b304c2f7f0112993a022bc913751f17b377c0e0b31c785b9ed2489f4df3ca7f7737fd1ebb3990d81d07ca44f9ced1529fca36fd4ce077083c1e73ec579bade1f9830b26c28d560e9464146a9a1e2236960141d9659e618fe39e10ca6400deb042f6")
perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, r4, 0x0, 0xffffffffffffffff, 0x0)
close(0x3)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000400"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000), 0x0}, 0x20)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xffffffffffffff4b, &(0x7f0000000100)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1810039000000000bf0ffffff00000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0)

56.604158151s ago: executing program 3 (id=1060):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socketpair$tipc(0x1e, 0x1, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
close(0x3)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000000400001"], 0x48)

36.421013427s ago: executing program 3 (id=1060):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socketpair$tipc(0x1e, 0x1, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
close(0x3)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000000400001"], 0x48)

21.267866656s ago: executing program 3 (id=1060):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socketpair$tipc(0x1e, 0x1, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
close(0x3)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000000400001"], 0x48)

8.640063213s ago: executing program 2 (id=1333):
mkdir(0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="13000000100000000200"/20, @ANYRES32, @ANYBLOB="00001500000000ed00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0x17, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000076000000bf91000000000000b7020000000000001400000005000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000740)={r0, &(0x7f00000006c0)="dcc1df80bbb918ce034381baa60734573844f1d6cd0043b36f922c827acdb8750f556a3992dea6470994d673a1593ef16278dee61ef9a83de77790dabb8b6901ffbf30ecbbdd4734585ddba04ff0ed0fac", &(0x7f0000001700)=""/4096, 0x4}, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000002000000000000000000000a00000000000000000000000d"], 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
r1 = socket$kcm(0xa, 0x5, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f2, &(0x7f0000000080))
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000))
r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e086dd200000006006000aac14140ce0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48)
syz_clone(0x1000, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb0}, [@ldst={0x5}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB], 0x50)
r6 = syz_clone(0x0, &(0x7f0000000300)="fcc95aa45e7eccaf673eda6d6027ee634c22c2817add695adbfbc5b34626fca8724d7baca089b6fa8a0ebe3953793a57894a3febe1498ed06a45a5ef054fea0da31cd58e8b6f6af045d4b658536363dfede9821d086a3d3c61116b60b969846a2c03a90458401aa62d9fc786b61683e7034d1cc1ccd873a690ecfe601fa47613fefd76ba9acf", 0x86, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000540)="18d5192d8d77b398f68455ac83544c637d69e716e871be15c47703f2bae02eda88a71c8907da033d8e3debbc5f471399b4c6ad87739990a47c6a2b0df5fa0ece8fc9b72940860abcd118bc230574bff835e1f7a3dae4ba7a55087a2e49cf5e9d2b976d7142b2a3acd9704d169841ccec40bb6a6163908ee696697a92d65aba86c68ec58c4862a2ddb0")
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400))
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000022008102e00f80ecdb4cb902", 0x10}], 0x1, 0x0, 0x0, 0x10}, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x6181, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000680)={'ipvlan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000007c008500000022000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)

6.304070156s ago: executing program 2 (id=1344):
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x40, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x0)
r0 = gettid()
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db"], 0xfdef)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa0160a5afe99115, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc05, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)

5.773880435s ago: executing program 0 (id=1346):
r0 = perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003fffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
close(r7)
recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r5, 0x6, 0xa, &(0x7f0000000500)=r8, 0x4)
close(r4)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r9=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000008c0)=r9, 0x4)
r10 = socket$kcm(0xa, 0x5, 0x0)
r11 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r11, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001e0081064e81f782db44b9040202080006007c09e8fe08a10a0015c00200142603600e12080008000e0000000ede667a21230000a8080e0011000140030000000360e40ae8d8ef52a98516277ce06b90ce8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775738b872ed52d30835cdbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92950b43370e970100"/216, 0xd8}], 0x1}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="c2754713e36569b2fae8649eb50c4d0000000000", @ANYRES32=0x1], 0x50)
ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x8936, &(0x7f0000000000))
r12 = socket$kcm(0x10, 0x400000002, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r15=>0xffffffffffffffff, <r16=>0xffffffffffffffff})
r17 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r18 = getpid()
sendmsg$unix(r16, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="28000000000000000100000001000000", @ANYRES32=r14, @ANYRES32=r13, @ANYRES32=r14, @ANYRES32=r17, @ANYRES32=r13, @ANYRES32=r15, @ANYBLOB="14000000000000000100000001000000", @ANYRES32=r16, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r18, @ANYRES32=0xee00], 0x60}, 0x4)
write$cgroup_subtree(r12, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000078009106000000000000004a0775bf3144"], 0xfe33)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0xfd, 0x20, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x20000000000f60, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r19 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x57)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r19, 0x702, 0x41, 0x0, &(0x7f0000000580)="e460334470d8d400eb00c15286dd4b3547f2cbfad47001bd34d04351caf1f9a07be047c25d7670ea4a41b8a6800c0de87b6f8e6a725643f7b3ab502617b472091a", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

5.456116744s ago: executing program 2 (id=1347):
r0 = socket$kcm(0x2, 0x1, 0x84)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xe, 0x1a, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x81}, {}, {}, [@map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffa}, @jmp={0x5, 0x0, 0x0, 0xb, 0x9, 0x18}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x42}}}, &(0x7f0000000140)='syzkaller\x00', 0x400, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x2, 0x5, 0xdb3, 0x200}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000000200)=[0xffffffffffffffff, 0x1], &(0x7f0000000240)=[{0x0, 0x3, 0x9}, {0x5, 0x5, 0xa, 0x1}, {0x5, 0x4, 0xb, 0xb}], 0x10, 0xe, @void, @value}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x84, 0x82, &(0x7f0000000000)=r1, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000780)={<r5=>0xffffffffffffffff})
close(r5)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r6, 0x27, 0x51, 0x0, &(0x7f0000000440)="f8ad48cc02cb29dcc8007f5b86dd", 0x0, 0x3ffe, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r4, 0x5, 0x0, 0x0, @void, @value}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20)
r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='../\x00\x00\x00')
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001380)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r8, 0x1, 0x5, &(0x7f00000002c0)=r7, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r1, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r9=>0x0, 0x0, 0x0, 0x0, 0x4, 0x4, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xde, &(0x7f0000000400)=[{}], 0x8, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x4e, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10)
r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000640), 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@bloom_filter={0x1e, 0x1, 0x8, 0x7fff, 0x34, r3, 0x6, '\x00', r9, r10, 0x3, 0x4, 0x0, 0xd, @void, @value, @void, @value}, 0x50)

5.310509814s ago: executing program 4 (id=1348):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000180000003d030100000000009500f000000000007126000000000000bf67000000000000360602000fff07006706000020000000170200000ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad03000000000000720400000000000014000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56b8c2b84a800ea6553f304000000815dcf00c3eebc52267b042d19"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61154c000000000061138c0000000000bfa000000000000007000000080013002d03010000000000950017b8000000006916000000000000bf67000000000000350607000fff07206706000002000000160300000ee6fe5fbf500000000000000f650000000000006507f9ff01000000070700004ddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369289aa6812b8e007e733a9a4f19de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03cc86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f674629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800030cffa651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a60100c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40446d7074be86a912a5ac00f7ffffffffffffff000000000000c1eb2d91fb79ea00000000000000bb0d0000000000000000001fe4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642894cacd473b543ccb5f0d7b63924f17c67b00631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809f905f12f6106f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad0fceee5f339550130a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3116dbc7e2bf2402a75fd7a557317c66dd255ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0453b65586f65c7943d54b52f06c870edf0c5d644b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a57ff52f657a6749b94a42b25e9321fc2cc17dc4a29b9cba8ded5de439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61dc18402cde8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db009acaba9eaea93f3b563ab9000000ff000000000077a99fb5b0a43749ca477c9c7ca20bd428d8f77bb920ad0db4c1da671bfad7f109b776476a54939e621232cd115ba9f37057ad891fea2353f3ad9c042c64a5ecf80f4e4cf927ae39347c22822375c26edf2754695c16780429e03759691adb63553e9c4561528ded5f35bb20e98b2e6d01dbfcde82608359c50881324524db0dbe21efba4f0fc338f4b0b11cb028d1063b3bacaab92fb7f9d2971440f873ec261d54c1570adef8004c91896fcd74c9e03dfd9a781210c0346ed1b02a44c64adad8a3f238a8ddf7207c45057c02e922b942f15ddcfbfb00"/1747], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000180000003d030100000000009500f000000000007126000000000000bf67000000000000360602000fff07006706000020000000170200000ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad03000000000000720400000000000014000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56b8c2b84a800ea6553f304000000815dcf00c3eebc52267b042d19"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/1747], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async)

4.972192803s ago: executing program 0 (id=1350):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="67101dd52f317863448955d3021845d8707954ed5100000000100000000000000000000095000fa10fcf600274"], 0x0, 0xc, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x1})
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f91924fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

4.971673443s ago: executing program 1 (id=1351):
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0xe9, 0xa, 0x9, 0x80, 0x0, 0x100, 0x22030, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040)}, 0x1013, 0x0, 0x0, 0x5, 0x9, 0xa, 0x8, 0x0, 0x3, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x8)

4.925353293s ago: executing program 2 (id=1352):
bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000080), 0x200}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x3}, 0x38)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000feffffff00000000", @ANYRES32, @ANYBLOB="001000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000faffffffffffffff00"/28], 0x50)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000100), 0x1001)
ioctl$SIOCSIFHWADDR(r2, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}})
bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r1}, 0x8)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32514, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.empty_time\x00', 0x26e1, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000880)={r2, &(0x7f0000000780)="93fe419957e470c5154e578f7b47521774954284687a8feb34eec4ec5d34d7548199c8723a9cafac3ed3501a7148a5a6f85b36af69e01baf115aaedcb705d2cfa448c88559384d45eb9603a9aeba81a3be85bf56cb8d76379720660bbdd78507e294c501758333596b0359f536563fd679a7de99373d6f6d1b78e29f6ccd509e9e708d6846418d7f27772fb0ac31a5e7843444f558a4d6ab7bc9d0e6219427ba2a642f9644b49be4abb9cd4657454de0442951ebb0c04935936b1d6513cc8ce44dff7206ae0a31f95ede04cfc54a2fce2df75c9d227ad9bb83eb702ee513b154ebb030efe570b29d1cd4108d8c1b11cfa42324e8a347"}, 0x20)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_lsm={0x1f, 0x3, &(0x7f0000000980)=@raw=[@exit], &(0x7f0000000000)='GPL\x00', 0xcf78, 0xffffffffffffffe2, 0x0, 0x0, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94)
close(r3)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x19, 0x4, 0x8, 0xfffffffe, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0), 0x100}, 0x0)
r7 = socket$kcm(0xa, 0x5, 0x0)
r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x1d, 0x30, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000010000000000000000500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001852000009000000000000000000000008d98000737d0000b7080000000000007b8af8ff00000000b7080000030000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000085100000fbffffff18110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000000000008500000086000000185500000a0000000000000000000000850000002100000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600001a05a4c169008520000005000000bfe05df87585f39550cec5a05ecf3791000000000000b702000000a0f332630213c44e0000008500"], &(0x7f0000000240)='syzkaller\x00', 0x2, 0x9b, &(0x7f0000000280)=""/155, 0x41000, 0x66, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0xb, 0x4, 0x1c}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000440)=[r4, r4, r4, 0x1, r4], &(0x7f0000000480)=[{0x4, 0x4, 0x9, 0x4}, {0x5, 0x1, 0xb, 0x6}], 0x10, 0x2, @void, @value}, 0x94)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000580)=@generic={&(0x7f0000000080)='./file0\x00', r8}, 0x18)
ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x890b, &(0x7f0000000000)={r7})

4.635582022s ago: executing program 1 (id=1353):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = perf_event_open$cgroup(&(0x7f0000000540)={0x1, 0x80, 0xfc, 0x5e, 0xdd, 0x6, 0x0, 0x1, 0x200, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000004c0), 0x4}, 0x8, 0x0, 0x7fffffff, 0x8, 0x7, 0x1, 0x1, 0x0, 0xa3, 0x0, 0x5e}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x8)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f00000005c0)={0x1, 0x0, [0x0]})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x21, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
recvmsg(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/148, 0x94}], 0x48, &(0x7f0000002f40)=""/229, 0xe5}, 0x0)
sendmsg$tipc(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000940)="03e93f5531c8e57bd746cfee3a211977691a3fdde016aeedb45bc9fbce78179f32a452e30f9d2277d5df3dcc9e8ab3ae8fdc669f287d69052278caaf88cc7b639502dab5bb68b51d2a62762537009deadb670fa35aa83a5b9315ea015d18f5cb8c01851eb0146134d808458654400bbe6ea3df608efe92201365fe3fe8e8", 0x7e}, {&(0x7f0000000400)="1dbc4b8cba654ec077305c3590383dcca4c61edfcb4d6e9b1c3c2dca", 0x1c}], 0x2, 0x0, 0x0, 0x400c800}, 0x4048014)
close(r3)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xea4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r5 = syz_clone(0x93aa335ce0eb1661, &(0x7f0000000180)="efb67700f32e0f9f1e254f609c1ca1d0cc34aab8345133ee3515343c13f62ccb0e6c403c524f264845fd74e67cada3708c835c7a9314ce5e6b40b62fb4e1b1895a2f4e75129a4658c4dd7e8d46671833ad6756d238b73ff8c2a1cdc0c54337bb141172a9c3", 0x65, &(0x7f0000000080), &(0x7f0000000200), &(0x7f0000000280)="294e2f34e91a9474c6f26b251d16f87cb87f78a39c2b0fae18ea193d99b39ebb2c6e3bae466862c1b0869390ff258b58acff78ca296db5f1bb8d99fa1dc0ec178b304c2f7f0112993a022bc913751f17b377c0e0b31c785b9ed2489f4df3ca7f7737fd1ebb3990d81d07ca44f9ced1529fca36fd4ce077083c1e73ec579bade1f9830b26c28d560e9464146a9a1e2236960141d9659e618fe39e10ca6400deb042f6")
perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, r5, 0x0, 0xffffffffffffffff, 0x0)
close(0x3)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000400"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000), 0x0}, 0x20)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0xffffffffffffff4b, &(0x7f0000000100)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1810039000000000bf0ffffff00000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

4.508746332s ago: executing program 0 (id=1354):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000e8ffffff00000000000000008500000036000000850000000700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'veth1_to_team\x00', 0x10})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x8c5, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x85}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3c)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r2}, 0x10)
r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8)
close(r4)
bpf$LINK_DETACH(0x22, &(0x7f0000000280)=r4, 0x4)

4.408148651s ago: executing program 4 (id=1355):
bpf$PROG_LOAD(0x5, 0x0, 0xf752187d79f8e21b)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000580)={0x0, r0}, 0x8)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000bc0), 0x0, 0x92f, 0xffffffffffffffff, 0x0, 0x800000000}, 0x38)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr, @restrict={0x0, 0x0, 0x0, 0x9}]}}, 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001d40)=ANY=[], 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={r2, 0x20, &(0x7f00000001c0)={&(0x7f00000002c0)=""/163, 0xa3, <r3=>0x0, &(0x7f0000000180)=""/13, 0xd}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=r3, 0x4)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0a000000044d764d7a886a313f0000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

3.78036331s ago: executing program 0 (id=1356):
getpid()
mkdir(&(0x7f0000000000)='./cgroup/file0\x00', 0xffeb)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x4, 0xc0, &(0x7f0000002380)=""/192, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="af20", 0x2}], 0x1}, 0x4000005)
recvmsg$unix(r5, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002)
recvmsg$unix(r5, &(0x7f0000000d00)={0x0, 0x3e, 0x0}, 0x1)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
ioctl$TUNGETVNETLE(r2, 0x4010744d, 0x0)
r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="030d00001b000000040000ea09000002ffffff7f", @ANYRES32=r0, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000500"/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r7}, &(0x7f0000000100), &(0x7f0000000200)=r1}, 0x20)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000500)={&(0x7f00000002c0)="22336f4aeef779201466037fc632c6135f89f091b91cc84801e0f45fb5f9ce95e0659e494453ba", &(0x7f0000000300)=""/223, &(0x7f00000005c0)="e24c2b7faa9e516970cacfa308f533c4bf983cb3e6da4bddea49c05f58002925c92f73a27ca73f34addbdc5619fee351e4ad59d5d106f1671a3233198da54aceb0738d4444502f0080725b4a8a923f943fe647cf01c758f2bffca01c1cb316365f186fc60d42aa76f1d8c91dbbf407574c9988437f2cffa2ae9cee6c9030c4c8db8e9e5de11751def16bf1a4efc0a27bea18c8b62a75a20464eacc2e298c376483fcde40417f87f16f7e8b400441670351ac002b1dc1d5a96f51a014b017c401df31d225feceaebd0cd9c9ad358a398f732b2e35710c16f43c59b2746a02f5394df23d65dcc3300ac8635d98bf74c78a9bfc70a431af3b11a5f63b3b3f0b69", &(0x7f0000000400)="afc7ad49eb48fd44857f5a133f3ea57e46abcd471a6e7eb2f41fb3f86b688781765433a9ed8bc92b2a27374415c0ce3c7d30bae1b932d199f482069c80b9ae24feed1665fcff043ae84cb65d57faf0d47b0d6b603f027a8b72815a4bc272dba28856d9121e2594a6371c946b12a3e57dcff18619c2b2a378", 0x2, r7}, 0x38)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)

3.181184228s ago: executing program 4 (id=1357):
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x40, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x0)
r0 = gettid()
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db"], 0xfdef)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa0160a5afe99115, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc05, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)

3.172522228s ago: executing program 1 (id=1358):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4d, 0x1, 0x0, 0x0, 0x0, 0x2112, 0x84, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b7b, 0x2, @perf_bp={&(0x7f00000000c0), 0xa}, 0x11445c, 0x32, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000170000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009b00000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x27)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000340)='\x00')

3.012012627s ago: executing program 2 (id=1359):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xc, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18040000000000000000000000000000180000002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x29, 0x7, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f00800", 0x0, 0x2000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c)

2.800361327s ago: executing program 4 (id=1360):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0x7}, 0x14869, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001380)={{0xffffffffffffffff, <r0=>0xffffffffffffffff}, &(0x7f0000001300), &(0x7f0000001340)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001500)={r0, &(0x7f00000013c0)="50293745ad28a7a8845b5ed7d20b6b289bcba09768a903a9d7d8e01b44ff500b305c731063ea0fb7ac6d9f28a74bd0b6008d4cba74d1c67d5833708cfe3fbe058176b78742a3f378f157283d0726890d00ab11ede12c1ca73fcee90ecd7224a08e89db0b2f290181180b8fbcfd0e92a9b3c9f6936c2513742aa8a764d9b456c921d73f533320dfbf206b0571de2ef006ec8ff80232f9a6666f657dbfa7d1c25e79f37f585c591bf732c026ba50ec72fe9ea47f368c77a5d8cba323b55a0e2748d0e9c4fb2f454deeda45d84cc8d3ea46f9e983ebf97a", &(0x7f00000014c0)}, 0x20)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b40)={{r1}, &(0x7f0000000940), &(0x7f0000000980)='%pK    \x00'}, 0x20)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848100000", 0x17}], 0x1}, 0x0)
socket$kcm(0xa, 0x3, 0x3a)
socket$kcm(0x21, 0x2, 0x2)
socket$kcm(0x11, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
socket$kcm(0xa, 0x6, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000000000}, 0x0, 0x0, 0x0, 0x0, 0xf60}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x3e}}}}], 0x20}, 0x0)
r3 = openat$cgroup_root(0xffffff9c, 0x0, 0x200002, 0x0)
openat$cgroup_int(r3, 0x0, 0x2, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33)
socket$kcm(0xa, 0x5, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000"], 0x18}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000df9ed8a3ef11f019b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

1.573527484s ago: executing program 3 (id=1060):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socketpair$tipc(0x1e, 0x1, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
close(0x3)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000000400001"], 0x48)

1.466922204s ago: executing program 1 (id=1361):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000400000000000000000085000000ba00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.events\x00', 0x26e1, 0x0)
r3 = socket$kcm(0x2, 0xa, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x2e, &(0x7f0000000640)=r2, 0x4)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0x1, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0}}, 0x10)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x401c5820, &(0x7f00000005c0)=0x8)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0x1, <r6=>0x0}, 0x8)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x9, 0x68, 0xfffffff8, 0x110, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x3, 0x8, @void, @value, @void, @value}, 0x50)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xb, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f0000000280)={r8, &(0x7f0000000140), 0x0}, 0x20)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x20, 0xfffffff9, 0x5, 0x7, 0x20800, 0xffffffffffffffff, 0xcc, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{0xffffffffffffffff, <r10=>0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)='%pB    \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={0xffffffffffffffff, <r11=>0xffffffffffffffff}, 0x4)
r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000600)={0xffffffffffffffff, 0x4}, 0xc)
r13 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r13, 0x0, 0x0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x14, 0x1c, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @alu={0x4, 0x0, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x5}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='GPL\x00', 0x6, 0x98, &(0x7f0000000200)=""/152, 0x41100, 0x4, '\x00', r4, @fallback=0x13, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x5, 0x10, 0xc31f, 0x2}, 0x10, r6, r0, 0x5, &(0x7f0000000640)=[r7, r8, r9, r10, r11, r12, 0x1, r13], &(0x7f0000000680)=[{0x3, 0x4, 0xb, 0xa}, {0x1, 0x2, 0x10, 0x1}, {0x4, 0x5, 0xd, 0xc}, {0x0, 0x3, 0x1, 0x9}, {0x1, 0x1, 0x2, 0x2}], 0x10, 0x7d2000, @void, @value}, 0x94)

451.460891ms ago: executing program 0 (id=1362):
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xafe6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0)
close(r0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0))
ioctl$SIOCSIFHWADDR(r0, 0x8b1b, 0x0)

450.612601ms ago: executing program 1 (id=1363):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x2})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0xa60a, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x10e)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000eef00085000006030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='f2fs_issue_reset_zone\x00', r3, 0x0, 0x8000000000000}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="fa1636afcf1005fef08be87945bb9c049bb44474e0e2e612234109b3c130dee9a66a3a8a0aa261fabfc747712cc1bac109435f317bc331634d0e872e2ab87370d73da8e44523d2dc38930ea954c7626bbe9c13e9e86c67d24468abc5ccfdc80da26983eaa9f982dc360edbbbc10c61c2d8a07d3c952c00f87db0e69e489c0c5352bd0bae0638b0c6b6fdb74e7c7c99f181a8ec5647c1c3229e366f6f251c25bd19c6878010ade9f76a318d0b1364737dbc6c1e084356dff4d2e42d389386c0e6edf5e1dc3b6ccee13330e20000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r2, 0x0, 0x0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210})
mkdir(&(0x7f0000000340)='./file0\x00', 0x20)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x1, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r5, 0x1, 0x4b, &(0x7f00000009c0), 0x4)
perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54c4, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x1, 0xfffffff7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)

404.180331ms ago: executing program 2 (id=1364):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="67101dd52f317863448955d3021845d8707954ed5100000000100000000000000000000095000fa10fcf600274"], 0x0, 0xc, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x1})
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f91924fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

403.941501ms ago: executing program 4 (id=1365):
r0 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x20, @multicast2=0xe0000001}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000000)="e5974f3cf1b1c515931eb6d33f46d4e47db5612a623182df6791c7c81d92c14d1230a34367710cfa050e4320df974d53dbaf82ea4eefadd609e20d7f462feb454e9d8f4767", 0x45}], 0x1, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x28}, @multicast1}}}, @ip_retopts={{0x20, 0x0, 0x7, {[@generic={0x44, 0xd, "3eae4831ba477f3c75f2fa"}]}}}], 0x40}, 0x0)

186.29172ms ago: executing program 0 (id=1366):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x9, 0x4022, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x5, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080))
r3 = socket$kcm(0x2, 0x3, 0x2)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x20000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r6=>0xffffffffffffffff]}}], 0x18}, 0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x25, 0x9}]})
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef)
write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0xfdef)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0xf, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000080)={r7, &(0x7f0000000040), 0x20000000}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r7, &(0x7f0000000380), 0x0}, 0x20)
sendmsg$inet(r3, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000000)="e5974f3cf1b1c515931eb6d33f46d4e47db5612a623182df6791c7c81d92c14d1230a34367710cfa050e4320df974d53dbaf82ea4eefadd609e20d7f462feb454e9d8f4767", 0x45}], 0x1, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x28}, @multicast1}}}, @ip_retopts={{0x20, 0x0, 0x7, {[@generic={0x44, 0xd, "3eae4831ba477f3c75f2fa"}]}}}], 0x40}, 0x0)

175.36547ms ago: executing program 4 (id=1367):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x6, &(0x7f0000000480)=ANY=[@ANYBLOB="180200003f00ffff0000000000004000850000002c0000001800000004000000000000000700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x1400, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="720ac4ff00000070711019060000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

0s ago: executing program 1 (id=1368):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = perf_event_open$cgroup(&(0x7f0000000540)={0x1, 0x80, 0xfc, 0x5e, 0xdd, 0x6, 0x0, 0x1, 0x200, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000004c0), 0x4}, 0x8, 0x0, 0x7fffffff, 0x8, 0x7, 0x1, 0x1, 0x0, 0xa3, 0x0, 0x5e}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x8)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f00000005c0)={0x1, 0x0, [0x0]})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x21, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
recvmsg(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/148, 0x94}], 0x48, &(0x7f0000002f40)=""/229, 0xe5}, 0x0)
sendmsg$tipc(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000940)="03e93f5531c8e57bd746cfee3a211977691a3fdde016aeedb45bc9fbce78179f32a452e30f9d2277d5df3dcc9e8ab3ae8fdc669f287d69052278caaf88cc7b639502dab5bb68b51d2a62762537009deadb670fa35aa83a5b9315ea015d18f5cb8c01851eb0146134d808458654400bbe6ea3df608efe92201365fe3fe8e8", 0x7e}, {&(0x7f0000000400)="1dbc4b8cba654ec077305c3590383dcca4c61edfcb4d6e9b1c3c2dca", 0x1c}], 0x2, 0x0, 0x0, 0x400c800}, 0x4048014)
close(r3)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xea4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r5 = syz_clone(0x93aa335ce0eb1661, &(0x7f0000000180)="efb67700f32e0f9f1e254f609c1ca1d0cc34aab8345133ee3515343c13f62ccb0e6c403c524f264845fd74e67cada3708c835c7a9314ce5e6b40b62fb4e1b1895a2f4e75129a4658c4dd7e8d46671833ad6756d238b73ff8c2a1cdc0c54337bb141172a9c3e0", 0x66, 0x0, &(0x7f0000000200), &(0x7f0000000280)="294e2f34e91a9474c6f26b251d16f87cb87f78a39c2b0fae18ea193d99b39ebb2c6e3bae466862c1b0869390ff258b58acff78ca296db5f1bb8d99fa1dc0ec178b304c2f7f0112993a022bc913751f17b377c0e0b31c785b9ed2489f4df3ca7f7737fd1ebb3990d81d07ca44f9ced1529fca36fd4ce077083c1e73ec579bade1f9830b26c28d560e9464146a9a1e2236960141d9659e618fe39e10ca6400deb042f6")
perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, r5, 0x0, 0xffffffffffffffff, 0x0)
close(0x3)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000400"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000), 0x0}, 0x20)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0xffffffffffffff4b, &(0x7f0000000100)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1810039000000000bf0ffffff00000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

kernel console output (not intermixed with test programs):

30
[  446.190883][ T5684]  ? lockdep_hardirqs_on+0x94/0x130
[  446.196096][ T5684]  ? syscall_enter_from_user_mode+0x2e/0x230
[  446.202089][ T5684]  do_syscall_64+0x3b/0xb0
[  446.206525][ T5684]  ? clear_bhb_loop+0x45/0xa0
[  446.211214][ T5684]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  446.217117][ T5684] RIP: 0033:0x7f4948f8d169
[  446.221555][ T5684] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  446.241345][ T5684] RSP: 002b:00007f4949e66038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  446.249858][ T5684] RAX: ffffffffffffffda RBX: 00007f49491a5fa0 RCX: 00007f4948f8d169
[  446.257843][ T5684] RDX: 000000000000c8d4 RSI: 0000400000000800 RDI: 0000000000000003
[  446.265820][ T5684] RBP: 00007f4949e66090 R08: 0000000000000000 R09: 0000000000000000
[  446.273799][ T5684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  446.281786][ T5684] R13: 0000000000000000 R14: 00007f49491a5fa0 R15: 00007ffc6aca83c8
[  446.289785][ T5684]  </TASK>
[  446.836970][ T5697] netlink: 'syz.3.456': attribute type 10 has an invalid length.
[  447.268766][ T5713] netlink: 'syz.3.458': attribute type 3 has an invalid length.
[  447.292740][ T5713] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.458'.
[  449.153911][ T5724] netlink: 'syz.2.460': attribute type 10 has an invalid length.
[  449.964887][ T5794] FAULT_INJECTION: forcing a failure.
[  449.964887][ T5794] name failslab, interval 1, probability 0, space 0, times 0
[  450.036811][ T5794] CPU: 0 PID: 5794 Comm: syz.4.469 Not tainted 6.1.129-syzkaller #0
[  450.044878][ T5794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  450.054964][ T5794] Call Trace:
[  450.058269][ T5794]  <TASK>
[  450.061224][ T5794]  dump_stack_lvl+0x1e3/0x2cb
[  450.065951][ T5794]  ? nf_tcp_handle_invalid+0x647/0x647
[  450.071455][ T5794]  ? panic+0x764/0x764
[  450.075570][ T5794]  should_fail_ex+0x3a6/0x4d0
[  450.080316][ T5794]  should_failslab+0x5/0x20
[  450.084855][ T5794]  slab_pre_alloc_hook+0x59/0x300
[  450.089925][ T5794]  kmem_cache_alloc_node+0x52/0x310
[  450.095159][ T5794]  ? alloc_vmap_area+0x28e/0x1ac0
[  450.100245][ T5794]  alloc_vmap_area+0x28e/0x1ac0
[  450.105160][ T5794]  ? vm_map_ram+0xb20/0xb20
[  450.109727][ T5794]  __get_vm_area_node+0x16c/0x360
[  450.114801][ T5794]  __vmalloc_node_range+0x37d/0x14b0
[  450.120133][ T5794]  ? copy_process+0x637/0x40a0
[  450.124948][ T5794]  ? percpu_ref_put+0x12/0x100
[  450.129754][ T5794]  ? __lock_acquire+0x1f80/0x1f80
[  450.134831][ T5794]  ? slab_post_alloc_hook+0x19e/0x3a0
[  450.140346][ T5794]  ? free_vm_area+0x50/0x50
[  450.144898][ T5794]  ? arch_dup_task_struct+0x3b/0x90
[  450.150141][ T5794]  dup_task_struct+0x3e5/0x6d0
[  450.154974][ T5794]  ? copy_process+0x637/0x40a0
[  450.159763][ T5794]  ? _raw_spin_unlock_irq+0x1f/0x40
[  450.164996][ T5794]  copy_process+0x637/0x40a0
[  450.169626][ T5794]  ? get_pid_task+0x1f/0x1e0
[  450.174251][ T5794]  ? __lock_acquire+0x1f80/0x1f80
[  450.179314][ T5794]  ? kstrtouint_from_user+0x124/0x180
[  450.184740][ T5794]  ? idle_dummy+0x10/0x10
[  450.189116][ T5794]  kernel_clone+0x222/0x920
[  450.193666][ T5794]  ? create_io_thread+0x1a0/0x1a0
[  450.198731][ T5794]  ? __mutex_unlock_slowpath+0x218/0x750
[  450.204416][ T5794]  ? file_end_write+0x250/0x250
[  450.209439][ T5794]  __x64_sys_clone+0x242/0x2c0
[  450.214233][ T5794]  ? __fget_files+0x435/0x4a0
[  450.218948][ T5794]  ? __do_sys_vfork+0x140/0x140
[  450.223843][ T5794]  ? print_irqtrace_events+0x210/0x210
[  450.229348][ T5794]  ? syscall_enter_from_user_mode+0x2e/0x230
[  450.235369][ T5794]  ? lockdep_hardirqs_on+0x94/0x130
[  450.240611][ T5794]  ? syscall_enter_from_user_mode+0x2e/0x230
[  450.246629][ T5794]  do_syscall_64+0x3b/0xb0
[  450.251082][ T5794]  ? clear_bhb_loop+0x45/0xa0
[  450.255791][ T5794]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  450.261708][ T5794] RIP: 0033:0x7fede458d169
[  450.266154][ T5794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  450.285792][ T5794] RSP: 002b:00007fede530bfe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[  450.294241][ T5794] RAX: ffffffffffffffda RBX: 00007fede47a5fa0 RCX: 00007fede458d169
[  450.302248][ T5794] RDX: 00004000000000c0 RSI: 0000000000000000 RDI: 0000000020000200
[  450.310251][ T5794] RBP: 00007fede530c090 R08: 0000000000000000 R09: 0000000000000000
[  450.318249][ T5794] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001
[  450.326246][ T5794] R13: 0000000000000000 R14: 00007fede47a5fa0 R15: 00007ffd41368738
[  450.334258][ T5794]  </TASK>
[  450.348331][ T5795] netlink: 'syz.3.468': attribute type 10 has an invalid length.
[  450.487010][ T5797] netlink: 6 bytes leftover after parsing attributes in process `syz.1.466'.
[  450.551278][ T5797] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  450.621294][ T5797] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  450.787590][ T5806] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  450.795356][ T5806] IPv6: NLM_F_CREATE should be set when creating new route
[  450.802646][ T5806] IPv6: NLM_F_CREATE should be set when creating new route
[  450.865597][ T5805] netlink: 'syz.3.472': attribute type 3 has an invalid length.
[  450.880594][ T5805] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.472'.
[  451.381729][ T5820] netlink: 'syz.4.477': attribute type 10 has an invalid length.
[  452.332690][ T4282] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18
[  452.648283][ T5840] netlink: 'syz.3.482': attribute type 10 has an invalid length.
[  452.776009][ T5844] netlink: 'syz.4.486': attribute type 3 has an invalid length.
[  452.801379][ T5844] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.486'.
[  452.995233][ T5851] netlink: 184 bytes leftover after parsing attributes in process `syz.0.487'.
[  453.236396][ T5854] netlink: 'syz.4.489': attribute type 10 has an invalid length.
[  454.371841][ T4282] Bluetooth: hci1: command 0x2016 tx timeout
[  454.701716][ T5894] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.496'.
[  454.720242][ T5895] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.496'.
[  454.973641][ T5903] netlink: 'syz.0.498': attribute type 10 has an invalid length.
[  455.026797][ T5907] netlink: 'syz.2.499': attribute type 3 has an invalid length.
[  455.042077][ T5907] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.499'.
[  455.531442][ T5924] netlink: 'syz.1.504': attribute type 10 has an invalid length.
[  455.991356][ T5936] netlink: 'syz.1.510': attribute type 10 has an invalid length.
[  456.422108][ T5946] netlink: 'syz.1.513': attribute type 3 has an invalid length.
[  456.450002][ T5946] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.513'.
[  457.791246][ T5965] netlink: 105988 bytes leftover after parsing attributes in process `syz.3.518'.
[  458.607515][ T5976] netlink: 'syz.0.521': attribute type 10 has an invalid length.
[  458.738594][ T5985] netlink: 'syz.3.525': attribute type 3 has an invalid length.
[  458.757190][ T5985] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.525'.
[  458.837898][ T5987] netlink: 'syz.4.527': attribute type 3 has an invalid length.
[  458.851804][ T5987] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.527'.
[  459.321962][ T6004] netlink: 'syz.1.531': attribute type 3 has an invalid length.
[  459.362547][ T6004] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.531'.
[  459.432837][ T6005] netlink: 'syz.4.532': attribute type 10 has an invalid length.
[  460.494215][ T6013] netlink: 'syz.2.543': attribute type 10 has an invalid length.
[  461.037210][ T6020] netlink: 'syz.1.534': attribute type 3 has an invalid length.
[  461.072616][ T6019] netlink: 'syz.0.536': attribute type 3 has an invalid length.
[  461.129627][ T6020] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.534'.
[  461.146034][ T6019] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.536'.
[  461.329257][ T6027] netlink: 'syz.2.538': attribute type 3 has an invalid length.
[  461.389122][ T6027] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.538'.
[  461.426323][ T6025] netlink: 'syz.4.539': attribute type 10 has an invalid length.
[  461.666128][ T6032] netlink: 'syz.1.541': attribute type 3 has an invalid length.
[  461.755038][ T6032] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.541'.
[  461.889987][ T6042] netlink: 'syz.3.544': attribute type 10 has an invalid length.
[  461.924216][ T6041] netlink: 'syz.2.554': attribute type 10 has an invalid length.
[  462.317200][ T6050] netlink: 'syz.0.548': attribute type 3 has an invalid length.
[  462.360841][ T6050] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.548'.
[  463.811293][ T6065] netlink: 'syz.1.550': attribute type 10 has an invalid length.
[  464.168068][ T6072] netlink: 'syz.3.551': attribute type 3 has an invalid length.
[  464.211360][ T6072] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.551'.
[  464.299979][ T6076] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.553'.
[  464.317069][ T6079] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.555'.
[  464.474203][ T6082] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.556'.
[  464.672352][ T6085] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.557'.
[  466.038531][ T6110] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.566'.
[  466.105197][ T6112] validate_nla: 9 callbacks suppressed
[  466.105275][ T6112] netlink: 'syz.0.576': attribute type 10 has an invalid length.
[  466.417433][ T6122] netlink: 'syz.4.568': attribute type 3 has an invalid length.
[  466.437256][ T6117] netlink: 'syz.3.569': attribute type 10 has an invalid length.
[  466.465483][ T6122] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.568'.
[  466.630071][ T6128] netlink: 'syz.0.570': attribute type 3 has an invalid length.
[  466.659640][ T6128] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.570'.
[  466.812153][ T6131] netlink: 'syz.4.571': attribute type 10 has an invalid length.
[  467.292017][ T6142] netlink: 'syz.0.574': attribute type 10 has an invalid length.
[  468.561888][ T6157] netlink: 'syz.0.582': attribute type 10 has an invalid length.
[  468.622634][ T6165] device caif0 entered promiscuous mode
[  468.797336][ T6169] netlink: 'syz.2.586': attribute type 3 has an invalid length.
[  468.863234][ T6169] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.586'.
[  469.495551][ T6186] netlink: 'syz.2.592': attribute type 10 has an invalid length.
[  471.596372][ T6221] netlink: 'syz.0.602': attribute type 3 has an invalid length.
[  471.632817][ T6221] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.602'.
[  471.784409][ T6226] netlink: 'syz.2.604': attribute type 10 has an invalid length.
[  472.082956][ T6238] netlink: 'syz.3.609': attribute type 10 has an invalid length.
[  473.265662][ T6263] netlink: 'syz.3.618': attribute type 3 has an invalid length.
[  473.284006][ T6263] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.618'.
[  474.020204][ T6277] netlink: 'syz.3.622': attribute type 10 has an invalid length.
[  474.056440][ T6281] netlink: 'syz.1.624': attribute type 10 has an invalid length.
[  474.128517][ T6286] tipc: Failed to clone mcast rcv buffer
[  476.103074][ T6312] netlink: 'syz.2.632': attribute type 3 has an invalid length.
[  476.134292][ T6312] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.632'.
[  476.474681][ T6323] netlink: 'syz.1.638': attribute type 3 has an invalid length.
[  476.541851][ T6323] netlink: 132 bytes leftover after parsing attributes in process `syz.1.638'.
[  476.700661][ T6333] netlink: 'syz.4.639': attribute type 10 has an invalid length.
[  476.827048][ T6325] GPL: port 1(erspan0) entered blocking state
[  476.842918][ T6325] GPL: port 1(erspan0) entered disabled state
[  476.850714][ T6325] device erspan0 entered promiscuous mode
[  477.882819][ T4282] Bluetooth: hci0: command 0x0406 tx timeout
[  477.885287][ T4284] Bluetooth: hci3: command 0x0406 tx timeout
[  477.888911][ T4292] Bluetooth: hci1: command 0x0406 tx timeout
[  477.894976][ T4290] Bluetooth: hci4: command 0x0406 tx timeout
[  477.900893][ T4289] Bluetooth: hci2: command 0x0406 tx timeout
[  478.337108][ T6364] netlink: 'syz.2.650': attribute type 3 has an invalid length.
[  478.372958][ T6364] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.650'.
[  478.701620][ T6379] netlink: 'syz.3.653': attribute type 10 has an invalid length.
[  479.013591][ T6378] netlink: 830 bytes leftover after parsing attributes in process `syz.2.655'.
[  479.052933][ T6378] team0: default FDB implementation only supports local addresses
[  479.247207][ T6384] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  479.254912][ T6384] IPv6: NLM_F_CREATE should be set when creating new route
[  479.263020][ T6384] IPv6: NLM_F_CREATE should be set when creating new route
[  479.270701][ T6384] IPv6: NLM_F_CREATE should be set when creating new route
[  482.270121][ T6415] netlink: 'syz.3.665': attribute type 3 has an invalid length.
[  482.309723][ T6415] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.665'.
[  482.549268][ T6419] netlink: 'syz.0.667': attribute type 10 has an invalid length.
[  482.891145][ T6426] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  482.898661][ T6426] IPv6: NLM_F_CREATE should be set when creating new route
[  482.906489][ T6426] IPv6: NLM_F_CREATE should be set when creating new route
[  482.914292][ T6426] IPv6: NLM_F_CREATE should be set when creating new route
[  485.136999][ T6462] netlink: 'syz.4.680': attribute type 10 has an invalid length.
[  485.527976][ T6465] netlink: 'syz.2.681': attribute type 3 has an invalid length.
[  485.606971][ T6465] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.681'.
[  485.748120][ T6472] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  485.755819][ T6472] IPv6: NLM_F_CREATE should be set when creating new route
[  485.763627][ T6472] IPv6: NLM_F_CREATE should be set when creating new route
[  485.771261][ T6472] IPv6: NLM_F_CREATE should be set when creating new route
[  485.947706][ T6473] netlink: 'syz.4.685': attribute type 2 has an invalid length.
[  485.992605][ T6473] netlink: 10 bytes leftover after parsing attributes in process `syz.4.685'.
[  492.097886][ T6500] netlink: 'syz.3.694': attribute type 10 has an invalid length.
[  492.949935][ T6522] netlink: 'syz.2.698': attribute type 3 has an invalid length.
[  492.992903][ T6522] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.698'.
[  493.116057][ T6526] FAULT_INJECTION: forcing a failure.
[  493.116057][ T6526] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  493.172599][ T6526] CPU: 0 PID: 6526 Comm: syz.0.702 Not tainted 6.1.129-syzkaller #0
[  493.180665][ T6526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  493.191195][ T6526] Call Trace:
[  493.194514][ T6526]  <TASK>
[  493.197475][ T6526]  dump_stack_lvl+0x1e3/0x2cb
[  493.202220][ T6526]  ? nf_tcp_handle_invalid+0x647/0x647
[  493.207737][ T6526]  ? panic+0x764/0x764
[  493.211866][ T6526]  ? snprintf+0xd6/0x120
[  493.216156][ T6526]  should_fail_ex+0x3a6/0x4d0
[  493.220900][ T6526]  _copy_to_user+0x2b/0x130
[  493.225498][ T6526]  simple_read_from_buffer+0xc6/0x150
[  493.230938][ T6526]  proc_fail_nth_read+0x1a3/0x210
[  493.236024][ T6526]  ? proc_fault_inject_write+0x390/0x390
[  493.241718][ T6526]  ? fsnotify_perm+0x439/0x590
[  493.246541][ T6526]  ? proc_fault_inject_write+0x390/0x390
[  493.252224][ T6526]  vfs_read+0x2ed/0xbf0
[  493.256514][ T6526]  ? __fdget_pos+0x2ba/0x360
[  493.261146][ T6526]  ? kernel_read+0x1f0/0x1f0
[  493.265778][ T6526]  ? __fget_files+0x28/0x4a0
[  493.270403][ T6526]  ? __fget_files+0x435/0x4a0
[  493.275123][ T6526]  ? __fdget_pos+0x2ba/0x360
[  493.279757][ T6526]  ? ksys_read+0x77/0x2c0
[  493.284135][ T6526]  ksys_read+0x19c/0x2c0
[  493.288423][ T6526]  ? print_irqtrace_events+0x210/0x210
[  493.293941][ T6526]  ? vfs_write+0xbc0/0xbc0
[  493.298401][ T6526]  ? syscall_enter_from_user_mode+0x2e/0x230
[  493.304447][ T6526]  ? lockdep_hardirqs_on+0x94/0x130
[  493.309696][ T6526]  ? syscall_enter_from_user_mode+0x2e/0x230
[  493.315712][ T6526]  do_syscall_64+0x3b/0xb0
[  493.320156][ T6526]  ? clear_bhb_loop+0x45/0xa0
[  493.324856][ T6526]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  493.330768][ T6526] RIP: 0033:0x7f9fccb8bb7c
[  493.335196][ T6526] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  493.354830][ T6526] RSP: 002b:00007f9fcdaa9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  493.363257][ T6526] RAX: ffffffffffffffda RBX: 00007f9fccda5fa0 RCX: 00007f9fccb8bb7c
[  493.371235][ T6526] RDX: 000000000000000f RSI: 00007f9fcdaa90a0 RDI: 0000000000000006
[  493.379212][ T6526] RBP: 00007f9fcdaa9090 R08: 0000000000000000 R09: 0000000000000000
[  493.387191][ T6526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  493.395167][ T6526] R13: 0000000000000000 R14: 00007f9fccda5fa0 R15: 00007ffcf6d14b58
[  493.403162][ T6526]  </TASK>
[  493.488994][ T6529] netlink: 'syz.1.703': attribute type 3 has an invalid length.
[  493.502804][ T6529] netlink: 'syz.1.703': attribute type 1 has an invalid length.
[  493.541621][ T6531] netlink: 114704 bytes leftover after parsing attributes in process `syz.1.703'.
[  493.875540][ T6547] netlink: 'syz.3.708': attribute type 21 has an invalid length.
[  493.945269][ T6547] IPv6: NLM_F_CREATE should be specified when creating new route
[  494.484690][ T6566] netlink: 'syz.1.715': attribute type 3 has an invalid length.
[  494.498877][ T6566] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.715'.
[  494.746488][ T6559] netlink: 'syz.0.712': attribute type 10 has an invalid length.
[  495.273634][ T6577] device sit0 entered promiscuous mode
[  495.340581][ T6583] netlink: 'syz.1.722': attribute type 3 has an invalid length.
[  495.368036][ T6583] netlink: 132 bytes leftover after parsing attributes in process `syz.1.722'.
[  497.032947][ T6603] netlink: 'syz.1.727': attribute type 3 has an invalid length.
[  497.074061][ T6603] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.727'.
[  497.337537][ T6614] netlink: 'syz.0.731': attribute type 10 has an invalid length.
[  498.733483][ T6668] syz.0.740[6668] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  498.733711][ T6668] syz.0.740[6668] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  499.085614][ T6675] netlink: 114704 bytes leftover after parsing attributes in process `syz.3.742'.
[  499.117385][ T6677] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.741'.
[  499.155852][ T6676] netlink: 'syz.0.743': attribute type 3 has an invalid length.
[  499.168250][ T6675] debugfs: Directory '!!
' with parent 'ieee80211' already present!
[  499.180784][ T6676] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.743'.
[  499.528180][ T6682] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  499.912453][ T6699] netlink: 'syz.4.750': attribute type 10 has an invalid length.
[  500.053259][ T6705] netlink: 'syz.3.754': attribute type 3 has an invalid length.
[  500.073122][ T6705] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.754'.
[  500.232798][ T6701] netlink: 'syz.2.752': attribute type 27 has an invalid length.
[  500.510505][ T6710] netlink: 'syz.0.756': attribute type 10 has an invalid length.
[  500.547275][ T6713] netlink: 'syz.4.757': attribute type 3 has an invalid length.
[  500.597542][ T6713] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.757'.
[  501.052324][ T6727] netlink: 124 bytes leftover after parsing attributes in process `syz.0.763'.
[  501.292855][ T6735] netlink: 60 bytes leftover after parsing attributes in process `syz.1.762'.
[  501.418457][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[  501.424955][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[  502.039625][ T6735] netlink: 60 bytes leftover after parsing attributes in process `syz.1.762'.
[  502.049877][ T6736] netlink: 61211 bytes leftover after parsing attributes in process `syz.4.764'.
[  502.342276][ T6749] netlink: 'syz.4.766': attribute type 2 has an invalid length.
[  502.488563][ T6756] netlink: 'syz.3.767': attribute type 10 has an invalid length.
[  503.503271][ T6768] netlink: 'syz.0.772': attribute type 3 has an invalid length.
[  503.538457][ T6768] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.772'.
[  503.594017][ T6766] netlink: 'syz.2.771': attribute type 10 has an invalid length.
[  504.065083][ T6791] netlink: 'syz.1.780': attribute type 21 has an invalid length.
[  504.105952][ T6791] netlink: 128 bytes leftover after parsing attributes in process `syz.1.780'.
[  504.176760][ T6791] netlink: 'syz.1.780': attribute type 5 has an invalid length.
[  504.185736][ T6791] netlink: 'syz.1.780': attribute type 6 has an invalid length.
[  504.193931][ T6791] netlink: 3 bytes leftover after parsing attributes in process `syz.1.780'.
[  504.351348][ T6799] netlink: 'syz.3.785': attribute type 10 has an invalid length.
[  505.348127][ T6808] netlink: 'syz.1.789': attribute type 3 has an invalid length.
[  505.368081][ T6808] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.789'.
[  505.389481][ T6811] netlink: 'syz.0.788': attribute type 21 has an invalid length.
[  505.399668][ T6811] netlink: 128 bytes leftover after parsing attributes in process `syz.0.788'.
[  505.410342][ T6811] netlink: 'syz.0.788': attribute type 5 has an invalid length.
[  505.421155][ T6811] netlink: 3 bytes leftover after parsing attributes in process `syz.0.788'.
[  505.657321][ T6819] netlink: 40 bytes leftover after parsing attributes in process `syz.1.793'.
[  505.692231][ T6819] bridge0: port 3(macvlan1) entered blocking state
[  505.709668][ T6819] bridge0: port 3(macvlan1) entered disabled state
[  505.718375][ T6819] device macvlan1 entered promiscuous mode
[  505.725709][ T6819] bridge0: port 3(macvlan1) entered blocking state
[  505.732458][ T6819] bridge0: port 3(macvlan1) entered forwarding state
[  505.744016][ T6821] netlink: 4 bytes leftover after parsing attributes in process `syz.0.794'.
[  506.109329][ T6831] netlink: 67 bytes leftover after parsing attributes in process `syz.0.799'.
[  506.625792][ T6847] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.804'.
[  507.238737][ T6854] netlink: 40 bytes leftover after parsing attributes in process `syz.2.807'.
[  507.280215][ T6854] bridge0: port 3(macvlan1) entered blocking state
[  507.322821][ T6854] bridge0: port 3(macvlan1) entered disabled state
[  507.363816][ T6854] device macvlan1 entered promiscuous mode
[  507.370911][ T6854] bridge0: port 3(macvlan1) entered blocking state
[  507.377690][ T6854] bridge0: port 3(macvlan1) entered forwarding state
[  507.529757][ T6867] validate_nla: 12 callbacks suppressed
[  507.530067][ T6867] netlink: 'syz.1.812': attribute type 10 has an invalid length.
[  507.725825][ T6873] netlink: 'syz.4.815': attribute type 2 has an invalid length.
[  507.742565][ T6873] FAULT_INJECTION: forcing a failure.
[  507.742565][ T6873] name failslab, interval 1, probability 0, space 0, times 0
[  507.781784][ T6873] CPU: 0 PID: 6873 Comm: syz.4.815 Not tainted 6.1.129-syzkaller #0
[  507.789852][ T6873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  507.799946][ T6873] Call Trace:
[  507.803259][ T6873]  <TASK>
[  507.806233][ T6873]  dump_stack_lvl+0x1e3/0x2cb
[  507.810970][ T6873]  ? nf_tcp_handle_invalid+0x647/0x647
[  507.816485][ T6873]  ? panic+0x764/0x764
[  507.820604][ T6873]  ? __might_sleep+0xb0/0xb0
[  507.825246][ T6873]  should_fail_ex+0x3a6/0x4d0
[  507.829980][ T6873]  should_failslab+0x5/0x20
[  507.831180][ T6876] netlink: 'syz.1.816': attribute type 10 has an invalid length.
[  507.834508][ T6873]  slab_pre_alloc_hook+0x59/0x300
[  507.834549][ T6873]  ? ovs_dp_cmd_new+0x1d7/0xc10
[  507.834576][ T6873]  __kmem_cache_alloc_node+0x47/0x260
[  507.857620][ T6873]  ? ovs_dp_cmd_new+0x1d7/0xc10
[  507.862511][ T6873]  kmalloc_trace+0x26/0xe0
[  507.866975][ T6873]  ovs_dp_cmd_new+0x1d7/0xc10
[  507.871719][ T6873]  ? destroy_dp_rcu+0xa0/0xa0
[  507.876446][ T6873]  ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290
[  507.882832][ T6873]  genl_rcv_msg+0xbfa/0xf50
[  507.887444][ T6873]  ? genl_bind+0x400/0x400
[  507.891929][ T6873]  ? read_lock_is_recursive+0x10/0x10
[  507.897367][ T6873]  ? ref_tracker_free+0x638/0x7d0
[  507.902442][ T6873]  ? destroy_dp_rcu+0xa0/0xa0
[  507.907165][ T6873]  ? refcount_inc+0x80/0x80
[  507.911718][ T6873]  ? __copy_skb_header+0x47b/0x600
[  507.916877][ T6873]  netlink_rcv_skb+0x1cd/0x410
[  507.921685][ T6873]  ? genl_bind+0x400/0x400
[  507.926146][ T6873]  ? netlink_ack+0x12a0/0x12a0
[  507.931045][ T6873]  genl_rcv+0x24/0x40
[  507.935073][ T6873]  netlink_unicast+0x7e2/0x970
[  507.939891][ T6873]  ? netlink_detachskb+0x90/0x90
[  507.944864][ T6873]  ? __virt_addr_valid+0x45b/0x530
[  507.950028][ T6873]  ? __phys_addr_symbol+0x2b/0x70
[  507.955100][ T6873]  ? __check_object_size+0x4dd/0xa30
[  507.960446][ T6873]  ? bpf_lsm_netlink_send+0x5/0x10
[  507.965609][ T6873]  netlink_sendmsg+0xa26/0xd60
[  507.970427][ T6873]  ? netlink_getsockopt+0x580/0x580
[  507.975669][ T6873]  ? aa_sock_msg_perm+0x91/0x150
[  507.980650][ T6873]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  507.985984][ T6873]  ? security_socket_sendmsg+0x7d/0xa0
[  507.991498][ T6873]  ? netlink_getsockopt+0x580/0x580
[  507.996751][ T6873]  ____sys_sendmsg+0x5d3/0x9a0
[  508.001570][ T6873]  ? __sys_sendmsg_sock+0x30/0x30
[  508.006688][ T6873]  __sys_sendmsg+0x2a9/0x390
[  508.011326][ T6873]  ? ____sys_sendmsg+0x9a0/0x9a0
[  508.016300][ T6873]  ? vfs_write+0x6cf/0xbc0
[  508.020789][ T6873]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  508.026830][ T6873]  ? syscall_enter_from_user_mode+0x2e/0x230
[  508.032862][ T6873]  ? lockdep_hardirqs_on+0x94/0x130
[  508.038110][ T6873]  ? syscall_enter_from_user_mode+0x2e/0x230
[  508.044145][ T6873]  do_syscall_64+0x3b/0xb0
[  508.046996][ T6880] netlink: 'syz.0.818': attribute type 3 has an invalid length.
[  508.048598][ T6873]  ? clear_bhb_loop+0x45/0xa0
[  508.048632][ T6873]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  508.048658][ T6873] RIP: 0033:0x7fede458d169
[  508.048679][ T6873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  508.090980][ T6873] RSP: 002b:00007fede530c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  508.099430][ T6873] RAX: ffffffffffffffda RBX: 00007fede47a5fa0 RCX: 00007fede458d169
[  508.107459][ T6873] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 0000000000000003
[  508.115455][ T6873] RBP: 00007fede530c090 R08: 0000000000000000 R09: 0000000000000000
[  508.123448][ T6873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  508.131440][ T6873] R13: 0000000000000000 R14: 00007fede47a5fa0 R15: 00007ffd41368738
[  508.139469][ T6873]  </TASK>
[  509.111544][ T6876] bridge0: port 3(macvlan1) entered disabled state
[  509.172252][ T6876] device macvlan1 left promiscuous mode
[  509.179380][ T6876] bridge0: port 3(macvlan1) entered disabled state
[  509.217271][ T6888] netlink: 'syz.3.819': attribute type 10 has an invalid length.
[  509.471552][ T6900] netlink: 'syz.3.825': attribute type 21 has an invalid length.
[  509.542869][ T6900] syz.3.825 uses obsolete (PF_INET,SOCK_PACKET)
[  509.600134][ T6900] netlink: 'syz.3.825': attribute type 30 has an invalid length.
[  509.633453][ T6904] netlink: 'syz.4.827': attribute type 10 has an invalid length.
[  510.717071][ T6925] netlink: 'syz.2.834': attribute type 3 has an invalid length.
[  510.743785][ T6925] __nla_validate_parse: 2 callbacks suppressed
[  510.743830][ T6925] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.834'.
[  510.969661][ T6928] netlink: 'syz.1.835': attribute type 10 has an invalid length.
[  511.185393][ T6943] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.839'.
[  511.197503][ T6943] netlink: zone id is out of range
[  511.466176][ T6943] netlink: del zone limit has 4 unknown bytes
[  511.855030][ T6958] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.845'.
[  511.891133][ T6958] netlink: zone id is out of range
[  511.937826][ T6958] netlink: del zone limit has 4 unknown bytes
[  512.041984][ T6962] FAULT_INJECTION: forcing a failure.
[  512.041984][ T6962] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  512.092745][ T6962] CPU: 0 PID: 6962 Comm: syz.3.848 Not tainted 6.1.129-syzkaller #0
[  512.100824][ T6962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  512.110950][ T6962] Call Trace:
[  512.114283][ T6962]  <TASK>
[  512.117261][ T6962]  dump_stack_lvl+0x1e3/0x2cb
[  512.122020][ T6962]  ? nf_tcp_handle_invalid+0x647/0x647
[  512.127551][ T6962]  ? panic+0x764/0x764
[  512.131702][ T6962]  ? __lock_acquire+0x1f80/0x1f80
[  512.136840][ T6962]  should_fail_ex+0x3a6/0x4d0
[  512.141619][ T6962]  _copy_from_user+0x2b/0x170
[  512.146391][ T6962]  iovec_from_user+0x13d/0x380
[  512.151311][ T6962]  ? __might_fault+0xa1/0x110
[  512.156076][ T6962]  __import_iovec+0x72/0x4c0
[  512.160773][ T6962]  import_iovec+0xe6/0x120
[  512.165283][ T6962]  copy_msghdr_from_user+0x527/0x670
[  512.170672][ T6962]  ? sendmsg_copy_msghdr+0x70/0x70
[  512.175919][ T6962]  __sys_sendmsg+0x236/0x390
[  512.180594][ T6962]  ? ____sys_sendmsg+0x9a0/0x9a0
[  512.185597][ T6962]  ? vfs_write+0x6cf/0xbc0
[  512.190202][ T6962]  ? perf_trace_run_bpf_submit+0xf7/0x1d0
[  512.196042][ T6962]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  512.202131][ T6962]  ? syscall_enter_from_user_mode+0x2e/0x230
[  512.208185][ T6962]  ? lockdep_hardirqs_on+0x94/0x130
[  512.213452][ T6962]  ? syscall_enter_from_user_mode+0x2e/0x230
[  512.219513][ T6962]  do_syscall_64+0x3b/0xb0
[  512.224614][ T6962]  ? clear_bhb_loop+0x45/0xa0
[  512.229351][ T6962]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  512.235302][ T6962] RIP: 0033:0x7ffba878d169
[  512.239775][ T6962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  512.259452][ T6962] RSP: 002b:00007ffba9524038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  512.268045][ T6962] RAX: ffffffffffffffda RBX: 00007ffba89a5fa0 RCX: 00007ffba878d169
[  512.276104][ T6962] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 0000000000000004
[  512.284124][ T6962] RBP: 00007ffba9524090 R08: 0000000000000000 R09: 0000000000000000
[  512.292162][ T6962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  512.300196][ T6962] R13: 0000000000000000 R14: 00007ffba89a5fa0 R15: 00007ffea8f65a48
[  512.308278][ T6962]  </TASK>
[  512.406404][ T6966] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.850'.
[  512.565267][ T6968] validate_nla: 2 callbacks suppressed
[  512.565389][ T6968] netlink: 'syz.2.851': attribute type 10 has an invalid length.
[  512.848939][ T6979] netlink: 'syz.0.854': attribute type 10 has an invalid length.
[  513.402161][ T6999] syz.3.864[6999] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  513.402347][ T6999] syz.3.864[6999] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  513.507237][ T7003] netlink: 'syz.3.864': attribute type 1 has an invalid length.
[  513.582565][ T7003] netlink: 5 bytes leftover after parsing attributes in process `syz.3.864'.
[  513.710505][ T7008] netlink: 'syz.2.865': attribute type 3 has an invalid length.
[  513.719131][ T7008] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.865'.
[  513.919615][ T7013] netlink: 'syz.2.867': attribute type 10 has an invalid length.
[  514.150699][ T7020] netlink: 'syz.2.871': attribute type 10 has an invalid length.
[  514.493582][ T7031] netlink: 'syz.0.874': attribute type 21 has an invalid length.
[  514.522741][ T7031] netlink: 'syz.0.874': attribute type 5 has an invalid length.
[  514.648405][ T7042] netlink: 'syz.1.878': attribute type 3 has an invalid length.
[  514.666135][ T7042] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.878'.
[  514.975839][ T7048] netlink: 'syz.0.881': attribute type 10 has an invalid length.
[  515.411481][ T7063] netlink: 56 bytes leftover after parsing attributes in process `syz.3.886'.
[  515.449501][ T7063] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  516.869077][ T7084] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.893'.
[  517.633457][ T7114] validate_nla: 4 callbacks suppressed
[  517.633480][ T7114] netlink: 'syz.3.905': attribute type 1 has an invalid length.
[  517.647892][ T7114] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.905'.
[  517.664804][ T7114] bond0: (slave team0): Error: Slave device does not support XDP
[  518.738519][ T7127] FAULT_INJECTION: forcing a failure.
[  518.738519][ T7127] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  518.848637][ T7127] CPU: 0 PID: 7127 Comm: syz.3.910 Not tainted 6.1.129-syzkaller #0
[  518.856749][ T7127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  518.866882][ T7127] Call Trace:
[  518.870189][ T7127]  <TASK>
[  518.873147][ T7127]  dump_stack_lvl+0x1e3/0x2cb
[  518.877893][ T7127]  ? nf_tcp_handle_invalid+0x647/0x647
[  518.883410][ T7127]  ? panic+0x764/0x764
[  518.887528][ T7127]  ? __lock_acquire+0x1f80/0x1f80
[  518.892603][ T7127]  should_fail_ex+0x3a6/0x4d0
[  518.897330][ T7127]  _copy_from_user+0x2b/0x170
[  518.902056][ T7127]  iovec_from_user+0x13d/0x380
[  518.906853][ T7127]  ? __might_fault+0xa1/0x110
[  518.911583][ T7127]  __import_iovec+0x72/0x4c0
[  518.916195][ T7127]  import_iovec+0xe6/0x120
[  518.920627][ T7127]  copy_msghdr_from_user+0x527/0x670
[  518.925974][ T7127]  ? sendmsg_copy_msghdr+0x70/0x70
[  518.931108][ T7127]  __sys_recvmsg+0x24b/0x3d0
[  518.935707][ T7127]  ? perf_trace_preemptirq_template+0x2d1/0x3d0
[  518.941970][ T7127]  ? ____sys_recvmsg+0x530/0x530
[  518.946971][ T7127]  ? rcu_is_watching+0x11/0xb0
[  518.951757][ T7127]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  518.957929][ T7127]  ? lockdep_hardirqs_on+0x94/0x130
[  518.963151][ T7127]  ? syscall_enter_from_user_mode+0x37/0x230
[  518.969149][ T7127]  ? syscall_enter_from_user_mode+0x2e/0x230
[  518.975148][ T7127]  do_syscall_64+0x3b/0xb0
[  518.979668][ T7127]  ? clear_bhb_loop+0x45/0xa0
[  518.984360][ T7127]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  518.990267][ T7127] RIP: 0033:0x7ffba878d169
[  518.994692][ T7127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  519.014307][ T7127] RSP: 002b:00007ffba9503038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  519.022762][ T7127] RAX: ffffffffffffffda RBX: 00007ffba89a6080 RCX: 00007ffba878d169
[  519.030750][ T7127] RDX: 0000000000000040 RSI: 0000400000000240 RDI: 0000000000000006
[  519.038733][ T7127] RBP: 00007ffba9503090 R08: 0000000000000000 R09: 0000000000000000
[  519.046711][ T7127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  519.054690][ T7127] R13: 0000000000000000 R14: 00007ffba89a6080 R15: 00007ffea8f65a48
[  519.062681][ T7127]  </TASK>
[  519.128541][ T7129] netlink: 'syz.0.911': attribute type 10 has an invalid length.
[  519.231701][ T7134] netlink: 'syz.2.913': attribute type 10 has an invalid length.
[  519.252017][ T7137] netlink: 'syz.1.912': attribute type 3 has an invalid length.
[  519.271348][ T7137] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.912'.
[  519.517379][ T7146] netlink: 68 bytes leftover after parsing attributes in process `syz.1.917'.
[  520.448923][ T7158] netlink: 'syz.4.921': attribute type 6 has an invalid length.
[  520.552748][ T7158] netlink: 1034 bytes leftover after parsing attributes in process `syz.4.921'.
[  521.392934][ T7171] netlink: 'syz.4.926': attribute type 10 has an invalid length.
[  521.850851][ T7174] netlink: 'syz.3.927': attribute type 10 has an invalid length.
[  521.971747][ T7177] netlink: 'syz.0.928': attribute type 3 has an invalid length.
[  521.987441][ T7177] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.928'.
[  521.998407][ T7180] netlink: 'syz.4.930': attribute type 10 has an invalid length.
[  522.475885][ T7192] netlink: 'syz.2.934': attribute type 3 has an invalid length.
[  522.485512][ T7192] netlink: 13435 bytes leftover after parsing attributes in process `syz.2.934'.
[  523.418362][ T7205] netlink: 'syz.1.940': attribute type 10 has an invalid length.
[  524.165982][ T7215] netlink: 'syz.0.942': attribute type 10 has an invalid length.
[  525.583832][ T7235] netlink: 'syz.4.949': attribute type 3 has an invalid length.
[  525.626689][ T7235] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.949'.
[  525.967745][ T7245] netlink: 'syz.4.953': attribute type 10 has an invalid length.
[  526.216955][ T7249] netlink: 'syz.1.955': attribute type 10 has an invalid length.
[  526.820768][ T7273] FAULT_INJECTION: forcing a failure.
[  526.820768][ T7273] name failslab, interval 1, probability 0, space 0, times 0
[  526.844160][ T7269] netlink: 'syz.4.963': attribute type 3 has an invalid length.
[  526.859189][ T7272] netlink: 10 bytes leftover after parsing attributes in process `syz.2.965'.
[  526.862955][ T7269] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.963'.
[  526.871651][ T7273] CPU: 0 PID: 7273 Comm: syz.3.964 Not tainted 6.1.129-syzkaller #0
[  526.885469][ T7273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  526.895563][ T7273] Call Trace:
[  526.898875][ T7273]  <TASK>
[  526.901839][ T7273]  dump_stack_lvl+0x1e3/0x2cb
[  526.906563][ T7273]  ? nf_tcp_handle_invalid+0x647/0x647
[  526.912053][ T7273]  ? panic+0x764/0x764
[  526.916145][ T7273]  should_fail_ex+0x3a6/0x4d0
[  526.920846][ T7273]  should_failslab+0x5/0x20
[  526.925367][ T7273]  slab_pre_alloc_hook+0x59/0x300
[  526.930416][ T7273]  ? sctp_association_new+0x87/0x24a0
[  526.935803][ T7273]  __kmem_cache_alloc_node+0x47/0x260
[  526.941193][ T7273]  ? sctp_add_bind_addr+0xa6/0x3a0
[  526.946323][ T7273]  ? sctp_association_new+0x87/0x24a0
[  526.951705][ T7273]  kmalloc_trace+0x26/0xe0
[  526.956139][ T7273]  sctp_association_new+0x87/0x24a0
[  526.961356][ T7273]  ? sctp_do_bind+0x6a7/0x980
[  526.966053][ T7273]  sctp_connect_new_asoc+0x2cf/0x6b0
[  526.971354][ T7273]  ? __sctp_connect+0xe10/0xe10
[  526.976218][ T7273]  ? sctp_sendmsg+0xb11/0x33b0
[  526.981011][ T7273]  ? bpf_lsm_sctp_bind_connect+0x5/0x10
[  526.986585][ T7273]  ? security_sctp_bind_connect+0x86/0xb0
[  526.992319][ T7273]  sctp_sendmsg+0x1cfc/0x33b0
[  526.997020][ T7273]  ? aa_sk_perm+0x8e1/0xa60
[  527.001545][ T7273]  ? sctp_getsockopt+0x7f0/0x7f0
[  527.006501][ T7273]  ? aa_af_perm+0x350/0x350
[  527.011017][ T7273]  ? __import_iovec+0x316/0x4c0
[  527.015883][ T7273]  ? inet_sendmsg+0xfc/0x310
[  527.020485][ T7273]  ? inet_send_prepare+0x250/0x250
[  527.025610][ T7273]  ____sys_sendmsg+0x5d3/0x9a0
[  527.030486][ T7273]  ? __sys_sendmsg_sock+0x30/0x30
[  527.035543][ T7273]  __sys_sendmsg+0x2a9/0x390
[  527.040173][ T7273]  ? ____sys_sendmsg+0x9a0/0x9a0
[  527.045124][ T7273]  ? vfs_write+0x6cf/0xbc0
[  527.049607][ T7273]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  527.055624][ T7273]  ? syscall_enter_from_user_mode+0x2e/0x230
[  527.061617][ T7273]  ? lockdep_hardirqs_on+0x94/0x130
[  527.066834][ T7273]  ? syscall_enter_from_user_mode+0x2e/0x230
[  527.072832][ T7273]  do_syscall_64+0x3b/0xb0
[  527.077266][ T7273]  ? clear_bhb_loop+0x45/0xa0
[  527.081959][ T7273]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  527.087868][ T7273] RIP: 0033:0x7ffba878d169
[  527.092314][ T7273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  527.112118][ T7273] RSP: 002b:00007ffba9524038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  527.120547][ T7273] RAX: ffffffffffffffda RBX: 00007ffba89a5fa0 RCX: 00007ffba878d169
[  527.128534][ T7273] RDX: 00000000000000fc RSI: 0000400000000600 RDI: 0000000000000003
[  527.136521][ T7273] RBP: 00007ffba9524090 R08: 0000000000000000 R09: 0000000000000000
[  527.144506][ T7273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  527.152487][ T7273] R13: 0000000000000000 R14: 00007ffba89a5fa0 R15: 00007ffea8f65a48
[  527.160484][ T7273]  </TASK>
[  527.432453][ T7278] netlink: 'syz.2.967': attribute type 10 has an invalid length.
[  528.075257][ T7289] netlink: 'syz.0.971': attribute type 10 has an invalid length.
[  528.095007][ T7298] FAULT_INJECTION: forcing a failure.
[  528.095007][ T7298] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  528.134941][ T7298] CPU: 1 PID: 7298 Comm: syz.4.975 Not tainted 6.1.129-syzkaller #0
[  528.142994][ T7298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  528.153085][ T7298] Call Trace:
[  528.156390][ T7298]  <TASK>
[  528.159340][ T7298]  dump_stack_lvl+0x1e3/0x2cb
[  528.164066][ T7298]  ? nf_tcp_handle_invalid+0x647/0x647
[  528.169550][ T7298]  ? panic+0x764/0x764
[  528.173631][ T7298]  ? __lock_acquire+0x1f80/0x1f80
[  528.178672][ T7298]  ? irqentry_enter+0x33/0x50
[  528.183365][ T7298]  should_fail_ex+0x3a6/0x4d0
[  528.188066][ T7298]  _copy_from_user+0x2b/0x170
[  528.192762][ T7298]  iovec_from_user+0x13d/0x380
[  528.197543][ T7298]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  528.203716][ T7298]  __import_iovec+0x72/0x4c0
[  528.208322][ T7298]  import_iovec+0xe6/0x120
[  528.212749][ T7298]  copy_msghdr_from_user+0x527/0x670
[  528.218047][ T7298]  ? sendmsg_copy_msghdr+0x70/0x70
[  528.223179][ T7298]  __sys_sendmsg+0x236/0x390
[  528.227779][ T7298]  ? ____sys_sendmsg+0x9a0/0x9a0
[  528.232758][ T7298]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  528.238934][ T7298]  ? lockdep_hardirqs_on+0x94/0x130
[  528.244156][ T7298]  ? syscall_enter_from_user_mode+0x37/0x230
[  528.250155][ T7298]  ? syscall_enter_from_user_mode+0x2e/0x230
[  528.256150][ T7298]  do_syscall_64+0x3b/0xb0
[  528.260583][ T7298]  ? clear_bhb_loop+0x45/0xa0
[  528.265360][ T7298]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  528.271264][ T7298] RIP: 0033:0x7fede458d169
[  528.275702][ T7298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  528.295318][ T7298] RSP: 002b:00007fede530c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  528.303745][ T7298] RAX: ffffffffffffffda RBX: 00007fede47a5fa0 RCX: 00007fede458d169
[  528.311735][ T7298] RDX: 0000000000000000 RSI: 00004000000000c0 RDI: 0000000000000003
[  528.319737][ T7298] RBP: 00007fede530c090 R08: 0000000000000000 R09: 0000000000000000
[  528.327719][ T7298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  528.335699][ T7298] R13: 0000000000000000 R14: 00007fede47a5fa0 R15: 00007ffd41368738
[  528.343701][ T7298]  </TASK>
[  528.898136][ T7321] netlink: 'syz.4.980': attribute type 10 has an invalid length.
[  529.091558][ T7325] netlink: 'syz.0.982': attribute type 3 has an invalid length.
[  529.123585][ T7325] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.982'.
[  529.968502][ T7338] netlink: 'syz.3.989': attribute type 10 has an invalid length.
[  530.094875][ T7346] device lo entered promiscuous mode
[  530.100479][ T7346] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  530.478451][ T7355] netlink: 'syz.3.995': attribute type 10 has an invalid length.
[  530.619663][ T7358] netlink: 'syz.2.996': attribute type 3 has an invalid length.
[  530.637976][ T7358] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.996'.
[  532.333916][ T7369] FAULT_INJECTION: forcing a failure.
[  532.333916][ T7369] name failslab, interval 1, probability 0, space 0, times 0
[  532.397281][ T7369] CPU: 0 PID: 7369 Comm: syz.3.1001 Not tainted 6.1.129-syzkaller #0
[  532.405434][ T7369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  532.415527][ T7369] Call Trace:
[  532.418831][ T7369]  <TASK>
[  532.421791][ T7369]  dump_stack_lvl+0x1e3/0x2cb
[  532.426524][ T7369]  ? nf_tcp_handle_invalid+0x647/0x647
[  532.432034][ T7369]  ? panic+0x764/0x764
[  532.436152][ T7369]  ? __might_sleep+0xb0/0xb0
[  532.440784][ T7369]  should_fail_ex+0x3a6/0x4d0
[  532.445601][ T7369]  should_failslab+0x5/0x20
[  532.450149][ T7369]  slab_pre_alloc_hook+0x59/0x300
[  532.455222][ T7369]  ? tomoyo_encode+0x26b/0x530
[  532.460024][ T7369]  __kmem_cache_alloc_node+0x47/0x260
[  532.465480][ T7369]  ? tomoyo_encode+0x26b/0x530
[  532.470283][ T7369]  __kmalloc+0xa1/0x230
[  532.474480][ T7369]  tomoyo_encode+0x26b/0x530
[  532.479113][ T7369]  ? sock_free_inode+0x20/0x20
[  532.483920][ T7369]  tomoyo_realpath_from_path+0x594/0x5d0
[  532.486296][ T7370] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1000'.
[  532.489595][ T7369]  tomoyo_path_number_perm+0x21f/0x7f0
[  532.489654][ T7369]  ? tomoyo_path_number_perm+0x1f2/0x7f0
[  532.489689][ T7369]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  532.515124][ T7369]  ? __fget_files+0x28/0x4a0
[  532.519756][ T7369]  ? __fget_files+0x28/0x4a0
[  532.524356][ T7369]  ? __fget_files+0x435/0x4a0
[  532.529046][ T7369]  ? __fget_files+0x28/0x4a0
[  532.533679][ T7369]  security_file_ioctl+0x6d/0xa0
[  532.538656][ T7369]  __se_sys_ioctl+0x47/0x160
[  532.543273][ T7369]  do_syscall_64+0x3b/0xb0
[  532.547710][ T7369]  ? clear_bhb_loop+0x45/0xa0
[  532.552409][ T7369]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  532.558317][ T7369] RIP: 0033:0x7ffba878d169
[  532.562741][ T7369] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  532.582359][ T7369] RSP: 002b:00007ffba9524038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  532.590805][ T7369] RAX: ffffffffffffffda RBX: 00007ffba89a5fa0 RCX: 00007ffba878d169
[  532.598781][ T7369] RDX: 00004000000000c0 RSI: 0000000000008983 RDI: 0000000000000004
[  532.606759][ T7369] RBP: 00007ffba9524090 R08: 0000000000000000 R09: 0000000000000000
[  532.614735][ T7369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  532.622712][ T7369] R13: 0000000000000000 R14: 00007ffba89a5fa0 R15: 00007ffea8f65a48
[  532.630704][ T7369]  </TASK>
[  532.660974][ T7369] ERROR: Out of memory at tomoyo_realpath_from_path.
[  532.859299][ T7379] netlink: 'syz.4.1005': attribute type 3 has an invalid length.
[  532.906090][ T7379] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1005'.
[  533.427954][ T7392] netlink: 'syz.2.1010': attribute type 3 has an invalid length.
[  533.539551][ T7392] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1010'.
[  533.570238][ T7403] netlink: 'syz.0.1012': attribute type 10 has an invalid length.
[  533.613213][ T7406] netlink: 'syz.4.1013': attribute type 3 has an invalid length.
[  533.622051][ T7406] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1013'.
[  534.496978][ T7421] FAULT_INJECTION: forcing a failure.
[  534.496978][ T7421] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  534.557060][ T7421] CPU: 0 PID: 7421 Comm: syz.2.1017 Not tainted 6.1.129-syzkaller #0
[  534.565220][ T7421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  534.575314][ T7421] Call Trace:
[  534.578616][ T7421]  <TASK>
[  534.581572][ T7421]  dump_stack_lvl+0x1e3/0x2cb
[  534.586302][ T7421]  ? nf_tcp_handle_invalid+0x647/0x647
[  534.591812][ T7421]  ? panic+0x764/0x764
[  534.595925][ T7421]  ? __lock_acquire+0x1f80/0x1f80
[  534.600996][ T7421]  should_fail_ex+0x3a6/0x4d0
[  534.605720][ T7421]  _copy_from_user+0x2b/0x170
[  534.610422][ T7421]  iovec_from_user+0x13d/0x380
[  534.615199][ T7421]  ? __might_fault+0xa1/0x110
[  534.619899][ T7421]  __import_iovec+0x72/0x4c0
[  534.624508][ T7421]  import_iovec+0xe6/0x120
[  534.628964][ T7421]  copy_msghdr_from_user+0x527/0x670
[  534.634273][ T7421]  ? sendmsg_copy_msghdr+0x70/0x70
[  534.639584][ T7421]  __sys_sendmsg+0x236/0x390
[  534.644188][ T7421]  ? ____sys_sendmsg+0x9a0/0x9a0
[  534.649140][ T7421]  ? vfs_write+0x6cf/0xbc0
[  534.653683][ T7421]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  534.659691][ T7421]  ? syscall_enter_from_user_mode+0x2e/0x230
[  534.665687][ T7421]  ? lockdep_hardirqs_on+0x94/0x130
[  534.670903][ T7421]  ? syscall_enter_from_user_mode+0x2e/0x230
[  534.676923][ T7421]  do_syscall_64+0x3b/0xb0
[  534.681361][ T7421]  ? clear_bhb_loop+0x45/0xa0
[  534.686068][ T7421]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  534.691973][ T7421] RIP: 0033:0x7f9e51d8d169
[  534.696402][ T7421] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  534.716019][ T7421] RSP: 002b:00007f9e52bc1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  534.724452][ T7421] RAX: ffffffffffffffda RBX: 00007f9e51fa6080 RCX: 00007f9e51d8d169
[  534.732434][ T7421] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 0000000000000005
[  534.740427][ T7421] RBP: 00007f9e52bc1090 R08: 0000000000000000 R09: 0000000000000000
[  534.748410][ T7421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  534.756475][ T7421] R13: 0000000000000000 R14: 00007f9e51fa6080 R15: 00007ffd7152c668
[  534.764493][ T7421]  </TASK>
[  535.437379][ T7437] netlink: 'syz.4.1022': attribute type 10 has an invalid length.
[  535.504150][ T7444] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1024'.
[  535.638117][ T7446] netlink: 'syz.2.1025': attribute type 10 has an invalid length.
[  535.871414][ T7458] netlink: 'syz.2.1029': attribute type 3 has an invalid length.
[  535.880029][ T7458] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1029'.
[  538.056571][ T7481] netlink: 'syz.0.1037': attribute type 10 has an invalid length.
[  538.314951][ T7493] netlink: 'syz.2.1042': attribute type 3 has an invalid length.
[  538.333571][ T7493] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1042'.
[  538.651481][ T7508] netlink: 'syz.1.1046': attribute type 4 has an invalid length.
[  538.669491][ T7511] FAULT_INJECTION: forcing a failure.
[  538.669491][ T7511] name failslab, interval 1, probability 0, space 0, times 0
[  538.682893][ T7511] CPU: 0 PID: 7511 Comm: syz.4.1049 Not tainted 6.1.129-syzkaller #0
[  538.691014][ T7511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  538.701110][ T7511] Call Trace:
[  538.704419][ T7511]  <TASK>
[  538.707378][ T7511]  dump_stack_lvl+0x1e3/0x2cb
[  538.712112][ T7511]  ? nf_tcp_handle_invalid+0x647/0x647
[  538.717623][ T7511]  ? panic+0x764/0x764
[  538.721785][ T7511]  ? __might_sleep+0xb0/0xb0
[  538.726427][ T7511]  should_fail_ex+0x3a6/0x4d0
[  538.731168][ T7511]  should_failslab+0x5/0x20
[  538.735713][ T7511]  slab_pre_alloc_hook+0x59/0x300
[  538.740766][ T7511]  ? deref_stack_reg+0x17c/0x210
[  538.745732][ T7511]  ? __get_vm_area_node+0x126/0x360
[  538.750952][ T7511]  __kmem_cache_alloc_node+0x47/0x260
[  538.756350][ T7511]  ? __get_vm_area_node+0x126/0x360
[  538.761562][ T7511]  kmalloc_node_trace+0x23/0xe0
[  538.766455][ T7511]  __get_vm_area_node+0x126/0x360
[  538.771508][ T7511]  __vmalloc_node_range+0x37d/0x14b0
[  538.776815][ T7511]  ? bpf_prog_alloc_no_stats+0x34/0x3f0
[  538.782406][ T7511]  ? free_vm_area+0x50/0x50
[  538.786941][ T7511]  ? end_current_label_crit_section+0x170/0x170
[  538.793200][ T7511]  ? bpf_prog_alloc_no_stats+0x34/0x3f0
[  538.798754][ T7511]  __vmalloc+0x75/0x80
[  538.802832][ T7511]  ? bpf_prog_alloc_no_stats+0x34/0x3f0
[  538.808386][ T7511]  bpf_prog_alloc_no_stats+0x34/0x3f0
[  538.813771][ T7511]  ? bpf_prog_alloc+0x13/0x1b0
[  538.818544][ T7511]  bpf_prog_alloc+0x1c/0x1b0
[  538.823147][ T7511]  bpf_prog_load+0x84a/0x1bf0
[  538.827841][ T7511]  ? map_freeze+0x390/0x390
[  538.832353][ T7511]  ? __might_fault+0xa1/0x110
[  538.837056][ T7511]  ? __might_fault+0xbd/0x110
[  538.841748][ T7511]  ? bpf_lsm_bpf+0x5/0x10
[  538.846083][ T7511]  ? security_bpf+0x7d/0xa0
[  538.850597][ T7511]  __sys_bpf+0x382/0x6c0
[  538.854844][ T7511]  ? __fget_files+0x435/0x4a0
[  538.859533][ T7511]  ? bpf_link_show_fdinfo+0x300/0x300
[  538.864913][ T7511]  ? perf_trace_preemptirq_template+0xf4/0x3d0
[  538.871099][ T7511]  ? print_irqtrace_events+0x210/0x210
[  538.876573][ T7511]  ? print_irqtrace_events+0x210/0x210
[  538.882051][ T7511]  ? syscall_enter_from_user_mode+0x2e/0x230
[  538.888048][ T7511]  ? lockdep_hardirqs_on+0x94/0x130
[  538.893258][ T7511]  __x64_sys_bpf+0x78/0x90
[  538.897692][ T7511]  do_syscall_64+0x3b/0xb0
[  538.902126][ T7511]  ? clear_bhb_loop+0x45/0xa0
[  538.906814][ T7511]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  538.912722][ T7511] RIP: 0033:0x7fede458d169
[  538.917155][ T7511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  538.936769][ T7511] RSP: 002b:00007fede530c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  538.945192][ T7511] RAX: ffffffffffffffda RBX: 00007fede47a5fa0 RCX: 00007fede458d169
[  538.953173][ T7511] RDX: 0000000000000048 RSI: 000040000000e000 RDI: 0000000000000005
[  538.961148][ T7511] RBP: 00007fede530c090 R08: 0000000000000000 R09: 0000000000000000
[  538.969125][ T7511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  538.977100][ T7511] R13: 0000000000000000 R14: 00007fede47a5fa0 R15: 00007ffd41368738
[  538.985095][ T7511]  </TASK>
[  538.992460][ T7511] syz.4.1049: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz4,mems_allowed=0-1
[  539.022595][ T7511] CPU: 1 PID: 7511 Comm: syz.4.1049 Not tainted 6.1.129-syzkaller #0
[  539.030740][ T7511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  539.040807][ T7511] Call Trace:
[  539.044090][ T7511]  <TASK>
[  539.047026][ T7511]  dump_stack_lvl+0x1e3/0x2cb
[  539.051732][ T7511]  ? nf_tcp_handle_invalid+0x647/0x647
[  539.057207][ T7511]  ? panic+0x764/0x764
[  539.061288][ T7511]  ? cpuset_print_current_mems_allowed+0x1b/0x350
[  539.067712][ T7511]  ? cpuset_print_current_mems_allowed+0x30f/0x350
[  539.074233][ T7511]  warn_alloc+0x26f/0x400
[  539.078573][ T7511]  ? __get_vm_area_node+0x126/0x360
[  539.083796][ T7511]  ? zone_watermark_ok_safe+0x270/0x270
[  539.089370][ T7511]  ? __get_vm_area_node+0x351/0x360
[  539.094594][ T7511]  __vmalloc_node_range+0x3a2/0x14b0
[  539.099921][ T7511]  ? free_vm_area+0x50/0x50
[  539.104441][ T7511]  ? end_current_label_crit_section+0x170/0x170
[  539.110709][ T7511]  ? bpf_prog_alloc_no_stats+0x34/0x3f0
[  539.116302][ T7511]  __vmalloc+0x75/0x80
[  539.120378][ T7511]  ? bpf_prog_alloc_no_stats+0x34/0x3f0
[  539.125934][ T7511]  bpf_prog_alloc_no_stats+0x34/0x3f0
[  539.131313][ T7511]  ? bpf_prog_alloc+0x13/0x1b0
[  539.136107][ T7511]  bpf_prog_alloc+0x1c/0x1b0
[  539.140707][ T7511]  bpf_prog_load+0x84a/0x1bf0
[  539.145408][ T7511]  ? map_freeze+0x390/0x390
[  539.149922][ T7511]  ? __might_fault+0xa1/0x110
[  539.154623][ T7511]  ? __might_fault+0xbd/0x110
[  539.159314][ T7511]  ? bpf_lsm_bpf+0x5/0x10
[  539.163648][ T7511]  ? security_bpf+0x7d/0xa0
[  539.168167][ T7511]  __sys_bpf+0x382/0x6c0
[  539.172420][ T7511]  ? __fget_files+0x435/0x4a0
[  539.177107][ T7511]  ? bpf_link_show_fdinfo+0x300/0x300
[  539.182485][ T7511]  ? perf_trace_preemptirq_template+0xf4/0x3d0
[  539.188662][ T7511]  ? print_irqtrace_events+0x210/0x210
[  539.194141][ T7511]  ? print_irqtrace_events+0x210/0x210
[  539.199615][ T7511]  ? syscall_enter_from_user_mode+0x2e/0x230
[  539.205615][ T7511]  ? lockdep_hardirqs_on+0x94/0x130
[  539.210821][ T7511]  __x64_sys_bpf+0x78/0x90
[  539.215254][ T7511]  do_syscall_64+0x3b/0xb0
[  539.219685][ T7511]  ? clear_bhb_loop+0x45/0xa0
[  539.224376][ T7511]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  539.230314][ T7511] RIP: 0033:0x7fede458d169
[  539.234735][ T7511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  539.254438][ T7511] RSP: 002b:00007fede530c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  539.262861][ T7511] RAX: ffffffffffffffda RBX: 00007fede47a5fa0 RCX: 00007fede458d169
[  539.270841][ T7511] RDX: 0000000000000048 RSI: 000040000000e000 RDI: 0000000000000005
[  539.278818][ T7511] RBP: 00007fede530c090 R08: 0000000000000000 R09: 0000000000000000
[  539.286804][ T7511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  539.294814][ T7511] R13: 0000000000000000 R14: 00007fede47a5fa0 R15: 00007ffd41368738
[  539.302849][ T7511]  </TASK>
[  539.428521][ T7511] Mem-Info:
[  539.431895][ T7511] active_anon:4668 inactive_anon:0 isolated_anon:0
[  539.431895][ T7511]  active_file:17722 inactive_file:38371 isolated_file:0
[  539.431895][ T7511]  unevictable:768 dirty:41 writeback:25
[  539.431895][ T7511]  slab_reclaimable:20742 slab_unreclaimable:96967
[  539.431895][ T7511]  mapped:30010 shmem:1420 pagetables:624
[  539.431895][ T7511]  sec_pagetables:0 bounce:0
[  539.431895][ T7511]  kernel_misc_reclaimable:0
[  539.431895][ T7511]  free:1322630 free_pcp:10430 free_cma:0
[  539.478085][ T7511] Node 0 active_anon:18672kB inactive_anon:0kB active_file:70888kB inactive_file:153412kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120040kB dirty:164kB writeback:100kB shmem:4144kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11380kB pagetables:2496kB sec_pagetables:0kB all_unreclaimable? no
[  539.515856][ T7511] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  539.549105][ T7511] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  539.631514][ T7511] lowmem_reserve[]: 0 2519 2519 2519 2519
[  539.702244][ T7511] Node 0 DMA32 free:1381240kB boost:0kB min:34628kB low:43284kB high:51940kB reserved_highatomic:0KB active_anon:18472kB inactive_anon:0kB active_file:70888kB inactive_file:153412kB unevictable:1536kB writepending:264kB present:3129332kB managed:2585168kB mlocked:0kB bounce:0kB free_pcp:22776kB local_pcp:12780kB free_cma:0kB
[  539.785385][ T7511] lowmem_reserve[]: 0 0 0 0 0
[  539.790755][ T7511] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:400kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  539.892209][ T7511] lowmem_reserve[]: 0 0 0 0 0
[  539.897123][ T7511] Node 1 Normal free:3893920kB boost:0kB min:55268kB low:69084kB high:82900kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:22740kB local_pcp:14804kB free_cma:0kB
[  539.957037][ T7511] lowmem_reserve[]: 0 0 0 0 0
[  539.961849][ T7511] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  539.975041][ T7511] Node 0 DMA32: 1022*4kB (M) 1778*8kB (UME) 1285*16kB (UME) 721*32kB (UME) 488*64kB (UME) 181*128kB (UME) 55*256kB (UM) 13*512kB (UM) 7*1024kB (ME) 4*2048kB (UM) 300*4096kB (UM) = 1381240kB
[  539.995875][ T7511] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  540.018466][ T7511] Node 1 Normal: 202*4kB (UME) 63*8kB (UME) 34*16kB (UME) 41*32kB (UME) 25*64kB (UME) 10*128kB (UME) 3*256kB (UME) 2*512kB (UM) 1*1024kB (E) 1*2048kB (E) 948*4096kB (M) = 3893920kB
[  540.044961][ T7511] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  540.069877][ T7511] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  540.095127][ T7511] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  540.116026][ T7511] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  540.139284][ T7511] 57513 total pagecache pages
[  540.167345][ T7511] 0 pages in swap cache
[  540.177217][ T7511] Free swap  = 124996kB
[  540.193218][ T7511] Total swap = 124996kB
[  540.197971][ T7511] 2097051 pages RAM
[  540.207651][ T7511] 0 pages HighMem/MovableOnly
[  540.215065][ T7511] 417414 pages reserved
[  540.219265][ T7511] 0 pages cma reserved
[  540.374349][ T7529] netlink: 'syz.2.1056': attribute type 10 has an invalid length.
[  540.450597][ T6621] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  540.473783][ T7536] netlink: 'syz.1.1059': attribute type 3 has an invalid length.
[  540.509939][ T7536] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1059'.
[  540.586911][ T6621] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  540.714407][ T6621] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  540.861123][ T6621] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  541.264731][ T4292] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  541.279950][ T4292] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  541.302533][ T4292] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  541.313109][ T4292] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  541.322261][ T4292] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  541.329845][ T4292] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  542.187481][ T7552] chnl_net:caif_netlink_parms(): no params data found
[  542.258838][ T7586] netlink: 65051 bytes leftover after parsing attributes in process `syz.4.1074'.
[  542.515560][ T7586] device wg2 entered promiscuous mode
[  542.561529][ T7594] netlink: 'syz.0.1076': attribute type 3 has an invalid length.
[  542.580282][ T7594] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1076'.
[  542.740955][ T7592] netlink: 'syz.2.1075': attribute type 10 has an invalid length.
[  542.777689][ T7552] bridge0: port 1(bridge_slave_0) entered blocking state
[  542.790208][ T7552] bridge0: port 1(bridge_slave_0) entered disabled state
[  542.820637][ T7552] device bridge_slave_0 entered promiscuous mode
[  542.929485][ T7552] bridge0: port 2(bridge_slave_1) entered blocking state
[  542.948146][ T7552] bridge0: port 2(bridge_slave_1) entered disabled state
[  542.978043][ T7552] device bridge_slave_1 entered promiscuous mode
[  543.402735][ T4289] Bluetooth: hci3: command 0x0409 tx timeout
[  543.495797][ T7552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  543.532786][ T7552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  543.577665][ T7621] netlink: 'syz.2.1082': attribute type 3 has an invalid length.
[  544.022091][ T7552] team0: Port device team_slave_0 added
[  544.081001][ T7644] netlink: 'syz.0.1088': attribute type 3 has an invalid length.
[  544.107808][ T7644] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1088'.
[  544.322040][ T7552] team0: Port device team_slave_1 added
[  545.482688][ T4289] Bluetooth: hci3: command 0x041b tx timeout
[  545.554034][ T7659] netlink: 'syz.0.1091': attribute type 10 has an invalid length.
[  545.637723][ T7552] batman_adv: batadv0: Adding interface: batadv_slave_0
[  545.662812][ T7552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  545.728111][ T7552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  545.798378][ T6621] device hsr_slave_0 left promiscuous mode
[  545.819063][ T6621] device hsr_slave_1 left promiscuous mode
[  545.848591][ T6621] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  545.872702][ T6621] batman_adv: batadv0: Removing interface: batadv_slave_0
[  545.904918][ T6621] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  545.938292][ T6621] batman_adv: batadv0: Removing interface: batadv_slave_1
[  545.982095][ T6621] device bridge_slave_1 left promiscuous mode
[  546.002850][ T6621] bridge0: port 2(bridge_slave_1) entered disabled state
[  546.063800][ T6621] device bridge_slave_0 left promiscuous mode
[  546.070106][ T6621] bridge0: port 1(bridge_slave_0) entered disabled state
[  546.301518][ T7688] netlink: 'syz.1.1102': attribute type 3 has an invalid length.
[  546.320585][ T7688] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1102'.
[  546.345145][ T6621] device veth1_macvtap left promiscuous mode
[  546.355344][ T6621] device veth0_macvtap left promiscuous mode
[  546.369558][ T6621] device veth1_vlan left promiscuous mode
[  546.380155][ T6621] device veth0_vlan left promiscuous mode
[  546.723490][ T7695] netlink: 1762 bytes leftover after parsing attributes in process `syz.0.1104'.
[  547.069589][ T6621] team0 (unregistering): Port device team_slave_1 removed
[  547.112016][ T6621] team0 (unregistering): Port device team_slave_0 removed
[  547.155712][ T6621] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  547.199343][ T6621] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  547.488363][ T6621] bond0 (unregistering): (slave team0): Releasing backup interface
[  547.562590][ T4292] Bluetooth: hci3: command 0x040f tx timeout
[  547.613112][ T6621] bond0 (unregistering): Released all slaves
[  547.676129][ T7552] batman_adv: batadv0: Adding interface: batadv_slave_1
[  547.683255][ T7552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  547.709803][ T7552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  547.747531][ T7686] netlink: 'syz.4.1101': attribute type 2 has an invalid length.
[  547.756172][ T7686] netlink: 'syz.4.1101': attribute type 8 has an invalid length.
[  547.773116][ T7686] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1101'.
[  548.758847][ T7710] netlink: 'syz.1.1107': attribute type 10 has an invalid length.
[  548.781731][ T7552] device hsr_slave_0 entered promiscuous mode
[  548.810237][ T7552] device hsr_slave_1 entered promiscuous mode
[  548.820073][ T7552] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  548.867149][ T7552] Cannot create hsr debugfs directory
[  549.642846][ T4292] Bluetooth: hci3: command 0x0419 tx timeout
[  550.303907][ T7755] FAULT_INJECTION: forcing a failure.
[  550.303907][ T7755] name failslab, interval 1, probability 0, space 0, times 0
[  550.326623][ T7751] netlink: 'syz.2.1118': attribute type 3 has an invalid length.
[  550.340449][ T7751] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1118'.
[  550.373127][ T7755] CPU: 0 PID: 7755 Comm: syz.4.1119 Not tainted 6.1.129-syzkaller #0
[  550.381364][ T7755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  550.391461][ T7755] Call Trace:
[  550.394776][ T7755]  <TASK>
[  550.397741][ T7755]  dump_stack_lvl+0x1e3/0x2cb
[  550.402484][ T7755]  ? nf_tcp_handle_invalid+0x647/0x647
[  550.408002][ T7755]  ? panic+0x764/0x764
[  550.412119][ T7755]  ? __might_sleep+0xb0/0xb0
[  550.416750][ T7755]  ? __alloc_pages+0x36f/0x770
[  550.421569][ T7755]  should_fail_ex+0x3a6/0x4d0
[  550.426302][ T7755]  should_failslab+0x5/0x20
[  550.430850][ T7755]  slab_pre_alloc_hook+0x59/0x300
[  550.435921][ T7755]  ? alloc_pages+0x50c/0x770
[  550.440552][ T7755]  ? sctp_auth_asoc_copy_shkeys+0x13a/0x580
[  550.446481][ T7755]  __kmem_cache_alloc_node+0x47/0x260
[  550.451944][ T7755]  ? __genradix_ptr_alloc+0x345/0x380
[  550.457364][ T7755]  ? sctp_auth_asoc_copy_shkeys+0x13a/0x580
[  550.463432][ T7755]  kmalloc_trace+0x26/0xe0
[  550.467893][ T7755]  sctp_auth_asoc_copy_shkeys+0x13a/0x580
[  550.473661][ T7755]  sctp_association_new+0x15e0/0x24a0
[  550.479114][ T7755]  sctp_connect_new_asoc+0x2cf/0x6b0
[  550.484446][ T7755]  ? __sctp_connect+0xe10/0xe10
[  550.489343][ T7755]  ? sctp_sendmsg+0xb11/0x33b0
[  550.494165][ T7755]  ? bpf_lsm_sctp_bind_connect+0x5/0x10
[  550.499767][ T7755]  ? security_sctp_bind_connect+0x86/0xb0
[  550.505536][ T7755]  sctp_sendmsg+0x1cfc/0x33b0
[  550.510291][ T7755]  ? aa_sk_perm+0x8e1/0xa60
[  550.514849][ T7755]  ? sctp_getsockopt+0x7f0/0x7f0
[  550.519833][ T7755]  ? aa_af_perm+0x350/0x350
[  550.524379][ T7755]  ? __import_iovec+0x316/0x4c0
[  550.529274][ T7755]  ? inet_sendmsg+0x81/0x310
[  550.533905][ T7755]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  550.539322][ T7755]  ? security_socket_sendmsg+0x7d/0xa0
[  550.544832][ T7755]  ? inet_send_prepare+0x250/0x250
[  550.549992][ T7755]  ____sys_sendmsg+0x5d3/0x9a0
[  550.555249][ T7755]  ? __sys_sendmsg_sock+0x30/0x30
[  550.560340][ T7755]  __sys_sendmsg+0x2a9/0x390
[  550.565008][ T7755]  ? ____sys_sendmsg+0x9a0/0x9a0
[  550.570013][ T7755]  ? bpf_trace_run2+0x2ba/0x410
[  550.574906][ T7755]  ? bpf_trace_run2+0x110/0x410
[  550.579810][ T7755]  ? rcu_is_watching+0x11/0xb0
[  550.584601][ T7755]  ? syscall_enter_from_user_mode+0x12d/0x230
[  550.590695][ T7755]  do_syscall_64+0x3b/0xb0
[  550.595137][ T7755]  ? clear_bhb_loop+0x45/0xa0
[  550.600101][ T7755]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  550.606019][ T7755] RIP: 0033:0x7fede458d169
[  550.610453][ T7755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  550.630089][ T7755] RSP: 002b:00007fede530c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  550.638562][ T7755] RAX: ffffffffffffffda RBX: 00007fede47a5fa0 RCX: 00007fede458d169
[  550.646548][ T7755] RDX: 0000000004000080 RSI: 0000400000000680 RDI: 0000000000000005
[  550.654538][ T7755] RBP: 00007fede530c090 R08: 0000000000000000 R09: 0000000000000000
[  550.662611][ T7755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  550.670662][ T7755] R13: 0000000000000000 R14: 00007fede47a5fa0 R15: 00007ffd41368738
[  550.678785][ T7755]  </TASK>
[  553.396894][ T7775] netlink: 'syz.4.1122': attribute type 10 has an invalid length.
[  553.945852][ T7552] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  553.983584][ T7552] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  554.069181][ T7552] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  554.123173][ T7552] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  554.406650][ T7552] 8021q: adding VLAN 0 to HW filter on device bond0
[  554.619799][ T7811] netlink: 'syz.1.1134': attribute type 3 has an invalid length.
[  554.638499][ T7811] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1134'.
[  555.269480][ T7816] netlink: 'syz.4.1135': attribute type 10 has an invalid length.
[  555.303983][ T6633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  555.322335][ T6633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  555.377382][ T7552] 8021q: adding VLAN 0 to HW filter on device team0
[  555.470771][ T6636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  555.481544][ T6636] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  555.500940][ T6636] bridge0: port 1(bridge_slave_0) entered blocking state
[  555.508943][ T6636] bridge0: port 1(bridge_slave_0) entered forwarding state
[  555.600026][ T6636] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  555.646158][ T6631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  555.683016][ T6631] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  555.752051][ T6631] bridge0: port 2(bridge_slave_1) entered blocking state
[  555.759359][ T6631] bridge0: port 2(bridge_slave_1) entered forwarding state
[  555.913103][ T6621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  555.933221][ T6621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  555.973181][ T6621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  556.024349][ T6621] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  556.092648][ T7843] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1141'.
[  556.118777][ T7843] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1141'.
[  556.154339][ T6621] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  556.176863][ T6621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  556.236860][ T6621] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  556.278797][ T6621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  556.329437][ T6621] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  556.376973][ T7552] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  556.394031][ T7552] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  556.437617][ T6621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  556.456208][ T6621] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  557.140421][ T6635] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  557.168116][ T6635] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  557.198072][ T7552] 8021q: adding VLAN 0 to HW filter on device batadv0
[  557.312614][ T6621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  557.333694][ T6621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  557.386794][ T6621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  557.415900][ T6621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  557.446495][ T7552] device veth0_vlan entered promiscuous mode
[  557.466209][ T6621] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  557.485760][ T6621] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  557.513990][ T7882] netlink: 'syz.4.1149': attribute type 10 has an invalid length.
[  557.538298][ T7552] device veth1_vlan entered promiscuous mode
[  557.551497][ T7885] netlink: 'syz.2.1150': attribute type 3 has an invalid length.
[  557.572682][ T7885] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1150'.
[  557.637320][ T6634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  557.677238][ T6634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  557.702299][ T7552] device veth0_macvtap entered promiscuous mode
[  557.728051][ T7552] device veth1_macvtap entered promiscuous mode
[  557.796209][ T7552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  557.835613][ T7552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  557.866899][ T7552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  557.910754][ T7552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  557.941297][ T7552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  557.966363][ T7552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  557.977539][ T7552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  557.998346][ T7552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  558.031817][ T7552] batman_adv: batadv0: Interface activated: batadv_slave_0
[  558.055459][ T7552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  558.066330][ T7552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  558.083566][ T7552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  558.102835][ T7552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  558.120699][ T7552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  558.140313][ T7552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  558.151325][ T7552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  558.167867][ T7901] netlink: 'syz.2.1156': attribute type 3 has an invalid length.
[  558.171473][ T7552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  558.176519][ T7901] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1156'.
[  558.197539][ T7552] batman_adv: batadv0: Interface activated: batadv_slave_1
[  558.220125][ T7899] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1156'.
[  558.243961][ T7899] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  558.333967][ T6636] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  558.349960][ T6636] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  558.396294][ T6636] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  558.425404][ T6636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  558.460668][ T6636] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  558.486645][ T6636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  558.510026][ T7552] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  558.541955][ T7552] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  558.578435][ T7552] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  558.605140][ T7552] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  558.683895][ T7907] netlink: 'syz.0.1157': attribute type 21 has an invalid length.
[  558.703685][ T7910] bond0: (slave team0): Error: Slave device does not support XDP
[  558.720344][ T7915] netlink: 'syz.0.1157': attribute type 27 has an invalid length.
[  558.773561][ T7922] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.1160'.
[  558.879716][ T7915] bond0: (slave bond_slave_0): Releasing backup interface
[  559.108630][ T7936] FAULT_INJECTION: forcing a failure.
[  559.108630][ T7936] name failslab, interval 1, probability 0, space 0, times 0
[  559.154550][ T7936] CPU: 0 PID: 7936 Comm: syz.2.1163 Not tainted 6.1.129-syzkaller #0
[  559.162712][ T7936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  559.172813][ T7936] Call Trace:
[  559.176126][ T7936]  <TASK>
[  559.179089][ T7936]  dump_stack_lvl+0x1e3/0x2cb
[  559.183829][ T7936]  ? nf_tcp_handle_invalid+0x647/0x647
[  559.189352][ T7936]  ? panic+0x764/0x764
[  559.193556][ T7936]  ? __lock_acquire+0x125b/0x1f80
[  559.198664][ T7936]  should_fail_ex+0x3a6/0x4d0
[  559.203412][ T7936]  should_failslab+0x5/0x20
[  559.207966][ T7936]  slab_pre_alloc_hook+0x59/0x300
[  559.213046][ T7936]  kmem_cache_alloc+0x4e/0x2d0
[  559.217861][ T7936]  ? skb_clone+0x1e5/0x360
[  559.222329][ T7936]  skb_clone+0x1e5/0x360
[  559.226673][ T7936]  __netlink_deliver_tap+0x397/0x780
[  559.232032][ T7936]  ? netlink_deliver_tap+0x2e/0x1b0
[  559.237285][ T7936]  netlink_deliver_tap+0x19d/0x1b0
[  559.242446][ T7936]  netlink_unicast+0x7b4/0x970
[  559.247265][ T7936]  ? netlink_detachskb+0x90/0x90
[  559.252244][ T7936]  ? __virt_addr_valid+0x45b/0x530
[  559.257415][ T7936]  ? __phys_addr_symbol+0x2b/0x70
[  559.262581][ T7936]  ? __check_object_size+0x4dd/0xa30
[  559.267948][ T7936]  ? bpf_lsm_netlink_send+0x5/0x10
[  559.273164][ T7936]  netlink_sendmsg+0xa26/0xd60
[  559.278010][ T7936]  ? netlink_getsockopt+0x580/0x580
[  559.283261][ T7936]  ? aa_sock_msg_perm+0x91/0x150
[  559.288246][ T7936]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  559.294019][ T7936]  ? security_socket_sendmsg+0x7d/0xa0
[  559.299545][ T7936]  ? netlink_getsockopt+0x580/0x580
[  559.304803][ T7936]  ____sys_sendmsg+0x5d3/0x9a0
[  559.309626][ T7936]  ? __sys_sendmsg_sock+0x30/0x30
[  559.314717][ T7936]  __sys_sendmsg+0x2a9/0x390
[  559.319357][ T7936]  ? ____sys_sendmsg+0x9a0/0x9a0
[  559.324350][ T7936]  ? vfs_write+0x6cf/0xbc0
[  559.328851][ T7936]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  559.334910][ T7936]  ? syscall_enter_from_user_mode+0x2e/0x230
[  559.341026][ T7936]  ? lockdep_hardirqs_on+0x94/0x130
[  559.346280][ T7936]  ? syscall_enter_from_user_mode+0x2e/0x230
[  559.352320][ T7936]  do_syscall_64+0x3b/0xb0
[  559.356794][ T7936]  ? clear_bhb_loop+0x45/0xa0
[  559.361524][ T7936]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  559.367476][ T7936] RIP: 0033:0x7f9e51d8d169
[  559.371943][ T7936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  559.391602][ T7936] RSP: 002b:00007f9e52bc1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  559.400109][ T7936] RAX: ffffffffffffffda RBX: 00007f9e51fa6080 RCX: 00007f9e51d8d169
[  559.408123][ T7936] RDX: 0000000000000000 RSI: 0000400000000080 RDI: 0000000000000003
[  559.416138][ T7936] RBP: 00007f9e52bc1090 R08: 0000000000000000 R09: 0000000000000000
[  559.424160][ T7936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  559.432172][ T7936] R13: 0000000000000001 R14: 00007f9e51fa6080 R15: 00007ffd7152c668
[  559.440203][ T7936]  </TASK>
[  559.553288][ T7920] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1160'.
[  559.566235][ T7936] netlink: 'syz.2.1163': attribute type 10 has an invalid length.
[  559.670726][ T7936] team0: Port device geneve1 added
[  559.748156][ T7936] syz.2.1163 (7936) used greatest stack depth: 19352 bytes left
[  559.915414][ T6634] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  559.932152][ T6634] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  559.958507][ T7952] netlink: 'syz.0.1165': attribute type 3 has an invalid length.
[  560.002066][ T6634] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  560.011392][ T7952] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1165'.
[  560.035448][ T7953] netlink: 'syz.4.1164': attribute type 10 has an invalid length.
[  560.081294][ T7959] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1167'.
[  560.120528][ T6636] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  560.132094][ T6636] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  560.142211][ T7959] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1167'.
[  560.203370][ T6636] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  560.235679][ T7958] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1167'.
[  560.573047][ T7975] netlink: 'syz.1.1172': attribute type 10 has an invalid length.
[  560.649778][ T7975] team0: Port device geneve1 added
[  560.776713][ T6621] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  560.966625][ T6621] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  561.154046][ T7991] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1176'.
[  561.178357][ T7991] FAULT_INJECTION: forcing a failure.
[  561.178357][ T7991] name failslab, interval 1, probability 0, space 0, times 0
[  561.210855][ T7991] CPU: 0 PID: 7991 Comm: syz.2.1176 Not tainted 6.1.129-syzkaller #0
[  561.218999][ T7991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  561.229095][ T7991] Call Trace:
[  561.232406][ T7991]  <TASK>
[  561.235361][ T7991]  dump_stack_lvl+0x1e3/0x2cb
[  561.240096][ T7991]  ? nf_tcp_handle_invalid+0x647/0x647
[  561.245607][ T7991]  ? panic+0x764/0x764
[  561.249713][ T7991]  ? __might_sleep+0xb0/0xb0
[  561.254349][ T7991]  should_fail_ex+0x3a6/0x4d0
[  561.259103][ T7991]  should_failslab+0x5/0x20
[  561.263656][ T7991]  slab_pre_alloc_hook+0x59/0x300
[  561.268736][ T7991]  kmem_cache_alloc_node+0x52/0x310
[  561.273988][ T7991]  ? __alloc_skb+0xd3/0x2c0
[  561.278538][ T7991]  __alloc_skb+0xd3/0x2c0
[  561.282910][ T7991]  netlink_ack+0x392/0x12a0
[  561.287455][ T7991]  ? __dev_queue_xmit+0x2d6/0x3d50
[  561.292626][ T7991]  ? ref_tracker_free+0x638/0x7d0
[  561.297695][ T7991]  ? memcpy+0x3c/0x60
[  561.301716][ T7991]  ? netlink_dump+0xc80/0xc80
[  561.306446][ T7991]  ? __copy_skb_header+0x47b/0x600
[  561.311616][ T7991]  netlink_rcv_skb+0x24a/0x410
[  561.316436][ T7991]  ? rtnetlink_bind+0x80/0x80
[  561.321188][ T7991]  ? netlink_ack+0x12a0/0x12a0
[  561.326081][ T7991]  ? __netlink_deliver_tap+0x748/0x780
[  561.331603][ T7991]  ? netlink_deliver_tap+0x2e/0x1b0
[  561.336846][ T7991]  netlink_unicast+0x7e2/0x970
[  561.341655][ T7991]  ? netlink_detachskb+0x90/0x90
[  561.346636][ T7991]  ? __virt_addr_valid+0x45b/0x530
[  561.351790][ T7991]  ? __phys_addr_symbol+0x2b/0x70
[  561.356860][ T7991]  ? __check_object_size+0x4dd/0xa30
[  561.362187][ T7991]  ? bpf_lsm_netlink_send+0x5/0x10
[  561.367362][ T7991]  netlink_sendmsg+0xa26/0xd60
[  561.372186][ T7991]  ? netlink_getsockopt+0x580/0x580
[  561.377439][ T7991]  ? aa_sock_msg_perm+0x91/0x150
[  561.382472][ T7991]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  561.387823][ T7991]  ? security_socket_sendmsg+0x7d/0xa0
[  561.393335][ T7991]  ? netlink_getsockopt+0x580/0x580
[  561.398587][ T7991]  ____sys_sendmsg+0x5d3/0x9a0
[  561.403406][ T7991]  ? __sys_sendmsg_sock+0x30/0x30
[  561.408488][ T7991]  __sys_sendmsg+0x2a9/0x390
[  561.413127][ T7991]  ? ____sys_sendmsg+0x9a0/0x9a0
[  561.418114][ T7991]  ? vfs_write+0x6cf/0xbc0
[  561.422958][ T7991]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  561.429006][ T7991]  ? syscall_enter_from_user_mode+0x2e/0x230
[  561.435031][ T7991]  ? lockdep_hardirqs_on+0x94/0x130
[  561.440378][ T7991]  ? syscall_enter_from_user_mode+0x2e/0x230
[  561.446415][ T7991]  do_syscall_64+0x3b/0xb0
[  561.450886][ T7991]  ? clear_bhb_loop+0x45/0xa0
[  561.455618][ T7991]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  561.461569][ T7991] RIP: 0033:0x7f9e51d8d169
[  561.466090][ T7991] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  561.485741][ T7991] RSP: 002b:00007f9e52be2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  561.494182][ T7991] RAX: ffffffffffffffda RBX: 00007f9e51fa5fa0 RCX: 00007f9e51d8d169
[  561.502191][ T7991] RDX: 0000000000000000 RSI: 00004000000000c0 RDI: 0000000000000003
[  561.510185][ T7991] RBP: 00007f9e52be2090 R08: 0000000000000000 R09: 0000000000000000
[  561.518186][ T7991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  561.526173][ T7991] R13: 0000000000000000 R14: 00007f9e51fa5fa0 R15: 00007ffd7152c668
[  561.534168][ T7991]  </TASK>
[  561.666491][ T4289] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  561.680451][ T4289] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  561.689104][ T4289] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  561.697486][ T4289] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  561.708532][ T4282] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  561.716559][ T4282] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  561.943990][ T7996] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1175'.
[  562.176223][ T6621] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  562.292517][ T8014] netlink: 'syz.2.1180': attribute type 3 has an invalid length.
[  562.319589][ T8014] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1180'.
[  562.499253][ T6621] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  562.608974][ T8019] netlink: 'syz.4.1179': attribute type 10 has an invalid length.
[  562.845521][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[  562.851986][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[  563.686284][ T7999] chnl_net:caif_netlink_parms(): no params data found
[  563.802979][ T4282] Bluetooth: hci3: command 0x0409 tx timeout
[  564.231352][ T7999] bridge0: port 1(bridge_slave_0) entered blocking state
[  564.249656][ T7999] bridge0: port 1(bridge_slave_0) entered disabled state
[  564.283422][ T7999] device bridge_slave_0 entered promiscuous mode
[  564.294044][ T7999] bridge0: port 2(bridge_slave_1) entered blocking state
[  564.301331][ T7999] bridge0: port 2(bridge_slave_1) entered disabled state
[  564.310913][ T7999] device bridge_slave_1 entered promiscuous mode
[  564.380199][ T7999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  564.435188][ T7999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  564.599142][ T7999] team0: Port device team_slave_0 added
[  564.640341][ T7999] team0: Port device team_slave_1 added
[  564.680477][ T8079] netlink: 'syz.4.1195': attribute type 3 has an invalid length.
[  564.710591][ T8079] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1195'.
[  564.757457][ T7999] batman_adv: batadv0: Adding interface: batadv_slave_0
[  564.771499][ T7999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  564.826326][ T7999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  565.038073][ T7999] batman_adv: batadv0: Adding interface: batadv_slave_1
[  565.068096][ T7999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  565.168042][ T7999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  565.384315][ T8089] netlink: 'syz.1.1196': attribute type 10 has an invalid length.
[  565.743475][ T7999] device hsr_slave_0 entered promiscuous mode
[  565.769762][ T7999] device hsr_slave_1 entered promiscuous mode
[  565.801322][ T7999] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  565.821095][ T7999] Cannot create hsr debugfs directory
[  565.879204][ T6621] device hsr_slave_0 left promiscuous mode
[  565.885298][ T4282] Bluetooth: hci3: command 0x041b tx timeout
[  565.892350][ T6621] device hsr_slave_1 left promiscuous mode
[  566.002736][ T6621] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  566.010248][ T6621] batman_adv: batadv0: Removing interface: batadv_slave_0
[  566.049678][ T6621] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  566.064583][ T6621] batman_adv: batadv0: Removing interface: batadv_slave_1
[  566.081465][ T6621] device bridge_slave_1 left promiscuous mode
[  566.088272][ T6621] bridge0: port 2(bridge_slave_1) entered disabled state
[  566.129836][ T6621] device bridge_slave_0 left promiscuous mode
[  566.149254][ T6621] bridge0: port 1(bridge_slave_0) entered disabled state
[  566.292211][ T6621] device veth1_macvtap left promiscuous mode
[  566.323569][ T6621] device veth0_macvtap left promiscuous mode
[  566.353083][ T6621] device veth1_vlan left promiscuous mode
[  566.359057][ T6621] device veth0_vlan left promiscuous mode
[  566.381044][ T8121] netlink: 'syz.1.1209': attribute type 3 has an invalid length.
[  566.390904][ T8121] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1209'.
[  567.256932][ T6621] team0 (unregistering): Port device team_slave_1 removed
[  567.297027][ T6621] team0 (unregistering): Port device team_slave_0 removed
[  567.339355][ T6621] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  567.382325][ T6621] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  567.800808][ T6621] bond0 (unregistering): Released all slaves
[  567.962605][ T4282] Bluetooth: hci3: command 0x040f tx timeout
[  568.291440][ T8136] netlink: 'syz.4.1212': attribute type 10 has an invalid length.
[  568.902246][ T8160] bond0: (slave team0): Error: Slave device does not support XDP
[  569.381374][ T8181] netlink: 'syz.1.1223': attribute type 3 has an invalid length.
[  569.424769][ T8181] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1223'.
[  569.651171][ T7999] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  569.755165][ T7999] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  569.787152][ T7999] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  569.857124][ T7999] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  569.893907][ T8190] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.1226'.
[  570.042546][ T4282] Bluetooth: hci3: command 0x0419 tx timeout
[  570.201351][ T7999] 8021q: adding VLAN 0 to HW filter on device bond0
[  570.227865][ T8194] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1227'.
[  570.319552][ T6631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  570.336229][ T6631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  570.367252][ T7999] 8021q: adding VLAN 0 to HW filter on device team0
[  570.379137][ T6631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  570.394583][ T6631] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  570.437699][ T6631] bridge0: port 1(bridge_slave_0) entered blocking state
[  570.444944][ T6631] bridge0: port 1(bridge_slave_0) entered forwarding state
[  570.498784][ T6631] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  570.515975][ T6631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  570.546956][ T6631] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  570.556322][ T6631] bridge0: port 2(bridge_slave_1) entered blocking state
[  570.563550][ T6631] bridge0: port 2(bridge_slave_1) entered forwarding state
[  570.578709][ T6631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  570.630841][ T6631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  570.681951][ T6631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  570.710909][ T6631] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  570.727339][ T8203] netlink: 'syz.0.1229': attribute type 10 has an invalid length.
[  570.747890][ T6631] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  570.782027][ T6631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  570.821958][ T8214] FAULT_INJECTION: forcing a failure.
[  570.821958][ T8214] name failslab, interval 1, probability 0, space 0, times 0
[  570.842842][ T8214] CPU: 1 PID: 8214 Comm: syz.4.1232 Not tainted 6.1.129-syzkaller #0
[  570.843742][ T6631] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  570.850956][ T8214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  570.850972][ T8214] Call Trace:
[  570.850980][ T8214]  <TASK>
[  570.850990][ T8214]  dump_stack_lvl+0x1e3/0x2cb
[  570.851033][ T8214]  ? nf_tcp_handle_invalid+0x647/0x647
[  570.885303][ T8214]  ? panic+0x764/0x764
[  570.889394][ T8214]  ? __might_sleep+0xb0/0xb0
[  570.893999][ T8214]  should_fail_ex+0x3a6/0x4d0
[  570.898702][ T8214]  should_failslab+0x5/0x20
[  570.903222][ T8214]  slab_pre_alloc_hook+0x59/0x300
[  570.908270][ T8214]  ? apparmor_sk_alloc_security+0x73/0x100
[  570.914096][ T8214]  __kmem_cache_alloc_node+0x47/0x260
[  570.919928][ T8214]  ? apparmor_sk_alloc_security+0x73/0x100
[  570.925752][ T8214]  kmalloc_trace+0x26/0xe0
[  570.930194][ T8214]  apparmor_sk_alloc_security+0x73/0x100
[  570.935858][ T8214]  security_sk_alloc+0x6d/0xa0
[  570.941254][ T8214]  sk_prot_alloc+0xfa/0x200
[  570.945774][ T8214]  ? sk_alloc+0x23/0x350
[  570.950034][ T8214]  sk_alloc+0x36/0x350
[  570.954122][ T8214]  bpf_prog_test_run_skb+0x384/0x13a0
[  570.959525][ T8214]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  570.965541][ T8214]  ? rcu_is_watching+0x11/0xb0
[  570.970320][ T8214]  ? cpu_online+0xb0/0xb0
[  570.974680][ T8214]  ? cpu_online+0xb0/0xb0
[  570.979031][ T8214]  bpf_prog_test_run+0x32f/0x3a0
[  570.983983][ T8214]  __sys_bpf+0x3eb/0x6c0
[  570.988232][ T8214]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  570.994401][ T8214]  ? bpf_link_show_fdinfo+0x300/0x300
[  570.999801][ T8214]  ? syscall_enter_from_user_mode+0x37/0x230
[  571.005796][ T8214]  __x64_sys_bpf+0x78/0x90
[  571.010233][ T8214]  do_syscall_64+0x3b/0xb0
[  571.014668][ T8214]  ? clear_bhb_loop+0x45/0xa0
[  571.019361][ T8214]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  571.025265][ T8214] RIP: 0033:0x7fede458d169
[  571.029690][ T8214] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  571.049314][ T8214] RSP: 002b:00007fede530c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  571.057750][ T8214] RAX: ffffffffffffffda RBX: 00007fede47a5fa0 RCX: 00007fede458d169
[  571.065731][ T8214] RDX: 000000000000002c RSI: 0000400000000080 RDI: 000000000000000a
[  571.073712][ T8214] RBP: 00007fede530c090 R08: 0000000000000000 R09: 0000000000000000
[  571.081700][ T8214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  571.089858][ T8214] R13: 0000000000000000 R14: 00007fede47a5fa0 R15: 00007ffd41368738
[  571.097948][ T8214]  </TASK>
[  571.149653][ T7999] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  571.178366][ T7999] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  571.235683][ T6631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  571.283363][ T6631] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  571.292246][ T6631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  571.334648][ T6631] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  571.356635][ T6631] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  571.486123][ T8225] netlink: 'syz.4.1236': attribute type 3 has an invalid length.
[  571.548533][ T8225] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1236'.
[  571.658172][ T8233] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.1238'.
[  571.912629][ T8238] netlink: 'syz.2.1238': attribute type 22 has an invalid length.
[  571.960637][ T8238] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1238'.
[  572.200667][ T6621] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  572.217364][ T6621] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  572.258330][ T7999] 8021q: adding VLAN 0 to HW filter on device batadv0
[  572.392035][ T6634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  572.401962][ T6634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  572.494906][ T6632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  572.516135][ T6632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  572.540344][ T7999] device veth0_vlan entered promiscuous mode
[  572.571232][ T6632] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  572.588675][ T6632] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  572.652824][ T7999] device veth1_vlan entered promiscuous mode
[  572.760235][ T6632] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  572.789053][ T6632] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  572.815787][ T6632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  572.829791][ T6632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  572.852032][ T8263] netlink: 'syz.1.1245': attribute type 10 has an invalid length.
[  572.872354][ T7999] device veth0_macvtap entered promiscuous mode
[  572.918295][ T7999] device veth1_macvtap entered promiscuous mode
[  573.004453][ T7999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  573.048768][ T7999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  573.067936][ T7999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  573.097954][ T7999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  573.110667][ T8275] FAULT_INJECTION: forcing a failure.
[  573.110667][ T8275] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  573.125410][ T7999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  573.141722][ T8275] CPU: 0 PID: 8275 Comm: syz.4.1249 Not tainted 6.1.129-syzkaller #0
[  573.149854][ T8275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  573.160038][ T8275] Call Trace:
[  573.163350][ T8275]  <TASK>
[  573.166330][ T8275]  dump_stack_lvl+0x1e3/0x2cb
[  573.171065][ T8275]  ? nf_tcp_handle_invalid+0x647/0x647
[  573.176585][ T8275]  ? panic+0x764/0x764
[  573.180702][ T8275]  ? snprintf+0xd6/0x120
[  573.184993][ T8275]  should_fail_ex+0x3a6/0x4d0
[  573.189740][ T8275]  _copy_to_user+0x2b/0x130
[  573.194296][ T8275]  simple_read_from_buffer+0xc6/0x150
[  573.199714][ T8275]  proc_fail_nth_read+0x1a3/0x210
[  573.204787][ T8275]  ? proc_fault_inject_write+0x390/0x390
[  573.210903][ T8275]  ? fsnotify_perm+0x439/0x590
[  573.215706][ T8275]  ? proc_fault_inject_write+0x390/0x390
[  573.221389][ T8275]  vfs_read+0x2ed/0xbf0
[  573.225588][ T8275]  ? __fdget_pos+0x2ba/0x360
[  573.230215][ T8275]  ? kernel_read+0x1f0/0x1f0
[  573.234847][ T8275]  ? __fget_files+0x28/0x4a0
[  573.239479][ T8275]  ? __fget_files+0x435/0x4a0
[  573.244201][ T8275]  ? __fdget_pos+0x2ba/0x360
[  573.248826][ T8275]  ? ksys_read+0x77/0x2c0
[  573.253230][ T8275]  ksys_read+0x19c/0x2c0
[  573.257503][ T8275]  ? print_irqtrace_events+0x210/0x210
[  573.263004][ T8275]  ? vfs_write+0xbc0/0xbc0
[  573.267448][ T8275]  ? syscall_enter_from_user_mode+0x2e/0x230
[  573.273460][ T8275]  ? lockdep_hardirqs_on+0x94/0x130
[  573.278687][ T8275]  ? syscall_enter_from_user_mode+0x2e/0x230
[  573.285138][ T8275]  do_syscall_64+0x3b/0xb0
[  573.289701][ T8275]  ? clear_bhb_loop+0x45/0xa0
[  573.294413][ T8275]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  573.300387][ T8275] RIP: 0033:0x7fede458bb7c
[  573.304834][ T8275] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  573.324470][ T8275] RSP: 002b:00007fede530c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  573.332994][ T8275] RAX: ffffffffffffffda RBX: 00007fede47a5fa0 RCX: 00007fede458bb7c
[  573.341030][ T8275] RDX: 000000000000000f RSI: 00007fede530c0a0 RDI: 0000000000000006
[  573.349044][ T8275] RBP: 00007fede530c090 R08: 0000000000000000 R09: 0000000000000000
[  573.357049][ T8275] R10: 0000400000000000 R11: 0000000000000246 R12: 0000000000000001
[  573.365065][ T8275] R13: 0000000000000000 R14: 00007fede47a5fa0 R15: 00007ffd41368738
[  573.373101][ T8275]  </TASK>
[  573.436825][ T7999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  573.478415][ T7999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  573.548363][ T7999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  573.617219][ T7999] batman_adv: batadv0: Interface activated: batadv_slave_0
[  573.709584][ T6631] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  573.740545][ T6631] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  573.784231][ T8282] netlink: 'syz.4.1250': attribute type 3 has an invalid length.
[  573.819679][ T8282] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1250'.
[  573.840676][ T6631] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  573.956382][ T6631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  574.018857][ T7999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  574.054620][ T7999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  574.102035][ T7999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  574.178763][ T7999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  574.221242][ T8290] netlink: 'syz.1.1253': attribute type 3 has an invalid length.
[  574.229745][ T7999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  574.254100][ T7999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  574.270028][ T8290] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1253'.
[  574.322491][ T7999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  574.362634][ T7999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  574.412682][ T7999] batman_adv: batadv0: Interface activated: batadv_slave_1
[  574.456549][ T7999] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  574.486152][ T7999] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  574.511863][ T7999] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  574.548503][ T7999] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  574.570934][ T6632] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  574.590041][ T6632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  574.958511][ T8307] netlink: 'syz.2.1258': attribute type 10 has an invalid length.
[  575.025692][ T6634] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  575.063257][ T6634] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  575.100238][ T6632] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  575.124512][ T8312] netlink: 'syz.4.1260': attribute type 10 has an invalid length.
[  575.129979][ T6634] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  575.140860][ T6634] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  575.142689][ T8312] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1260'.
[  575.185111][ T6632] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  575.340151][ T8319] netlink: 'syz.2.1263': attribute type 10 has an invalid length.
[  575.382775][ T8319] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.1263'.
[  575.949553][ T6634] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  575.968548][ T8328] netlink: 'syz.4.1268': attribute type 3 has an invalid length.
[  575.988935][ T8328] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1268'.
[  576.151038][ T6634] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  576.390344][ T6634] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  576.800158][ T6634] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  576.963938][ T8342] netlink: 'syz.1.1273': attribute type 10 has an invalid length.
[  577.166769][ T4292] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  577.185123][ T4292] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  577.193608][ T4292] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  577.202330][ T4292] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  577.215277][ T4292] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  577.223973][ T4292] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  577.705550][ T8359] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1278'.
[  577.715549][ T8359] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  578.299085][ T8375] netlink: 'syz.4.1282': attribute type 3 has an invalid length.
[  578.330618][ T8375] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1282'.
[  578.711825][ T8383] netlink: 'syz.2.1284': attribute type 9 has an invalid length.
[  578.867805][ T8383] netlink: 118396 bytes leftover after parsing attributes in process `syz.2.1284'.
[  579.322885][ T4292] Bluetooth: hci3: command 0x0409 tx timeout
[  579.453771][ T8352] chnl_net:caif_netlink_parms(): no params data found
[  579.517107][ T8387] netlink: 'syz.2.1284': attribute type 10 has an invalid length.
[  580.824815][ T8352] bridge0: port 1(bridge_slave_0) entered blocking state
[  580.862732][ T8352] bridge0: port 1(bridge_slave_0) entered disabled state
[  580.890552][ T8352] device bridge_slave_0 entered promiscuous mode
[  580.989899][ T8352] bridge0: port 2(bridge_slave_1) entered blocking state
[  581.005803][ T8352] bridge0: port 2(bridge_slave_1) entered disabled state
[  581.044245][ T8352] device bridge_slave_1 entered promiscuous mode
[  581.347987][ T8439] netlink: 'syz.1.1296': attribute type 3 has an invalid length.
[  581.373849][ T8439] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1296'.
[  581.402499][ T4292] Bluetooth: hci3: command 0x041b tx timeout
[  581.412592][ T8352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  581.447794][ T6634] device hsr_slave_0 left promiscuous mode
[  581.491362][ T6634] device hsr_slave_1 left promiscuous mode
[  581.508896][ T6634] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  581.524965][ T6634] batman_adv: batadv0: Removing interface: batadv_slave_0
[  581.539695][ T6634] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  581.550165][ T6634] batman_adv: batadv0: Removing interface: batadv_slave_1
[  581.558607][ T6634] device bridge_slave_1 left promiscuous mode
[  581.565548][ T6634] bridge0: port 2(bridge_slave_1) entered disabled state
[  581.577619][ T6634] device bridge_slave_0 left promiscuous mode
[  581.588502][ T6634] bridge0: port 1(bridge_slave_0) entered disabled state
[  581.631683][ T6634] device veth1_macvtap left promiscuous mode
[  581.638130][ T6634] device veth0_macvtap left promiscuous mode
[  581.644920][ T6634] device veth1_vlan left promiscuous mode
[  581.650965][ T6634] device veth0_vlan left promiscuous mode
[  582.367233][ T6634] team0 (unregistering): Port device team_slave_1 removed
[  582.411419][ T6634] team0 (unregistering): Port device team_slave_0 removed
[  582.455087][ T6634] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  582.499828][ T6634] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  582.956964][ T6634] bond0 (unregistering): Released all slaves
[  583.043921][ T8352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  583.180618][ T8352] team0: Port device team_slave_0 added
[  583.255776][ T8352] team0: Port device team_slave_1 added
[  583.379168][ T8464] netlink: 'syz.1.1299': attribute type 10 has an invalid length.
[  583.408794][ T8352] batman_adv: batadv0: Adding interface: batadv_slave_0
[  583.459706][ T8352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  583.486714][ T4292] Bluetooth: hci3: command 0x040f tx timeout
[  583.542915][ T8352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  583.566482][ T8352] batman_adv: batadv0: Adding interface: batadv_slave_1
[  583.597883][ T8352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  583.740177][ T8352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  583.939342][ T8481] netlink: 83 bytes leftover after parsing attributes in process `syz.1.1303'.
[  584.135266][ T8474] netlink: 766 bytes leftover after parsing attributes in process `syz.4.1304'.
[  584.240353][ T8474] device bond_slave_0 entered promiscuous mode
[  584.247794][ T8474] device bond_slave_1 entered promiscuous mode
[  584.383559][ T8491] netlink: 'syz.2.1306': attribute type 10 has an invalid length.
[  584.460217][ T8491] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1306'.
[  584.558115][ T8491] batman_adv: batadv0: Adding interface: vlan1
[  584.589446][ T8491] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  584.745111][ T8491] batman_adv: batadv0: Interface activated: vlan1
[  584.858662][ T8505] netlink: 'syz.4.1309': attribute type 3 has an invalid length.
[  584.877998][ T8508] device wg2 entered promiscuous mode
[  584.888664][ T8505] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1309'.
[  584.946526][ T8352] device hsr_slave_0 entered promiscuous mode
[  584.988698][ T8352] device hsr_slave_1 entered promiscuous mode
[  585.097277][ T8352] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  585.113326][ T8352] Cannot create hsr debugfs directory
[  585.563971][ T4292] Bluetooth: hci3: command 0x0419 tx timeout
[  585.872852][ T8520] netlink: 'syz.2.1313': attribute type 10 has an invalid length.
[  586.670075][ T8352] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  586.764795][ T8352] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  586.788057][ T8552] netlink: 'syz.1.1322': attribute type 3 has an invalid length.
[  586.798293][ T8352] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  586.813280][ T8552] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1322'.
[  586.836263][ T8352] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  587.112782][ T8352] 8021q: adding VLAN 0 to HW filter on device bond0
[  587.169969][ T6637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  587.219533][ T6637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  587.241092][ T8352] 8021q: adding VLAN 0 to HW filter on device team0
[  587.288246][ T6637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  587.322268][ T6637] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  587.377629][ T6637] bridge0: port 1(bridge_slave_0) entered blocking state
[  587.384941][ T6637] bridge0: port 1(bridge_slave_0) entered forwarding state
[  587.430180][ T6637] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  587.475153][ T6637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  587.491573][ T6637] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  587.512193][ T6637] bridge0: port 2(bridge_slave_1) entered blocking state
[  587.519427][ T6637] bridge0: port 2(bridge_slave_1) entered forwarding state
[  587.536278][ T6637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  587.589157][ T6637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  587.822613][ T8574] netlink: 'syz.4.1328': attribute type 10 has an invalid length.
[  587.857269][ T6637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  587.879064][ T6637] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  587.889671][ T6637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  587.919934][ T6637] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  588.241413][ T8352] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  588.285759][ T8352] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  588.345488][ T6637] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  588.359383][ T6637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  588.389272][ T6637] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  588.424559][ T6637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  588.444666][ T6637] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  588.474820][ T6637] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  588.819826][ T8606] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1336'.
[  588.861026][ T8606] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1336'.
[  588.924228][ T8603] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1336'.
[  589.203131][ T8614] netlink: 'syz.4.1335': attribute type 3 has an invalid length.
[  589.272781][ T8614] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1335'.
[  589.499835][ T8619] netlink: 'syz.1.1337': attribute type 3 has an invalid length.
[  589.535608][ T8619] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1337'.
[  589.596581][ T6637] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  589.629160][ T6637] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  589.674429][ T8352] 8021q: adding VLAN 0 to HW filter on device batadv0
[  589.797628][ T6632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  589.811539][ T6632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  589.911907][ T6632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  589.975078][ T6632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  590.024950][ T8352] device veth0_vlan entered promiscuous mode
[  590.051959][ T6632] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  590.101925][ T6632] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  590.172847][ T8352] device veth1_vlan entered promiscuous mode
[  590.240238][ T8632] netlink: 'syz.1.1340': attribute type 10 has an invalid length.
[  590.304487][ T6621] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  590.325233][ T6621] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  590.363983][ T6621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  590.405453][ T6621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  590.526623][ T8352] device veth0_macvtap entered promiscuous mode
[  590.676762][ T6636] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  590.827777][ T8352] device veth1_macvtap entered promiscuous mode
[  590.910704][ T8643] FAULT_INJECTION: forcing a failure.
[  590.910704][ T8643] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  590.927017][ T8352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  590.962524][ T8352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  590.992441][ T8643] CPU: 1 PID: 8643 Comm: syz.1.1343 Not tainted 6.1.129-syzkaller #0
[  591.000609][ T8643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  591.010750][ T8643] Call Trace:
[  591.014066][ T8643]  <TASK>
[  591.017028][ T8643]  dump_stack_lvl+0x1e3/0x2cb
[  591.022050][ T8643]  ? nf_tcp_handle_invalid+0x647/0x647
[  591.027565][ T8643]  ? panic+0x764/0x764
[  591.031679][ T8643]  ? __lock_acquire+0x1f80/0x1f80
[  591.036790][ T8643]  ? bpf_test_run+0x7f1/0x8b0
[  591.041523][ T8643]  should_fail_ex+0x3a6/0x4d0
[  591.046255][ T8643]  _copy_to_user+0x2b/0x130
[  591.050812][ T8643]  bpf_test_finish+0x228/0x8b0
[  591.055633][ T8643]  ? convert_skb_to___skb+0x510/0x510
[  591.061055][ T8643]  ? convert___skb_to_skb+0x41/0x630
[  591.066387][ T8643]  ? convert_skb_to___skb+0x2d3/0x510
[  591.071816][ T8643]  bpf_prog_test_run_skb+0xcfd/0x13a0
[  591.077262][ T8643]  ? cpu_online+0xb0/0xb0
[  591.081650][ T8643]  ? cpu_online+0xb0/0xb0
[  591.086031][ T8643]  bpf_prog_test_run+0x32f/0x3a0
[  591.091006][ T8643]  __sys_bpf+0x3eb/0x6c0
[  591.096138][ T8643]  ? bpf_link_show_fdinfo+0x300/0x300
[  591.101542][ T8643]  ? print_irqtrace_events+0x210/0x210
[  591.107039][ T8643]  ? print_irqtrace_events+0x210/0x210
[  591.112522][ T8643]  ? syscall_enter_from_user_mode+0x2e/0x230
[  591.118520][ T8643]  ? lockdep_hardirqs_on+0x94/0x130
[  591.123737][ T8643]  __x64_sys_bpf+0x78/0x90
[  591.128174][ T8643]  do_syscall_64+0x3b/0xb0
[  591.132608][ T8643]  ? clear_bhb_loop+0x45/0xa0
[  591.137307][ T8643]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  591.143304][ T8643] RIP: 0033:0x7f4948f8d169
[  591.147729][ T8643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  591.167347][ T8643] RSP: 002b:00007f4949e66038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  591.175775][ T8643] RAX: ffffffffffffffda RBX: 00007f49491a5fa0 RCX: 00007f4948f8d169
[  591.183786][ T8643] RDX: 0000000000000050 RSI: 0000400000000140 RDI: 000000000000000a
[  591.191765][ T8643] RBP: 00007f4949e66090 R08: 0000000000000000 R09: 0000000000000000
[  591.199744][ T8643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  591.207728][ T8643] R13: 0000000000000000 R14: 00007f49491a5fa0 R15: 00007ffc6aca83c8
[  591.215723][ T8643]  </TASK>
[  591.259343][ T8352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  591.299813][ T8352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  591.351771][ T8352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  591.372498][ T8352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  591.412459][ T8352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  591.442476][ T8352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  591.464631][ T8352] batman_adv: batadv0: Interface activated: batadv_slave_0
[  591.480306][ T8650] netlink: 'syz.4.1345': attribute type 21 has an invalid length.
[  591.502807][ T8654] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1346'.
[  591.525540][ T6636] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  591.543710][ T6636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  591.606229][ T8352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  591.639259][ T8352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  591.664455][ T8352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  591.687964][ T8352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  591.736426][ T8352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  591.779001][ T8352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  591.806633][ T8352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  591.832541][ T8352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  591.864521][ T8352] batman_adv: batadv0: Interface activated: batadv_slave_1
[  591.903847][ T6634] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  591.926142][ T6634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  591.968605][ T8352] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  592.020286][ T8352] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  592.064988][ T8352] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  592.112483][ T8352] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  592.305375][ T8668] netlink: 'syz.0.1350': attribute type 3 has an invalid length.
[  592.350717][ T8668] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1350'.
[  592.424709][ T6631] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  592.492197][ T6631] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  592.580394][ T6637] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  593.659516][ T6634] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  593.668399][ T8676] netlink: 'syz.1.1353': attribute type 10 has an invalid length.
[  593.696584][ T6634] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  593.747191][ T6631] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  595.627153][ T6634] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  595.829705][ T6634] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  596.035572][ T6634] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  596.159048][ T6634] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  596.989679][ T8732] netlink: 'syz.2.1364': attribute type 3 has an invalid length.
[  597.029303][ T8734] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN
[  597.041093][ T8734] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[  597.044145][ T8732] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1364'.
[  597.049515][ T8734] CPU: 1 PID: 8734 Comm: syz.4.1367 Not tainted 6.1.129-syzkaller #0
[  597.049544][ T8734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  597.049557][ T8734] RIP: 0010:dev_map_enqueue+0x2d/0x340
[  597.049592][ T8734] Code: 41 56 41 55 41 54 53 48 83 ec 10 49 89 d5 49 89 f7 48 89 fd 49 bc 00 00 00 00 00 fc ff df e8 3a 91 df ff 48 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 ef e8 64 e9 36 00 4c 8b 75 00 48 83 c5
[  597.102373][ T8734] RSP: 0018:ffffc900032e76c0 EFLAGS: 00010246
[  597.108459][ T8734] RAX: 0000000000000000 RBX: 0000000000020000 RCX: 0000000000080000
[  597.116446][ T8734] RDX: ffffc9000e062000 RSI: 00000000000006b5 RDI: 00000000000006b6
[  597.124435][ T8734] RBP: 0000000000000000 R08: ffffffff88af2b08 R09: ffffffff88af2a1b
[  597.132423][ T8734] R10: 0000000000000004 R11: ffff888027171dc0 R12: dffffc0000000000
[  597.140756][ T8734] R13: ffff888074e1c000 R14: ffff8880b8f39258 R15: ffff888053335070
[  597.148741][ T8734] FS:  00007fede530c6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  597.157682][ T8734] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  597.164273][ T8734] CR2: 00007f0044b15ff8 CR3: 000000007ad9b000 CR4: 00000000003506e0
[  597.172341][ T8734] DR0: 0000400000000300 DR1: 0000000000000000 DR2: 0000000000000000
[  597.180323][ T8734] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600
[  597.188300][ T8734] Call Trace:
[  597.191931][ T8734]  <TASK>
[  597.194955][ T8734]  ? __die_body+0x5e/0xa0
[  597.199314][ T8734]  ? die_addr+0x95/0xc0
[  597.203487][ T8734]  ? exc_general_protection+0x3ae/0x590
[  597.209401][ T8734]  ? asm_exc_general_protection+0x22/0x30
[  597.215134][ T8734]  ? xdp_do_redirect_frame+0x21b/0x660
[  597.220604][ T8734]  ? xdp_do_redirect_frame+0x308/0x660
[  597.226081][ T8734]  ? dev_map_enqueue+0x2d/0x340
[  597.230946][ T8734]  xdp_do_redirect_frame+0x328/0x660
[  597.236253][ T8734]  bpf_test_run_xdp_live+0xbf4/0x1ea0
[  597.241646][ T8734]  ? __mutex_unlock_slowpath+0x218/0x750
[  597.247304][ T8734]  ? 0xffffffffa00038c0
[  597.251490][ T8734]  ? bpf_test_run_xdp_live+0x75c/0x1ea0
[  597.257098][ T8734]  ? xdp_convert_md_to_buff+0x330/0x330
[  597.262674][ T8734]  ? bpf_dispatcher_change_prog+0xdf5/0xf80
[  597.268595][ T8734]  ? 0xffffffffa00038c0
[  597.272854][ T8734]  ? trace_raw_output_bpf_test_finish+0xd0/0xd0
[  597.279133][ T8734]  ? __might_fault+0xbd/0x110
[  597.283846][ T8734]  ? _copy_from_user+0x109/0x170
[  597.288823][ T8734]  ? bpf_test_init+0x15a/0x180
[  597.293631][ T8734]  ? xdp_convert_md_to_buff+0x5b/0x330
[  597.299109][ T8734]  bpf_prog_test_run_xdp+0x7d1/0x1130
[  597.304505][ T8734]  ? dev_put+0x80/0x80
[  597.308597][ T8734]  ? dev_put+0x80/0x80
[  597.312679][ T8734]  bpf_prog_test_run+0x32f/0x3a0
[  597.317638][ T8734]  __sys_bpf+0x3eb/0x6c0
[  597.321888][ T8734]  ? bpf_link_show_fdinfo+0x300/0x300
[  597.327271][ T8734]  ? print_irqtrace_events+0x210/0x210
[  597.332914][ T8734]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  597.339036][ T8734]  ? syscall_enter_from_user_mode+0x2e/0x230
[  597.345049][ T8734]  ? lockdep_hardirqs_on+0x94/0x130
[  597.350275][ T8734]  __x64_sys_bpf+0x78/0x90
[  597.354713][ T8734]  do_syscall_64+0x3b/0xb0
[  597.359145][ T8734]  ? clear_bhb_loop+0x45/0xa0
[  597.363831][ T8734]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  597.369735][ T8734] RIP: 0033:0x7fede458d169
[  597.374155][ T8734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  597.393765][ T8734] RSP: 002b:00007fede530c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  597.402184][ T8734] RAX: ffffffffffffffda RBX: 00007fede47a5fa0 RCX: 00007fede458d169
[  597.410160][ T8734] RDX: 0000000000000050 RSI: 00004000000000c0 RDI: 000000000000000a
[  597.418221][ T8734] RBP: 00007fede460e2a0 R08: 0000000000000000 R09: 0000000000000000
[  597.426202][ T8734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  597.434187][ T8734] R13: 0000000000000000 R14: 00007fede47a5fa0 R15: 00007ffd41368738
[  597.442171][ T8734]  </TASK>
[  597.445229][ T8734] Modules linked in:
[  597.449210][ T8734] ---[ end trace 0000000000000000 ]---
[  597.454731][ T8734] RIP: 0010:dev_map_enqueue+0x2d/0x340
[  597.460261][ T8734] Code: 41 56 41 55 41 54 53 48 83 ec 10 49 89 d5 49 89 f7 48 89 fd 49 bc 00 00 00 00 00 fc ff df e8 3a 91 df ff 48 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 ef e8 64 e9 36 00 4c 8b 75 00 48 83 c5
[  597.479955][ T8734] RSP: 0018:ffffc900032e76c0 EFLAGS: 00010246
[  597.486114][ T8734] RAX: 0000000000000000 RBX: 0000000000020000 RCX: 0000000000080000
[  597.494271][ T8734] RDX: ffffc9000e062000 RSI: 00000000000006b5 RDI: 00000000000006b6
[  597.502289][ T8734] RBP: 0000000000000000 R08: ffffffff88af2b08 R09: ffffffff88af2a1b
[  597.510343][ T8734] R10: 0000000000000004 R11: ffff888027171dc0 R12: dffffc0000000000
[  597.518396][ T8734] R13: ffff888074e1c000 R14: ffff8880b8f39258 R15: ffff888053335070
[  597.526452][ T8734] FS:  00007fede530c6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  597.535472][ T8734] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  597.542190][ T8734] CR2: 00007f0044b15ff8 CR3: 000000007ad9b000 CR4: 00000000003506e0
[  597.550251][ T8734] DR0: 0000400000000300 DR1: 0000000000000000 DR2: 0000000000000000
[  597.558306][ T8734] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600
[  597.566365][ T8734] Kernel panic - not syncing: Fatal exception in interrupt
[  597.573750][ T8734] Kernel Offset: disabled
[  597.578093][ T8734] Rebooting in 86400 seconds..