last executing test programs:

5.844706206s ago: executing program 3 (id=5339):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa0b41, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000d000000850000000700000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000640)="d9b9547ed3c0c80d47820400ab3d", 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007514feff0000820095000000d3031a006dd015836e4d27f5182b60bbb7c19e21eec859fe68f9428ac407630eac8eb682f5b2d86b4abf9e63ad263fec7db9338ca9eebf2218c8b9ca64bcdcdaa06fc4c7aa217fcecd9443c54143bde8ddcbc3b8ac619930206d8d0881af823d6d18c66f021c20b55013d7fb6ea7013c06"], 0x0, 0x8}, 0x94)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd"], 0xfdef)

3.984956993s ago: executing program 3 (id=5345):
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af00000000000000000021a688b2d7007fcc4b59f719afb0b3b7e0aee306ca70fe42bf4984a68f40e1fc043a03a17e4744359b87dc27c82d51cbeb64e52a28daeb6a78d6fe06181ecc840000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x27, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000009000000000000000400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000b10000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000c0ffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000031970000ffffffff52b800010100000018270000", @ANYRES32, @ANYBLOB="000000000000000095000000000000000b93180001000000bf91000000000000b70200ae7941e8e158b74632d42605fd00000004008500000085000000b7000000000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x400, 0x2, &(0x7f0000000280)=""/2, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0xb, 0xc5a5, 0xe33}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000400)=[{0x2, 0x4, 0x2, 0x9}, {0x4, 0x3, 0x9}, {0x1, 0x3, 0x6, 0x1}, {0x3, 0x5, 0x6, 0xb}, {0x4, 0x4, 0x9, 0x8}, {0x3, 0x2, 0x0, 0x3}, {0x3, 0x1, 0x9, 0xbeffc5945e45ae2b}], 0x10, 0x6}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r4 = openat$cgroup_devices(r3, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r4, &(0x7f00000005c0)=ANY=[@ANYBLOB='b 9223'], 0xa)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000380)='./file0\x00', 0x0, 0x4010, r4}, 0x18)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e0019000f000000028000001294", 0x2e}], 0x1}, 0x0)

3.592977643s ago: executing program 3 (id=5350):
socket$kcm(0x21, 0x2, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="040000000400000004000000010000000000000079b6dbd319d013cd1c2ac91c4ab94cee310ec8af0fd1b5abca446903fa9faa9584ba47b5ac26026b653fa763a4f3be1e07935989c3f43e07c3894032660e8977763705fac38964093f84657265", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100"/28], 0x48)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x10c002, 0xac5d, 0x10000200, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r1 = socket$kcm(0x2, 0x200000000000001, 0x0)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000a000000000000000000000000000000000000000000000896fc9a50eccaf486a76fb14918efcc3214795c2127c9d984c2085514c0615953c424e1633f5967d23d5bcabfd6a47c5b7d39999b2a9eb81a357461cb5b0d24fb27966fe08f455477165360902adcafb029317f"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000017000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x10, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000004700000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000df"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
sendmsg$inet(r1, &(0x7f0000002b00)={0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000002800)='A', 0x1}], 0x1}, 0x4040)

2.582196876s ago: executing program 3 (id=5358):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f95524fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x2e}], 0x1}, 0x8000) (async)
close(r0)

2.407589045s ago: executing program 3 (id=5361):
socket$kcm(0x10, 0x2, 0x0)
r0 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r0, 0x0, 0x24, 0x0, 0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000280)=[{0x60, 0x8}, {}, {0x2}, {0x800, 0x3, 0x3, 0x1000}]})
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000b80)}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x0, &(0x7f0000000500)=ANY=[@ANYRES8=r0], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="09000000ea000000080000009aab670da9560c000004000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xd, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$tipc(r5, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r3, 0x0, 0xc5, 0xae, &(0x7f0000000840)="7432e0af9c893c751e42128fe04891b449ae9752eb4fb8b0b4699e2db61e7224f4855891707215eafbfb896bd7ab66f053a0972659f955184210f79906f363986336eedd18d04e302d0d6dab1eb234ba9e26c152c9a8fee9d5dca72491228084c1d106ed97fb4adcbae0b6e7bd2cf77e7b81417b9d567e384dd5c563dc42a28227c8f0a2ba5403d4ea19e790f3895d4fa359b54df32f76c4f3c9f2ac5ca231b64cd2bf18bc19cfacdf5c294b0f7d0114e3abafe845a36dc7e87d627650323033c467f04854", &(0x7f0000000980)=""/174, 0x8, 0x0, 0x1a, 0x49, &(0x7f00000005c0)="e01b934e05d415f57986d6756596807085b15e999796ed5680eb", &(0x7f0000000700)="dc67bc29dbd971c7224b40ba03a405ae6459c652276e1cc180aa7828a7957e7dcbed77f071f9c63dc806daa0dad22e2e044d94eff4c7a6a35e56872eececed7ff68d27fde81542daa6", 0x6, 0x0, 0x5022}, 0x50)
sendmsg$tipc(r5, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0)
sendmsg$tipc(r5, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0)
setsockopt$sock_attach_bpf(r4, 0x1, 0x21, &(0x7f00000000c0), 0x4)
sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
close(r5)
recvmsg(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
socket$kcm(0x22, 0x2, 0x21)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7", 0xb}], 0x1}, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1d, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe5d8, 0x0, 0x0, 0x0, 0x9}, {}, {}, [@map_idx={0x18, 0x0, 0x5, 0x0, 0x10}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x3}, @alu={0x7, 0x0, 0xa, 0x2, 0xb, 0x4, 0xfffffffffffffff0}, @alu={0x4, 0x0, 0xc, 0xb, 0x18406e88a3ee9a99, 0xffffffffffffffff, 0x8}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x5}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x27}, @btf_id={0x18, 0x5, 0x3, 0x0, 0xffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x66a543a30c39cdf, 0x2e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x5, 0x7, 0x8, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x10, 0xeaf1}, 0x94)
write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x33fe0)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="00000000000000001904e8420000001000000f00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x5, &(0x7f0000000940)=ANY=[@ANYBLOB="18090000000100000000000000000000180000000900000000000000000079a2f390368ef59e0000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r7}, &(0x7f0000000540), &(0x7f0000000580)=r8}, 0x20)

2.12691413s ago: executing program 3 (id=5366):
perf_event_open$cgroup(&(0x7f0000000040)={0x4, 0x80, 0xb2, 0x7, 0x3, 0xa, 0x0, 0x9, 0x1c440, 0x9, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x405, 0x2, @perf_config_ext={0xffffffff7fffffff, 0x2}, 0x100608, 0x0, 0x2, 0x8, 0x10001, 0x6, 0xdb7d, 0x0, 0x7, 0x0, 0x1}, 0xffffffffffffffff, 0x400000000004, 0xffffffffffffffff, 0xd)
r0 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890c, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc)
socket$kcm(0x29, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x7e02, 0x0, 0x0, 0x0, 0x0, 0x8d3c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000040)=""/155, 0x0, 0x9b, 0xffffffff}, 0x28)
socket$kcm(0xa, 0x5, 0x0)
close(0xffffffffffffffff)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = socket$kcm(0xa, 0x1, 0x106)
recvmsg(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x20)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000005000000080000000f"], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r6}, 0xc)
close(0x3)

1.904321521s ago: executing program 4 (id=5368):
r0 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x0, 0x1a, 0x0, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x16, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70300000a5b0500850000006900000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.874149312s ago: executing program 0 (id=5370):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40305828, &(0x7f0000000040)=0x20000)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001a00)={r0, 0x20, &(0x7f00000019c0)={&(0x7f0000000980)=""/4096, 0x1000, 0x0, &(0x7f0000001980)=""/47, 0x2f}}, 0x10) (async)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001a00)={r0, 0x20, &(0x7f00000019c0)={&(0x7f0000000980)=""/4096, 0x1000, <r1=>0x0, &(0x7f0000001980)=""/47, 0x2f}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x14, 0xc, &(0x7f0000000180)=ANY=[@ANYRES64=r0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @lirc_mode2=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006f87c09e8fe55a10a0015400100142603600e12080002000000040104001600400001", 0x37}], 0x1}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40086602, &(0x7f0000000080)=0xd0)
r3 = socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0xf8, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x7, 0x1001, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f90624fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) (async)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f90624fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)}], 0x1, 0x0, 0x0, 0x900}, 0x60)
socket$kcm(0xa, 0x5, 0x0) (async)
r6 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r6, &(0x7f00000003c0)={&(0x7f0000000040)=@in6={0xa, 0x4e23, 0xd, @local, 0x7}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="f1", 0x1}], 0x1}, 0x40040)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff229, 0x1, @perf_config_ext={0x80000001, 0x1}, 0x8041, 0x7, 0x0, 0x0, 0x0, 0x7, 0x200, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff229, 0x1, @perf_config_ext={0x80000001, 0x1}, 0x8041, 0x7, 0x0, 0x0, 0x0, 0x7, 0x200, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x21, 0x2, 0x2)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r8 = openat$cgroup_devices(r7, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r8, &(0x7f0000000100)=ANY=[@ANYRESDEC=r3], 0xa)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x38, 0x0, 0xfd, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c102, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffbfff}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) (async)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r9, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.643299385s ago: executing program 0 (id=5373):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_tracing={0x1a, 0x9, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000900000000000000030000009500000000000000184b00000600000000000000000000009500000000009900bd280200fcffffff014800ed030000009500000000000000"], &(0x7f0000000240)='syzkaller\x00', 0x1000, 0xf3, &(0x7f0000000340)=""/243, 0x1f00, 0x6, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x1d75b, 0xffffffffffffffff, 0x0, &(0x7f0000000480)=[0x1, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x3}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1}, &(0x7f0000000140), &(0x7f0000000580)=r2}, 0x20)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080400007c09e8fe55a10a0015c00700142603600e1208000f0000000401a80016001100014003000300036010fab94dcf5c0461c1d6900094007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)=@phonet={0x23, 0x0, 0x1, 0x45}, 0x80, 0x0}, 0x260408d0)

1.511309582s ago: executing program 2 (id=5374):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x208000, 0x0)
ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000040)=""/220)
ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000140))
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000001c0))
ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000200)=0x7)
ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000240))
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'veth0_to_team\x00'})
r2 = getpid()
r3 = perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x8, 0x2, 0x40, 0x1, 0x0, 0x6, 0x1100, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f00000002c0), 0xa}, 0x8, 0x1f59, 0x5, 0x5, 0x9, 0x1, 0x7, 0x0, 0x1b, 0x0, 0x7}, r2, 0xc, 0xffffffffffffffff, 0x3)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000380))
ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, &(0x7f00000003c0)={0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
r4 = socket$kcm(0x29, 0x7, 0x0)
r5 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000500)={0x0, r4}, 0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@const={0x8, 0x0, 0x0, 0xa, 0x2}]}, {0x0, [0x2e, 0x30, 0x0]}}, &(0x7f0000000440)=""/92, 0x29, 0x5c, 0x0, 0xff, 0x10000, @value=r5}, 0x28)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={0x1, 0x58, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0}}, 0x10)
sendmsg$kcm(r4, &(0x7f0000000c00)={&(0x7f0000000600)=@ll={0x11, 0x16, r6, 0x1, 0x59, 0x6, @remote}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000680)="442ffe46cea4e1a9a13b8563f30e0695141859efecdafa7d16af4658a03580f454d12a92243d7d9082c71bd20fe3e574200384508503c1f33912e6be12e62a18b78423318123bfb20c73ab0f9b4511b66fede40b278a1cca2a243554630b259c9322be14ae587e28fd97e63f76f0685f8d86342026eaf6a8eb3330a4298669ec130b73e4e5c08e97ed97fae22ab7701de9650ff873feafe4bd4b38d14d3c3c5d8f25934b7876c7430a811588abd075f74f988468092f9048eab6", 0xba}, {&(0x7f0000000740)="edf8a5bd54d5b62b398d7d575c8222aeb4bbf2d68b01ac57bbe33b1730f90f00bcaea0a9c794244a1441a60b92dd8fa3933dc2af8da5e70d77642ef0b06e7d428b52ace48df0741a209c6d1ef4eb92f191b9a770d31e6b9d2a3b22e8c26b083338cd69f932dd1c7c371e7c2fb62d44627da6bb042acd69be9df22ca54b838ab503048a042acd2ae7b7c0dbde81a0c45d87e638e34b", 0x95}, {&(0x7f0000000800)="b40c41b8d485785f5496357d0ab4a292a73f5115e8799b0e4042684650fe40bdf9308dbfde8e045e452e5f436d78680d8a69daccfe2561d45987f7637ceae355a409221a15cf43ddc941f0e3e0980c33225cd5ca2e508a8fd5a501899184d61c0c9b9d17408f5165f51146e6e30115660d8615b46f0ae56182ca5b5f446aaf72b31a404e067ec186d0002cd4a235947e3326e4986d6f8b7d8102373969675fa177f6752bf37df593c3d93ee90c", 0xad}, {&(0x7f00000008c0)="8e193e65b25379f7f3b6b4243de3c5381574db1be5a756fc63d764b87cbe47d70b7240395e50ff23e0d30c56f85ddec545d81b917f374acf8e7587fccaf13eb3ab97b9e0f1467c3854257d424b82fc6f9ed7cb76877077e06a412a67e2912b068f5eae7c3e37798665eaab4ed7faa17d8c24", 0x72}], 0x4, &(0x7f0000000980)=[{0x50, 0x117, 0x32, "8ab255dab09de843b94f63c7bdfd6cce7da2ecb2bd3748ff713e7c87ad6b0614571595c6246a88ee7fb0ddc8ebc0974fec86f90083b495b5713823"}, {0x48, 0x0, 0x4, "fd7f0642cd559fcc1b0427ff5cb67249e414346ccb6fdd67d228506f004a07d849e9a979f7eeea92e49ba8922e17e42fd13fbcc7b9"}, {0x50, 0x10a, 0x1000, "7c28c508ba28d66e74acd302d604f44d61e866f0997308f9f40effc693cc389e07560bb856aeefba291602ba468a71336d50bbd1807cd3eb1da7f307ece4ae6e"}, {0x110, 0x115, 0x1, "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"}, {0x60, 0x84, 0xa, "3a30b846248ed0563e3abec8667cbd3f2447edf8f9b291e828db67b816c5e0feca2ebccd243ac882eaa4c0e76a4b856025db3b09b9bcb2b79ad4447a70300cfe4603b3468d4c572a49204454"}], 0x258}, 0x20000000)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f00)={0xffffffffffffffff, 0xe0, &(0x7f0000000e00)={0x0, <r7=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000c40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000c80)=[0x0, 0x0, 0x0], &(0x7f0000000cc0)=[0x0, 0x0, 0x0], 0x0, 0xab, &(0x7f0000000d00)=[{}], 0x8, 0x10, &(0x7f0000000d40), &(0x7f0000000d80), 0x8, 0x4f, 0x8, 0x8, &(0x7f0000000dc0)}}, 0x10)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000f40)={r7}, 0x4)
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000fc0)={0x8, &(0x7f0000000f80)=[{0x0, 0x4, 0xfb, 0x59c0}, {0x9, 0x4, 0xb, 0xf}, {0x401, 0x8, 0x4, 0x4}, {0x7, 0x0, 0x0, 0x2}, {0xffe0, 0xf, 0x5, 0xfffffff9}, {0x9, 0x7, 0x5, 0xc9e5}, {0x7, 0x0, 0x6, 0x57b4fc6b}, {0xaa, 0xf7, 0x18, 0x9}]})
r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001000)='blkio.bfq.time\x00', 0x0, 0x0)
ioctl$TUNSETSNDBUF(r8, 0x400454d4, &(0x7f0000001040)=0x7fff)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000001080), 0x200000, 0x0)
ioctl$TUNSETQUEUE(r9, 0x400454d9, &(0x7f00000010c0)={'veth1_vlan\x00', 0xf00})
socket$kcm(0x29, 0x5, 0x0)
write$cgroup_devices(r8, &(0x7f0000001100)={'b', ' *:* ', 'rw\x00'}, 0x9)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000001140), 0x2, 0x0)
ioctl$TUNSETVNETBE(r8, 0x400454de, &(0x7f0000001180))
socket$kcm(0x29, 0x2, 0x0)
perf_event_open$cgroup(&(0x7f0000001200)={0x5, 0x80, 0x1, 0x83, 0xc, 0x3, 0x0, 0xe5b8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f00000011c0), 0xb}, 0x100, 0x5, 0x7ff, 0x0, 0x300, 0x8, 0x40, 0x0, 0x6d, 0x0, 0x9}, r8, 0x6, r8, 0xd)

1.408220597s ago: executing program 0 (id=5375):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xf6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000012, 0xdc0, 0x7ffe, &(0x7f00000003c0)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"/3002], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x39)
r2 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff})
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r2, 0x84, 0x75, &(0x7f0000000000)=r4, 0x8)
perf_event_open(&(0x7f00000001c0)={0x7, 0x80, 0x9e, 0x3, 0x8, 0xf8, 0x0, 0xe883, 0x48000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x3, 0xd41}, 0x4000, 0x0, 0xc, 0x9, 0xf, 0x6c, 0xb7d3, 0x0, 0x0, 0x0, 0xa6f000000000}, 0x0, 0xc, r4, 0xa)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000500)="d2ff86dd00000000001400000000", 0x0, 0x6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000000, 0x5}, 0x50)

1.407543017s ago: executing program 1 (id=5376):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) (async)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000000000000000000000000085000000500000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) (async)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r1, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0], 0x0, 0x71, &(0x7f00000005c0)=[{}], 0x8, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x89, 0x8, 0x8, &(0x7f0000000680)}}, 0x10)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x2, 0x3, 0x84) (async)
r5 = socket$kcm(0x2, 0x3, 0x84)
ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x890b, &(0x7f0000000100)) (async)
ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x890b, &(0x7f0000000100))
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="4da400000000000000009fabecddb85cd06d0000870000049500000000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfeac7b9b0e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19ea2eb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc089a9813c1efa26001b3f486ebfaae85c4d0b96778478ae5355e6f923b11056969f486f80a35f7f2339704fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d0000000000000000000000004e1fa60acabcf0553910ca2e5ea499fd5889dde9261f0848a5b8af657bfc96049308e8953431b269053627a1523551c160c813969925a892d266792352ec0204596a37ce8d6d260b32239bddbce2e79f93cb5a0ad897adb53b397d07c50f84b74f2605a565ee149016aa75ea31c0087dcd821b47c8b36efc6da4fb2ea7f1f36c85856b73ac9872babc62149699b6b8c796a79d833eb4b5ca668d430db5653a2b3c5b87e17ca1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x46, 0x0, &(0x7f00000002c0)="b90103616908068c3c270040e700009e0dc5cf1d66fff2fcffff8100632f0806", 0x0, 0x8104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000800), 0x4)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000880)={0x0, <r8=>0x0}, 0x8)
r9 = socket$kcm(0x15, 0x5, 0x0)
sendmsg$kcm(r9, &(0x7f0000000580)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x0)
r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000f1ff0f000000000000", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000030000000100"/28], 0x50)
ioctl$sock_kcm_SIOCKCMUNATTACH(r9, 0x89e1, &(0x7f0000000280)={r9})
bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0xb, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, [@map_fd={0x18, 0x2, 0x1, 0x0, r1}]}, &(0x7f0000000200)='GPL\x00', 0xea, 0x92, &(0x7f0000000440)=""/146, 0x41000, 0x2, '\x00', r4, @fallback=0x38, r7, 0x8, &(0x7f0000000940)={0xa, 0x2}, 0x8, 0x10, 0x0, 0x0, r8, r1, 0x1, &(0x7f0000000bc0)=[r0, r0, r0, r10, r0, r0, r0, r10, r0], &(0x7f0000000980)=[{0x2, 0x1, 0x8, 0xb}], 0x10, 0x3}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0xb, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, [@map_fd={0x18, 0x2, 0x1, 0x0, r1}]}, &(0x7f0000000200)='GPL\x00', 0xea, 0x92, &(0x7f0000000440)=""/146, 0x41000, 0x2, '\x00', r4, @fallback=0x38, r7, 0x8, &(0x7f0000000940)={0xa, 0x2}, 0x8, 0x10, 0x0, 0x0, r8, r1, 0x1, &(0x7f0000000bc0)=[r0, r0, r0, r10, r0, r0, r0, r10, r0], &(0x7f0000000980)=[{0x2, 0x1, 0x8, 0xb}], 0x10, 0x3}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) (async)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000380)=r1, 0x4) (async)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000380)=r1, 0x4)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0, <r11=>0xffffffffffffffff}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70a00000800000018230000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b80)={&(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000a80)=""/203, 0x4f, 0xcb, 0x1, 0x1}, 0x28)

1.373930959s ago: executing program 2 (id=5377):
perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x0, 0x0, 0xa, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x80, 0xa7, 0x2, 0x5, 0xa5, 0x9b9b, 0x7000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8000, 0x200}, 0x10002a, 0xac5d, 0x100, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000500)={0x0, r0}, 0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x5}, {0x0, [0x30, 0x30, 0x5f]}}, 0x0, 0x1d, 0x0, 0x1, 0xd500, 0x10000, @value=r1}, 0x28)
getpid()
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0, 0x114}, 0x10)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x22, &(0x7f00000018c0), 0x4)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r2, 0x107, 0xf, 0x0, 0x0)
sendmsg$kcm(r2, 0x0, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000600)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000007781b6c5805a5f000"/36], 0x50)
r3 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xa, 0x0, &(0x7f00000001c0)="9e36d449b388dd965f7a", 0x0, 0x10727, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, 0x0, &(0x7f0000000300)='GPL\x00', 0x2, 0x100a, &(0x7f0000002500)=""/4106}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000480)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0}, 0x40)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000680)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="2d0000000e000000", @ANYRES32=r3, @ANYBLOB="289f0fc080e63825d87fd8bc8b0b5fb4d7f5143361018e383290ca451ac43f6a67d11a56e1fc0f4332f1e65a97206df2a5e9bc1c4ab1bfa5806a8740190e1a2f38de70a8b7f102bb5352dadd0d7aa3943cd969a528f7b009cc751c5ff8a3ad35827ba69a9d518b93a3c56ea6bc0881fc0ba340ac4ccff57f96cf100e09dd129254f782543908f50eb93a313eba2d65173b76c9314df45e831edbe6796cbdf4d919181d5f089bcd90f6cbd1c154e9ba4af4907b25a962a0b8dc63a2f6c12ee69881352f9c585bba22a8d14b51dee983e5049f688cf66d08", @ANYRES32=r5, @ANYBLOB, @ANYRES64=0x0], 0x20)
r6 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000003f000b12d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0)

1.198283528s ago: executing program 1 (id=5378):
r0 = socket$kcm(0x2, 0x3, 0x106)
sendmsg$inet(r0, &(0x7f0000000800)={&(0x7f0000000380)={0x2, 0xfffd, @remote}, 0x10, 0x0}, 0x8d0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0})
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x202, 0xac5d, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x0, 0x7, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
r3 = perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x80000000c8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r6=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce8102030400fef2000e40000b00875a65969ff57b00ff020000000000000000000000000001"], 0xfdef)
ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0x8000)
recvmsg$unix(r1, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x1c0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES8=r2, @ANYBLOB="3eca", @ANYRES8], 0x9a)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0}, 0x94)
r8 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000840)={r6, 0x58, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r9=>0x0}}, 0x10)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000900)={0x5, <r10=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xb, 0x1b, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x246b3233}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@generic={0x18, 0x2, 0x9, 0x3ff, 0xc}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000640)='syzkaller\x00', 0x2, 0xc, &(0x7f0000000680)=""/12, 0x41000, 0x20, '\x00', r9, @fallback=0x13, r6, 0x8, &(0x7f0000000880)={0x5, 0x3}, 0x8, 0x10, &(0x7f00000008c0)={0x3, 0xc, 0x40, 0x6}, 0x10, r10, 0xffffffffffffffff, 0x0, &(0x7f0000000940)=[r6, r6, r6, r6, r6], 0x0, 0x10, 0x8}, 0x94)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000130000005d0000000000000095000000000000000a621cf434b9eaafdc0a00e9bfde908990817b364e51afe9c81a97f0570759f1cae63487ff68fffffffffffe8e3932e2b7185a25a4cf8a9456aa8a701c318c67edb6e9330b53c0eeba8644311ba754118907000000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r11, 0x0, 0xd00, 0x0, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8640888a8", 0x0, 0x1200}, 0x28)
r12 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000740)="d800000019008111e0020f060d8107040a60000000000000001455a12a00090008000699e3ffffff14000500fe80817806000567b8b7b94002000009080016060000000000000000d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237e09000000b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b7b4338c9f1ac76efb42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1}, 0x80)

1.15764064s ago: executing program 2 (id=5379):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde180000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0)
perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfffffff8}, 0x90)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200})
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r2, 0x0, 0xe, 0xfffffffffffffead, &(0x7f0000000080)="3a173357f297c605804ab3828443", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffe5, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0xfffffffffffffdf7)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000380)='c\x03\x1do\xd0V.\x80\xfb\xea\xe3\xda'}, 0x30)
r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181014100000000010000000000000e000a000f00000002800200121f", 0x2e}], 0x1}, 0x20000010)
write$cgroup_subtree(r3, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x48004)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r5 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r5, 0x1, 0xb, &(0x7f0000000100), 0x20)

908.333373ms ago: executing program 4 (id=5380):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000c0000004208000040000000c0"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x10f0, r0}, 0x38) (async)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x10f0, r0}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000640), 0x80000000, r0}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48)

907.609473ms ago: executing program 1 (id=5381):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xa9}, @exit], &(0x7f0000000180)='GPL\x00', 0xff, 0x0, 0x0, 0x0, 0x11}, 0x94)

804.394508ms ago: executing program 1 (id=5382):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff})
sendmsg(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002a00)=[{0x10, 0x1bf, 0xffff}, {0x10, 0x1, 0x8}], 0x20}, 0x8000)
r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.swap.events\x00', 0x0, 0x0)
r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x5, 0x3, &(0x7f00000001c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, r3}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0x10, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@alu={0x7, 0x0, 0xc, 0x0, 0x6, 0x100, 0x10}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='GPL\x00', 0x3b4, 0x24, &(0x7f0000000300)=""/36, 0x40f00, 0x9, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000340)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x5, 0x8, 0x8, 0x2}, 0x10, 0x1d4fe, r4, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
mkdirat$cgroup(r2, &(0x7f0000000540)='syz0\x00', 0x1ff)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0), 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}]}, &(0x7f0000000640)='syzkaller\x00', 0x7, 0xf9, &(0x7f0000000080)=""/249, 0x0, 0xf}, 0x94)
getpid()

782.046069ms ago: executing program 4 (id=5383):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x80260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000280), 0x1}, 0x4105, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0xa, 0x5, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0x5450, 0xf0ff1f00000000)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010018000000000000004000000040000000020019f9ccd97829570000000000000100000d000000000000000000000000000000000000000300000000020000000300000000000000000000000100000d00"/97], &(0x7f0000000140)=""/237, 0x5a, 0xed, 0x1}, 0x20)
r3 = socket$kcm(0x2b, 0x1, 0x0)
close(r0)
setsockopt$sock_attach_bpf(r3, 0x6, 0x4, &(0x7f0000000080), 0x4)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000001280)=ANY=[@ANYBLOB="620ac4ff00000000711091000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94)
openat$cgroup_ro(r4, &(0x7f0000000080)='memory.numa_stat\x00', 0x80040, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={&(0x7f00000003c0)="f51f559c934242a941825ff2ab27f7a982883cc9f9f8cb8b459a5134f8a3aae2f140754b348d5087ee64e882d928b6969c41c4ae0c47b0e15d8794e9a6a3e420842dff5f16ba1ee0b47fc25ee8b52ee6d6625f58307a28820c338914764b51be3557a841378d88ae4ee1f150332ad6f8510733639b3d14b2e7fd57c5039cf555beed5c9f3ff9992b4a20a3a9af7164cf7f2b11c44b30720dbc5fc49cf88a77b4c6ba9980d891bfbed094974187840e67a3ae54a6f3bbdaa2617e6b1b8a8ca4dc57fb039f48d035928ef07e158a", &(0x7f0000000900)=""/170, &(0x7f0000000c40)="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", &(0x7f0000000a40)="e748551b2d4f9b98b8077e0c7a822411abead558392df0781d1a0b6337211ab609fc68b1890406abd5588fb242ded48f22e7e91a1e23777a2dd34ff9a72c009f569bfae2d7a0d85e392318e3decd7786bb0342ddfed96fec2fbc5bde8b67ddea252fad2d0ed8c6fec4317315962e53e01757de6a7d68ab643790aa1d89b9", 0x80000001}, 0x38)
mkdirat$cgroup(r5, &(0x7f0000000b80)='syz0\x00', 0x1ff)
socketpair(0x18, 0x2, 0x1, &(0x7f0000000000))

616.615748ms ago: executing program 4 (id=5384):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) (async)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r0=>0xffffffffffffffff}) (async)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8932, &(0x7f0000001740)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12t\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf\xc8>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x88j\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xf6\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe\x8f$\xd0qx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5<J\x1f\xba\xfc\x90(\x985\x93\xa8\xd4\xf0\xbdTy\x18\xc8\xa0\xbb\x99\x8c\xe0Q\xffCl\xbdX~3\xa1\xa2\xf4\xd9\xf7\xc7\xfb\xce\x959x\xfeW\r\xf0{\xcaT\xecp)=\x9d\xdfG8\xa1\xe3=\xa6\x00\x98\xc1\xb3\x91-\xab\'W\x8al?d<JN\xcb\xd4H\xb0_jO\xf3\x90\xe8/l\xdfg)\x8d#\xfdo\xa9L\xdeA*\xec\xa1\x14,\xe8\x8d^\xb9r=\xc0\x18\xd4\x11dU[Ry\xed\xd6\x97\x8a\xe8\xca\x99\x10\x8e\xc8P\xa3\xae/\xdaof\x06\x7f\xf7\x80$f\b\x92\xae\xeb\xdd\"\x89\xb8\xf0\xc3\b\x00\x00\x00\x00\a\xf6\xfc\x1d\xd4\x893\xeb)\xc1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00O!\xd2q\xda}\xe2\xa2\xfe\xfd)\\\xdf\x9aN\\\xaeyc\xe4g\xc0\x8a\n\v{\xa9H\\\xd1\x9d\xb1\xb7\xf5\f\xe1\xc5\xc1O\xc2Pl\x94o\xc2\xed\x0f\x83\xac\x00\x8d\x1b\xe6\xf7\x0e\xecf3\xea\xe9\xd0\xe9\xf2@nc\xf8\x11\xd8\xee\x98\ff\xe04<j\x11\xe4\x06O3\"l\x1c\xfc+\xbf-\xa1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf4\x9b\xd0\xf3]\xa9\x81\x12\x80\x9e \x1a5\xc2+\xb3\xcc\xe0\xbfF\xf7H\x1e\x04\x10\x02*\xef#\xc0\xb5\xa4\xca\x9b$u\x93\x80\xfb.\xbdA\xb4\x92\xa7\xa6s\xeb\xb7C\x17^\x80Y\r\\\xd6s\xbc\x00\x00\x00\x00\x00\x00\x00\x00\x00')
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8912, &(0x7f0000000080))

614.418718ms ago: executing program 1 (id=5385):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)="d8000000190081054e81f782db4cb9040a1d080006007c02e8fe55a10a0015000900142603600e1208000f4f1b000401a8001600200005400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
close(0x3) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r2}, 0xc) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015400100142603600e12080006000000040104001600400001", 0x37}], 0x1}, 0x0) (async)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d800000018009d064e81060000000000000036660730e70d12c9dd97021d080006007cfce7fe55a10a0015000200142603600e1208000f", 0x37}], 0x1}, 0x0) (async)
r4 = socket$kcm(0x10, 0x2, 0x0)
bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', r3}, 0x18)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33)

613.788628ms ago: executing program 2 (id=5386):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000180000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="000000000000125f3ffa967c3102f6c7000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600"/104], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

605.410519ms ago: executing program 4 (id=5387):
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r0, 0x107, 0x8, &(0x7f0000000000), 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000007c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b00000005000000010001000a0000000100", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400"/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={0xffffffffffffffff, r1}, 0xc)
bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r3 = socket$kcm(0xa, 0x6, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
close(0x3)
r5 = socket$kcm(0xa, 0x1, 0x0)
sendmsg$kcm(r5, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x2, @empty}, 0x80, 0x0}, 0x20000001)
close(0x3)
setsockopt$sock_attach_bpf(r3, 0x10d, 0xf, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000002540)=[{&(0x7f0000000540)="b88a000000000000000000008100", 0x5bc}], 0x1}, 0x0)
socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x5, 0x25, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000003000000000000000000b04618110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="000000000000000018000000040000000000000000000000b7080000000000007b8af8ff00000000b7080000090000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000700000000000000000c000000b700000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000740)='GPL\x00', 0x8001, 0x3d, &(0x7f0000000840)=""/61, 0x41100, 0x2, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000900)={0x0, 0x6, 0x144d, 0x711}, 0x10, 0xffffffffffffffff, r6, 0x8, 0x0, &(0x7f0000000940)=[{0x3, 0x1, 0xe, 0x3}, {0x2, 0x2, 0xf, 0x5}, {0x5, 0x3, 0x4, 0xa}, {0x4, 0x5, 0x9, 0xe}, {0x0, 0x4, 0xd, 0x6}, {0x0, 0x5, 0xc, 0x6}, {0x2, 0x1, 0x2}, {0x77fe, 0x1, 0xa, 0x4}], 0x10, 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r6, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x4030582b, 0x0)
syz_clone(0x15209100, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x20002080)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)

465.868326ms ago: executing program 2 (id=5388):
r0 = socket$kcm(0xa, 0x5, 0x0)
r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x77}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x2, 0x0, 0x9, 0x20004, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000001180), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10000, 0x4, 0x0, 0xfffffffc, 0x0, 0x72d}, 0x0, 0xffffffffffffffff, r1, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000fc0)={&(0x7f00000003c0)="a70e8cf31909218d39e0aa5adf4798c48c", &(0x7f0000000540)=""/67, &(0x7f0000000ec0)="3e3e1b8c33a21414b8d04de449baf0354b87b98b8bc13fbb5c8059288dd46a31447aef13abaea2768426ed5a3cef359afc9a08573bed94160f30fdf98f92e8a48023c97f794ed68d3e4174430823691557d0c6a1d58113c9f739ab38daf653d7029b305088395164cb5fef3261efe1244547a19f71e4b1e135f26e23e48100712554ec03ff069690667d02d30f707e314151488266f7403e", &(0x7f0000000f80)="321b2db6abd4e5796f992ae610f3f7adfb45e9", 0xffffffff, r0}, 0x38)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x60}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001140)={r3, 0xe0, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f0000000840)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe2, &(0x7f0000000740)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0x3d, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007"], 0x0, 0x4}, 0x94)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000400000000000000", @ANYRES32, @ANYBLOB="00000000000000a97213e2361221ca0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000040000000100"/28], 0x50)
r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={0x0, 0x100, 0x18}, 0xc)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000b80)={0x1, 0x58, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0}}, 0x10)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0)
close(r7)
r8 = getpid()
sendmsg$unix(r7, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000240)='C', 0x1}], 0x1, &(0x7f0000000e00)=[@cred={{0x1c, 0x1, 0x2, {r8, 0x0, 0xee01}}}], 0x20, 0x10}, 0x80)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
close(r9)
ioctl$SIOCSIFHWADDR(r9, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"})
ioctl$SIOCSIFHWADDR(r9, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"})
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000cc0)={{0x1, <r10=>0xffffffffffffffff}, &(0x7f0000000c40), &(0x7f0000000c80)='%pI4   \x00'}, 0x20)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r11, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e00)={0x6, 0x6, &(0x7f00000011c0)=ANY=[@ANYBLOB="18110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200000076763ff149e6317cfb1f2ec2528c0d320000008500000086000000180000000080040000000000f1050000"], &(0x7f0000000a40)='syzkaller\x00', 0x8000, 0x75, &(0x7f0000000a80)=""/117, 0x1e00, 0x7, '\x00', r6, 0x25, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000bc0)={0x0, 0x6, 0xfffffffc, 0x280000}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000d00)=[r9, r10, r11], &(0x7f0000000d40)=[{0x4, 0x2, 0x4, 0x2}, {0x3, 0x1, 0x2, 0x6}, {0x4, 0x1, 0xb, 0x6}, {0x3, 0x2, 0x7, 0xb}, {0x3, 0x2, 0x4, 0x1}, {0x0, 0x1, 0x2, 0x7}, {0x4, 0x1, 0x5, 0x8}, {0x3, 0x5, 0x1, 0x7}, {0x0, 0x4, 0xf, 0x3}, {0x2, 0x2, 0x2, 0xa}], 0x10, 0x100}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000080)='X', 0x0, 0x1, 0x1000000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000c9"], 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1d38}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa0677"], 0xfdef)

460.846316ms ago: executing program 1 (id=5389):
perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x0, 0x0, 0xa, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x80, 0xa7, 0x2, 0x5, 0xa5, 0x9b9b, 0x7000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8000, 0x200}, 0x10002a, 0xac5d, 0x100, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000500)={0x0, r0}, 0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x5}, {0x0, [0x30, 0x30, 0x5f]}}, 0x0, 0x1d, 0x0, 0x1, 0xd500, 0x10000, @value=r1}, 0x28)
getpid()
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0, 0x114}, 0x10)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x22, &(0x7f00000018c0), 0x4)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r2, 0x107, 0xf, 0x0, 0x0)
sendmsg$kcm(r2, 0x0, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000600)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000007781b6c5805a5f000"/36], 0x50)
r3 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xa, 0x0, &(0x7f00000001c0)="9e36d449b388dd965f7a", 0x0, 0x10727, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, 0x0, &(0x7f0000000300)='GPL\x00', 0x2, 0x100a, &(0x7f0000002500)=""/4106}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000480)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0}, 0x40)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000680)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="2d0000000e000000", @ANYRES32=r3, @ANYBLOB="289f0fc080e63825d87fd8bc8b0b5fb4d7f5143361018e383290ca451ac43f6a67d11a56e1fc0f4332f1e65a97206df2a5e9bc1c4ab1bfa5806a8740190e1a2f38de70a8b7f102bb5352dadd0d7aa3943cd969a528f7b009cc751c5ff8a3ad35827ba69a9d518b93a3c56ea6bc0881fc0ba340ac4ccff57f96cf100e09dd129254f782543908f50eb93a313eba2d65173b76c9314df45e831edbe6796cbdf4d919181d5f089bcd90f6cbd1c154e9ba4af4907b25a962a0b8dc63a2f6c12ee69881352f9c585bba22a8d14b51dee983e5049f688cf66d08", @ANYRES32=r5, @ANYBLOB, @ANYRES64=0x0], 0x20)
r6 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000003f000b12d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0)

400.14978ms ago: executing program 0 (id=5390):
r0 = perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1e37cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x401, 0x200, 0x0, 0x7, 0x0, 0x100}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYRES8=r0], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000007c5e0000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x5}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2], 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=<r4=>r2, 0x8, 0x1, 0x101, &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0]}, 0x40)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x7e}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48)
r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000280), 0x4)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000002c0)={r5, r3, 0x0, r4}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))

398.46191ms ago: executing program 4 (id=5391):
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x17, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x88}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x7, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="6a0ac4ff000000007110aa00000000009500000000000000b12c674b43aed82dc10d3d45fb7e7db1e42c9bdc215e1bc1bca4106183cf9f1ff15d75d4938fd20076a0a755cb695ecf1df5cc0ca25d4ce2abf343dd4dd36641b6f85fbb2c730e2cd8e8a34f4dd0677dd4bb5635896fe483962a949226d15d07c88a668a3ab45731874e74c89800d01a5d597aa23d928749a827e6f8a4081c42f806764583fe41b9957fd3b6d526015e99bc2692a8f081f24a0f7cbd7fe7f9f40363710624addceba940c3227501fb8e71b868b2cfe03353e17e28afeca836eb658a1a250929ed0b"], &(0x7f0000000480)='GPL\x00'}, 0x94)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e281ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001400604040006040400", 0x58}], 0x1}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000100000000a500000000000018490000fe"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x19, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa7e3}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x12, 0x0, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b3114", 0x0, 0x0, 0x3}, 0x50)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d087277b9b108b4ab51c"], 0xfe33)
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000019"], 0xfe33)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x76d, 0x80190, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100080, 0x0, 0x0, 0x1}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="2e00000011008188040f80ec59acbc0413a1810031000000000f000000028002002d1f00"/46, 0x2e}], 0x1}, 0x44004)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x50)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24008000)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r2)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000100)="eaa982be1d1fb2909f1f48e4c2b197aad2bd728d", &(0x7f00000003c0), 0x1ff, 0xffffffffffffffff, 0x4}, 0x38)
sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
socket$kcm(0x10, 0x3, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

280.067686ms ago: executing program 2 (id=5392):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
recvmsg$unix(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x60000021)
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x3}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0x1, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0}}, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50)
socketpair(0x2, 0x2, 0x1, &(0x7f0000000080))
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz1\x00', 0x200002, 0x0)
r5 = openat$cgroup_ro(r4, &(0x7f0000000340)='blkio.bfq.group_wait_time\x00', 0x0, 0x0)
socket$kcm(0x29, 0x5, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{}, &(0x7f0000000040), &(0x7f00000000c0)='%ps    \x00'}, 0x20)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5, r5}, 0xc)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r6 = socket$kcm(0x10, 0x2, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r7, 0x702, 0xe, 0x0, &(0x7f0000000580)="e460334470d8d400eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000dc0)="5c00000014006b02c84e21000af32c6e0a0601000100000044000100fec00e000000004e0033df090e8497b1ed90d3d376bd5f6ffe5aa677b1c6f99b214460bc24f65ee2f308ff9d4f5a60eab556a705251e618294010000003b48df", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x80000)

215.196029ms ago: executing program 0 (id=5393):
r0 = socket$kcm(0x10, 0x2, 0x0) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e00e020023200b02d25a80ef8c6394f93e24fc60049d0d", 0x17}], 0x1}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) (async)
bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffeffe, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="bdb808dc8568b340418c92ceb709", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)

0s ago: executing program 0 (id=5394):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0)
close(r0)
socket$kcm(0x1e, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="940000000000000079912914edff000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x41de, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x11, 0x0, &(0x7f0000000680)="7993ff011900000000a63b00008f20e94d", 0x0, 0x400, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50)
write$cgroup_devices(r0, 0x0, 0xfffffeff)
r2 = socket$kcm(0x10, 0x2, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
write$cgroup_subtree(r5, &(0x7f00000002c0)=ANY=[@ANYRES8=r4, @ANYRES8=r6], 0x12)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x66, 0x2, 0x8, 0x42}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r7, &(0x7f0000000140), &(0x7f0000000200)=""/137, 0x2}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x0, 0x24, &(0x7f0000000300)=@raw=[@alu={0x4, 0x0, 0x8, 0x6, 0xb, 0x2, 0x1}, @map_fd={0x18, 0x5, 0x1, 0x0, r0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1f0946c0996a2fe0}}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x3}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x7}, @generic={0x7, 0x1, 0x0, 0x3, 0x1}], &(0x7f0000000440)='GPL\x00', 0x9, 0xc8, &(0x7f00000006c0)=""/200, 0x40f00, 0x2a, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000007c0)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000800)={0x2, 0x8, 0x800, 0xffffffff}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000840)=[r0, r0, r7, r0, r0, r0, r0, r0, r0], &(0x7f0000000880)=[{0x1, 0x3, 0xb, 0xc}, {0x2, 0x4, 0xb, 0x3}, {0x2, 0x2, 0x1, 0x3}, {0x5, 0x5, 0xb, 0x2}], 0x10, 0x80000000}, 0x94)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000010000004200000040"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000640), 0x1003, r8}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r8, &(0x7f0000000040)="ba5f37", &(0x7f0000000280)=""/96}, 0x20)
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000012006b47880000d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003680601000008000300ff000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) (async)
close(r0) (async)
socket$kcm(0x1e, 0x5, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="940000000000000079912914edff000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x41de, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x11, 0x0, &(0x7f0000000680)="7993ff011900000000a63b00008f20e94d", 0x0, 0x400, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) (async)
write$cgroup_devices(r0, 0x0, 0xfffffeff) (async)
socket$kcm(0x10, 0x2, 0x4) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)) (async)
close(r4) (async)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
write$cgroup_subtree(r5, &(0x7f00000002c0)=ANY=[@ANYRES8=r4, @ANYRES8=r6], 0x12) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x66, 0x2, 0x8, 0x42}, 0x48) (async)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r7, &(0x7f0000000140), &(0x7f0000000200)=""/137, 0x2}, 0x20) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x0, 0x24, &(0x7f0000000300)=@raw=[@alu={0x4, 0x0, 0x8, 0x6, 0xb, 0x2, 0x1}, @map_fd={0x18, 0x5, 0x1, 0x0, r0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1f0946c0996a2fe0}}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x3}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x7}, @generic={0x7, 0x1, 0x0, 0x3, 0x1}], &(0x7f0000000440)='GPL\x00', 0x9, 0xc8, &(0x7f00000006c0)=""/200, 0x40f00, 0x2a, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000007c0)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000800)={0x2, 0x8, 0x800, 0xffffffff}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000840)=[r0, r0, r7, r0, r0, r0, r0, r0, r0], &(0x7f0000000880)=[{0x1, 0x3, 0xb, 0xc}, {0x2, 0x4, 0xb, 0x3}, {0x2, 0x2, 0x1, 0x3}, {0x5, 0x5, 0xb, 0x2}], 0x10, 0x80000000}, 0x94) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000010000004200000040"], 0x48) (async)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000640), 0x1003, r8}, 0x38) (async)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r8, &(0x7f0000000040)="ba5f37", &(0x7f0000000280)=""/96}, 0x20) (async)
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000012006b47880000d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003680601000008000300ff000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async)

kernel console output (not intermixed with test programs):

437517][   T58] bridge0: port 1(bridge_slave_0) entered forwarding state
[  642.531316][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  642.563497][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  642.599374][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  642.659867][   T58] bridge0: port 2(bridge_slave_1) entered blocking state
[  642.667055][   T58] bridge0: port 2(bridge_slave_1) entered forwarding state
[  642.712725][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  642.755359][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  643.076695][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  643.110509][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  643.125670][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  643.144519][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  643.172450][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  643.193293][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  643.211916][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  643.245768][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  643.271988][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  643.288796][T14500] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  643.693402][T14772] FAULT_INJECTION: forcing a failure.
[  643.693402][T14772] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  643.751690][T14772] CPU: 0 PID: 14772 Comm: syz.3.3284 Not tainted syzkaller #0
[  643.759231][T14772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  643.769323][T14772] Call Trace:
[  643.772628][T14772]  <TASK>
[  643.775583][T14772]  dump_stack_lvl+0x188/0x24e
[  643.780306][T14772]  ? show_regs_print_info+0x12/0x12
[  643.785549][T14772]  ? load_image+0x400/0x400
[  643.790087][T14772]  ? __lock_acquire+0x7d10/0x7d10
[  643.795157][T14772]  should_fail_ex+0x399/0x4d0
[  643.799873][T14772]  prepare_alloc_pages+0x1e2/0x5f0
[  643.805058][T14772]  __alloc_pages+0x130/0x4f0
[  643.809705][T14772]  ? zone_statistics+0x170/0x170
[  643.814688][T14772]  ? verify_lock_unused+0x140/0x140
[  643.819932][T14772]  __folio_alloc+0xe/0x30
[  643.824332][T14772]  vma_alloc_folio+0x4a3/0x900
[  643.829145][T14772]  wp_page_copy+0x28b/0x1680
[  643.833775][T14772]  ? do_wp_page+0x67f/0x1680
[  643.838439][T14772]  ? fault_dirty_shared_page+0x3c0/0x3c0
[  643.844130][T14772]  handle_mm_fault+0x1d19/0x3ee0
[  643.849104][T14772]  ? mt_find+0x157/0x830
[  643.853399][T14772]  ? numa_migrate_prep+0x250/0x250
[  643.858566][T14772]  ? lock_chain_count+0x20/0x20
[  643.863480][T14772]  ? lock_mm_and_find_vma+0xae/0x2f0
[  643.868801][T14772]  do_user_addr_fault+0x51f/0xb10
[  643.873882][T14772]  exc_page_fault+0x60/0x100
[  643.878514][T14772]  asm_exc_page_fault+0x22/0x30
[  643.883407][T14772] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40
[  643.890044][T14772] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 <f3> a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90
[  643.909690][T14772] RSP: 0018:ffffc90004657628 EFLAGS: 00050202
[  643.915796][T14772] RAX: ffffffff840f1701 RBX: 0000000000000e5c RCX: 0000000000000e5c
[  643.923805][T14772] RDX: 0000000000000e5c RSI: ffff888052d74000 RDI: 0000200000002800
[  643.931811][T14772] RBP: 0000000000000000 R08: ffff888052d74e5b R09: 1ffff1100a5ae9cb
[  643.939836][T14772] R10: dffffc0000000000 R11: ffffed100a5ae9cc R12: 00007fffffffe1a4
[  643.947835][T14772] R13: 0000000000000e5c R14: ffff888052d74000 R15: 0000200000002800
[  643.955846][T14772]  ? copy_pipe_to_iter+0x171/0x180
[  643.961019][T14772]  copyout+0xe7/0x120
[  643.965064][T14772]  _copy_to_iter+0x48b/0x1040
[  643.969791][T14772]  ? iov_iter_init+0x1f0/0x1f0
[  643.974603][T14772]  ? __virt_addr_valid+0x188/0x540
[  643.979772][T14772]  ? __virt_addr_valid+0x465/0x540
[  643.984959][T14772]  ? __phys_addr_symbol+0x2b/0x70
[  643.990026][T14772]  ? __check_object_size+0x500/0xa40
[  643.995355][T14772]  __skb_datagram_iter+0xde/0x740
[  644.000458][T14772]  ? skb_copy_datagram_iter+0x290/0x290
[  644.006044][T14772]  skb_copy_datagram_iter+0xd7/0x290
[  644.011371][T14772]  netlink_recvmsg+0x2d0/0xe00
[  644.016195][T14772]  ? netlink_sendmsg+0xbd0/0xbd0
[  644.021180][T14772]  ? aa_af_perm+0x340/0x340
[  644.025737][T14772]  ? __might_fault+0xa6/0x120
[  644.030461][T14772]  ? bpf_lsm_socket_recvmsg+0x5/0x10
[  644.035785][T14772]  ? security_socket_recvmsg+0x85/0xb0
[  644.041293][T14772]  ? netlink_sendmsg+0xbd0/0xbd0
[  644.046295][T14772]  ____sys_recvmsg+0x2cb/0x5e0
[  644.051113][T14772]  ? __sys_recvmsg_sock+0x40/0x40
[  644.056210][T14772]  ? import_iovec+0x6f/0xa0
[  644.060756][T14772]  ___sys_recvmsg+0x212/0x590
[  644.065491][T14772]  ? __sys_recvmsg+0x290/0x290
[  644.070301][T14772]  ? common_file_perm+0x171/0x1c0
[  644.075369][T14772]  ? __fget_files+0x43d/0x4b0
[  644.080113][T14772]  __x64_sys_recvmsg+0x205/0x2e0
[  644.085100][T14772]  ? ___sys_recvmsg+0x590/0x590
[  644.090019][T14772]  ? lockdep_hardirqs_on+0x94/0x140
[  644.095270][T14772]  do_syscall_64+0x4c/0xa0
[  644.099731][T14772]  ? clear_bhb_loop+0x60/0xb0
[  644.104461][T14772]  ? clear_bhb_loop+0x60/0xb0
[  644.109187][T14772]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  644.115113][T14772] RIP: 0033:0x7fc43079c819
[  644.119565][T14772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  644.139219][T14772] RSP: 002b:00007fc431629028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  644.147665][T14772] RAX: ffffffffffffffda RBX: 00007fc430a15fa0 RCX: 00007fc43079c819
[  644.155675][T14772] RDX: 0000000000010100 RSI: 0000200000000080 RDI: 0000000000000003
[  644.163677][T14772] RBP: 00007fc431629090 R08: 0000000000000000 R09: 0000000000000000
[  644.171687][T14772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  644.179695][T14772] R13: 00007fc430a16038 R14: 00007fc430a15fa0 R15: 00007ffcb4b591e8
[  644.187744][T14772]  </TASK>
[  644.361395][ T4272] Bluetooth: hci1: unexpected event 0x1c length: 15 > 5
[  644.534014][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  644.565889][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  644.619470][T14500] 8021q: adding VLAN 0 to HW filter on device batadv0
[  644.662780][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  644.690170][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  644.829057][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  644.838100][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  645.654562][T14500] device veth0_vlan entered promiscuous mode
[  645.689696][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  645.708395][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  645.761418][T14500] device veth1_vlan entered promiscuous mode
[  645.864301][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  645.865505][T14824] FAULT_INJECTION: forcing a failure.
[  645.865505][T14824] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  645.888875][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  645.900287][T14500] device veth0_macvtap entered promiscuous mode
[  645.911009][T14824] CPU: 0 PID: 14824 Comm: syz.4.3296 Not tainted syzkaller #0
[  645.918510][T14824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  645.928589][T14824] Call Trace:
[  645.931895][T14824]  <TASK>
[  645.934856][T14824]  dump_stack_lvl+0x188/0x24e
[  645.939579][T14824]  ? show_regs_print_info+0x12/0x12
[  645.944817][T14824]  ? load_image+0x400/0x400
[  645.949370][T14824]  ? __lock_acquire+0x7d10/0x7d10
[  645.954446][T14824]  should_fail_ex+0x399/0x4d0
[  645.959163][T14824]  prepare_alloc_pages+0x1e2/0x5f0
[  645.964349][T14824]  __alloc_pages+0x130/0x4f0
[  645.968988][T14824]  ? zone_statistics+0x170/0x170
[  645.973984][T14824]  ? wp_page_copy+0xcd2/0x1680
[  645.978889][T14824]  ? verify_lock_unused+0x140/0x140
[  645.984136][T14824]  __folio_alloc+0xe/0x30
[  645.988499][T14824]  vma_alloc_folio+0x4a3/0x900
[  645.993311][T14824]  wp_page_copy+0x28b/0x1680
[  645.997944][T14824]  ? do_wp_page+0x67f/0x1680
[  646.002579][T14824]  ? fault_dirty_shared_page+0x3c0/0x3c0
[  646.008294][T14824]  handle_mm_fault+0x1d19/0x3ee0
[  646.013266][T14824]  ? mt_find+0x157/0x830
[  646.017561][T14824]  ? numa_migrate_prep+0x250/0x250
[  646.022717][T14824]  ? lock_chain_count+0x20/0x20
[  646.027669][T14824]  ? lock_mm_and_find_vma+0xae/0x2f0
[  646.032986][T14824]  do_user_addr_fault+0x51f/0xb10
[  646.038068][T14824]  exc_page_fault+0x60/0x100
[  646.042690][T14824]  asm_exc_page_fault+0x22/0x30
[  646.047580][T14824] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40
[  646.054219][T14824] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 <f3> a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90
[  646.073866][T14824] RSP: 0018:ffffc900046cf628 EFLAGS: 00050202
[  646.079984][T14824] RAX: ffffffff840f1701 RBX: 0000000000000e5c RCX: 000000000000065c
[  646.087997][T14824] RDX: 0000000000000e5c RSI: ffff88801ca84800 RDI: 0000200000003000
[  646.095997][T14824] RBP: 0000000000000000 R08: ffff88801ca84e5b R09: 1ffff110039509cb
[  646.104012][T14824] R10: dffffc0000000000 R11: ffffed10039509cc R12: 00007fffffffe1a4
[  646.112009][T14824] R13: 0000000000000e5c R14: ffff88801ca84000 R15: 0000200000002800
[  646.120014][T14824]  ? copy_pipe_to_iter+0x171/0x180
[  646.125173][T14824]  copyout+0xe7/0x120
[  646.129197][T14824]  _copy_to_iter+0x48b/0x1040
[  646.133939][T14824]  ? iov_iter_init+0x1f0/0x1f0
[  646.138780][T14824]  ? __virt_addr_valid+0x188/0x540
[  646.143930][T14824]  ? __virt_addr_valid+0x465/0x540
[  646.149079][T14824]  ? __phys_addr_symbol+0x2b/0x70
[  646.154152][T14824]  ? __check_object_size+0x500/0xa40
[  646.159479][T14824]  __skb_datagram_iter+0xde/0x740
[  646.164538][T14824]  ? skb_copy_datagram_iter+0x290/0x290
[  646.170129][T14824]  skb_copy_datagram_iter+0xd7/0x290
[  646.175638][T14824]  netlink_recvmsg+0x2d0/0xe00
[  646.180446][T14824]  ? netlink_sendmsg+0xbd0/0xbd0
[  646.185431][T14824]  ? aa_af_perm+0x340/0x340
[  646.189982][T14824]  ? __might_fault+0xa6/0x120
[  646.194725][T14824]  ? bpf_lsm_socket_recvmsg+0x5/0x10
[  646.200070][T14824]  ? security_socket_recvmsg+0x85/0xb0
[  646.205568][T14824]  ? netlink_sendmsg+0xbd0/0xbd0
[  646.210544][T14824]  ____sys_recvmsg+0x2cb/0x5e0
[  646.215367][T14824]  ? __sys_recvmsg_sock+0x40/0x40
[  646.220460][T14824]  ? import_iovec+0x6f/0xa0
[  646.225000][T14824]  ___sys_recvmsg+0x212/0x590
[  646.229733][T14824]  ? __sys_recvmsg+0x290/0x290
[  646.234549][T14824]  ? common_file_perm+0x171/0x1c0
[  646.239615][T14824]  ? __fget_files+0x43d/0x4b0
[  646.244348][T14824]  __x64_sys_recvmsg+0x205/0x2e0
[  646.249331][T14824]  ? ___sys_recvmsg+0x590/0x590
[  646.254241][T14824]  ? lockdep_hardirqs_on+0x94/0x140
[  646.259477][T14824]  do_syscall_64+0x4c/0xa0
[  646.263928][T14824]  ? clear_bhb_loop+0x60/0xb0
[  646.268638][T14824]  ? clear_bhb_loop+0x60/0xb0
[  646.273350][T14824]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  646.279294][T14824] RIP: 0033:0x7ff86779c819
[  646.283767][T14824] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  646.303420][T14824] RSP: 002b:00007ff8685a6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  646.311871][T14824] RAX: ffffffffffffffda RBX: 00007ff867a15fa0 RCX: 00007ff86779c819
[  646.319873][T14824] RDX: 0000000000010100 RSI: 0000200000000080 RDI: 0000000000000003
[  646.327878][T14824] RBP: 00007ff8685a6090 R08: 0000000000000000 R09: 0000000000000000
[  646.335923][T14824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  646.343923][T14824] R13: 00007ff867a16038 R14: 00007ff867a15fa0 R15: 00007ffc5e201438
[  646.351938][T14824]  </TASK>
[  646.404344][T14500] device veth1_macvtap entered promiscuous mode
[  646.501423][T14500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  646.551182][ T4272] Bluetooth: hci4: unexpected event 0x1c length: 15 > 5
[  646.567275][T14500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  646.629795][T14500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  646.660735][T14500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  646.691092][T14500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  646.722087][T14500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  646.759054][T14500] batman_adv: batadv0: Interface activated: batadv_slave_0
[  646.777192][T14844] netlink: 'syz.0.3301': attribute type 2 has an invalid length.
[  646.799437][T14500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  646.834515][T14500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  646.854610][T14500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  646.875531][T14500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  646.895617][T14500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  646.906318][T14500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  646.928820][T14500] batman_adv: batadv0: Interface activated: batadv_slave_1
[  646.936209][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  646.953540][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  646.975103][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  646.996876][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  647.014267][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  647.026478][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  647.063547][T14500] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  647.083985][T14500] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  647.112398][T14500] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  647.147581][T14500] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  648.122657][ T4335] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  648.159589][ T4335] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  648.220094][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  648.276213][   T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  648.303951][   T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  648.316738][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  648.807434][ T4272] Bluetooth: hci3: unexpected event 0x1c length: 15 > 5
[  648.939393][T14896] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  649.075816][T14903] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3317'.
[  650.989120][T14926] netlink: 'syz.2.3325': attribute type 16 has an invalid length.
[  650.997132][T14926] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3325'.
[  651.066563][T14922] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  651.081544][T14922] batman_adv: batadv0: Removing interface: batadv_slave_0
[  651.167812][T14922] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  651.175258][T14922] batman_adv: batadv0: Removing interface: batadv_slave_1
[  651.554544][ T4272] Bluetooth: hci3: unexpected event 0x1c length: 15 > 5
[  651.836547][ T4272] Bluetooth: hci1: unexpected event 0x23 length: 15 > 13
[  652.019112][ T4272] Bluetooth: hci2: unexpected event 0x10 length: 15 > 1
[  652.026572][T12599] Bluetooth: hci2: hardware error 0x0f
[  654.133815][ T4272] Bluetooth: hci3: unexpected event 0x1c length: 15 > 5
[  654.938126][T12599] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  655.429542][T15015] netlink: 'syz.3.3350': attribute type 19 has an invalid length.
[  655.469857][T15015] netlink: 172 bytes leftover after parsing attributes in process `syz.3.3350'.
[  655.678800][T15021] netlink: 'syz.1.3355': attribute type 10 has an invalid length.
[  656.017310][T12599] Bluetooth: hci1: unexpected event 0x1c length: 15 > 5
[  657.911969][T15021] team0: Port device macvlan0 added
[  657.936876][T15024] netlink: 'syz.2.3356': attribute type 4 has an invalid length.
[  657.967957][T15024] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3356'.
[  658.000826][T15024] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  658.098994][T15043] netlink: 'syz.1.3360': attribute type 12 has an invalid length.
[  658.150030][T15043] netlink: 172 bytes leftover after parsing attributes in process `syz.1.3360'.
[  658.184995][T15041] netlink: 'syz.3.3359': attribute type 10 has an invalid length.
[  658.631913][T15041] team0: Port device wlan1 added
[  658.701243][T15050] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3361'.
[  659.754340][T15076] netlink: 'syz.2.3370': attribute type 29 has an invalid length.
[  660.264498][T15076] netlink: 'syz.2.3370': attribute type 29 has an invalid length.
[  660.418569][T15099] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3376'.
[  662.484167][T15178] netlink: 'syz.4.3392': attribute type 10 has an invalid length.
[  662.837507][T15178] device wlan1 left promiscuous mode
[  662.953439][T15178] team0: Port device wlan1 added
[  663.404674][T15190] netlink: 'syz.0.3395': attribute type 10 has an invalid length.
[  663.475863][T15190] bridge0: port 2(bridge_slave_1) entered disabled state
[  663.487025][T15190] bridge0: port 1(bridge_slave_0) entered disabled state
[  663.718089][T15190] bridge0: port 2(bridge_slave_1) entered blocking state
[  663.726783][T15190] bridge0: port 2(bridge_slave_1) entered forwarding state
[  663.738324][T15190] bridge0: port 1(bridge_slave_0) entered blocking state
[  663.746602][T15190] bridge0: port 1(bridge_slave_0) entered forwarding state
[  664.020526][T15190] team0: Port device bridge0 added
[  664.048016][T15192] netlink: 'syz.3.3397': attribute type 10 has an invalid length.
[  664.116620][T15192] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3397'.
[  664.139595][T15192] bridge0: port 3(veth0_vlan) entered blocking state
[  664.144321][T15199] netlink: 'syz.2.3400': attribute type 2 has an invalid length.
[  664.168117][T15199] netlink: 'syz.2.3400': attribute type 1 has an invalid length.
[  664.173634][T15192] bridge0: port 3(veth0_vlan) entered disabled state
[  664.175868][T15199] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3400'.
[  664.244969][T15192] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  664.286141][T15195] netlink: 'syz.4.3398': attribute type 27 has an invalid length.
[  664.576708][T15209] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3403'.
[  664.689184][T15211] delete_channel: no stack
[  665.112288][T15195] bond0: (slave bond_slave_0): Releasing backup interface
[  665.856830][T15234] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.3414'.
[  665.956399][T15235] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.3413'.
[  666.764179][T15247] netlink: 'syz.3.3417': attribute type 27 has an invalid length.
[  666.912584][T15256] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3421'.
[  667.033796][T15247] bond0: (slave bond_slave_0): Releasing backup interface
[  667.625143][T15253] netlink: 'syz.1.3419': attribute type 6 has an invalid length.
[  667.638411][T15253] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3419'.
[  668.600988][T15287] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3430'.
[  669.163848][T15292] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  669.225994][T15292] batman_adv: batadv0: Removing interface: batadv_slave_0
[  669.292477][T15292] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  669.301438][T15302] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.3433'.
[  669.313209][T15292] batman_adv: batadv0: Removing interface: batadv_slave_1
[  670.104230][T15308] netlink: 'syz.2.3436': attribute type 10 has an invalid length.
[  670.254862][T15308] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  670.501841][T15323] netlink: 'syz.4.3441': attribute type 21 has an invalid length.
[  670.525654][T15323] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3441'.
[  670.586025][T15323] openvswitch: netlink: Message has 6 unknown bytes.
[  670.593061][T15327] netlink: 'syz.0.3440': attribute type 27 has an invalid length.
[  671.491500][T15327] bond0: (slave bond_slave_0): Releasing backup interface
[  671.720191][T15334] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  671.732750][T15334] batman_adv: batadv0: Removing interface: batadv_slave_0
[  671.775993][T15334] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  671.803318][T15334] batman_adv: batadv0: Removing interface: batadv_slave_1
[  672.295423][T15348] netlink: 'syz.0.3447': attribute type 2 has an invalid length.
[  672.352763][T15348] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3447'.
[  673.429146][T15350] team0: Port device team_slave_0 removed
[  679.219669][T15433] netlink: 'syz.3.3472': attribute type 2 has an invalid length.
[  679.241295][T15433] netlink: 'syz.3.3472': attribute type 1 has an invalid length.
[  679.297771][T15433] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3472'.
[  680.562214][T15448] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  683.404846][T15483] netlink: 'syz.0.3487': attribute type 3 has an invalid length.
[  683.428036][T15483] netlink: 'syz.0.3487': attribute type 1 has an invalid length.
[  683.435845][T15483] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3487'.
[  684.447447][T15495] netlink: 'syz.1.3492': attribute type 29 has an invalid length.
[  684.770893][T15493] team0: Port device team_slave_0 removed
[  684.891854][T15495] netlink: 'syz.1.3492': attribute type 29 has an invalid length.
[  685.056643][T15499] netlink: 'syz.1.3492': attribute type 29 has an invalid length.
[  685.670585][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  685.677086][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  686.786735][T15530] delete_channel: no stack
[  687.748623][T15550] netlink: 'syz.3.3508': attribute type 9 has an invalid length.
[  688.416431][T15555] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3510'.
[  691.130622][T12599] Bluetooth: hci4: Malformed Event: 0x13
[  692.471338][T15612] netlink: 'syz.1.3523': attribute type 13 has an invalid length.
[  692.500431][T15612] netlink: 172 bytes leftover after parsing attributes in process `syz.1.3523'.
[  692.595662][T15613] netlink: 'syz.1.3523': attribute type 7 has an invalid length.
[  692.636991][T15612] erspan0: refused to change device tx_queue_len
[  692.655241][T15613] netlink: 208404 bytes leftover after parsing attributes in process `syz.1.3523'.
[  692.685517][T15615] netlink: 'syz.2.3524': attribute type 21 has an invalid length.
[  692.706101][T15615] netlink: 'syz.2.3524': attribute type 6 has an invalid length.
[  692.751051][T15615] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3524'.
[  693.033481][T15620] netlink: 'syz.4.3522': attribute type 2 has an invalid length.
[  695.764104][T15651] netlink: 'syz.1.3536': attribute type 2 has an invalid length.
[  696.964272][T15680] netlink: 'syz.0.3543': attribute type 21 has an invalid length.
[  696.983312][T15680] netlink: 'syz.0.3543': attribute type 6 has an invalid length.
[  697.014843][T15680] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3543'.
[  697.126207][T15682] mac80211_hwsim hwsim26 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  697.746222][T15707] netlink: 'syz.3.3551': attribute type 10 has an invalid length.
[  697.767322][T15707] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3551'.
[  697.799205][T15707] device bond0 entered promiscuous mode
[  697.857866][T15707] device bond_slave_1 entered promiscuous mode
[  697.867043][T15708] netlink: 'syz.3.3551': attribute type 3 has an invalid length.
[  697.889286][T15707] bridge0: port 3(bond0) entered blocking state
[  697.906085][T15707] bridge0: port 3(bond0) entered disabled state
[  697.923987][T15707] bridge0: port 3(bond0) entered blocking state
[  697.930427][T15707] bridge0: port 3(bond0) entered forwarding state
[  697.937602][T15708] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3551'.
[  697.980094][ T4272] Bluetooth: hci1: command 0x0406 tx timeout
[  698.108473][T15158] device gretap0 left promiscuous mode
[  698.118264][T15158] Ÿë
: port 1(gretap0) entered disabled state
[  698.667488][T15731] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3558'.
[  698.956864][T15729] netlink: 'syz.2.3559': attribute type 10 has an invalid length.
[  698.986701][T15729] device veth1_macvtap left promiscuous mode
[  699.415485][T15158] device veth0_to_team left promiscuous mode
[  699.426564][T15158] Ÿë
: port 2(veth0_to_team) entered disabled state
[  699.478045][T15158] device veth1_macvtap left promiscuous mode
[  699.484114][T15158] device veth0_macvtap left promiscuous mode
[  699.747278][T15159] wlan1: Trigger new scan to find an IBSS to join
[  700.672984][T15158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  700.971135][T15158] bond0 (unregistering): Released all slaves
[  701.007834][T15771] netlink: 'syz.4.3570': attribute type 1 has an invalid length.
[  701.016302][T15772] netlink: 'syz.4.3570': attribute type 1 has an invalid length.
[  701.041231][T15776] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3572'.
[  701.577126][T15798] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  702.591002][T15835] tipc: Started in network mode
[  702.617555][T15835] tipc: Node identity 9215a268, cluster identity 4711
[  702.630209][T15835] tipc: Node number set to 2450891368
[  703.262589][T15860] netlink: 'syz.4.3598': attribute type 4 has an invalid length.
[  703.308370][T15860] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3598'.
[  703.413277][T15860] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  703.736836][ T4272] Bluetooth: hci3: unknown advertising packet type: 0x63
[  703.747357][T15163] wlan1: Trigger new scan to find an IBSS to join
[  705.751043][T15161] wlan1: Creating new IBSS network, BSSID 16:83:6a:18:6b:3f
[  705.899026][T15158] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  705.988233][T15877] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  706.070971][T15877] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  706.209880][T15886] netlink: 'syz.2.3606': attribute type 2 has an invalid length.
[  706.643231][T15904] netlink: 'syz.3.3612': attribute type 5 has an invalid length.
[  706.685087][T15908] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3614'.
[  706.720713][T15910] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3613'.
[  708.296267][T15954] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3625'.
[  709.345288][T15983] netlink: 'syz.0.3634': attribute type 10 has an invalid length.
[  709.646667][T15988] netlink: 'syz.4.3635': attribute type 10 has an invalid length.
[  709.670014][T15989] netlink: 'syz.2.3636': attribute type 2 has an invalid length.
[  709.679660][T15989] netlink: 17 bytes leftover after parsing attributes in process `syz.2.3636'.
[  709.747847][T15988] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  709.757744][T15988] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  709.778750][T15988] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  709.788751][T15988] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  709.999590][T15988] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  710.009527][T15988] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  710.019163][T15988] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  710.028991][T15988] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  710.068108][T15988] team0: Port device geneve1 added
[  710.301244][T15999] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.3640'.
[  711.134772][T16018] netlink: 'syz.3.3645': attribute type 10 has an invalid length.
[  711.300934][T16018] team0: Port device macvlan0 added
[  711.886290][T16044] netlink: 'syz.1.3652': attribute type 2 has an invalid length.
[  711.906498][T16044] netlink: 17 bytes leftover after parsing attributes in process `syz.1.3652'.
[  712.145756][T16057] netlink: 'syz.0.3658': attribute type 28 has an invalid length.
[  712.209781][T16057] netlink: 'syz.0.3658': attribute type 29 has an invalid length.
[  712.269831][T16057] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3658'.
[  712.478219][T16067] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.3660'.
[  712.540541][T16071] netlink: 'syz.1.3661': attribute type 21 has an invalid length.
[  712.637589][T16074] netlink: 'syz.1.3661': attribute type 21 has an invalid length.
[  713.112014][T12599] Bluetooth: hci1: unexpected event 0x1c length: 15 > 5
[  713.172291][T16090] netlink: 'syz.0.3666': attribute type 11 has an invalid length.
[  713.196026][T16091] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3667'.
[  713.205960][T16090] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.3666'.
[  713.241826][T16090] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.3666'.
[  713.337386][T12599] Bluetooth: hci4: command 0x0406 tx timeout
[  713.376286][T16080] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3662'.
[  713.578986][T16101] netlink: 65019 bytes leftover after parsing attributes in process `syz.0.3670'.
[  714.373109][T16103] team0: Port device geneve1 added
[  714.992036][T12599] Bluetooth: hci1: unexpected event 0x0f length: 15 > 4
[  715.301906][T16158] validate_nla: 2 callbacks suppressed
[  715.301922][T16158] netlink: 'syz.3.3685': attribute type 29 has an invalid length.
[  715.446328][T16154] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3684'.
[  715.528718][T16158] netlink: 'syz.3.3685': attribute type 29 has an invalid length.
[  715.565012][T16162] netlink: 'syz.3.3685': attribute type 29 has an invalid length.
[  715.599212][T16169] netlink: 'syz.4.3688': attribute type 21 has an invalid length.
[  715.675282][T16158] netlink: 'syz.3.3685': attribute type 29 has an invalid length.
[  718.376099][T16234] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3707'.
[  718.614220][T16239] tun0: tun_chr_ioctl cmd 1074025675
[  718.627557][T16239] tun0: persist enabled
[  718.638783][T16239] tun0: tun_chr_ioctl cmd 1074025675
[  718.647860][T16239] tun0: persist disabled
[  722.429236][T16308] device macsec0 entered promiscuous mode
[  722.584513][T16308] device veth1_macvtap left promiscuous mode
[  722.723241][T16312] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3730'.
[  723.001633][T16312] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3730'.
[  723.203190][T16320] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3731'.
[  723.672245][T16335] tun0: tun_chr_ioctl cmd 1074025675
[  723.714974][T16335] tun0: persist enabled
[  723.980586][T16336] tun0: tun_chr_ioctl cmd 1074025675
[  724.001999][T16336] tun0: persist disabled
[  725.933053][T16399] tun0: tun_chr_ioctl cmd 1074025675
[  725.945539][T16399] tun0: persist enabled
[  725.959240][T16399] tun0: tun_chr_ioctl cmd 1074025675
[  725.997292][T16399] tun0: persist disabled
[  726.829224][T16423] netlink: 'syz.3.3760': attribute type 3 has an invalid length.
[  726.914658][T16423] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3760'.
[  726.988966][T16420] IPv6: Can't replace route, no match found
[  728.405509][T16465] netlink: 'syz.3.3773': attribute type 29 has an invalid length.
[  728.438988][T16466] netlink: 'syz.3.3773': attribute type 29 has an invalid length.
[  728.707619][ T4272] Bluetooth: hci3: command 0x0406 tx timeout
[  729.170147][T16481] netlink: 126632 bytes leftover after parsing attributes in process `syz.0.3777'.
[  729.388105][T16466] netlink: 'syz.3.3773': attribute type 29 has an invalid length.
[  729.399925][T16481] netlink: 8192 bytes leftover after parsing attributes in process `syz.0.3777'.
[  729.419263][T16483] netlink: 'syz.0.3777': attribute type 10 has an invalid length.
[  729.440941][T16483] device hsr0 entered promiscuous mode
[  729.462298][T16483] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  729.499192][T16479] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3777'.
[  729.740589][T16493] netlink: 'syz.3.3780': attribute type 10 has an invalid length.
[  729.807792][T16493] team0: Device wg1 is of different type
[  730.809671][T16501] netlink: 'syz.0.3782': attribute type 2 has an invalid length.
[  730.879155][T16510] netlink: 15487 bytes leftover after parsing attributes in process `syz.0.3782'.
[  731.234593][T16516] netlink: 'syz.2.3786': attribute type 3 has an invalid length.
[  731.527256][T16516] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3786'.
[  731.812090][T16521] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  731.871158][T16521] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  732.175359][T16530] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3790'.
[  732.837005][T16540] netlink: 'syz.2.3792': attribute type 10 has an invalid length.
[  733.081232][T16540] team0 (unregistering): Port device team_slave_0 removed
[  733.128382][T16540] team0 (unregistering): Port device team_slave_1 removed
[  733.182246][T16540] team0 (unregistering): Port device geneve1 removed
[  734.067504][T16555] netlink: 'syz.3.3796': attribute type 21 has an invalid length.
[  734.085153][T16555] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3796'.
[  734.909965][T16585] netlink: 'syz.4.3806': attribute type 46 has an invalid length.
[  738.275020][T16626] FAULT_INJECTION: forcing a failure.
[  738.275020][T16626] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  738.278293][T16624] netlink: 'syz.4.3817': attribute type 2 has an invalid length.
[  738.314497][T16624] netlink: 'syz.4.3817': attribute type 8 has an invalid length.
[  738.336432][T16626] CPU: 1 PID: 16626 Comm: syz.3.3818 Not tainted syzkaller #0
[  738.343952][T16626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  738.354039][T16626] Call Trace:
[  738.357360][T16626]  <TASK>
[  738.360330][T16626]  dump_stack_lvl+0x188/0x24e
[  738.365064][T16626]  ? show_regs_print_info+0x12/0x12
[  738.370319][T16626]  ? load_image+0x400/0x400
[  738.374877][T16626]  ? __lock_acquire+0x7d10/0x7d10
[  738.379983][T16626]  should_fail_ex+0x399/0x4d0
[  738.384709][T16626]  _copy_from_user+0x2c/0x170
[  738.389431][T16626]  ___sys_recvmsg+0x172/0x590
[  738.394178][T16626]  ? __sys_recvmsg+0x290/0x290
[  738.399005][T16626]  ? common_file_perm+0x171/0x1c0
[  738.404100][T16626]  ? __fget_files+0x43d/0x4b0
[  738.408883][T16626]  __x64_sys_recvmsg+0x205/0x2e0
[  738.413858][T16626]  ? ct_nmi_exit+0x145/0x1c0
[  738.418492][T16626]  ? ___sys_recvmsg+0x590/0x590
[  738.423427][T16626]  ? lockdep_hardirqs_on+0x94/0x140
[  738.428671][T16626]  do_syscall_64+0x4c/0xa0
[  738.433126][T16626]  ? clear_bhb_loop+0x60/0xb0
[  738.437876][T16626]  ? clear_bhb_loop+0x60/0xb0
[  738.442644][T16626]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  738.448592][T16626] RIP: 0033:0x7fc43079c819
[  738.453044][T16626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  738.472697][T16626] RSP: 002b:00007fc431629028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  738.481151][T16626] RAX: ffffffffffffffda RBX: 00007fc430a15fa0 RCX: 00007fc43079c819
[  738.489159][T16626] RDX: 0000000000010100 RSI: 0000200000000080 RDI: 0000000000000003
[  738.497180][T16626] RBP: 00007fc431629090 R08: 0000000000000000 R09: 0000000000000000
[  738.505193][T16626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  738.513198][T16626] R13: 00007fc430a16038 R14: 00007fc430a15fa0 R15: 00007ffcb4b591e8
[  738.521262][T16626]  </TASK>
[  738.540988][T16624] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3817'.
[  739.023640][T16647] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3824'.
[  740.535279][T16674] netlink: 'syz.1.3830': attribute type 3 has an invalid length.
[  740.583170][T16674] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3830'.
[  740.710336][T16681] FAULT_INJECTION: forcing a failure.
[  740.710336][T16681] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  740.725209][T16681] CPU: 0 PID: 16681 Comm: syz.2.3833 Not tainted syzkaller #0
[  740.732710][T16681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  740.742875][T16681] Call Trace:
[  740.746195][T16681]  <TASK>
[  740.749150][T16681]  dump_stack_lvl+0x188/0x24e
[  740.753882][T16681]  ? show_regs_print_info+0x12/0x12
[  740.759175][T16681]  ? load_image+0x400/0x400
[  740.763729][T16681]  ? __lock_acquire+0x7d10/0x7d10
[  740.768796][T16681]  should_fail_ex+0x399/0x4d0
[  740.773513][T16681]  _copy_from_user+0x2c/0x170
[  740.778230][T16681]  iovec_from_user+0x143/0x360
[  740.783042][T16681]  __import_iovec+0x6d/0x500
[  740.787671][T16681]  ? __might_fault+0xa6/0x120
[  740.792375][T16681]  import_iovec+0x6f/0xa0
[  740.796753][T16681]  ___sys_recvmsg+0x4b6/0x590
[  740.801477][T16681]  ? __sys_recvmsg+0x290/0x290
[  740.806314][T16681]  ? common_file_perm+0x171/0x1c0
[  740.811397][T16681]  ? __fget_files+0x43d/0x4b0
[  740.816136][T16681]  __x64_sys_recvmsg+0x205/0x2e0
[  740.821115][T16681]  ? ct_nmi_exit+0x145/0x1c0
[  740.825751][T16681]  ? ___sys_recvmsg+0x590/0x590
[  740.830663][T16681]  ? lockdep_hardirqs_on+0x94/0x140
[  740.835922][T16681]  do_syscall_64+0x4c/0xa0
[  740.840406][T16681]  ? clear_bhb_loop+0x60/0xb0
[  740.845125][T16681]  ? clear_bhb_loop+0x60/0xb0
[  740.849848][T16681]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  740.855782][T16681] RIP: 0033:0x7f4b4bb9c819
[  740.860224][T16681] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  740.879872][T16681] RSP: 002b:00007f4b4ca86028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  740.888336][T16681] RAX: ffffffffffffffda RBX: 00007f4b4be15fa0 RCX: 00007f4b4bb9c819
[  740.896347][T16681] RDX: 0000000000010100 RSI: 0000200000000080 RDI: 0000000000000003
[  740.904358][T16681] RBP: 00007f4b4ca86090 R08: 0000000000000000 R09: 0000000000000000
[  740.912373][T16681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  740.920379][T16681] R13: 00007f4b4be16038 R14: 00007f4b4be15fa0 R15: 00007ffd28c515f8
[  740.928397][T16681]  </TASK>
[  740.993917][T16679] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3831'.
[  743.300383][T16740] FAULT_INJECTION: forcing a failure.
[  743.300383][T16740] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  743.335045][T16740] CPU: 0 PID: 16740 Comm: syz.1.3851 Not tainted syzkaller #0
[  743.342649][T16740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  743.352736][T16740] Call Trace:
[  743.356044][T16740]  <TASK>
[  743.359002][T16740]  dump_stack_lvl+0x188/0x24e
[  743.363747][T16740]  ? show_regs_print_info+0x12/0x12
[  743.368989][T16740]  ? load_image+0x400/0x400
[  743.373547][T16740]  ? __might_fault+0xa6/0x120
[  743.378261][T16740]  should_fail_ex+0x399/0x4d0
[  743.382977][T16740]  copyout+0x1b/0x120
[  743.387010][T16740]  _copy_to_iter+0x48b/0x1040
[  743.391756][T16740]  ? iov_iter_init+0x1f0/0x1f0
[  743.396556][T16740]  ? __virt_addr_valid+0x188/0x540
[  743.401709][T16740]  ? __virt_addr_valid+0x465/0x540
[  743.406897][T16740]  ? __phys_addr_symbol+0x2b/0x70
[  743.411962][T16740]  ? __check_object_size+0x500/0xa40
[  743.417281][T16740]  __skb_datagram_iter+0xde/0x740
[  743.422337][T16740]  ? skb_copy_datagram_iter+0x290/0x290
[  743.427921][T16740]  skb_copy_datagram_iter+0xd7/0x290
[  743.433262][T16740]  netlink_recvmsg+0x2d0/0xe00
[  743.438099][T16740]  ? netlink_sendmsg+0xbd0/0xbd0
[  743.443098][T16740]  ? aa_af_perm+0x340/0x340
[  743.447641][T16740]  ? __might_fault+0xa6/0x120
[  743.452352][T16740]  ? bpf_lsm_socket_recvmsg+0x5/0x10
[  743.457663][T16740]  ? security_socket_recvmsg+0x85/0xb0
[  743.463164][T16740]  ? netlink_sendmsg+0xbd0/0xbd0
[  743.468146][T16740]  ____sys_recvmsg+0x2cb/0x5e0
[  743.472960][T16740]  ? __sys_recvmsg_sock+0x40/0x40
[  743.478051][T16740]  ? import_iovec+0x6f/0xa0
[  743.482600][T16740]  ___sys_recvmsg+0x212/0x590
[  743.487322][T16740]  ? __sys_recvmsg+0x290/0x290
[  743.492140][T16740]  ? common_file_perm+0x171/0x1c0
[  743.497226][T16740]  ? __fget_files+0x43d/0x4b0
[  743.501936][T16740]  __x64_sys_recvmsg+0x205/0x2e0
[  743.506885][T16740]  ? ct_nmi_exit+0x145/0x1c0
[  743.511508][T16740]  ? ___sys_recvmsg+0x590/0x590
[  743.516416][T16740]  ? lockdep_hardirqs_on+0x94/0x140
[  743.521642][T16740]  do_syscall_64+0x4c/0xa0
[  743.526075][T16740]  ? clear_bhb_loop+0x60/0xb0
[  743.530788][T16740]  ? clear_bhb_loop+0x60/0xb0
[  743.535553][T16740]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  743.541493][T16740] RIP: 0033:0x7f8fb739c819
[  743.545940][T16740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  743.565577][T16740] RSP: 002b:00007f8fb81a1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  743.574020][T16740] RAX: ffffffffffffffda RBX: 00007f8fb7615fa0 RCX: 00007f8fb739c819
[  743.582018][T16740] RDX: 0000000000010100 RSI: 0000200000000080 RDI: 0000000000000003
[  743.590021][T16740] RBP: 00007f8fb81a1090 R08: 0000000000000000 R09: 0000000000000000
[  743.598024][T16740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  743.606024][T16740] R13: 00007f8fb7616038 R14: 00007f8fb7615fa0 R15: 00007ffc3ea9a598
[  743.614040][T16740]  </TASK>
[  743.784331][T16745] netlink: 'syz.4.3849': attribute type 3 has an invalid length.
[  743.795339][T16745] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3849'.
[  747.109581][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  747.116101][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  747.217342][T16768] netlink: 'syz.3.3859': attribute type 1 has an invalid length.
[  747.459982][T16779] netlink: 'syz.4.3861': attribute type 29 has an invalid length.
[  747.484806][T16779] netlink: 'syz.4.3861': attribute type 29 has an invalid length.
[  747.562405][T16774] netlink: 'syz.4.3861': attribute type 29 has an invalid length.
[  747.588066][T16778] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3863'.
[  747.611175][T16778] device hsr_slave_0 left promiscuous mode
[  747.704295][T16778] device hsr_slave_1 left promiscuous mode
[  748.309068][T16803] netlink: 'syz.0.3868': attribute type 3 has an invalid length.
[  748.363209][T16803] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3868'.
[  748.933416][T16813] device wlan1 entered promiscuous mode
[  749.111539][T16820] device syzkaller0 entered promiscuous mode
[  749.414153][T16836] netlink: 'syz.3.3877': attribute type 3 has an invalid length.
[  749.496582][T16836] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3877'.
[  749.565571][T16834] IPv6: Can't replace route, no match found
[  750.891840][T16873] sock: sock_set_timeout: `syz.0.3885' (pid 16873) tries to set negative timeout
[  751.003664][T16858] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3883'.
[  751.193053][T16858] device hsr_slave_0 left promiscuous mode
[  751.206521][T16858] device hsr_slave_1 left promiscuous mode
[  751.233654][T16876] netlink: 194236 bytes leftover after parsing attributes in process `syz.3.3888'.
[  751.245217][T16876] netlink: zone id is out of range
[  751.253263][T16876] netlink: zone id is out of range
[  751.258976][T16876] netlink: zone id is out of range
[  751.264125][T16876] netlink: zone id is out of range
[  751.273218][T16876] netlink: get zone limit has 8 unknown bytes
[  751.866031][T16890] netlink: 'syz.4.3893': attribute type 3 has an invalid length.
[  751.957821][T16890] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3893'.
[  752.101815][T16889] IPv6: Can't replace route, no match found
[  753.257118][T16921] netlink: 'syz.4.3902': attribute type 10 has an invalid length.
[  753.277364][T16921] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3902'.
[  753.333104][T16921] device bond0 entered promiscuous mode
[  753.348373][T16921] device bond_slave_1 entered promiscuous mode
[  753.373118][T16921] bridge0: port 3(bond0) entered blocking state
[  753.417306][T16921] bridge0: port 3(bond0) entered disabled state
[  753.439018][T16921] bridge0: port 3(bond0) entered blocking state
[  753.445542][T16921] bridge0: port 3(bond0) entered forwarding state
[  753.573713][T16927] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3903'.
[  753.619566][T16927] device hsr_slave_0 left promiscuous mode
[  753.641151][T16927] device hsr_slave_1 left promiscuous mode
[  753.954899][T16921] syzkaller0: tun_chr_ioctl cmd 1074025677
[  753.967574][T16921] syzkaller0: linktype set to 778
[  754.261679][T16950] netlink: 'syz.1.3909': attribute type 3 has an invalid length.
[  754.297419][T12599] Bluetooth: hci0: command 0x0406 tx timeout
[  754.331479][T16950] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3909'.
[  754.366640][T16949] IPv6: Can't replace route, no match found
[  755.405759][T16974] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3914'.
[  757.522425][T16999] netlink: 'syz.3.3923': attribute type 3 has an invalid length.
[  757.629170][T17009] IPv6: Can't replace route, no match found
[  757.633238][T16999] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3923'.
[  757.816632][T17017] tap0: tun_chr_ioctl cmd 1074025688
[  759.078303][T17035] netlink: 'syz.2.3935': attribute type 3 has an invalid length.
[  759.101973][T17035] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3935'.
[  759.219416][T17036] netlink: 'syz.0.3939': attribute type 10 has an invalid length.
[  759.435932][T17036] team0 (unregistering): Port device team_slave_0 removed
[  759.465707][T17036] team0 (unregistering): Port device team_slave_1 removed
[  759.511351][T17036] bridge0: port 2(bridge_slave_1) entered disabled state
[  759.518917][T17036] bridge0: port 1(bridge_slave_0) entered disabled state
[  759.577774][T17036] team0 (unregistering): Port device bridge0 removed
[  760.093929][T17056] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3946'.
[  760.254846][T17063] mac80211_hwsim hwsim23 wlan1: refused to change device tx_queue_len
[  760.471401][T17072] netlink: 'syz.2.3949': attribute type 3 has an invalid length.
[  760.499229][T17072] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3949'.
[  761.652499][T17084] device syzkaller0 entered promiscuous mode
[  761.702516][T17100] tap0: tun_chr_ioctl cmd 1074025677
[  761.712719][T17100] tap0: linktype set to 805
[  763.883655][T17123] delete_channel: no stack
[  763.890133][T17123] delete_channel: no stack
[  763.900247][T17123] netlink: 'syz.3.3969': attribute type 4 has an invalid length.
[  763.926615][T17123] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3969'.
[  763.974390][T17123] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  764.324067][T17140] netlink: 'syz.0.3973': attribute type 3 has an invalid length.
[  764.353938][T17141] netlink: 'syz.3.3974': attribute type 40 has an invalid length.
[  764.359395][T17140] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3973'.
[  764.420016][T17146] IPv6: Can't replace route, no match found
[  764.878508][T17159] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3981'.
[  764.928052][T17159] openvswitch: netlink: Flow key attr not present in new flow.
[  765.147722][T17167] netlink: 'syz.1.3983': attribute type 3 has an invalid length.
[  765.160404][T17167] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3983'.
[  765.223530][T17178] netlink: 'syz.2.3987': attribute type 1 has an invalid length.
[  765.253370][T17164] IPv6: Can't replace route, no match found
[  765.488011][T17193] netlink: 'syz.4.3993': attribute type 3 has an invalid length.
[  765.541052][T17193] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3993'.
[  765.595852][T17188] netlink: 'syz.3.3991': attribute type 3 has an invalid length.
[  765.608662][T17188] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3991'.
[  765.624953][T17192] IPv6: Can't replace route, no match found
[  765.727194][T17186] IPv6: Can't replace route, no match found
[  766.117757][T17222] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.4001'.
[  766.416373][T17241] netlink: 'syz.2.4007': attribute type 13 has an invalid length.
[  766.440437][T17241] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.4007'.
[  766.690862][T17248] IPv6: Can't replace route, no match found
[  766.796016][T17244] netlink: 'syz.0.4008': attribute type 3 has an invalid length.
[  766.815632][T17244] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4008'.
[  766.926854][T17254] netlink: 'syz.2.4012': attribute type 3 has an invalid length.
[  766.994373][T17254] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4012'.
[  767.255537][T17269] device dummy0 entered promiscuous mode
[  767.273125][T17269] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  767.282423][T17271] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  767.295807][T17272] netlink: 55 bytes leftover after parsing attributes in process `syz.3.4018'.
[  767.337547][T17274] netlink: 55 bytes leftover after parsing attributes in process `syz.3.4018'.
[  767.573153][T17285] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.4023'.
[  767.832731][T17297] netlink: 199848 bytes leftover after parsing attributes in process `syz.3.4028'.
[  769.878072][T12599] Bluetooth: hci4: unexpected event 0x1c length: 15 > 5
[  770.114093][T17375] validate_nla: 7 callbacks suppressed
[  770.114108][T17375] netlink: 'syz.1.4056': attribute type 4 has an invalid length.
[  770.139977][T17377] netlink: 'syz.0.4057': attribute type 25 has an invalid length.
[  770.220751][T17377] netlink: 'syz.0.4057': attribute type 4 has an invalid length.
[  770.319150][T17383] device syzkaller0 entered promiscuous mode
[  770.936841][T17401] netlink: 'syz.4.4063': attribute type 3 has an invalid length.
[  770.966721][T17401] __nla_validate_parse: 5 callbacks suppressed
[  770.966786][T17401] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.4063'.
[  771.368280][T12599] Bluetooth: hci3: unexpected event 0x1c length: 15 > 5
[  772.798195][T17404] IPv6: Can't replace route, no match found
[  773.783304][T17458] netlink: 'syz.4.4080': attribute type 1 has an invalid length.
[  773.811162][T12599] Bluetooth: hci0: unexpected event 0x1c length: 15 > 5
[  773.821487][T17458] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4080'.
[  774.235153][T17469] netlink: 'syz.1.4083': attribute type 3 has an invalid length.
[  774.330342][T17471] netlink: 'syz.4.4085': attribute type 10 has an invalid length.
[  774.361333][T17469] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4083'.
[  774.534223][T17473] IPv6: Can't replace route, no match found
[  774.923758][T17490] netlink: 'syz.1.4089': attribute type 10 has an invalid length.
[  774.958918][T17490] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4089'.
[  774.996740][T17490] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4089'.
[  775.785113][T17520] netlink: 'syz.1.4099': attribute type 3 has an invalid length.
[  775.800668][T17523] IPv6: Can't replace route, no match found
[  775.807052][T17520] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4099'.
[  777.123339][T17542] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.4106'.
[  777.297117][T17552] device syzkaller0 entered promiscuous mode
[  777.510607][T17564] netlink: 'syz.3.4114': attribute type 3 has an invalid length.
[  777.525807][T17564] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4114'.
[  777.541662][T17561] netlink: 'syz.4.4112': attribute type 39 has an invalid length.
[  779.759059][T17571] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[  779.768674][T17572] netlink: 'syz.0.4115': attribute type 27 has an invalid length.
[  779.777016][T17571] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[  779.787080][T17577] netlink: 'syz.3.4117': attribute type 12 has an invalid length.
[  779.787365][T17571] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  779.807349][T17577] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4117'.
[  780.352935][T17604] delete_channel: no stack
[  780.383097][T17611] netlink: 'syz.2.4128': attribute type 3 has an invalid length.
[  780.392518][T17611] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4128'.
[  781.790592][T17633] netlink: 'syz.3.4136': attribute type 2 has an invalid length.
[  781.815492][T17633] netlink: 'syz.3.4136': attribute type 8 has an invalid length.
[  781.847428][T17633] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4136'.
[  781.926542][T17637] device veth0_vlan left promiscuous mode
[  781.957520][T17637] device veth0_vlan entered promiscuous mode
[  782.000892][T15155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  782.019645][T15155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  782.041498][T15155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  782.943850][T17677] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.4148'.
[  782.988815][T17677] debugfs: Directory '.!
' with parent 'ieee80211' already present!
[  783.028639][T17676] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.4148'.
[  783.061637][T17676] sysfs: cannot create duplicate filename '/class/ieee80211/.!
'
[  783.073891][T17676] CPU: 1 PID: 17676 Comm: syz.3.4148 Not tainted syzkaller #0
[  783.081407][T17676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  783.091495][T17676] Call Trace:
[  783.094863][T17676]  <TASK>
[  783.097824][T17676]  dump_stack_lvl+0x188/0x24e
[  783.102577][T17676]  ? show_regs_print_info+0x12/0x12
[  783.107828][T17676]  ? load_image+0x400/0x400
[  783.112415][T17676]  sysfs_warn_dup+0x8a/0xa0
[  783.116959][T17676]  sysfs_do_create_link_sd+0xc0/0x110
[  783.122374][T17676]  device_add+0x7ed/0xfb0
[  783.126770][T17676]  wiphy_register+0x1d9f/0x2ac0
[  783.131696][T17676]  ? cfg80211_event_work+0x40/0x40
[  783.136851][T17676]  ? minstrel_ht_alloc+0x894/0xa20
[  783.142021][T17676]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[  783.148143][T17676]  ieee80211_register_hw+0x2d00/0x39f0
[  783.153660][T17676]  ? ieee80211_register_hw+0xf21/0x39f0
[  783.159247][T17676]  ? ieee80211_register_hw+0xf21/0x39f0
[  783.164910][T17676]  ? ieee80211_tasklet_handler+0x20/0x20
[  783.170605][T17676]  ? memset+0x1e/0x40
[  783.174637][T17676]  ? __hrtimer_init+0x186/0x270
[  783.179553][T17676]  mac80211_hwsim_new_radio+0x28c2/0x4c40
[  783.185344][T17676]  hwsim_new_radio_nl+0xafa/0xce0
[  783.190426][T17676]  genl_family_rcv_msg_doit+0x22a/0x330
[  783.196012][T17676]  ? end_current_label_crit_section+0x170/0x170
[  783.202328][T17676]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[  783.208371][T17676]  ? bpf_lsm_capable+0x5/0x10
[  783.213091][T17676]  ? security_capable+0x85/0xb0
[  783.217983][T17676]  genl_rcv_msg+0x604/0x790
[  783.222556][T17676]  ? genl_bind+0x360/0x360
[  783.227033][T17676]  ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0
[  783.233419][T17676]  netlink_rcv_skb+0x1fb/0x450
[  783.238230][T17676]  ? genl_bind+0x360/0x360
[  783.242683][T17676]  ? netlink_ack+0x1170/0x1170
[  783.247507][T17676]  ? down_read+0x1a8/0x2d0
[  783.251997][T17676]  genl_rcv+0x24/0x40
[  783.256024][T17676]  netlink_unicast+0x74d/0x8d0
[  783.260849][T17676]  netlink_sendmsg+0x8ad/0xbd0
[  783.265669][T17676]  ? netlink_getsockopt+0x550/0x550
[  783.270917][T17676]  ? aa_sock_msg_perm+0x94/0x150
[  783.275903][T17676]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  783.281304][T17676]  ? security_socket_sendmsg+0x7c/0xa0
[  783.286814][T17676]  ? netlink_getsockopt+0x550/0x550
[  783.292108][T17676]  ____sys_sendmsg+0x5be/0x970
[  783.296934][T17676]  ? __sys_sendmsg_sock+0x30/0x30
[  783.301998][T17676]  ? __import_iovec+0x315/0x500
[  783.307268][T17676]  ? import_iovec+0x6f/0xa0
[  783.311836][T17676]  ___sys_sendmsg+0x2a2/0x360
[  783.316583][T17676]  ? try_to_wake_up+0x6ae/0x1080
[  783.321569][T17676]  ? __sys_sendmsg+0x290/0x290
[  783.326437][T17676]  __se_sys_sendmsg+0x1bb/0x2a0
[  783.331337][T17676]  ? __x64_sys_sendmsg+0x80/0x80
[  783.336356][T17676]  ? lockdep_hardirqs_on+0x94/0x140
[  783.341604][T17676]  do_syscall_64+0x4c/0xa0
[  783.346071][T17676]  ? clear_bhb_loop+0x60/0xb0
[  783.350795][T17676]  ? clear_bhb_loop+0x60/0xb0
[  783.355517][T17676]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  783.361452][T17676] RIP: 0033:0x7fc43079c819
[  783.365910][T17676] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  783.385550][T17676] RSP: 002b:00007fc431629028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  783.394010][T17676] RAX: ffffffffffffffda RBX: 00007fc430a15fa0 RCX: 00007fc43079c819
[  783.402011][T17676] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004
[  783.410026][T17676] RBP: 00007fc430832c91 R08: 0000000000000000 R09: 0000000000000000
[  783.418029][T17676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  783.426021][T17676] R13: 00007fc430a16038 R14: 00007fc430a15fa0 R15: 00007ffcb4b591e8
[  783.434038][T17676]  </TASK>
[  783.968731][T17706] ref_ctr_offset mismatch. inode: 0x467 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0
[  784.884969][T17728] netlink: 'syz.1.4163': attribute type 16 has an invalid length.
[  784.937766][T17728] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4163'.
[  785.143091][T17736] netlink: 'syz.3.4165': attribute type 3 has an invalid length.
[  785.158644][T17737] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4164'.
[  785.190534][T17736] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4165'.
[  785.231234][T17734] IPv6: Can't replace route, no match found
[  785.563646][T17744] netlink: 'syz.3.4168': attribute type 29 has an invalid length.
[  785.590311][T17744] netlink: 'syz.3.4168': attribute type 29 has an invalid length.
[  785.669534][T17746] netlink: 'syz.1.4169': attribute type 29 has an invalid length.
[  785.724327][T17746] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4169'.
[  785.821224][T17746] netlink: 'syz.1.4169': attribute type 29 has an invalid length.
[  785.942744][T17746] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4169'.
[  786.039633][T17752] syzkaller0: tun_chr_ioctl cmd 1074812117
[  787.239834][T17786] device syzkaller0 entered promiscuous mode
[  787.252109][T17793] netlink: 'syz.3.4179': attribute type 3 has an invalid length.
[  787.287570][T17793] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4179'.
[  789.596140][T17794] IPv6: Can't replace route, no match found
[  789.966645][T17842] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.4194'.
[  790.407242][T17862] netlink: 'syz.4.4200': attribute type 3 has an invalid length.
[  790.428856][T17862] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.4200'.
[  790.453091][T17857] IPv6: Can't replace route, no match found
[  791.543773][T17889] netlink: 'syz.0.4210': attribute type 29 has an invalid length.
[  791.563305][T17889] netlink: 'syz.0.4210': attribute type 29 has an invalid length.
[  791.584850][T17889] netlink: 'syz.0.4210': attribute type 29 has an invalid length.
[  791.686812][T17892] netlink: 'syz.1.4209': attribute type 10 has an invalid length.
[  792.782835][T17922] netlink: 188 bytes leftover after parsing attributes in process `syz.0.4229'.
[  792.823612][T17922] ksmbd: Unknown IPC event: 10, ignore.
[  793.832531][T17948] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.4238'.
[  794.120778][T17963] netlink: 'syz.4.4233': attribute type 21 has an invalid length.
[  794.439017][T17971] netlink: 11518 bytes leftover after parsing attributes in process `syz.2.4237'.
[  794.842566][T17990] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.4244'.
[  795.042016][T17999] netlink: 17267 bytes leftover after parsing attributes in process `syz.4.4247'.
[  795.510675][T18015] netlink: 'syz.2.4253': attribute type 3 has an invalid length.
[  795.535338][T18020] netlink: 'syz.4.4254': attribute type 3 has an invalid length.
[  795.570591][T18015] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4253'.
[  795.590712][T18020] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.4254'.
[  795.622923][T18022] netlink: 'syz.3.4255': attribute type 4 has an invalid length.
[  795.641204][T18022] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4255'.
[  795.719285][T18018] IPv6: Can't replace route, no match found
[  795.910685][T18031] netlink: 'syz.0.4258': attribute type 27 has an invalid length.
[  795.941768][T18031] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4258'.
[  796.151639][T18050] netlink: 'syz.3.4262': attribute type 2 has an invalid length.
[  796.209981][T18050] device 0 entered promiscuous mode
[  796.246546][T18051] netlink: 'syz.4.4263': attribute type 9 has an invalid length.
[  796.280890][T18051] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.4263'.
[  796.653807][T18060] netlink: 'syz.0.4267': attribute type 3 has an invalid length.
[  796.671293][T18060] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4267'.
[  796.714165][T18059] IPv6: Can't replace route, no match found
[  797.169543][T18082] IPv6: Can't replace route, no match found
[  797.196467][T18077] netlink: 'syz.0.4272': attribute type 3 has an invalid length.
[  797.228881][T18077] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4272'.
[  798.482543][T18107] netlink: 'syz.1.4281': attribute type 1 has an invalid length.
[  798.577335][T18107] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.4281'.
[  799.445434][T18124] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.4285'.
[  800.169350][T18140] IPv6: Can't replace route, no match found
[  802.478149][T18215] netlink: 'syz.4.4314': attribute type 3 has an invalid length.
[  802.568962][T18215] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.4314'.
[  802.727932][T18223] IPv6: Can't replace route, no match found
[  803.034287][T18237] netlink: 180 bytes leftover after parsing attributes in process `syz.3.4320'.
[  803.980413][T18264] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4329'.
[  804.021364][T18272] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4331'.
[  804.066497][T18272] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4331'.
[  804.129670][T18278] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4331'.
[  805.371540][T18302] device veth1_macvtap left promiscuous mode
[  805.925717][T18323] netlink: 'syz.0.4349': attribute type 13 has an invalid length.
[  805.944165][T18323] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4349'.
[  805.961347][T18323] syz_tun: refused to change device tx_queue_len
[  805.969608][T18323] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  805.996197][T18327] netlink: 'syz.0.4349': attribute type 13 has an invalid length.
[  806.004269][T18327] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4349'.
[  806.015340][T18325] netlink: 'syz.3.4348': attribute type 3 has an invalid length.
[  806.024377][T18327] syz_tun: refused to change device tx_queue_len
[  806.024400][T18327] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  806.024463][T18328] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4347'.
[  806.024482][T18328] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4347'.
[  806.031127][T18323] netlink: 'syz.0.4349': attribute type 10 has an invalid length.
[  806.604836][T18363] netlink: 'syz.3.4359': attribute type 10 has an invalid length.
[  806.888345][T18371] device syzkaller0 entered promiscuous mode
[  807.003898][T18382] netlink: 'syz.4.4363': attribute type 3 has an invalid length.
[  808.543223][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  808.549762][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  808.757050][T18394] mac80211_hwsim hwsim31 wlan1: refused to change device tx_queue_len
[  809.234647][T18427] __nla_validate_parse: 3 callbacks suppressed
[  809.234661][T18427] netlink: 11230 bytes leftover after parsing attributes in process `syz.1.4377'.
[  809.867290][T18434] netlink: 'syz.2.4380': attribute type 6 has an invalid length.
[  810.330237][T18448] netlink: 'syz.4.4383': attribute type 3 has an invalid length.
[  810.434943][T18448] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.4383'.
[  810.888533][T18473] FAULT_INJECTION: forcing a failure.
[  810.888533][T18473] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  810.907498][T18468] delete_channel: no stack
[  810.935265][T18473] CPU: 0 PID: 18473 Comm: syz.2.4391 Not tainted syzkaller #0
[  810.942856][T18473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  810.952939][T18473] Call Trace:
[  810.956252][T18473]  <TASK>
[  810.959200][T18473]  dump_stack_lvl+0x188/0x24e
[  810.963926][T18473]  ? show_regs_print_info+0x12/0x12
[  810.969162][T18473]  ? load_image+0x400/0x400
[  810.973710][T18473]  ? __lock_acquire+0x7d10/0x7d10
[  810.978788][T18473]  should_fail_ex+0x399/0x4d0
[  810.983508][T18473]  _copy_from_user+0x2c/0x170
[  810.988232][T18473]  __sys_bpf+0x2ea/0x780
[  810.992519][T18473]  ? bpf_link_show_fdinfo+0x380/0x380
[  810.997930][T18473]  ? lock_chain_count+0x20/0x20
[  811.002802][T18473]  __x64_sys_bpf+0x78/0x90
[  811.007233][T18473]  do_syscall_64+0x4c/0xa0
[  811.011672][T18473]  ? clear_bhb_loop+0x60/0xb0
[  811.016373][T18473]  ? clear_bhb_loop+0x60/0xb0
[  811.021069][T18473]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  811.026978][T18473] RIP: 0033:0x7f4b4bb9c819
[  811.031407][T18473] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  811.051032][T18473] RSP: 002b:00007f4b4ca86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  811.059481][T18473] RAX: ffffffffffffffda RBX: 00007f4b4be15fa0 RCX: 00007f4b4bb9c819
[  811.067467][T18473] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 0000000000000000
[  811.075457][T18473] RBP: 00007f4b4ca86090 R08: 0000000000000000 R09: 0000000000000000
[  811.083445][T18473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  811.091433][T18473] R13: 00007f4b4be16038 R14: 00007f4b4be15fa0 R15: 00007ffd28c515f8
[  811.099438][T18473]  </TASK>
[  813.946420][T18499] netlink: 'syz.3.4398': attribute type 21 has an invalid length.
[  814.239268][T18507] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app
[  814.377060][T18518] device veth1_macvtap left promiscuous mode
[  814.693910][T18534] bridge0: port 4(batadv0) entered blocking state
[  814.714544][T18534] bridge0: port 4(batadv0) entered disabled state
[  814.769837][T18534] device batadv0 entered promiscuous mode
[  814.776056][T18529] netlink: 'syz.4.4404': attribute type 3 has an invalid length.
[  814.801870][T18534] bridge0: port 4(batadv0) entered blocking state
[  814.808481][T18534] bridge0: port 4(batadv0) entered forwarding state
[  814.843978][T18529] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.4404'.
[  814.864151][T18536] IPv6: Can't replace route, no match found
[  815.040417][T18543] FAULT_INJECTION: forcing a failure.
[  815.040417][T18543] name failslab, interval 1, probability 0, space 0, times 0
[  815.073730][T18543] CPU: 1 PID: 18543 Comm: syz.0.4418 Not tainted syzkaller #0
[  815.081281][T18543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  815.091399][T18543] Call Trace:
[  815.094708][T18543]  <TASK>
[  815.097671][T18543]  dump_stack_lvl+0x188/0x24e
[  815.102402][T18543]  ? show_regs_print_info+0x12/0x12
[  815.107644][T18543]  ? load_image+0x400/0x400
[  815.112193][T18543]  ? __lock_acquire+0x7d10/0x7d10
[  815.117263][T18543]  ? perf_trace_lock+0xf8/0x390
[  815.122153][T18543]  should_fail_ex+0x399/0x4d0
[  815.126871][T18543]  should_failslab+0x5/0x20
[  815.131396][T18543]  slab_pre_alloc_hook+0x59/0x310
[  815.136448][T18543]  kmem_cache_alloc_lru+0x49/0x2e0
[  815.141583][T18543]  ? __d_alloc+0x31/0x700
[  815.145940][T18543]  __d_alloc+0x31/0x700
[  815.150109][T18543]  d_alloc_pseudo+0x19/0x70
[  815.154624][T18543]  alloc_file_pseudo+0xe0/0x200
[  815.159491][T18543]  ? alloc_empty_file_noaccount+0x80/0x80
[  815.165228][T18543]  ? _raw_spin_unlock+0x24/0x40
[  815.170108][T18543]  ? alloc_fd+0x58f/0x630
[  815.174466][T18543]  anon_inode_getfd+0xc6/0x1c0
[  815.179255][T18543]  map_create+0xbe8/0x1000
[  815.183702][T18543]  __sys_bpf+0x38b/0x780
[  815.187969][T18543]  ? bpf_link_show_fdinfo+0x380/0x380
[  815.193376][T18543]  ? lock_chain_count+0x20/0x20
[  815.198264][T18543]  __x64_sys_bpf+0x78/0x90
[  815.202731][T18543]  do_syscall_64+0x4c/0xa0
[  815.207168][T18543]  ? clear_bhb_loop+0x60/0xb0
[  815.211884][T18543]  ? clear_bhb_loop+0x60/0xb0
[  815.216623][T18543]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  815.222533][T18543] RIP: 0033:0x7f60c1d9c819
[  815.226963][T18543] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  815.246597][T18543] RSP: 002b:00007f60c2cdd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  815.255026][T18543] RAX: ffffffffffffffda RBX: 00007f60c2015fa0 RCX: 00007f60c1d9c819
[  815.263012][T18543] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 0000000000000000
[  815.271001][T18543] RBP: 00007f60c2cdd090 R08: 0000000000000000 R09: 0000000000000000
[  815.278988][T18543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  815.286969][T18543] R13: 00007f60c2016038 R14: 00007f60c2015fa0 R15: 00007ffdcca4cc98
[  815.294975][T18543]  </TASK>
[  815.300774][T15162] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  815.310106][T15162] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  815.432970][T18544] mac80211_hwsim hwsim33 wlan1: refused to change device tx_queue_len
[  816.275505][T18574] FAULT_INJECTION: forcing a failure.
[  816.275505][T18574] name failslab, interval 1, probability 0, space 0, times 0
[  816.309309][T18574] CPU: 0 PID: 18574 Comm: syz.1.4421 Not tainted syzkaller #0
[  816.316836][T18574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  816.326941][T18574] Call Trace:
[  816.330243][T18574]  <TASK>
[  816.333189][T18574]  dump_stack_lvl+0x188/0x24e
[  816.337904][T18574]  ? show_regs_print_info+0x12/0x12
[  816.343128][T18574]  ? load_image+0x400/0x400
[  816.347677][T18574]  ? __might_sleep+0xd0/0xd0
[  816.352318][T18574]  ? __lock_acquire+0x7d10/0x7d10
[  816.357368][T18574]  should_fail_ex+0x399/0x4d0
[  816.362060][T18574]  should_failslab+0x5/0x20
[  816.366584][T18574]  slab_pre_alloc_hook+0x59/0x310
[  816.371630][T18574]  kmem_cache_alloc+0x56/0x2f0
[  816.376417][T18574]  ? __alloc_file+0x25/0x230
[  816.381033][T18574]  __alloc_file+0x25/0x230
[  816.385474][T18574]  alloc_empty_file+0x90/0x180
[  816.390251][T18574]  alloc_file+0x5c/0x5f0
[  816.394510][T18574]  alloc_file_pseudo+0x180/0x200
[  816.399468][T18574]  ? alloc_empty_file_noaccount+0x80/0x80
[  816.405211][T18574]  ? _raw_spin_unlock+0x24/0x40
[  816.410105][T18574]  anon_inode_getfd+0xc6/0x1c0
[  816.414892][T18574]  map_create+0xbe8/0x1000
[  816.419349][T18574]  __sys_bpf+0x38b/0x780
[  816.423619][T18574]  ? bpf_link_show_fdinfo+0x380/0x380
[  816.429029][T18574]  ? lock_chain_count+0x20/0x20
[  816.433914][T18574]  __x64_sys_bpf+0x78/0x90
[  816.438353][T18574]  do_syscall_64+0x4c/0xa0
[  816.442793][T18574]  ? clear_bhb_loop+0x60/0xb0
[  816.447496][T18574]  ? clear_bhb_loop+0x60/0xb0
[  816.452204][T18574]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  816.458135][T18574] RIP: 0033:0x7f8fb739c819
[  816.462576][T18574] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  816.482207][T18574] RSP: 002b:00007f8fb81a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  816.490642][T18574] RAX: ffffffffffffffda RBX: 00007f8fb7615fa0 RCX: 00007f8fb739c819
[  816.498641][T18574] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 0000000000000000
[  816.506638][T18574] RBP: 00007f8fb81a1090 R08: 0000000000000000 R09: 0000000000000000
[  816.514627][T18574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  816.522622][T18574] R13: 00007f8fb7616038 R14: 00007f8fb7615fa0 R15: 00007ffc3ea9a598
[  816.530650][T18574]  </TASK>
[  816.582225][T18575] netlink: 'syz.2.4420': attribute type 3 has an invalid length.
[  816.597306][T18575] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4420'.
[  817.141962][T18596] netlink: 'syz.3.4426': attribute type 46 has an invalid length.
[  817.176676][T18596] netlink: 'syz.3.4426': attribute type 46 has an invalid length.
[  817.214292][T18602] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4426'.
[  817.296423][T18604] netlink: 'syz.0.4429': attribute type 13 has an invalid length.
[  817.329386][T18604] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4429'.
[  817.374211][T18604] syz_tun: refused to change device tx_queue_len
[  817.428794][T18604] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  817.449898][T18607] netlink: 'syz.0.4429': attribute type 13 has an invalid length.
[  817.476304][T18607] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4429'.
[  817.528670][T18607] syz_tun: refused to change device tx_queue_len
[  817.535087][T18607] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  817.617286][T18608] netlink: 'syz.0.4429': attribute type 10 has an invalid length.
[  818.066817][T18623] netlink: 'syz.3.4434': attribute type 13 has an invalid length.
[  818.096509][T18623] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4434'.
[  818.236701][T18629] netlink: 'syz.2.4435': attribute type 2 has an invalid length.
[  818.243944][T18623] syz_tun: refused to change device tx_queue_len
[  818.307432][T18623] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  818.433352][T18636] netlink: 'syz.4.4437': attribute type 29 has an invalid length.
[  818.447981][T18629] device 0 entered promiscuous mode
[  818.516532][T18636] netlink: 'syz.4.4437': attribute type 29 has an invalid length.
[  818.687695][T18651] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4442'.
[  820.695035][T12599] Bluetooth: hci3: unexpected event 0x1d length: 15 > 5
[  821.145095][T18706] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.4459'.
[  821.387164][T18710] IPv6: Can't replace route, no match found
[  822.636818][T12599] Bluetooth: hci0: unexpected event 0x1d length: 15 > 5
[  822.652120][T18734] IPv6: Can't replace route, no match found
[  822.762135][T18734] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  822.773246][T18742] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.4471'.
[  822.842134][T18744] validate_nla: 3 callbacks suppressed
[  822.842180][T18744] netlink: 'syz.1.4472': attribute type 21 has an invalid length.
[  823.123966][T18752] device veth1_virt_wifi entered promiscuous mode
[  823.194433][T18757] sock: sock_timestamping_bind_phc: sock not bind to device
[  823.511202][T12599] Bluetooth: hci4: unexpected event 0x1d length: 15 > 5
[  823.643870][T18774] IPv6: Can't replace route, no match found
[  823.654446][T18769] netlink: 'syz.4.4481': attribute type 3 has an invalid length.
[  823.667583][T18769] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.4481'.
[  823.962795][T18776] netlink: 'syz.2.4484': attribute type 13 has an invalid length.
[  823.972038][T18776] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4484'.
[  824.166380][T18776] syz_tun: refused to change device tx_queue_len
[  824.182119][T18776] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  824.216216][T18782] IPv6: Can't replace route, no match found
[  824.278781][T18782] mac80211_hwsim hwsim26 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  824.626912][T18805] netlink: 'syz.3.4492': attribute type 3 has an invalid length.
[  824.687357][T18805] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4492'.
[  824.715061][T12599] Bluetooth: hci0: unexpected event 0x1d length: 15 > 5
[  824.821635][T18814] netlink: 'syz.4.4494': attribute type 2 has an invalid length.
[  826.428915][T12599] Bluetooth: hci1: unexpected event 0x1d length: 15 > 5
[  826.777569][T15155] wlan1: Trigger new scan to find an IBSS to join
[  827.072794][T18858] device syzkaller0 entered promiscuous mode
[  827.121008][T18863] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.4509'.
[  827.152295][T18859] netlink: 180 bytes leftover after parsing attributes in process `syz.3.4509'.
[  827.299632][T18863] debugfs: Directory '!!!' with parent 'ieee80211' already present!
[  830.439850][T18913] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.4525'.
[  830.451403][T18915] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4523'.
[  830.502293][T18914] netlink: 'syz.3.4525': attribute type 1 has an invalid length.
[  830.833490][T18930] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4530'.
[  831.189925][T18934] netlink: 'syz.4.4532': attribute type 10 has an invalid length.
[  831.219971][T18934] device veth1_macvtap left promiscuous mode
[  831.332682][T18938] netlink: 'syz.3.4534': attribute type 6 has an invalid length.
[  831.342824][T18938] netlink: 140 bytes leftover after parsing attributes in process `syz.3.4534'.
[  831.352339][T18940] netlink: 'syz.3.4534': attribute type 10 has an invalid length.
[  831.384019][T18942] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4535'.
[  831.767440][T18952] netlink: 'syz.2.4539': attribute type 10 has an invalid length.
[  831.791709][T18954] netlink: 'syz.0.4538': attribute type 3 has an invalid length.
[  831.828545][T18952] netlink: 55 bytes leftover after parsing attributes in process `syz.2.4539'.
[  831.839243][T18954] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4538'.
[  832.060677][T12599] Bluetooth: hci1: unexpected event 0x1d length: 15 > 5
[  832.243361][T18965] netlink: 'syz.1.4543': attribute type 19 has an invalid length.
[  832.263294][T18965] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4543'.
[  832.273965][T18966] IPv6: Can't replace route, no match found
[  833.130003][T12599] Bluetooth: hci3: unexpected event 0x1d length: 15 > 5
[  833.212647][T12599] Bluetooth: hci4: unexpected event 0x1d length: 15 > 5
[  833.368899][T19022] netlink: 'syz.0.4560': attribute type 3 has an invalid length.
[  833.384408][T19022] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4560'.
[  833.482633][T19022] IPv6: Can't replace route, no match found
[  833.751089][T19041] netlink: 'syz.2.4569': attribute type 41 has an invalid length.
[  834.155660][T19060] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.4576'.
[  834.480710][T19078] netlink: 'syz.2.4581': attribute type 3 has an invalid length.
[  834.498748][T19078] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4581'.
[  835.437252][T19096] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4588'.
[  835.496106][T19099] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.4589'.
[  836.120430][T19123] validate_nla: 2 callbacks suppressed
[  836.120446][T19123] netlink: 'syz.1.4599': attribute type 3 has an invalid length.
[  836.208538][T19123] netlink: 'syz.1.4599': attribute type 1 has an invalid length.
[  836.250734][T19123] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.4599'.
[  837.081151][T19132] netlink: 'syz.0.4603': attribute type 5 has an invalid length.
[  838.061874][T19174] netlink: 'syz.3.4615': attribute type 27 has an invalid length.
[  838.199202][T19178] netlink: 'syz.3.4615': attribute type 10 has an invalid length.
[  838.304659][T19178] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4615'.
[  839.171053][T19178] device caif0 entered promiscuous mode
[  839.176747][T19178] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  839.698656][T19208] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4622'.
[  840.005617][T19224] netlink: 'syz.2.4631': attribute type 10 has an invalid length.
[  840.036153][T19217] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  840.550119][T19247] netlink: 'syz.3.4636': attribute type 3 has an invalid length.
[  840.570963][T19247] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4636'.
[  840.606386][T19250] IPv6: Can't replace route, no match found
[  841.069298][T19272] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4645'.
[  841.082077][T19273] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4645'.
[  841.674484][T19300] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.4651'.
[  842.816769][T19356] IPv6: Can't replace route, no match found
[  843.098122][T19370] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  843.244069][T19375] netlink: 'syz.3.4663': attribute type 3 has an invalid length.
[  843.285437][T19375] netlink: 114680 bytes leftover after parsing attributes in process `syz.3.4663'.
[  843.302394][T19373] netlink: 'syz.1.4662': attribute type 5 has an invalid length.
[  843.675077][T19384] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  843.722782][T19386] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.4665'.
[  844.088363][T19394] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4666'.
[  844.912496][T19412] netlink: 'syz.3.4672': attribute type 3 has an invalid length.
[  844.946118][T19412] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4672'.
[  845.035326][T19411] IPv6: Can't replace route, no match found
[  845.821594][T19430] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.4680'.
[  846.115064][T19442] FAULT_INJECTION: forcing a failure.
[  846.115064][T19442] name failslab, interval 1, probability 0, space 0, times 0
[  846.133945][T19442] CPU: 0 PID: 19442 Comm: syz.0.4679 Not tainted syzkaller #0
[  846.141547][T19442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  846.151637][T19442] Call Trace:
[  846.154946][T19442]  <TASK>
[  846.157923][T19442]  dump_stack_lvl+0x188/0x24e
[  846.162659][T19442]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  846.168859][T19442]  ? show_regs_print_info+0x12/0x12
[  846.174104][T19442]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  846.180301][T19442]  should_fail_ex+0x399/0x4d0
[  846.185013][T19442]  should_failslab+0x5/0x20
[  846.189545][T19442]  slab_pre_alloc_hook+0x59/0x310
[  846.194601][T19442]  ? bpf_prog_test_run_skb+0x234/0x12a0
[  846.200164][T19442]  __kmem_cache_alloc_node+0x4f/0x260
[  846.205554][T19442]  ? bpf_prog_test_run_skb+0x234/0x12a0
[  846.211120][T19442]  __kmalloc+0xa0/0x240
[  846.215305][T19442]  bpf_prog_test_run_skb+0x234/0x12a0
[  846.220695][T19442]  ? __fget_files+0x28/0x4b0
[  846.225328][T19442]  ? __fget_files+0x28/0x4b0
[  846.229934][T19442]  ? __fget_files+0x43d/0x4b0
[  846.234644][T19442]  ? cpu_online+0xa0/0xa0
[  846.238991][T19442]  bpf_prog_test_run+0x31e/0x390
[  846.243946][T19442]  __sys_bpf+0x62b/0x780
[  846.248212][T19442]  ? bpf_link_show_fdinfo+0x380/0x380
[  846.253621][T19442]  ? lock_chain_count+0x20/0x20
[  846.258503][T19442]  __x64_sys_bpf+0x78/0x90
[  846.262936][T19442]  do_syscall_64+0x4c/0xa0
[  846.267370][T19442]  ? clear_bhb_loop+0x60/0xb0
[  846.272061][T19442]  ? clear_bhb_loop+0x60/0xb0
[  846.276755][T19442]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  846.282670][T19442] RIP: 0033:0x7f60c1d9c819
[  846.287102][T19442] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  846.306768][T19442] RSP: 002b:00007f60c2cdd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  846.315199][T19442] RAX: ffffffffffffffda RBX: 00007f60c2015fa0 RCX: 00007f60c1d9c819
[  846.323182][T19442] RDX: 0000000000000038 RSI: 0000200000000000 RDI: 000000000000000a
[  846.331191][T19442] RBP: 00007f60c2cdd090 R08: 0000000000000000 R09: 0000000000000000
[  846.339176][T19442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  846.347167][T19442] R13: 00007f60c2016038 R14: 00007f60c2015fa0 R15: 00007ffdcca4cc98
[  846.355164][T19442]  </TASK>
[  846.689016][T19462] netlink: 'syz.0.4686': attribute type 3 has an invalid length.
[  846.730569][T19462] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4686'.
[  846.750844][T19465] netlink: 180900 bytes leftover after parsing attributes in process `syz.4.4689'.
[  846.767330][T19465] openvswitch: netlink: Flow actions attr not present in new flow.
[  846.793020][T19466] IPv6: Can't replace route, no match found
[  847.181919][T19480] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4692'.
[  847.379332][T19484] delete_channel: no stack
[  847.894656][T19497] netlink: 'syz.0.4698': attribute type 3 has an invalid length.
[  847.909532][T19497] netlink: 114680 bytes leftover after parsing attributes in process `syz.0.4698'.
[  848.005991][T19502] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4700'.
[  848.498372][T19519] netlink: 'syz.0.4705': attribute type 3 has an invalid length.
[  848.561552][T19519] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4705'.
[  848.594625][T19522] IPv6: Can't replace route, no match found
[  848.902491][T19531] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.4709'.
[  849.413039][T19537] netlink: 'syz.4.4712': attribute type 3 has an invalid length.
[  849.445649][T19537] netlink: 114680 bytes leftover after parsing attributes in process `syz.4.4712'.
[  850.534417][T19586] netlink: 'syz.3.4724': attribute type 3 has an invalid length.
[  850.593190][T19586] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4724'.
[  850.911689][T19587] IPv6: Can't replace route, no match found
[  851.092020][T19602] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[  851.114039][T19601] netlink: 'syz.1.4729': attribute type 11 has an invalid length.
[  851.197387][T19601] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4729'.
[  851.415680][T19616] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.4733'.
[  851.731299][T19635] netlink: 'syz.1.4738': attribute type 2 has an invalid length.
[  851.966128][T19642] netlink: 'syz.3.4741': attribute type 1 has an invalid length.
[  851.993328][T19642] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4741'.
[  852.234632][T19649] netlink: 112 bytes leftover after parsing attributes in process `syz.3.4743'.
[  852.983265][T19658] FAULT_INJECTION: forcing a failure.
[  852.983265][T19658] name failslab, interval 1, probability 0, space 0, times 0
[  853.059379][T19658] CPU: 1 PID: 19658 Comm: syz.0.4747 Not tainted syzkaller #0
[  853.066989][T19658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  853.077085][T19658] Call Trace:
[  853.080408][T19658]  <TASK>
[  853.083365][T19658]  dump_stack_lvl+0x188/0x24e
[  853.088099][T19658]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  853.094299][T19658]  ? show_regs_print_info+0x12/0x12
[  853.099553][T19658]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  853.105769][T19658]  should_fail_ex+0x399/0x4d0
[  853.110502][T19658]  should_failslab+0x5/0x20
[  853.115048][T19658]  slab_pre_alloc_hook+0x59/0x310
[  853.120138][T19658]  kmem_cache_alloc+0x56/0x2f0
[  853.124939][T19658]  ? __build_skb+0x2a/0x3c0
[  853.129495][T19658]  __build_skb+0x2a/0x3c0
[  853.133876][T19658]  build_skb+0x1e/0x230
[  853.138089][T19658]  bpf_prog_test_run_skb+0x37e/0x12a0
[  853.143510][T19658]  ? __fget_files+0x28/0x4b0
[  853.148153][T19658]  ? __fget_files+0x43d/0x4b0
[  853.152891][T19658]  ? cpu_online+0xa0/0xa0
[  853.157261][T19658]  bpf_prog_test_run+0x31e/0x390
[  853.162607][T19658]  __sys_bpf+0x62b/0x780
[  853.166902][T19658]  ? bpf_link_show_fdinfo+0x380/0x380
[  853.172339][T19658]  ? lock_chain_count+0x20/0x20
[  853.177231][T19658]  __x64_sys_bpf+0x78/0x90
[  853.181696][T19658]  do_syscall_64+0x4c/0xa0
[  853.186161][T19658]  ? clear_bhb_loop+0x60/0xb0
[  853.190880][T19658]  ? clear_bhb_loop+0x60/0xb0
[  853.195613][T19658]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  853.201548][T19658] RIP: 0033:0x7f60c1d9c819
[  853.206011][T19658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  853.225693][T19658] RSP: 002b:00007f60c2cdd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  853.234175][T19658] RAX: ffffffffffffffda RBX: 00007f60c2015fa0 RCX: 00007f60c1d9c819
[  853.242194][T19658] RDX: 0000000000000038 RSI: 0000200000000000 RDI: 000000000000000a
[  853.250211][T19658] RBP: 00007f60c2cdd090 R08: 0000000000000000 R09: 0000000000000000
[  853.258229][T19658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  853.266248][T19658] R13: 00007f60c2016038 R14: 00007f60c2015fa0 R15: 00007ffdcca4cc98
[  853.274280][T19658]  </TASK>
[  855.483786][T19690] IPv6: pim6reg1: Disabled Multicast RS
[  855.530787][T19691] netlink: 'syz.4.4756': attribute type 22 has an invalid length.
[  857.773676][T19766] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.4782'.
[  857.784959][T19766] netlink: 6320 bytes leftover after parsing attributes in process `syz.4.4782'.
[  857.795593][T19763] netlink: 'syz.1.4783': attribute type 1 has an invalid length.
[  857.803737][T19766] netlink: 6 bytes leftover after parsing attributes in process `syz.4.4782'.
[  857.812926][T19763] netlink: 15231 bytes leftover after parsing attributes in process `syz.1.4783'.
[  857.817301][T19766] tc_dump_action: action bad kind
[  861.527479][T19865] FAULT_INJECTION: forcing a failure.
[  861.527479][T19865] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  861.546113][T19865] CPU: 1 PID: 19865 Comm: syz.2.4827 Not tainted syzkaller #0
[  861.553621][T19865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  861.563718][T19865] Call Trace:
[  861.567015][T19865]  <TASK>
[  861.569960][T19865]  dump_stack_lvl+0x188/0x24e
[  861.574703][T19865]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  861.580887][T19865]  ? show_regs_print_info+0x12/0x12
[  861.586116][T19865]  ? load_image+0x400/0x400
[  861.590659][T19865]  should_fail_ex+0x399/0x4d0
[  861.595365][T19865]  _copy_to_user+0x2c/0x130
[  861.599928][T19865]  bpf_test_finish+0x198/0x600
[  861.604723][T19865]  ? convert_skb_to___skb+0x420/0x420
[  861.610115][T19865]  ? bpf_prog_test_run_skb+0xab1/0x12a0
[  861.615684][T19865]  bpf_prog_test_run_skb+0xc99/0x12a0
[  861.621089][T19865]  ? cpu_online+0xa0/0xa0
[  861.625436][T19865]  bpf_prog_test_run+0x31e/0x390
[  861.630401][T19865]  __sys_bpf+0x62b/0x780
[  861.634665][T19865]  ? bpf_link_show_fdinfo+0x380/0x380
[  861.640073][T19865]  ? lock_chain_count+0x20/0x20
[  861.644956][T19865]  __x64_sys_bpf+0x78/0x90
[  861.649393][T19865]  do_syscall_64+0x4c/0xa0
[  861.653843][T19865]  ? clear_bhb_loop+0x60/0xb0
[  861.658549][T19865]  ? clear_bhb_loop+0x60/0xb0
[  861.663268][T19865]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  861.669198][T19865] RIP: 0033:0x7f4b4bb9c819
[  861.673637][T19865] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  861.693261][T19865] RSP: 002b:00007f4b4ca86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  861.701691][T19865] RAX: ffffffffffffffda RBX: 00007f4b4be15fa0 RCX: 00007f4b4bb9c819
[  861.709680][T19865] RDX: 0000000000000038 RSI: 0000200000000000 RDI: 000000000000000a
[  861.717710][T19865] RBP: 00007f4b4ca86090 R08: 0000000000000000 R09: 0000000000000000
[  861.725704][T19865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  861.733692][T19865] R13: 00007f4b4be16038 R14: 00007f4b4be15fa0 R15: 00007ffd28c515f8
[  861.741692][T19865]  </TASK>
[  861.837273][T19883] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4823'.
[  861.920780][T19887] netlink: 'syz.2.4824': attribute type 2 has an invalid length.
[  862.002427][T19887] device 1 entered promiscuous mode
[  863.016168][T19901] netlink: 'syz.0.4829': attribute type 29 has an invalid length.
[  863.095404][T19901] netlink: 'syz.0.4829': attribute type 29 has an invalid length.
[  864.851353][T19941] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4841'.
[  865.042128][T19936] device syzkaller0 entered promiscuous mode
[  865.075756][T19941] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4841'.
[  865.123912][T19943] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4841'.
[  867.171199][T19946] netlink: 'syz.3.4842': attribute type 6 has an invalid length.
[  867.179699][T19946] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4842'.
[  867.193898][T19952] netlink: 'syz.2.4844': attribute type 10 has an invalid length.
[  867.207255][T19952] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4844'.
[  867.216241][T19952] device batadv_slave_1 entered promiscuous mode
[  867.340060][T19959] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4847'.
[  867.964383][T19979] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.4852'.
[  869.169538][T20026] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4866'.
[  869.989140][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  869.995644][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  870.198157][T20043] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4873'.
[  870.814734][T20069] netlink: 'syz.2.4880': attribute type 10 has an invalid length.
[  870.971250][T20071] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.4892'.
[  871.072971][T20074] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4881'.
[  871.085343][T20073] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4882'.
[  871.174690][T20074] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4881'.
[  871.271993][T20076] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4881'.
[  872.718527][T20100] netlink: 'syz.1.4889': attribute type 1 has an invalid length.
[  872.801019][T20100] netlink: 'syz.1.4889': attribute type 3 has an invalid length.
[  872.857766][T20100] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4889'.
[  873.325897][T20114] device lo entered promiscuous mode
[  873.364036][T20114] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  873.714250][T20126] netlink: 'syz.3.4897': attribute type 4 has an invalid length.
[  873.717045][T20123] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4895'.
[  873.828084][T20123] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4895'.
[  873.990472][T20131] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4895'.
[  875.264925][T20156] netlink: 'syz.3.4904': attribute type 10 has an invalid length.
[  875.755346][T20156] team0 (unregistering): Port device team_slave_0 removed
[  875.835250][T20156] team0 (unregistering): Port device team_slave_1 removed
[  875.859755][T20156] team0 (unregistering): Port device wlan1 removed
[  875.986577][T12599] Bluetooth: hci3: unexpected event 0x1d length: 15 > 5
[  876.272829][T20156] team0 (unregistering): Port device macvlan0 removed
[  876.310098][T20161] __nla_validate_parse: 1 callbacks suppressed
[  876.310114][T20161] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4906'.
[  876.628674][T20178] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4913'.
[  876.647353][T20178] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4913'.
[  876.691038][T20175] device sit0 entered promiscuous mode
[  876.843196][T20178] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4913'.
[  877.888588][T20198] Ÿë
: port 1(veth0_to_team) entered blocking state
[  877.895291][T20198] Ÿë
: port 1(veth0_to_team) entered disabled state
[  877.906125][T20198] device veth0_to_team entered promiscuous mode
[  877.918581][T20199] device sit0 entered promiscuous mode
[  877.946514][T20205] netlink: 'syz.0.4919': attribute type 10 has an invalid length.
[  877.969070][T20205] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4919'.
[  877.980708][T20205] device ipvlan1 entered promiscuous mode
[  878.014731][T20205] bridge0: port 3(ipvlan1) entered blocking state
[  878.023684][T20205] bridge0: port 3(ipvlan1) entered disabled state
[  878.063110][T20205] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  878.082944][T20206] netlink: 10 bytes leftover after parsing attributes in process `syz.0.4919'.
[  878.552850][T20234] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4928'.
[  878.563503][T20234] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4928'.
[  878.729947][T20246] netlink: 'syz.2.4930': attribute type 3 has an invalid length.
[  878.738076][T20246] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4930'.
[  878.817054][T20234] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4928'.
[  879.393100][T12599] Bluetooth: hci1: unexpected event 0x1d length: 15 > 5
[  879.951021][T20302] netlink: 'syz.0.4948': attribute type 29 has an invalid length.
[  880.008585][T20302] netlink: 'syz.0.4948': attribute type 29 has an invalid length.
[  880.165505][T20305] netlink: 'syz.0.4948': attribute type 29 has an invalid length.
[  880.205270][T20305] netlink: 'syz.0.4948': attribute type 29 has an invalid length.
[  880.810965][T20340] netlink: 'syz.2.4962': attribute type 1 has an invalid length.
[  882.556173][T20370] delete_channel: no stack
[  883.092373][T20390] device sit0 entered promiscuous mode
[  883.680577][T20405] bˆ¡cÊRݘOC‰ÿæ: renamed from lo
[  884.091537][T20422] netlink: 'syz.0.4987': attribute type 2 has an invalid length.
[  884.215016][T20422] device .*! entered promiscuous mode
[  884.718797][T12599] Bluetooth: hci0: unexpected event 0x1d length: 15 > 5
[  886.690786][T20508] netlink: 'syz.0.5001': attribute type 3 has an invalid length.
[  886.723405][T20515] netlink: 'syz.0.5001': attribute type 3 has an invalid length.
[  886.761440][T20508] netlink: 'syz.0.5001': attribute type 1 has an invalid length.
[  886.781417][T20515] netlink: 'syz.0.5001': attribute type 1 has an invalid length.
[  886.815183][T20508] __nla_validate_parse: 1 callbacks suppressed
[  886.815214][T20508] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.5001'.
[  886.852981][T20515] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.5001'.
[  887.662110][T20516] device sit0 left promiscuous mode
[  887.792520][T20526] device syzkaller0 entered promiscuous mode
[  888.456485][T20546] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.5009'.
[  891.303948][T20544] netlink: 'syz.0.5009': attribute type 10 has an invalid length.
[  891.323077][T20544] netlink: 55 bytes leftover after parsing attributes in process `syz.0.5009'.
[  892.007639][T20578] netlink: 'syz.0.5021': attribute type 1 has an invalid length.
[  892.015751][T20578] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.5021'.
[  892.485449][T20596] netlink: 'syz.0.5026': attribute type 11 has an invalid length.
[  892.528922][T20596] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5026'.
[  892.680159][T20598] Dead loop on virtual device ip6_vti0, fix it urgently!
[  893.308634][T20595] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  893.709907][T20618] netlink: 148 bytes leftover after parsing attributes in process `syz.3.5032'.
[  894.463245][T20633] netlink: 'syz.4.5037': attribute type 1 has an invalid length.
[  894.519086][T20633] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.5037'.
[  894.810689][T20643] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.5040'.
[  895.916933][T20660] netlink: 'syz.4.5046': attribute type 3 has an invalid length.
[  895.980957][T20660] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.5046'.
[  896.027561][T20661] IPv6: Can't replace route, no match found
[  896.240909][T20670] netlink: 'syz.1.5051': attribute type 7 has an invalid length.
[  896.298921][T20671] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5050'.
[  896.428078][T20671] bridge0: port 1(bridge_slave_0) entered disabled state
[  896.714842][T20683] netlink: 'syz.0.5055': attribute type 4 has an invalid length.
[  896.739845][T20671] device bridge_slave_0 left promiscuous mode
[  896.750058][T20683] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5055'.
[  896.789858][T20671] bridge0: port 1(bridge_slave_0) entered disabled state
[  897.076462][T20680] netlink: 'syz.0.5055': attribute type 1 has an invalid length.
[  897.147508][T20681] netlink: 'syz.1.5051': attribute type 10 has an invalid length.
[  897.197187][T20681] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5051'.
[  897.240020][T20681] bridge0: port 3(veth0_vlan) entered blocking state
[  897.290207][T20681] bridge0: port 3(veth0_vlan) entered disabled state
[  897.339206][T20681] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  898.073394][T20703] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.5059'.
[  898.510938][T20711] netlink: 'syz.1.5061': attribute type 3 has an invalid length.
[  898.751331][T20711] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.5061'.
[  898.985556][T20716] netlink: 'syz.2.5063': attribute type 10 has an invalid length.
[  899.046670][T20718] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5064'.
[  899.252001][T20716] netlink: 'syz.2.5063': attribute type 4 has an invalid length.
[  899.536578][T20738] netlink: 'syz.3.5068': attribute type 3 has an invalid length.
[  899.579496][T20738] netlink: 'syz.3.5068': attribute type 1 has an invalid length.
[  899.611836][T20738] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5068'.
[  899.918037][T20747] netlink: 'syz.2.5070': attribute type 2 has an invalid length.
[  899.956782][T20747] netlink: 'syz.2.5070': attribute type 1 has an invalid length.
[  899.969511][T20747] netlink: 170140 bytes leftover after parsing attributes in process `syz.2.5070'.
[  900.312120][T20754] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.5073'.
[  901.100443][T20774] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.5077'.
[  901.593935][T20787] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.5080'.
[  901.674540][T20793] IPv6: Can't replace route, no match found
[  902.616430][T20817] validate_nla: 3 callbacks suppressed
[  902.616465][T20817] netlink: 'syz.0.5088': attribute type 7 has an invalid length.
[  902.707406][T20817] netlink: 208404 bytes leftover after parsing attributes in process `syz.0.5088'.
[  903.124836][T20824] tipc: Started in network mode
[  903.147737][T20824] tipc: Node identity 9215a268, cluster identity 4711
[  903.226879][T20824] tipc: Node number set to 2450891368
[  903.637439][T20834] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5093'.
[  903.667339][T20834] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5093'.
[  903.708245][T20834] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5093'.
[  906.569090][T20851] netlink: 'syz.3.5101': attribute type 17 has an invalid length.
[  906.587229][T20851] netlink: 'syz.3.5101': attribute type 41 has an invalid length.
[  906.595088][T20851] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5101'.
[  906.678946][T20854] netlink: 'syz.2.5099': attribute type 21 has an invalid length.
[  906.693061][T20854] netlink: 'syz.2.5099': attribute type 6 has an invalid length.
[  906.707322][T20854] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5099'.
[  907.619007][T20884] IPv6: Can't replace route, no match found
[  907.692691][T20877] netlink: 'syz.4.5108': attribute type 3 has an invalid length.
[  907.739109][T20877] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.5108'.
[  907.799770][T20890] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.5112'.
[  908.317619][T20913] netlink: 'syz.2.5118': attribute type 2 has an invalid length.
[  908.334207][T20913] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5118'.
[  909.053083][T20930] netlink: 'syz.0.5124': attribute type 21 has an invalid length.
[  909.112026][T20934] IPv6: Can't replace route, no match found
[  909.199988][T20932] netlink: 'syz.3.5126': attribute type 3 has an invalid length.
[  909.217731][T20932] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.5126'.
[  909.470105][T20941] netlink: 180900 bytes leftover after parsing attributes in process `syz.0.5128'.
[  909.543483][T20945] netlink: 188 bytes leftover after parsing attributes in process `syz.3.5130'.
[  909.569159][T20941] openvswitch: netlink: Flow actions attr not present in new flow.
[  909.593181][T20943] delete_channel: no stack
[  909.897369][T20944] device syzkaller0 entered promiscuous mode
[  910.654669][T20980] netlink: 'syz.4.5140': attribute type 3 has an invalid length.
[  910.677460][T20980] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.5140'.
[  911.802196][T20997] netlink: 'syz.0.5142': attribute type 28 has an invalid length.
[  911.818443][T20997] netlink: 'syz.0.5142': attribute type 29 has an invalid length.
[  911.836674][T20997] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5142'.
[  913.602723][T20984] IPv6: Can't replace route, no match found
[  913.609055][T20986] bridge0: port 3(ip6gretap0) entered blocking state
[  913.615797][T20986] bridge0: port 3(ip6gretap0) entered disabled state
[  913.624560][T20986] device ip6gretap0 entered promiscuous mode
[  913.630978][T20986] bridge0: port 3(ip6gretap0) entered blocking state
[  913.637789][T20986] bridge0: port 3(ip6gretap0) entered forwarding state
[  913.648695][T20991] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5142'.
[  913.684968][T21003] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5144'.
[  914.410367][T21033] netlink: 'syz.4.5153': attribute type 29 has an invalid length.
[  914.749992][T21031] netlink: 'syz.3.5150': attribute type 2 has an invalid length.
[  914.789989][T21031] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5150'.
[  914.804519][T21033] netlink: 'syz.4.5153': attribute type 29 has an invalid length.
[  914.851307][T21040] netlink: 'syz.1.5154': attribute type 4 has an invalid length.
[  914.896029][T21040] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.5154'.
[  915.011627][T21050] netlink: 'syz.2.5156': attribute type 2 has an invalid length.
[  915.047166][T21050] netlink: 'syz.2.5156': attribute type 1 has an invalid length.
[  915.054976][T21050] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5156'.
[  915.116655][T21052] IPv6: Can't replace route, no match found
[  915.366596][T21055] netlink: 'syz.0.5158': attribute type 10 has an invalid length.
[  915.381862][T21055] device veth0_macvtap left promiscuous mode
[  915.532355][T12599] Bluetooth: hci1: unexpected event 0x23 length: 15 > 13
[  917.068112][T21089] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  917.653167][T21102] IPv6: Can't replace route, no match found
[  917.751357][T21091] netlink: 'syz.1.5172': attribute type 3 has an invalid length.
[  917.760230][T21091] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.5172'.
[  918.313645][T21131] IPv6: Can't replace route, no match found
[  918.344742][T21121] netlink: 'syz.3.5180': attribute type 3 has an invalid length.
[  918.375039][T21121] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.5180'.
[  918.821935][T21141] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.5185'.
[  918.895906][T21141] debugfs: Directory '!!!' with parent 'ieee80211' already present!
[  919.181468][T21155] netlink: 'syz.3.5189': attribute type 27 has an invalid length.
[  920.524297][T21159] validate_nla: 1 callbacks suppressed
[  920.524437][T21159] netlink: 'syz.2.5190': attribute type 3 has an invalid length.
[  920.553299][T21159] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.5190'.
[  920.957424][T21181] device wlan1 entered promiscuous mode
[  920.991103][T21184] netlink: 148 bytes leftover after parsing attributes in process `syz.1.5199'.
[  921.035749][T21186] IPv6: Can't replace route, no match found
[  921.050359][T21179] netlink: 'syz.0.5196': attribute type 3 has an invalid length.
[  921.073591][T21179] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.5196'.
[  921.339885][T21202] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  921.347353][T21202] IPv6: NLM_F_CREATE should be set when creating new route
[  921.354869][T21202] IPv6: NLM_F_CREATE should be set when creating new route
[  921.362331][T21202] IPv6: NLM_F_CREATE should be set when creating new route
[  921.476033][T21213] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.5205'.
[  921.604836][T21220] netlink: 168 bytes leftover after parsing attributes in process `syz.0.5205'.
[  922.067043][T21237] netlink: 148 bytes leftover after parsing attributes in process `syz.1.5212'.
[  922.462726][T21258] netlink: 'syz.0.5219': attribute type 3 has an invalid length.
[  922.471139][T21256] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.5218'.
[  922.490375][T21258] netlink: 118424 bytes leftover after parsing attributes in process `syz.0.5219'.
[  922.712883][T21266] netlink: 'syz.0.5221': attribute type 10 has an invalid length.
[  922.729995][T21266] netlink: 2 bytes leftover after parsing attributes in process `syz.0.5221'.
[  923.362437][T21295] netlink: 'syz.1.5230': attribute type 3 has an invalid length.
[  923.423387][T21295] IPv6: Can't replace route, no match found
[  923.473547][T21306] netlink: 'syz.0.5232': attribute type 3 has an invalid length.
[  923.513695][T21311] IPv6: Can't replace route, no match found
[  923.748678][T15158] wlan1: Trigger new scan to find an IBSS to join
[  924.698108][T21318] delete_channel: no stack
[  925.267292][T21366] IPv6: Can't replace route, no match found
[  925.280434][T21361] netlink: 'syz.1.5249': attribute type 3 has an invalid length.
[  925.288876][T21361] __nla_validate_parse: 3 callbacks suppressed
[  925.288922][T21361] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.5249'.
[  925.515610][T21375] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.5252'.
[  925.697777][T21381] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.5255'.
[  927.065344][T21421] netlink: 'syz.3.5265': attribute type 3 has an invalid length.
[  927.113690][T21421] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.5265'.
[  927.139186][T21423] IPv6: Can't replace route, no match found
[  927.398476][T21430] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[  927.853806][T21444] netlink: 'syz.3.5273': attribute type 10 has an invalid length.
[  927.885307][T21444] device wlan1 left promiscuous mode
[  928.476323][T21474] device wlan1 entered promiscuous mode
[  928.500390][T21479] netlink: 'syz.0.5280': attribute type 2 has an invalid length.
[  928.537377][T21479] netlink: 10 bytes leftover after parsing attributes in process `syz.0.5280'.
[  928.585785][T21476] netlink: 'syz.4.5281': attribute type 3 has an invalid length.
[  928.648680][T21476] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.5281'.
[  928.670462][T21482] IPv6: Can't replace route, no match found
[  928.919910][T21484] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5284'.
[  928.940587][T21485] A link change request failed with some changes committed already. Interface bˆ¡cÊRݘOC‰ÿæ may have been left with an inconsistent configuration, please check.
[  929.372034][T21488] netlink: 126632 bytes leftover after parsing attributes in process `syz.4.5285'.
[  929.395396][T21488] netlink: 8192 bytes leftover after parsing attributes in process `syz.4.5285'.
[  929.719708][T21503] netlink: 'syz.2.5292': attribute type 20 has an invalid length.
[  930.177990][T21518] netlink: 'syz.0.5297': attribute type 3 has an invalid length.
[  930.186753][T21518] netlink: 'syz.0.5297': attribute type 8 has an invalid length.
[  930.217312][T21518] netlink: 197344 bytes leftover after parsing attributes in process `syz.0.5297'.
[  930.466629][T21529] netlink: 'syz.2.5301': attribute type 29 has an invalid length.
[  930.521129][T21533] __nla_validate_parse: 1 callbacks suppressed
[  930.521148][T21533] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.5298'.
[  930.579940][T21531] netlink: 'syz.1.5300': attribute type 21 has an invalid length.
[  930.627724][T21531] netlink: 'syz.1.5300': attribute type 1 has an invalid length.
[  930.676792][T21531] netlink: 16090 bytes leftover after parsing attributes in process `syz.1.5300'.
[  930.735341][T21533] sysfs: cannot create duplicate filename '/class/ieee80211/.!
'
[  930.760904][T21533] CPU: 1 PID: 21533 Comm: syz.3.5298 Not tainted syzkaller #0
[  930.768426][T21533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  930.778517][T21533] Call Trace:
[  930.781843][T21533]  <TASK>
[  930.784810][T21533]  dump_stack_lvl+0x188/0x24e
[  930.789540][T21533]  ? show_regs_print_info+0x12/0x12
[  930.794804][T21533]  ? load_image+0x400/0x400
[  930.799415][T21533]  sysfs_warn_dup+0x8a/0xa0
[  930.803968][T21533]  sysfs_do_create_link_sd+0xc0/0x110
[  930.809388][T21533]  device_add+0x7ed/0xfb0
[  930.813748][T21533]  wiphy_register+0x1d9f/0x2ac0
[  930.818648][T21533]  ? cfg80211_event_work+0x40/0x40
[  930.823784][T21533]  ? minstrel_ht_alloc+0x894/0xa20
[  930.828928][T21533]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[  930.835076][T21533]  ieee80211_register_hw+0x2d00/0x39f0
[  930.840582][T21533]  ? ieee80211_register_hw+0xf21/0x39f0
[  930.846210][T21533]  ? ieee80211_register_hw+0xf21/0x39f0
[  930.851799][T21533]  ? ieee80211_tasklet_handler+0x20/0x20
[  930.857478][T21533]  ? memset+0x1e/0x40
[  930.861479][T21533]  ? __hrtimer_init+0x186/0x270
[  930.866380][T21533]  mac80211_hwsim_new_radio+0x28c2/0x4c40
[  930.872155][T21533]  hwsim_new_radio_nl+0xafa/0xce0
[  930.877214][T21533]  genl_family_rcv_msg_doit+0x22a/0x330
[  930.882779][T21533]  ? end_current_label_crit_section+0x170/0x170
[  930.889097][T21533]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[  930.895024][T21533]  ? bpf_lsm_capable+0x5/0x10
[  930.899734][T21533]  ? security_capable+0x85/0xb0
[  930.904611][T21533]  genl_rcv_msg+0x604/0x790
[  930.909140][T21533]  ? genl_bind+0x360/0x360
[  930.913573][T21533]  ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0
[  930.919938][T21533]  netlink_rcv_skb+0x1fb/0x450
[  930.924729][T21533]  ? genl_bind+0x360/0x360
[  930.929162][T21533]  ? netlink_ack+0x1170/0x1170
[  930.933959][T21533]  ? down_read+0x1a8/0x2d0
[  930.938435][T21533]  genl_rcv+0x24/0x40
[  930.942448][T21533]  netlink_unicast+0x74d/0x8d0
[  930.947243][T21533]  netlink_sendmsg+0x8ad/0xbd0
[  930.952036][T21533]  ? netlink_getsockopt+0x550/0x550
[  930.957261][T21533]  ? aa_sock_msg_perm+0x94/0x150
[  930.962226][T21533]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  930.967531][T21533]  ? security_socket_sendmsg+0x7c/0xa0
[  930.973020][T21533]  ? netlink_getsockopt+0x550/0x550
[  930.978252][T21533]  ____sys_sendmsg+0x5be/0x970
[  930.983052][T21533]  ? __sys_sendmsg_sock+0x30/0x30
[  930.988106][T21533]  ? __import_iovec+0x315/0x500
[  930.992984][T21533]  ? import_iovec+0x6f/0xa0
[  930.997510][T21533]  ___sys_sendmsg+0x2a2/0x360
[  931.002319][T21533]  ? try_to_wake_up+0x6ae/0x1080
[  931.007294][T21533]  ? __sys_sendmsg+0x290/0x290
[  931.012118][T21533]  __se_sys_sendmsg+0x1bb/0x2a0
[  931.017006][T21533]  ? ct_nmi_exit+0x145/0x1c0
[  931.021625][T21533]  ? __x64_sys_sendmsg+0x80/0x80
[  931.026607][T21533]  ? lockdep_hardirqs_on+0x94/0x140
[  931.031831][T21533]  do_syscall_64+0x4c/0xa0
[  931.036320][T21533]  ? clear_bhb_loop+0x60/0xb0
[  931.041022][T21533]  ? clear_bhb_loop+0x60/0xb0
[  931.045722][T21533]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  931.051658][T21533] RIP: 0033:0x7fc43079c819
[  931.056098][T21533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  931.075731][T21533] RSP: 002b:00007fc431608028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  931.084170][T21533] RAX: ffffffffffffffda RBX: 00007fc430a16090 RCX: 00007fc43079c819
[  931.092165][T21533] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b
[  931.100152][T21533] RBP: 00007fc430832c91 R08: 0000000000000000 R09: 0000000000000000
[  931.108147][T21533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  931.116133][T21533] R13: 00007fc430a16128 R14: 00007fc430a16090 R15: 00007ffcb4b591e8
[  931.124136][T21533]  </TASK>
[  931.421718][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  931.428300][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  933.523345][T21542] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5304'.
[  933.823482][T21567] netlink: 148 bytes leftover after parsing attributes in process `syz.2.5311'.
[  933.905208][T21569] validate_nla: 2 callbacks suppressed
[  933.905243][T21569] netlink: 'syz.0.5312': attribute type 10 has an invalid length.
[  933.937291][T21569] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5312'.
[  934.675835][T21595] netlink: 'syz.2.5321': attribute type 2 has an invalid length.
[  934.805518][T21599] netlink: 'syz.4.5323': attribute type 21 has an invalid length.
[  934.939464][T21602] netlink: 64535 bytes leftover after parsing attributes in process `syz.4.5323'.
[  935.180558][T21608] netlink: 148 bytes leftover after parsing attributes in process `syz.3.5325'.
[  935.195349][T21603] netlink: 'syz.2.5321': attribute type 29 has an invalid length.
[  935.257914][T21603] netlink: 'syz.2.5321': attribute type 29 has an invalid length.
[  937.426495][T21622] netlink: 'syz.4.5328': attribute type 10 has an invalid length.
[  937.443027][T21622] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5328'.
[  937.453991][T21622] device ipvlan1 entered promiscuous mode
[  937.485690][T21622] bridge0: port 4(ipvlan1) entered blocking state
[  937.496711][T21622] bridge0: port 4(ipvlan1) entered disabled state
[  937.518766][T21622] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  937.773960][T21639] netlink: 'syz.1.5333': attribute type 39 has an invalid length.
[  938.007956][T21646] netlink: 'syz.2.5335': attribute type 10 has an invalid length.
[  938.049993][T21646] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  938.121556][T21653] netlink: 'syz.0.5338': attribute type 21 has an invalid length.
[  938.131679][T21653] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5338'.
[  939.858875][T21668] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5342'.
[  939.995278][T21679] netlink: 'syz.2.5344': attribute type 21 has an invalid length.
[  940.013511][T21679] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5344'.
[  940.057681][T21680] netlink: 10 bytes leftover after parsing attributes in process `syz.3.5345'.
[  940.093100][T21683] netlink: 'syz.0.5346': attribute type 2 has an invalid length.
[  940.102185][T21683] netlink: 'syz.0.5346': attribute type 1 has an invalid length.
[  940.110460][T21683] netlink: 170140 bytes leftover after parsing attributes in process `syz.0.5346'.
[  940.696217][T21703] netlink: 'syz.1.5353': attribute type 3 has an invalid length.
[  940.721775][T21703] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.5353'.
[  940.835493][T21703] IPv6: Can't replace route, no match found
[  941.314537][T21697] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  941.347736][T21697] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  941.390130][T21714] Ÿë
: port 1(gretap0) entered blocking state
[  941.436875][T21714] Ÿë
: port 1(gretap0) entered disabled state
[  941.471183][T21714] device gretap0 entered promiscuous mode
[  941.501167][T21717] netlink: 'syz.0.5357': attribute type 13 has an invalid length.
[  941.520686][T21717] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.5357'.
[  941.653054][T21723] netlink: 'syz.4.5359': attribute type 4 has an invalid length.
[  941.661485][T21728] delete_channel: no stack
[  941.836419][T21737] netlink: 180 bytes leftover after parsing attributes in process `syz.1.5364'.
[  941.876475][T21732] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5362'.
[  942.138123][T21755] netlink: 'syz.0.5370': attribute type 3 has an invalid length.
[  942.157419][T21757] netlink: 'syz.0.5370': attribute type 3 has an invalid length.
[  942.282333][T21762] netlink: 'syz.1.5372': attribute type 15 has an invalid length.
[  942.301059][T21762] netlink: 'syz.1.5372': attribute type 7 has an invalid length.
[  942.840363][T21779] __nla_validate_parse: 2 callbacks suppressed
[  942.840398][T21779] netlink: 144 bytes leftover after parsing attributes in process `syz.1.5378'.
[  942.951991][T21781] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  942.974755][T21781] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  942.985081][T21781] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  943.058656][T21781] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  943.582095][T21811] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.5391'.
[  943.599831][T21811] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5391'.
[  970.457204][  T129] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 1-.... } 2681 jiffies s: 177737 root: 0x2/.
[  970.469883][  T129] rcu: blocking rcu_node structures (internal RCU debug):
[  970.477336][  T129] Sending NMI from CPU 0 to CPUs 1:
[  970.482568][    C1] NMI backtrace for cpu 1
[  970.482577][    C1] CPU: 1 PID: 21811 Comm: syz.4.5391 Not tainted syzkaller #0
[  970.482594][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  970.482603][    C1] RIP: 0010:kasan_check_range+0x65/0x290
[  970.482633][    C1] Code: ff df 49 89 fe 49 c1 ee 03 49 ba 00 00 00 00 00 fc ff df 4f 8d 1c 16 4c 8d 44 3e ff 4d 89 c1 49 c1 e9 03 4b 8d 1c 21 49 89 df <4d> 29 df 49 83 ff 10 7f 29 4d 85 ff 0f 84 38 01 00 00 4c 89 cb 48
[  970.482647][    C1] RSP: 0018:ffffc900001e0350 EFLAGS: 00000807
[  970.482661][    C1] RAX: ffffffff81a51c01 RBX: fffff5200003c083 RCX: ffffffff81a51d44
[  970.482674][    C1] RDX: 0000000000000001 RSI: 0000000000000038 RDI: ffffc900001e03e0
[  970.482685][    C1] RBP: 0000000000000000 R08: ffffc900001e0417 R09: 1ffff9200003c082
[  970.482697][    C1] R10: dffffc0000000000 R11: fffff5200003c07c R12: dffffc0000000001
[  970.482709][    C1] R13: ffffc900001e0440 R14: 1ffff9200003c07c R15: fffff5200003c083
[  970.482722][    C1] FS:  00007ff8685a66c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  970.482736][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  970.482748][    C1] CR2: 00002000000029c0 CR3: 0000000029675000 CR4: 00000000003506e0
[  970.482763][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  970.482772][    C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  970.482782][    C1] Call Trace:
[  970.482788][    C1]  <IRQ>
[  970.482795][    C1]  memset+0x1e/0x40
[  970.482811][    C1]  perf_event_output_forward+0x184/0x2f0
[  970.482836][    C1]  ? perf_event_output_forward+0xbe/0x2f0
[  970.482859][    C1]  ? perf_get_page_size+0x430/0x430
[  970.482880][    C1]  ? perf_swevent_event+0x4ba/0x570
[  970.482909][    C1]  ? __perf_event_account_interrupt+0x187/0x280
[  970.482935][    C1]  __perf_event_overflow+0x448/0x610
[  970.482962][    C1]  perf_swevent_event+0x315/0x570
[  970.482987][    C1]  ? perf_tp_event+0xc30/0xc30
[  970.483010][    C1]  ? perf_trace_buf_alloc+0x300/0x300
[  970.483034][    C1]  perf_tp_event+0x3e7/0xc30
[  970.483057][    C1]  ? perf_tp_event+0xc30/0xc30
[  970.483081][    C1]  ? perf_trace_run_bpf_submit+0x1c0/0x1c0
[  970.483126][    C1]  ? kvm_sched_clock_read+0x14/0x40
[  970.483141][    C1]  ? sched_clock_cpu+0x6e/0x260
[  970.483162][    C1]  perf_trace_run_bpf_submit+0xf3/0x1c0
[  970.483189][    C1]  perf_trace_preemptirq_template+0x268/0x320
[  970.483213][    C1]  ? asm_sysvec_irq_work+0x16/0x20
[  970.483235][    C1]  ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0
[  970.483258][    C1]  ? __irq_exit_rcu+0x147/0x230
[  970.483274][    C1]  ? irq_exit_rcu+0x20/0x20
[  970.483290][    C1]  ? asm_sysvec_irq_work+0x16/0x20
[  970.483311][    C1]  trace_irq_enable_rcuidle+0xd3/0x140
[  970.483334][    C1]  trace_hardirqs_on+0x24/0x40
[  970.483354][    C1]  asm_sysvec_irq_work+0x16/0x20
[  970.483374][    C1] RIP: 0010:rcu_read_unlock_special+0x7f/0x510
[  970.483396][    C1] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 d2 33 95 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08
[  970.483410][    C1] RSP: 0018:ffffc900001e0ac0 EFLAGS: 00000206
[  970.483422][    C1] RAX: 14f34eb8b9925000 RBX: 1ffff9200003c160 RCX: 14f34eb8b9925000
[  970.483434][    C1] RDX: dffffc0000000000 RSI: ffffffff8a8c1120 RDI: ffffffff8adf13a0
[  970.483446][    C1] RBP: ffffc900001e0bb0 R08: ffffffff90af924f R09: 1ffffffff215f249
[  970.483457][    C1] R10: dffffc0000000000 R11: fffffbfff215f24a R12: 0000000000000246
[  970.483469][    C1] R13: dffffc0000000000 R14: ffff8880b8f3b900 R15: 0000000000000002
[  970.483488][    C1]  ? mac80211_hwsim_beacon_tx+0x61e/0xae0
[  970.483508][    C1]  ? __rcu_read_unlock+0xd0/0xd0
[  970.483530][    C1]  __rcu_read_unlock+0x78/0xd0
[  970.483545][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170
[  970.483570][    C1]  ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0
[  970.483587][    C1]  ieee80211_iterate_active_interfaces_atomic+0x156/0x170
[  970.483613][    C1]  mac80211_hwsim_beacon+0xb7/0x1b0
[  970.483640][    C1]  __hrtimer_run_queues+0x54a/0xd50
[  970.483662][    C1]  ? hw_scan_work+0xf50/0xf50
[  970.483690][    C1]  ? hrtimer_interrupt+0x9c0/0x9c0
[  970.483708][    C1]  ? ktime_get_update_offsets_now+0x3ce/0x3e0
[  970.483732][    C1]  hrtimer_run_softirq+0x183/0x2a0
[  970.483753][    C1]  handle_softirqs+0x2a1/0x930
[  970.483771][    C1]  ? __irq_exit_rcu+0x13b/0x230
[  970.483789][    C1]  ? do_softirq+0x210/0x210
[  970.483806][    C1]  ? irqtime_account_irq+0xb2/0x1b0
[  970.483823][    C1]  __irq_exit_rcu+0x13b/0x230
[  970.483838][    C1]  ? irq_exit_rcu+0x20/0x20
[  970.483858][    C1]  irq_exit_rcu+0x5/0x20
[  970.483872][    C1]  sysvec_apic_timer_interrupt+0xa0/0xc0
[  970.483890][    C1]  </IRQ>
[  970.483894][    C1]  <TASK>
[  970.483900][    C1]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  970.483921][    C1] RIP: 0010:unwind_next_frame+0x1d3/0x20b0
[  970.483940][    C1] Code: f4 17 00 00 44 89 f0 4c 8d 24 85 dc 7c 3e 8f 4c 89 e0 48 c1 e8 03 42 0f b6 04 28 84 c0 4d 89 ef 0f 85 57 19 00 00 45 8b 24 24 <44> 89 f0 ff c0 4c 8d 2c 85 dc 7c 3e 8f 4c 89 e8 48 c1 e8 03 42 0f
[  970.483953][    C1] RSP: 0018:ffffc90005cd62b0 EFLAGS: 00000246
[  970.483965][    C1] RAX: 0000000000000000 RBX: ffffc90005cd6388 RCX: ffffffff96c00100
[  970.483976][    C1] RDX: dffffc0000000000 RSI: 0000000000096079 RDI: ffffffff81391adf
[  970.483987][    C1] RBP: ffffffff8a0bfe5e R08: ffffc90005cd6450 R09: 000000000000000c
[  970.483998][    C1] R10: dffffc0000000000 R11: fffff52000b9ac7d R12: 000000000019edc2
[  970.484009][    C1] R13: dffffc0000000000 R14: 0000000000090bfe R15: dffffc0000000000
[  970.484022][    C1]  ? hsr_dellink+0x3e/0x70
[  970.484049][    C1]  ? unwind_next_frame+0xaf/0x20b0
[  970.484072][    C1]  ? hsr_dellink+0x3f/0x70
[  970.484098][    C1]  ? stack_trace_save+0xf0/0xf0
[  970.484118][    C1]  arch_stack_walk+0x10c/0x140
[  970.484140][    C1]  ? hsr_dellink+0x3f/0x70
[  970.484165][    C1]  stack_trace_save+0xa6/0xf0
[  970.484185][    C1]  ? stack_trace_snprint+0xf0/0xf0
[  970.484210][    C1]  kasan_set_track+0x4b/0x70
[  970.484230][    C1]  ? kasan_set_track+0x4b/0x70
[  970.484250][    C1]  ? __kasan_kmalloc+0x8e/0xa0
[  970.484271][    C1]  ? ipv6_add_addr+0x42d/0xfc0
[  970.484285][    C1]  ? addrconf_add_linklocal+0x26f/0x6d0
[  970.484301][    C1]  ? addrconf_addr_gen+0x55e/0x6a0
[  970.484319][    C1]  ? addrconf_init_auto_addrs+0x752/0xaf0
[  970.484337][    C1]  ? addrconf_notify+0xaca/0xf40
[  970.484355][    C1]  ? raw_notifier_call_chain+0xcb/0x160
[  970.484372][    C1]  ? dev_set_mtu_ext+0x45f/0x680
[  970.484397][    C1]  ? dev_set_mtu+0x41/0xc0
[  970.484417][    C1]  ? hsr_del_port+0x183/0x2b0
[  970.484430][    C1]  ? hsr_del_ports+0x2d/0x90
[  970.484452][    C1]  ? hsr_dellink+0x3f/0x70
[  970.484494][    C1]  __kasan_kmalloc+0x8e/0xa0
[  970.484517][    C1]  ipv6_add_addr+0x42d/0xfc0
[  970.484535][    C1]  ? ipv6_count_addresses+0x190/0x190
[  970.484550][    C1]  ? mark_lock+0x94/0x320
[  970.484573][    C1]  ? perf_trace_run_bpf_submit+0xf3/0x1c0
[  970.484625][    C1]  addrconf_add_linklocal+0x26f/0x6d0
[  970.484647][    C1]  ? inet6_addr_del+0x560/0x560
[  970.484665][    C1]  ? lock_chain_count+0x20/0x20
[  970.484690][    C1]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  970.484713][    C1]  ? lockdep_hardirqs_on+0x94/0x140
[  970.484731][    C1]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  970.484757][    C1]  ? addrconf_addr_gen+0x298/0x6a0
[  970.484779][    C1]  addrconf_addr_gen+0x55e/0x6a0
[  970.484798][    C1]  ? ip6_route_add+0x100/0x130
[  970.484823][    C1]  ? addrconf_sysctl_register+0x1b0/0x1b0
[  970.484842][    C1]  ? addrconf_add_dev+0x298/0x3a0
[  970.484860][    C1]  ? l3mdev_fib_table+0x160/0x160
[  970.484887][    C1]  ? mark_lock+0x94/0x320
[  970.484912][    C1]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  970.484939][    C1]  addrconf_init_auto_addrs+0x752/0xaf0
[  970.484960][    C1]  ? addrconf_dad_run+0x1d0/0x1d0
[  970.484980][    C1]  ? lockdep_hardirqs_on+0x94/0x140
[  970.484998][    C1]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  970.485026][    C1]  ? ipv6_add_dev+0xcf5/0x1120
[  970.485043][    C1]  ? ipv6_add_dev+0xd5c/0x1120
[  970.485065][    C1]  addrconf_notify+0xaca/0xf40
[  970.485087][    C1]  raw_notifier_call_chain+0xcb/0x160
[  970.485109][    C1]  dev_set_mtu_ext+0x45f/0x680
[  970.485133][    C1]  ? lock_chain_count+0x20/0x20
[  970.485155][    C1]  ? dev_validate_mtu+0x170/0x170
[  970.485179][    C1]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  970.485203][    C1]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  970.485231][    C1]  dev_set_mtu+0x41/0xc0
[  970.485256][    C1]  hsr_del_port+0x183/0x2b0
[  970.485274][    C1]  hsr_del_ports+0x2d/0x90
[  970.485299][    C1]  hsr_dellink+0x3f/0x70
[  970.485323][    C1]  ? hsr_newlink+0x6f0/0x6f0
[  970.485348][    C1]  rtnl_dellink+0x54c/0x830
[  970.485371][    C1]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  970.485401][    C1]  ? rtnl_newlink+0x20a0/0x20a0
[  970.485462][    C1]  ? rtnl_newlink+0x20a0/0x20a0
[  970.485486][    C1]  rtnetlink_rcv_msg+0x87c/0xfc0
[  970.485513][    C1]  ? rtnetlink_rcv_msg+0x226/0xfc0
[  970.485541][    C1]  ? rtnetlink_bind+0x80/0x80
[  970.485581][    C1]  ? __dev_queue_xmit+0x26b/0x37c0
[  970.485605][    C1]  ? perf_trace_run_bpf_submit+0xf3/0x1c0
[  970.485638][    C1]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  970.485665][    C1]  netlink_rcv_skb+0x1fb/0x450
[  970.485691][    C1]  ? rtnetlink_bind+0x80/0x80
[  970.485717][    C1]  ? netlink_ack+0x1170/0x1170
[  970.485751][    C1]  netlink_unicast+0x74d/0x8d0
[  970.485780][    C1]  netlink_sendmsg+0x8ad/0xbd0
[  970.485811][    C1]  ? netlink_getsockopt+0x550/0x550
[  970.485838][    C1]  ? aa_sock_msg_perm+0x94/0x150
[  970.485857][    C1]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  970.485873][    C1]  ? security_socket_sendmsg+0x7c/0xa0
[  970.485901][    C1]  ? netlink_getsockopt+0x550/0x550
[  970.485926][    C1]  ____sys_sendmsg+0x5be/0x970
[  970.485956][    C1]  ? __sys_sendmsg_sock+0x30/0x30
[  970.485985][    C1]  ? import_iovec+0x6f/0xa0
[  970.486004][    C1]  ___sys_sendmsg+0x2a2/0x360
[  970.486032][    C1]  ? __sys_sendmsg+0x290/0x290
[  970.486081][    C1]  __se_sys_sendmsg+0x1bb/0x2a0
[  970.486107][    C1]  ? __x64_sys_sendmsg+0x80/0x80
[  970.486140][    C1]  ? syscall_enter_from_user_mode+0x2a/0x80
[  970.486160][    C1]  do_syscall_64+0x4c/0xa0
[  970.486184][    C1]  ? clear_bhb_loop+0x60/0xb0
[  970.486206][    C1]  ? clear_bhb_loop+0x60/0xb0
[  970.486229][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  970.486250][    C1] RIP: 0033:0x7ff86779c819
[  970.486264][    C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  970.486278][    C1] RSP: 002b:00007ff8685a6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  970.486294][    C1] RAX: ffffffffffffffda RBX: 00007ff867a15fa0 RCX: 00007ff86779c819
[  970.486306][    C1] RDX: 0000000000044004 RSI: 0000200000000600 RDI: 0000000000000009
[  970.486318][    C1] RBP: 00007ff867832c91 R08: 0000000000000000 R09: 0000000000000000
[  970.486329][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  970.486339][    C1] R13: 00007ff867a16038 R14: 00007ff867a15fa0 R15: 00007ffc5e201438
[  970.486360][    C1]  </TASK>