last executing test programs:

8.681983518s ago: executing program 2 (id=4873):
socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0)
socketpair(0x1, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20004, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x29, 0xb, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000d00)='./cgroup.net/syz0\x00', 0x200002, 0x0)
r0 = socket$kcm(0x11, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f0000000100)=@llc={0x1a, 0x303, 0xc5, 0x8, 0x3, 0x40, @local}, 0x80, &(0x7f0000000640)}, 0x0)
r1 = socket$kcm(0xa, 0x3, 0x73)
sendmsg$inet(r1, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, 0x0, 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="6b0000000000000029000000050000000002020000000000000000007f000001080000000700000000000034366567f221978756640000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="04ff87200049f7e7d70473a4ea31d15831cebbaf3f4f0699547bf7da7905989ef927e86139709f3be69a678a54fdbc84fca6644b0e89f1d2812e4acbdd4c2ea19252ca611fb4b97bb5e63e04bf69c84c75f0b80b4ac84b4db1efa6604e8533ecb1dd47c3dba3e32336e0f9e4f097704d4ea7451775c41f88aa30e2bcbe144c317e0ab4b6244946c07bba1ca3973ed5d1c5698a9829210f4a2cb1dcb6189070bdee3c17126becf3c9b6e7e2716ef129397a52fd256bfa7fbc9cc7f473deea5ff907aa9bbf583afc43f4bd4eb9f113334d544d590ad530dd55b622e49a802746ee3aec334b1310acc66b427cd4771cfc04a5430d527008ffc00522fbb4648948845b8d274c35fd59e1ac0c04b2dfd91194a8e2810bcb0788a000dbceaf0b1cfd686c3417cd2b8255915bd00b78a7fcfff09870cfc8e602a4106a0b3e111c856c8af2522d3647b2f1db"], 0x6b}, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000440)="d8000000180081034ef0f206b74cb9040a1d080006007c06e8fc55a10a0015000600142603600e1208000f0000000401a8000100df80ffff00000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b31627ffe06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a468eb4edbb57a5025ccca9e00360db798262f3dcace0d0bdb8e73ece0b42a9ecbee12cf1de59bf09ebc62e9b6e6bf545de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0xfffffffffffffffe, 0xfffffffffefffffe}, 0x0, 0x20, 0xc2ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="934300005a0033d487277b9b108b4ab502", @ANYRES32, @ANYRES8=r3], 0xfe33)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r4, &(0x7f0000000140)="02f8b6b93d5dee3673f737ece2b062308d92d913d46d7aba02a9dbdfd7b818350da50d0ad44da4e6d2db239139ceab65516764ae9ee75ad438b2fb1a89eda021ace5eed61d4765eb620ed7897646d9cbde5f05a686a2cebba22f60050f408794", &(0x7f0000000200)=""/80}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r4, @ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r5, 0x0, 0x0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="b70000008100003bbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071104f00000000001d400500000000004704000001ed00000f030000000000001d440000000000006b0a00fe000000007313000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff31a8fd3c0fd8b7ff831028e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646c0200000000000000020000e35208b0bb0d2cd80e2438ec649dc76128610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda82fc9c4d7ecc7a803bf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714f62ba7a54f0c33d39000d0bfed3a6a59ff616236fd8f2477184bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06fa2e04cfe0649226c697d9e8eaade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00023ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88f15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a920099c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40fc5d2f55ff07c53147de202ce517b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661061173f359e9052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff26b61aac8aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3ba18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e26534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336dfaa6d5d164301190bc2d4c04087729033342045804a28082abc3b4762302a271722fb515f31e0dd115a292f1e68481a62c49d15ea5460a29c60b1058fb7aa9bf4ee3cbe11b03711a15d730646b72d074dab1e8c429339f3460d324c17a4a8bfc7d7eab45bef00664d6dc823000"/2578], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x5, 0x0, 0x0, 0x4000000, 0xbb, 0x1fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r6, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

8.418730742s ago: executing program 3 (id=4877):
syz_clone(0x20000, &(0x7f0000000040)="85787c69904d617ef2964beee49f471570f90a9371cb5f5ab4a074e420cf", 0x1e, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100))
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e00000000eb15000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x4b}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x18000000000002a0, 0xf, 0xfffffffffffffe0d, &(0x7f0000000140)="7c003307000000000008000088471a", 0x0, 0xffedfff0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

7.409834767s ago: executing program 3 (id=4881):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000007feffff720af0fff8ffffff71a4f0ff000000002d030000000000001d400500000000004704000001ed00007203fffffffe00001d44000000000000db0a00fee10000007303000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
socket$kcm(0x11, 0x200000000000002, 0x300)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1b42, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101})
write$cgroup_devices(r4, &(0x7f00000004c0)=ANY=[@ANYBLOB="2d84c184ffff"], 0xffdd)
recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x5)
sendmsg$tipc(r3, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8c4}, 0x1)
r5 = socket$kcm(0x10, 0x3, 0x0)
recvmsg$kcm(r5, &(0x7f0000002140)={0x0, 0x0, &(0x7f00000020c0), 0x4, 0x0, 0x61}, 0x2020)
sendmsg$inet(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d00193120e69ee517d38b0dbc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb99a2508d228c04fb0e754914", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
sendmsg$inet(r2, &(0x7f0000001580)={&(0x7f0000000180)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x10, &(0x7f0000001480)=[{&(0x7f0000000280)="93b82d7b1db524089540818fd49c4c1f255c5c96dff472810e924da3eed22257c2f5622cc8af8cc0c561dbd87b9ffac72ac5515b70f5", 0x36}, {&(0x7f00000002c0)="ac30c53b9a0045a8a20fd6a02388627479b56663e09b7aca795d93cca98b88256ec4ecf4adc07b28d19b5047fe55506a51eea81b9fff8a72451892fa33fd83a4f9e9e50903527f8e74773fcfb747e83a45b5a1a196aa4e31cf8b9991d0cebfc30ffd1847313c74ba6c6f913d5009a6089c496cba1295ade0be253cc1e0f9ee121b5df9cfed4194b6f918b111a57568b9923c22fc28e7ec365ff9", 0x9a}, {&(0x7f00000005c0)="27a0dbffea7ae764782c53ed4853b015b10fc873a18f61ecbb868a899de0e936fbd157538235943caac5e97e5d4b6316b603806129a6377add867045fe965dc5916b669cae6137c209b7dcc33efa2d193f3a654c2e21d710e87e98e36b915602869afe39c5650990fa26a202ff6eed094fd3753c56fa70cfc394c40d09012e0a739ffeb031b3150ca3ce09b9e5013db70b56f0489b6d1b487f66c6d6881af94393abfbec1a3dd0d43f259a217e3f4cf5d166b5bb69f95d31036c7fd62527bf33974a4d3d056055869a1115d9bfb28c", 0xcf}, {&(0x7f00000006c0)="f16e811eef6d962211cb10f898ec9e2580cc37e7133e5676bb606ae4f9610f45dd14c940a5493a3f8a8555ddc729be541fe0637b9085ab6b337baa4a96fe7b3ed559b3906578c2d93ed596a6a385aaa882616765951993663661f99b24210d", 0x5f}, {&(0x7f0000000740)="632456423163e9a8f8c5b059f0ef169bcf0b919b6f879cbcb47adac1916606bd1311a3885eff18e4358de5c66dd161256c5939849c558b20e4fe1e5834ca951963bc05018263d1f130ee19b6d274ddcdea8c9de006564cf28826b7531208e0803f0650622bc82a654fc5f5b0381ae93eec893f3da0425c290250c98604590dd6c596ddca9c69eaec7cee340dba6b12e580a4945d76ab0e8eadc54a47960cc403a36940f001658b736d8b5c178f10ceb55a76ccafe8bff3ac1c58f7ed3d09776f", 0xc0}, {&(0x7f0000000800)="12c9c8bbd3f36417f7e5b33fc7fad244f7c8c8b302c524950e12f99ad48204123bd3dd3abf143b1b65be3e4dd272fac1a1ec7c45ad67d3f7ac2bb244cbce22782bc674255c9dbb7b1d10204c4bba321198d6e85c0159096b25c2a98152becc337887a6e696f04e4902616c65f137fa751cb4b2ed6038e6a396d5354403b4ce45f40a27de2901ce", 0x87}, {&(0x7f00000008c0)="8b1e174ff8f8b0c76be12e3d9305cfb953d5067421077a66769c4b88e6ec49be78a58fe177c85919088b", 0x2a}, {&(0x7f0000000900)="de35eb9d661860c39928bc3825c8ba595350210392d33cce26d7f13f6be95b69f884e130a869e0f17457f13bb91790dcd0bee795bcf5b6b975e4bf0b1e7074aa42676e7f59692275be4b16af957cc7159b8b9938f692ad4527c63764e93a123f5ae85d9b6fa8c057044764479fd92984582d596036a035d78bac4ce9b6", 0x7d}, {&(0x7f0000000980)="4105c5afaccff1616857c4fe4856a600c095d2ac7f7cb3e260cfa181d48f40971c8b63ee34158c5f7b4bd8616db1df21332a79e18ae5ce4e51dfe3bb2190e0874dc54037c619819c7237f5f3878406db6b4d3f5897ab6949e7d85b4188d7c425ef424b174c813ca53b2913b013d9f4ededf5bfd0eea51205bc7601033350c563a87dafc536b8a184ff275931ecc1f646434c064cc2d3719947367d48590ac7d8b1", 0xa1}], 0x9, &(0x7f0000001540)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_retopts={{0x24, 0x0, 0x7, {[@generic={0x88, 0xc, "befe92f57dd17aae3e2d"}, @end, @end, @ra={0x94, 0x4}]}}}], 0x40}, 0x80)
ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000000)={r5})

7.359017278s ago: executing program 2 (id=4882):
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x340, 0x1, 0x0, 0x8, 0xfffffffffffffffe, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close(r2)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_int(r3, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x9)
syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, 0x0, 0x0, 0x5, 0x93, &(0x7f00000005c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x94)

6.359452144s ago: executing program 2 (id=4888):
socket$kcm(0x10, 0x2, 0x0)
socketpair(0x2, 0x1, 0x6, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x6a, 0x0, &(0x7f0000000240)="9c85345b6a2aaca2064ecc006161c2fe4f2d593eb38d62f18ea8b30c6595293e8114d046765097e77a677bf010ff2d810b121d38288b44cafe6cc8f47aa001151adf4ac0c3fbf488f018a5ef3790ebe6d1ae66837edc95af2184d0b587d43a9b0ca720a4c155e7cac791", 0x0, 0x100, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200})
bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x15, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41000, 0x52, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000200)=[{0x4, 0x5, 0x10, 0x4}, {0x0, 0x4, 0xc, 0xb}], 0x10, 0x800}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x8005, 0x0, &(0x7f0000000000)='\a\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="12000000030000000800000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f0000000180), &(0x7f0000000280)=r1}, 0x20)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000150081054e81f782db44b9040a1d3b020a000000040000a11800020000e9400084150e1208000f0100810401a80016ea1f0006400303000803600cfab94dcf5c0461c1d67f6e94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad9561b4a29c828f6a3aa2fcf72baa7ea67e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a753916647f616b762439deec51", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4000)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x104007, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
r6 = socket$kcm(0xa, 0x1, 0x0)
sendmsg$kcm(r6, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x20000001)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0xc, 0x0, 0x8}, {0x94, 0x0, 0x2, 0xffffffff}]})

5.835500632s ago: executing program 3 (id=4892):
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000100), 0x4}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = socket$kcm(0x15, 0x5, 0x0)
recvmsg(r1, &(0x7f0000000700)={&(0x7f0000000240)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, 0x0}, 0x12120)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000800000000000000000000001801000000646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, 0x0, &(0x7f0000000380)}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000000000008500000059"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$kcm(0x10, 0x3, 0x10)
socket$kcm(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000940)=[{0x0}, {&(0x7f0000000600)="fc9fda1de89f6b66d0c20b0156403ce90efb741413e1341f7b0aff88657b9bb4704b5e31c3f44f3f163edee87379f575aba5f0df7a67219b54946965e4015eed322329c5d75b1011e1b2c4914d4f6830b2a1fa5580e8f3368ee2453d6cc0731fe2b15afbf46dd49615892b58879ea36539331eeb4e2bc14cabe82fac5ff1c16ff8375592aaff29a5716ac84baf343f45d95f6b1c38e9cf345f95faa148e05132a8ee3b4e28d0ec", 0xa7}], 0x2}, 0x4040845)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0xa, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d080005000300e8fe55a1180015000600142603600e120900210000000401a80016000a00014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
socket$kcm(0xa, 0x2, 0x73)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000004680)={&(0x7f0000003600)=ANY=[@ANYBLOB="9feb010018000000000000001400000014000000090000000400000005000000000000000000005f615f5f2e881b00000000000000"], &(0x7f0000003680)=""/4096, 0x35, 0x1000, 0x1}, 0x28)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)
syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00')
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

5.775778802s ago: executing program 0 (id=4894):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000440)='syz0\x00', 0x200002, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)={@cgroup=r2, r0, 0x2a, 0x10, r0, @void, @value=r1}, 0x20) (async)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='&'], 0x10) (async)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x50028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x7}, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x6, 0xc07, 0xfffd, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x0, 0xffffffffffffffff, 0xc)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20029, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xf}, 0x806, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff003, 0x66, 0x7f, 0x1}, 0x48)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x40, r3}, 0x38) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
close(r4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x14, 0x0, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @lirc_mode2=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$SIOCSIFHWADDR(r4, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) (async)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r1, 0x26, 0x0, 0x0, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) (async)
r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async)
r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000b80)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r1}, 0x8) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18050000000000000000000000000000851000000600000018100000", @ANYRES32=r6, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000a60a000000000000180000002020782500000000002020207b0af8ff00000000bd510000000000000701000000feffffb702000008000000b70300000000000085000000190000009500000000000022"], &(0x7f0000000000)='GPL\x00', 0x5, 0xde, &(0x7f0000000340)=""/222, 0x40f00}, 0x94) (async)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async)
ioctl$PERF_EVENT_IOC_RESET(r5, 0x2403, 0x8000000000000000) (async)
mkdir(0x0, 0x0)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = openat$cgroup_procs(r7, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r8, &(0x7f00000005c0), 0x12) (async)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="0100000005000000fd09000084"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000e40), 0x800, r9}, 0x38)

5.26162512s ago: executing program 0 (id=4896):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x86bf2056334f3ae6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
r0 = socket$kcm(0xa, 0x1, 0x0)
r1 = socket$kcm(0x11, 0xa, 0x0)
sendmsg$kcm(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100), 0x48)
close(r2)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x8, &(0x7f0000000540)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000640)='syzkaller\x00', 0x7, 0xf9, &(0x7f0000000080)=""/249}, 0x24)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={0x0, 0x0}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0xfffffffd, @empty}, 0x80, 0x0}, 0x20000001)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf, 0xf, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x3, [], "7472e9"}]}}, &(0x7f00000003c0)=""/4096, 0x2a, 0x1000, 0x1}, 0x28)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x6}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x4, 0xffffffffffffffff, 0x8)
r3 = socket$kcm(0xa, 0x3, 0x3a)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f00000001c0)={r3})
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x39c}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe1b)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
sendmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)="a6", 0xffffff58}], 0x1}, 0x40001)

4.839242377s ago: executing program 2 (id=4897):
socket$kcm(0x29, 0x2, 0x0)
socket$kcm(0x11, 0x2, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={0xffffffffffffffff, 0x2000012, 0x0, 0x0, 0x0, 0x0, 0xe6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xd}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f00000033c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd00}, 0x48) (fail_nth: 3)

4.321975655s ago: executing program 3 (id=4900):
syz_clone(0x20000, &(0x7f0000000040)="85787c69904d617ef2964beee49f471570f90a9371cb5f5ab4a074e420cf", 0x1e, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100))
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e00000000eb15000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x4b}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x18000000000002a0, 0xf, 0xfffffffffffffe0d, &(0x7f0000000140)="7c003307000000000008000088471a", 0x0, 0xffedfff0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

4.181680857s ago: executing program 4 (id=4901):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x4e25, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, 0x0, 0x48}, 0x0)
r1 = socket$kcm(0x1e, 0x5, 0x0)
sendmsg$kcm(r1, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0)
sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="03b2", 0x2}], 0x1}, 0xa)
recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=""/288, 0x120}], 0x1, 0x0, 0x37}, 0x40011013)
r2 = socket$kcm(0x10, 0x2, 0x0)
r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x0, 0x0, 0xa0000000, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21bef5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a835701bea8240399c56ce8f58df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23d467689a6669e4300d5acf12e4d0b35abf91569f605b2f6df0d861"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x11, 0x2, 0x0)
socket$kcm(0x11, 0x200000000000002, 0x300)
sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021f080207000000040000a118000200e000000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000032000b07d25a806f090094f9105f9253", 0x14}], 0x1, 0x0, 0x0, 0x1000000}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e0007"], 0xfe33)
r6 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b0000000000000000000000ffff000000000000", @ANYRES32=r5, @ANYBLOB="0b0000000000000000000000000000000000000032b7e6a9e2d4ab69733d0088246d44230af0247e2c1ba16c573844c58da9e5c37426a50eda3dbf0c4d62114646613d3f4f64964c6d51bc0e4f60a337c15505bc187f7f7a5c4d6a2b01c398d46e1c5a78c3f74892054ca2187c91f5fed8bd06a299e318263a1253b9cdb98f2afa67ca4b2c3455", @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="02000000010000000400"/27], 0x50)
openat$cgroup_int(r6, &(0x7f0000000100)='memory.swap.max\x00', 0x2, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @link_local})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="d60a00000000000061110c00000000"], &(0x7f0000000000)='GPL\x00'}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x12, &(0x7f0000000300), 0x4)

3.738566313s ago: executing program 0 (id=4902):
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5a2119bf86ff29ce, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0x2, 0x3, 0x7}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r0 = socket$kcm(0x1e, 0x2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
recvmsg(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000440)=""/37, 0x25}], 0x1}, 0x10001)
r1 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
close(r1)
r2 = socket$kcm(0x1e, 0x1, 0x0)
sendmsg$sock(r2, &(0x7f0000000600)={&(0x7f0000000580)=@tipc=@id={0x1e, 0x3, 0x0, {0x4e24, 0x3}}, 0x80, 0x0}, 0x48811)
mkdir(0x0, 0x0)
socket$kcm(0x29, 0x7, 0x0)
socket$kcm(0xa, 0x1, 0x106)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
close(r3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0xa15}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50)
ioctl$SIOCSIFHWADDR(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"})
r4 = socket$kcm(0x23, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40))
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x21, 0x2, 0x2)

3.228906141s ago: executing program 4 (id=4904):
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r0 = socket$kcm(0x2, 0x3, 0x84)
sendmsg$inet(r0, 0x0, 0x8811)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {}, 0xf}}, 0x80, 0x0}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33)
r2 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r2, 0x29, 0x46, &(0x7f0000000040), 0xcf)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x4b}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f08000000000000005e140602c30000000e001a0010000000028000031294", 0x2e}], 0x1}, 0x8000)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4, <r5=>0xffffffffffffffff}, &(0x7f0000000040), 0x0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000015006b03000000d86e6c1d000a847ea622", 0x15}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f0, &(0x7f0000000080))
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$kcm(r2, &(0x7f0000001240)={&(0x7f0000000a00)=@generic={0xa, "8ab77fa26849ff263ef30c98b353011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0x0)

3.173532081s ago: executing program 3 (id=4905):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
openat$tun(0xffffffffffffff9c, 0x0, 0x1, 0x0)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10)
sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0x1a000}], 0x1}, 0x80d1) (fail_nth: 13)
close(r0)
syz_clone(0x22023500, 0x0, 0x20010, 0x0, 0x0, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)

3.141694652s ago: executing program 0 (id=4906):
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5a2119bf86ff29ce, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0x2, 0x3, 0x7}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r0 = socket$kcm(0x1e, 0x2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
recvmsg(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000440)=""/37, 0x25}], 0x1}, 0x10001)
r1 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
close(r1)
r2 = socket$kcm(0x1e, 0x1, 0x0)
sendmsg$sock(r2, &(0x7f0000000600)={&(0x7f0000000580)=@tipc=@id={0x1e, 0x3, 0x0, {0x4e24, 0x3}}, 0x80, 0x0}, 0x48811)
mkdir(0x0, 0x0)
socket$kcm(0x29, 0x7, 0x0)
socket$kcm(0xa, 0x1, 0x106)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
close(r3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0xa15}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50)
ioctl$SIOCSIFHWADDR(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"})
r4 = socket$kcm(0x23, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40))
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x21, 0x2, 0x2)

3.141300262s ago: executing program 1 (id=4907):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0x40086602, 0x110e22fff2)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21bef5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x329}, 0x94)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
write$cgroup_devices(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="1981"], 0xffdd)
perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0xbf, 0x0, 0x0, 0x8000008001, 0x2408c, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1, @perf_config_ext={0x2}, 0x10008, 0xca, 0x80000001, 0x9, 0x0, 0x1, 0xdffd, 0x0, 0xfffffffc, 0x0, 0x6}, 0x0, 0xb, 0xffffffffffffffff, 0xb)
ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x0)
close(r1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x27, 0x8, 0x0, &(0x7f0000000180)="0005000000000001", 0x0, 0x405, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)
recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000400)={0xf, <r6=>0x0}, 0x8)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000580081d34e81f782db44b904e417434509000300e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38)
r7 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="3640000049009125745c7388641f9c0e0a"], 0xfe33)
r8 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r8, 0x29, 0x38, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xffb2}}, &(0x7f0000000000)='GPL\x00'}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6}, 0xb5)
write$cgroup_netprio_ifpriomap(r4, &(0x7f0000000140)=ANY=[@ANYBLOB='vEth1_to_bond24\x00'], 0x10)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r9)
write$cgroup_subtree(r4, &(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYBLOB="3ee901"], 0x9a)

3.032760894s ago: executing program 4 (id=4908):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="e0", 0x1}], 0x1}, 0xc000)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
recvmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000cc0)=""/4085, 0xff5}, {&(0x7f0000001ec0)=""/4096, 0x1000}], 0x2}, 0x12000)

2.249769366s ago: executing program 2 (id=4909):
perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e00000000eb15000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB="b702000002000000bfa300000000000007030000007effff7a0af0ff3f00000079a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000050404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf27fb6d2c643db7e2d5fb4b0936cdf827fb43a431ca711fcd0cdfa146ed3d09a6175037958e27126e225b7937f02008b5e5a076d83923dd29c034055b67dafe6c8dc525d78c07f34e4d5b3185b310efcfa89147a09000000f110026e6d2ef831ab7ea0c34f17e3ad6eecbb6220fd8d4b470e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b0a341a2d7cbdb9cd38bdb2ca8e050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c214733a18c8b6619f28d9961b626c57c2691208173656d60a17e3c184b751c51160fbcbbdb5b1e7be6148ba532e60a0ac346dfebd31a08060000000200000000000000334d83239dd27080e71113610e10d858e8327ef0420f0000cac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e957bc73ddc4eabba08ab1e1ad828267d4eadd3964663e885340133f7130856f756436303767d2e24f29e5dad9796edb697a6ea0182babc190ae2ebf8aad34732181feb215139f15ea7e8cb0bae7c34d5ac5e7c805210600000000000000c3dec04b25dfc17975238345d4f71ab158c36657b7218baa0700f781c0a99bd50499ccc421a8223fe5308e4e65ee93e107000000f8ddeff70132a4d0175b989b8eccf707882042e716df9b57b290c661d4e85031086197bcc5cb0e221a0c34323c129102b6ff0100002e88a1940b3c02ed9c92d6f64b12000000000000000030711c599e1c72ffa11ed8be1a6830d7507005154c46bd3ca96318c570f0721fc7aa2a5836ba99fe1f86468694f22cdf550ef091a78098534f0d973059594119d06d5ea9a8d0857382ec6e2a071474cfc12346e47ad97f4ead7cf70a9d1cdac944779dc08a705414888700a30e2366c6a06b3367a389ca39059787790017b0689a173db9c24db65c1e00015c1d093dabec3d18fd0699ff3304000000323e9c7080397bc49d70c060d57bc88fbe3bbaa058b040362ab926150363fb099408885afc2bf9a46a076b7babfcddeff8c35030669ea69f5e4be1b8e0d6697e97186f9ae97d5670dba6623243643db9dec75070cd9ab0fda6b069ef6d2857ca3e4effcf7462710d133d541da86e0477e4a6cc999dc21c3ef408e69578e7c9f274d7fafc8d757d33dfa35aa2000034837d365e63845f3c1092f8dde8af3904ea7e764dde8725d2b4a0f873339c4cadecc13219ba7518aa4f7db34ead13484742067ab743c1d82a5687f2ed690000000000000000000000000000000000000000000099d4fa0000000000003f0ecdc7c82e72919c91d2039afe17e95edeeeba72205beff7771bcb293747b88486cacee403000000a2919a4bff2ed893f2c814679fa69fc7e0cf761f918725704a01c56009a9f748e5aaf30a10b98c409b1870c1f75e26b45264e3d3f8e0048e55ae289ce2ad779ce71d4dc30cbb2cc4289d2f884d66cddc76eb7f601110ff39053c262279f4ef00fbdb8c328615a9ec84f27a9f3938ae736138b8c1ec220c1540bf3d162dc1c27fa30f0dc60b9f257db5d1c7ed2e152cb2cf06f8edb30177fead735a952ffce676a93110904d5ee2abdab2ef3ff84c4d61443f73552195c7ccfbf9f03c44432eaa3b7501d4239354da8de21eada75d3a3afb2c76ff0700007981699b6c0f0e946766f57544ff52cef0dd811bec4e3c0a30f2d7d19d26d2503a3ea376721b8eded3bc475958dd498ee2b2d6146e33fc0de1dc2e0516ac565ddb1d4ae89e6712824a85eb9ee0a3b68c9e209756623adf685dd715d68ed11e4b4d5502f5924948f8f98c615cac3666c58f785c3f758be352a71871d5c081197d37980e4f4e26b5476f9e0407ff7098b7174bef66fa03a99b5c0c20b378065fac4ef9ac2d0d804b9400000060e5d3f1749f6aecf69ba83a71caa9bdddc679f1b826f54b6563a4be1fd82b73c8c2bc65f63982b951fb058fd3c7b6341c4580376b6c16bd96d2da66059de81abfa1acc9f889555eeeb88b6ae5882ad341032c73f1285e21fff5a1d138e061b1dc7bbda199b5fab8e0719e9cd69b4fdc08000be6a3a73afdf328132e1d4f21065716be0c53a23940d07188b015fa341dbc92231c8b5e5717eac184f46c9f61b69f55cd9b31bcf821052429a1f250e8b734be0605a15f25923d599544b319319ff0a32621019347df460a098119a6f47eb1bac4794680f3037f250e96f61cb20d46d7a009cbc6ec74c19a93cc7c7138b28c95270116181fd5f553573c48104d2ad0e10d3663488e664401413f22f0d76d2162635365258af61ae1f46f4a7862f302d91e3f7c2781f602220522e84602a939a8d5e4137ae31ccd397404dc72e06715a6503d4d865182803ee6725da7293b23daeebefd6fce7411c9624a7e8d5ba5a13e1c32adc4f3274497c6882a72475e4280a4d9a47c003c6ed3071330c58145be813a10788a720a6b5a498ca2b42496c479a0a71e2f6f9bad8c84bc6be20281bde0b348cf2c60530000000000000004b023e4954c9eb6cd70627f5c03edd4f5ce48b8a874c852064dd0efafc3df20ec8faf3d194db76127f88f1b4fa1b71ab964fdd2474471da76373e65e9a8bf844bdfdd348bc7d00c4c7e7afe8a1f8cde79b7a6c5aafe954b8b310900000c14b37c23f9f614576b689436fef2f27f8b1e756e00262e22bca49c43fd73e7e99b2fa44a8c1d8e80311895f0b99c2cf2735ad6c5fabf082e0df0f8ba7e24272165f2f5b28230c02b53d44b57e96bbb96b5e1f165c87e7ad68a3600b3d357fa9a7d53c281d88ebb175a4dbb82130e6870982947913110f091d21760d985afd3163f2e6880682432f9b3b97d57a9f980edfa1116a3d04d58872a07d6a7e12db6e3080000000000003e71943fe2c1c65a3cf36b955c56b55bfd3ecf0af694c71a03f27b6c15b1ba971de1cb9c7e6a000000000000001478b2a78f9abfefce4448303ef54c71199317413f98dca8ff3d0bda50f6c0af58dbd6c031b1a5a7512c5896514adfa17d31429c68db50a93d88199defd3b462426ff9293a28a544a6a9e2279b55daa1b3c6b14c4ec6d164e902ce4913843d65d841973468729ea12bf6d3499036dbb66718b3497855c3baa6cc07c0fa388ec9df0617c1a28ef5a595ee267a76175b8a057e6efaf4fefe46def451f2858fe71a53e77b1a44e98843bb3a40102da3703dfb9f61bdcea2fb810b32d52e2157a150a63ea6135d1cf6f864c2e68884d7245bc5f61dc5a114d10ffb22e76678bbfc1e3865d17d128306d1b81884a934cb00000000000000000098a4526e6485987dbc63bff7590eb388afaba43d811996333eef7e9f472bee293f0c40d434cbd52325296e22802475edb5c590ad208bac683a8b2d4c9d2d57ff846ae8c422e0b28546671f11d8157bb762c91f3fbcca8e21589c92446ae65d408c0637ffcc2d44d715ce003dd1e12b085e186d069a55c2e96efbe5024d61a56a36d988c0f51a973a1471bab551bd6beae7dbf58530136c238e545b28211a92000000001501ae7d7cc75007e8ff56e6d8d72af0fcd540a9d4e293690c5e697b3a1480e46df5371bca1cfb28a57c1b3c956ec81397e81fbf870a67385fea04220423f52ad8178b9fd04bdc7e5fee4bd52db9966addf4877204047be633792118efdb6b88023e80da74fdf723c7f000000009f13c7e851dfc91ec01219af568825de0cedd55a92eafe9edd98a8529d64cbaa0b9f89f391b2db7369e934085e486b946a4558c68e195af1a6e6e878609f9ed7406dc9c93a5d5cc76e037d66abe4fe54f18b4c969814c7f2094ebe736ef0f0cd65b90942f2e8de44f6fd69a94ca27bb6d92e2282d4a0b0ee3abe30d877579aed9b54f460247890aed19ef12e45097631548d8639fb2b6eb9b41c7e89ee7223cdeae1b2d02cf664df99e4a661feecb63953a4d86f3060372861ac184824b7a4fd1c605128f1307f2bba91b9fbfe2884639073c1d51e42feeb5312b23b8e1e468aa31ea8e7597f5eb6ad1897a04afc8369ebec808165218b625a64a237ed01636880f70f0ed"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x4b}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x18000000000002a0, 0xf, 0xfffffffffffffe0d, &(0x7f0000000140)="7c003307000000000008000088471a", 0x0, 0xffedfff0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.220678876s ago: executing program 0 (id=4910):
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000100), 0x4}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = socket$kcm(0x15, 0x5, 0x0)
recvmsg(r1, &(0x7f0000000700)={&(0x7f0000000240)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, 0x0}, 0x12120)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000800000000000000000000001801000000646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, 0x0, &(0x7f0000000380)}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000000000008500000059"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$kcm(0x10, 0x3, 0x10)
socket$kcm(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000940)=[{0x0}, {&(0x7f0000000600)="fc9fda1de89f6b66d0c20b0156403ce90efb741413e1341f7b0aff88657b9bb4704b5e31c3f44f3f163edee87379f575aba5f0df7a67219b54946965e4015eed322329c5d75b1011e1b2c4914d4f6830b2a1fa5580e8f3368ee2453d6cc0731fe2b15afbf46dd49615892b58879ea36539331eeb4e2bc14cabe82fac5ff1c16ff8375592aaff29a5716ac84baf343f45d95f6b1c38e9cf345f95faa148e05132a8ee3b4e28d0ec", 0xa7}], 0x2}, 0x4040845)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0xa, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d080005000300e8fe55a1180015000600142603600e120900210000000401a80016000a00014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
socket$kcm(0xa, 0x2, 0x73)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000004680)={&(0x7f0000003600)=ANY=[@ANYBLOB="9feb010018000000000000001400000014000000090000000400000005000000000000000000005f615f5f2e881b00000000000000"], &(0x7f0000003680)=""/4096, 0x35, 0x1000, 0x1}, 0x28)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)
syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00')
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.200860267s ago: executing program 1 (id=4911):
perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x0, 0xd299, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x100882, 0x7ff, 0x6, 0x1d, 0xb, 0x2, 0x7ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
syz_clone(0x9200, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0)

1.98178751s ago: executing program 1 (id=4912):
r0 = socket$kcm(0x2, 0x1, 0x84)
r1 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r1, 0x84, 0x83, &(0x7f0000000000), 0x8)
setsockopt$sock_attach_bpf(r0, 0x84, 0x7c, &(0x7f0000000000), 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x3, &(0x7f0000000040)=@raw=[@map_idx_val={0x18, 0x1}, @generic={0x0, 0x5, 0x5, 0x6, 0x100008}], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12}, 0x94)

1.943088501s ago: executing program 4 (id=4913):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x86bf2056334f3ae6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
r0 = socket$kcm(0xa, 0x1, 0x0)
r1 = socket$kcm(0x11, 0xa, 0x0)
sendmsg$kcm(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100), 0x48)
close(r2)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x8, &(0x7f0000000540)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000640)='syzkaller\x00', 0x7, 0xf9, &(0x7f0000000080)=""/249}, 0x24)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={0x0, 0x0}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0xfffffffd, @empty}, 0x80, 0x0}, 0x20000001)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf, 0xf, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x3, [], "7472e9"}]}}, &(0x7f00000003c0)=""/4096, 0x2a, 0x1000, 0x1}, 0x28)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x6}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x4, 0xffffffffffffffff, 0x8)
r3 = socket$kcm(0xa, 0x3, 0x3a)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f00000001c0)={r3})
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x39c}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe1b)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
sendmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)="a6", 0xffffff58}], 0x1}, 0x40001)

1.858124892s ago: executing program 1 (id=4914):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x4e25, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, 0x0, 0x48}, 0x0)
r1 = socket$kcm(0x1e, 0x5, 0x0)
sendmsg$kcm(r1, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0)
sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="03b2", 0x2}], 0x1}, 0xa)
recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=""/288, 0x120}], 0x1, 0x0, 0x37}, 0x40011013)
r2 = socket$kcm(0x10, 0x2, 0x0)
r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x0, 0x0, 0xa0000000, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x11, 0x2, 0x0)
socket$kcm(0x11, 0x200000000000002, 0x300)
sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021f080207000000040000a118000200e000000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000032000b07d25a806f090094f9105f9253", 0x14}], 0x1, 0x0, 0x0, 0x1000000}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e0007"], 0xfe33)
r6 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b0000000000000000000000ffff000000000000", @ANYRES32=r5, @ANYBLOB="0b0000000000000000000000000000000000000032b7e6a9e2d4ab69733d0088246d44230af0247e2c1ba16c573844c58da9e5c37426a50eda3dbf0c4d62114646613d3f4f64964c6d51bc0e4f60a337c15505bc187f7f7a5c4d6a2b01c398d46e1c5a78c3f74892054ca2187c91f5fed8bd06a299e318263a1253b9cdb98f2afa67ca4b2c3455", @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="02000000010000000400"/27], 0x50)
openat$cgroup_int(r6, &(0x7f0000000100)='memory.swap.max\x00', 0x2, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @link_local})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="d60a00000000000061110c00000000"], &(0x7f0000000000)='GPL\x00'}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x12, &(0x7f0000000300), 0x4)

1.234656911s ago: executing program 2 (id=4915):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340))
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open$cgroup(&(0x7f0000000240)={0x3, 0x80, 0x4, 0x3, 0xfb, 0x2, 0x0, 0x6, 0x5000, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x5d, 0x2}, 0x104107, 0x3ff, 0x1e5, 0x6, 0x8, 0x1, 0x4, 0x0, 0x200, 0x0, 0x9}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0xa, 0x8, 0xfc, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380)}, 0x0, 0x4000008, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9}, 0x0, 0xffffffffffffffff, r1, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454d9, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, 0x0)
r3 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r3, 0x6, 0x17, &(0x7f0000000200), 0x4)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x16, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18040000000000000000000000000000180000002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f00000005c0)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r4, 0x18000000000002a0, 0xd, 0x0, &(0x7f0000000840)="b9ff03316845268cb89614f008", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r5 = syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_procs(r6, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r7, &(0x7f00000005c0)=r5, 0x12)
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x3, 0xb, 0xc, 0x0, 0x2, 0x21004, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000040), 0xa}, 0x1040, 0x7, 0x1, 0x2, 0x6, 0x5, 0x4, 0x0, 0x4, 0x0, 0x8}, r5, 0x9, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x34}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x90)
socket$kcm(0xf, 0x3, 0x2)
r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r9, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r10 = syz_clone(0x20010100, &(0x7f0000000500)="c40a20d40596c9486615de13f3039d866606dc34c035fc60fe326d94a5bea3be48ce388e3c1091c7cf802f871eb73461610c7fb2762d781f11ebe92e4a2028b7a70584c2fc97619291e07b29be9919cd94b5a971ad920d8f956ae234f5d871fd182950c03ebcb04df4eeeea496a9d5e38a1fa9fa6b67b5f930cb33a7de3e6e4af81daf86823fac440ad28aeb9752347d7493f00b53b92d", 0x97, &(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000a00)="4bf641de6470190e27fe910d5210fecf7ce2c00869246682bc487b318b26c2fea58277e2a150b53902c73f3f31485abfd8fd59ddd2b92c973c142cd651a9c173a5729d61ec2985ae021d006d112791475be6f394491c047c0f8bdf5e4df06998dc99a006b37967bfebdc80f496c02a7dece953c52e19a037c727e3b21d4b73c9bc6e5ae9913ea20e98195811f649350f02036c875b8b227d3c77eaedd93e8a66601736aacecbc5e5314950ff645cdbe3b1780f29bc98ff0be26f38802d")
perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0xe8, 0x5, 0x4, 0x6, 0x0, 0x7, 0x2, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4, 0x2}, 0x200, 0x0, 0x0, 0x1, 0x7, 0x5d8, 0x8, 0x0, 0x4, 0x0, 0x6da077b6}, r10, 0x0, r1, 0x8)

1.152768443s ago: executing program 1 (id=4916):
syz_clone(0x20000, &(0x7f0000000040)="85787c69904d617ef2964beee49f471570f90a9371cb5f5ab4a074e420cf", 0x1e, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100))
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e00000000eb15000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB="b702000002000000bfa300000000000007030000007effff7a0af0ff3f00000079a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000050404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf27fb6d2c643db7e2d5fb4b0936cdf827fb43a431ca711fcd0cdfa146ed3d09a6175037958e27126e225b7937f02008b5e5a076d83923dd29c034055b67dafe6c8dc525d78c07f34e4d5b3185b310efcfa89147a09000000f110026e6d2ef831ab7ea0c34f17e3ad6eecbb6220fd8d4b470e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b0a341a2d7cbdb9cd38bdb2ca8e050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c214733a18c8b6619f28d9961b626c57c2691208173656d60a17e3c184b751c51160fbcbbdb5b1e7be6148ba532e60a0ac346dfebd31a08060000000200000000000000334d83239dd27080e71113610e10d858e8327ef0420f0000cac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e957bc73ddc4eabba08ab1e1ad828267d4eadd3964663e885340133f7130856f756436303767d2e24f29e5dad9796edb697a6ea0182babc190ae2ebf8aad34732181feb215139f15ea7e8cb0bae7c34d5ac5e7c805210600000000000000c3dec04b25dfc17975238345d4f71ab158c36657b7218baa0700f781c0a99bd50499ccc421a8223fe5308e4e65ee93e107000000f8ddeff70132a4d0175b989b8eccf707882042e716df9b57b290c661d4e85031086197bcc5cb0e221a0c34323c129102b6ff0100002e88a1940b3c02ed9c92d6f64b12000000000000000030711c599e1c72ffa11ed8be1a6830d7507005154c46bd3ca96318c570f0721fc7aa2a5836ba99fe1f86468694f22cdf550ef091a78098534f0d973059594119d06d5ea9a8d0857382ec6e2a071474cfc12346e47ad97f4ead7cf70a9d1cdac944779dc08a705414888700a30e2366c6a06b3367a389ca39059787790017b0689a173db9c24db65c1e00015c1d093dabec3d18fd0699ff3304000000323e9c7080397bc49d70c060d57bc88fbe3bbaa058b040362ab926150363fb099408885afc2bf9a46a076b7babfcddeff8c35030669ea69f5e4be1b8e0d6697e97186f9ae97d5670dba6623243643db9dec75070cd9ab0fda6b069ef6d2857ca3e4effcf7462710d133d541da86e0477e4a6cc999dc21c3ef408e69578e7c9f274d7fafc8d757d33dfa35aa2000034837d365e63845f3c1092f8dde8af3904ea7e764dde8725d2b4a0f873339c4cadecc13219ba7518aa4f7db34ead13484742067ab743c1d82a5687f2ed690000000000000000000000000000000000000000000099d4fa0000000000003f0ecdc7c82e72919c91d2039afe17e95edeeeba72205beff7771bcb293747b88486cacee403000000a2919a4bff2ed893f2c814679fa69fc7e0cf761f918725704a01c56009a9f748e5aaf30a10b98c409b1870c1f75e26b45264e3d3f8e0048e55ae289ce2ad779ce71d4dc30cbb2cc4289d2f884d66cddc76eb7f601110ff39053c262279f4ef00fbdb8c328615a9ec84f27a9f3938ae736138b8c1ec220c1540bf3d162dc1c27fa30f0dc60b9f257db5d1c7ed2e152cb2cf06f8edb30177fead735a952ffce676a93110904d5ee2abdab2ef3ff84c4d61443f73552195c7ccfbf9f03c44432eaa3b7501d4239354da8de21eada75d3a3afb2c76ff0700007981699b6c0f0e946766f57544ff52cef0dd811bec4e3c0a30f2d7d19d26d2503a3ea376721b8eded3bc475958dd498ee2b2d6146e33fc0de1dc2e0516ac565ddb1d4ae89e6712824a85eb9ee0a3b68c9e209756623adf685dd715d68ed11e4b4d5502f5924948f8f98c615cac3666c58f785c3f758be352a71871d5c081197d37980e4f4e26b5476f9e0407ff7098b7174bef66fa03a99b5c0c20b378065fac4ef9ac2d0d804b9400000060e5d3f1749f6aecf69ba83a71caa9bdddc679f1b826f54b6563a4be1fd82b73c8c2bc65f63982b951fb058fd3c7b6341c4580376b6c16bd96d2da66059de81abfa1acc9f889555eeeb88b6ae5882ad341032c73f1285e21fff5a1d138e061b1dc7bbda199b5fab8e0719e9cd69b4fdc08000be6a3a73afdf328132e1d4f21065716be0c53a23940d07188b015fa341dbc92231c8b5e5717eac184f46c9f61b69f55cd9b31bcf821052429a1f250e8b734be0605a15f25923d599544b319319ff0a32621019347df460a098119a6f47eb1bac4794680f3037f250e96f61cb20d46d7a009cbc6ec74c19a93cc7c7138b28c95270116181fd5f553573c48104d2ad0e10d3663488e664401413f22f0d76d2162635365258af61ae1f46f4a7862f302d91e3f7c2781f602220522e84602a939a8d5e4137ae31ccd397404dc72e06715a6503d4d865182803ee6725da7293b23daeebefd6fce7411c9624a7e8d5ba5a13e1c32adc4f3274497c6882a72475e4280a4d9a47c003c6ed3071330c58145be813a10788a720a6b5a498ca2b42496c479a0a71e2f6f9bad8c84bc6be20281bde0b348cf2c60530000000000000004b023e4954c9eb6cd70627f5c03edd4f5ce48b8a874c852064dd0efafc3df20ec8faf3d194db76127f88f1b4fa1b71ab964fdd2474471da76373e65e9a8bf844bdfdd348bc7d00c4c7e7afe8a1f8cde79b7a6c5aafe954b8b310900000c14b37c23f9f614576b689436fef2f27f8b1e756e00262e22bca49c43fd73e7e99b2fa44a8c1d8e80311895f0b99c2cf2735ad6c5fabf082e0df0f8ba7e24272165f2f5b28230c02b53d44b57e96bbb96b5e1f165c87e7ad68a3600b3d357fa9a7d53c281d88ebb175a4dbb82130e6870982947913110f091d21760d985afd3163f2e6880682432f9b3b97d57a9f980edfa1116a3d04d58872a07d6a7e12db6e3080000000000003e71943fe2c1c65a3cf36b955c56b55bfd3ecf0af694c71a03f27b6c15b1ba971de1cb9c7e6a000000000000001478b2a78f9abfefce4448303ef54c71199317413f98dca8ff3d0bda50f6c0af58dbd6c031b1a5a7512c5896514adfa17d31429c68db50a93d88199defd3b462426ff9293a28a544a6a9e2279b55daa1b3c6b14c4ec6d164e902ce4913843d65d841973468729ea12bf6d3499036dbb66718b3497855c3baa6cc07c0fa388ec9df0617c1a28ef5a595ee267a76175b8a057e6efaf4fefe46def451f2858fe71a53e77b1a44e98843bb3a40102da3703dfb9f61bdcea2fb810b32d52e2157a150a63ea6135d1cf6f864c2e68884d7245bc5f61dc5a114d10ffb22e76678bbfc1e3865d17d128306d1b81884a934cb00000000000000000098a4526e6485987dbc63bff7590eb388afaba43d811996333eef7e9f472bee293f0c40d434cbd52325296e22802475edb5c590ad208bac683a8b2d4c9d2d57ff846ae8c422e0b28546671f11d8157bb762c91f3fbcca8e21589c92446ae65d408c0637ffcc2d44d715ce003dd1e12b085e186d069a55c2e96efbe5024d61a56a36d988c0f51a973a1471bab551bd6beae7dbf58530136c238e545b28211a92000000001501ae7d7cc75007e8ff56e6d8d72af0fcd540a9d4e293690c5e697b3a1480e46df5371bca1cfb28a57c1b3c956ec81397e81fbf870a67385fea04220423f52ad8178b9fd04bdc7e5fee4bd52db9966addf4877204047be633792118efdb6b88023e80da74fdf723c7f000000009f13c7e851dfc91ec01219af568825de0cedd55a92eafe9edd98a8529d64cbaa0b9f89f391b2db7369e934085e486b946a4558c68e195af1a6e6e878609f9ed7406dc9c93a5d5cc76e037d66abe4fe54f18b4c969814c7f2094ebe736ef0f0cd65b90942f2e8de44f6fd69a94ca27bb6d92e2282d4a0b0ee3abe30d877579aed9b54f460247890aed19ef12e45097631548d8639fb2b6eb9b41c7e89ee7223cdeae1b2d02cf664df99e4a661feecb63953a4d86f3060372861ac184824b7a4fd1c605128f1307f2bba91b9fbfe2884639073c1d51e42feeb5312b23b8e1e468aa31ea8e7597f5eb6ad1897a04afc8369ebec808165218b625a64a237ed01636880f70f0ed"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x4b}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x18000000000002a0, 0xf, 0xfffffffffffffe0d, &(0x7f0000000140)="7c003307000000000008000088471a", 0x0, 0xffedfff0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.137707412s ago: executing program 0 (id=4917):
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5a2119bf86ff29ce, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0x2, 0x3, 0x7}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r0 = socket$kcm(0x1e, 0x2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
recvmsg(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000440)=""/37, 0x25}], 0x1}, 0x10001)
r1 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
close(r1)
r2 = socket$kcm(0x1e, 0x1, 0x0)
sendmsg$sock(r2, &(0x7f0000000600)={&(0x7f0000000580)=@tipc=@id={0x1e, 0x3, 0x0, {0x4e24, 0x3}}, 0x80, 0x0}, 0x48811)
mkdir(0x0, 0x0)
socket$kcm(0x29, 0x7, 0x0)
socket$kcm(0xa, 0x1, 0x106)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
close(r3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0xa15}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50)
ioctl$SIOCSIFHWADDR(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"})
r4 = socket$kcm(0x23, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"})

1.049645964s ago: executing program 3 (id=4918):
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r0 = socket$kcm(0x2, 0x3, 0x84)
sendmsg$inet(r0, 0x0, 0x8811)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {}, 0xf}}, 0x80, 0x0}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33)
r2 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r2, 0x29, 0x46, &(0x7f0000000040), 0xcf)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x4b}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f08000000000000005e140602c30000000e001a0010000000028000031294", 0x2e}], 0x1}, 0x8000)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000015006b03000000d86e6c1d000a847ea622", 0x15}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f0, &(0x7f0000000080))
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$kcm(r2, &(0x7f0000001240)={&(0x7f0000000a00)=@generic={0xa, "8ab77fa26849ff263ef30c98b353011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0x0)

792.650578ms ago: executing program 4 (id=4919):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x480, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa0000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x18}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

633.191431ms ago: executing program 4 (id=4920):
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5a2119bf86ff29ce, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0x2, 0x3, 0x7}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r0 = socket$kcm(0x1e, 0x2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
recvmsg(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000440)=""/37, 0x25}], 0x1}, 0x10001)
r1 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
close(r1)
r2 = socket$kcm(0x1e, 0x1, 0x0)
sendmsg$sock(r2, &(0x7f0000000600)={&(0x7f0000000580)=@tipc=@id={0x1e, 0x3, 0x0, {0x4e24, 0x3}}, 0x80, 0x0}, 0x48811)
mkdir(0x0, 0x0)
socket$kcm(0x29, 0x7, 0x0)
socket$kcm(0xa, 0x1, 0x106)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
close(r3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0xa15}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50)
ioctl$SIOCSIFHWADDR(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"})
r4 = socket$kcm(0x23, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40))
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x21, 0x2, 0x2)

0s ago: executing program 1 (id=4921):
socket$kcm(0x10, 0x2, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002280), 0x0, 0x0, 0x0, 0x2663}, 0x8044000)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair(0x1, 0x1, 0x1, &(0x7f0000000000))
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000100b000085000000a000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xf, 0x0, &(0x7f0000000040)="c1188e19b9ff996241771990359e74", 0x0, 0xa3d8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
socket$kcm(0xa, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x80000000}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r2, 0x84, 0x23, &(0x7f0000000000)=r5, 0x8)
getpid()
r6 = socket$kcm(0x10, 0x400000002, 0x0)
r7 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380), 0x2, 0x0)
write$cgroup_subtree(r7, &(0x7f00000003c0)=ANY=[@ANYBLOB='-devices -memory +cpu -net_Prio '], 0x20)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{0x0}, {&(0x7f00000006c0)="ef96ae5a35f5ad40d868ab88a57b9fd05bda6ff4ee8301094429389130a3900fd587af8d04572440c030b5c1ba9d3ac818a869d13b992f65b42923e39463", 0x3e}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0)
write$cgroup_subtree(r6, &(0x7f0000001a00)=ANY=[@ANYBLOB="13100000520091ef"], 0xfe33)
recvmsg$kcm(r6, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001a40)=""/4095, 0xfff}], 0x1}, 0x0)
recvmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x50be}, 0x0)
r8 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1, 0x0, 0x0, 0x5000000}, 0x0)
recvmsg$kcm(r8, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2000)
r9 = socket$kcm(0x11, 0x2, 0x0)
sendmsg$kcm(r9, &(0x7f0000000300)={&(0x7f0000000000)=@phonet={0x23, 0x0, 0x4, 0x4}, 0x80, 0x0}, 0x20000080)

kernel console output (not intermixed with test programs):

'syz.4.3837': attribute type 21 has an invalid length.
[  721.317272][T16271] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.3841'.
[  721.914907][T16292] netlink: 'syz.4.3850': attribute type 3 has an invalid length.
[  721.960562][T16292] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  721.990870][T16292] batman_adv: batadv0: Removing interface: batadv_slave_0
[  722.044200][T16292] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  722.055294][T16292] batman_adv: batadv0: Removing interface: batadv_slave_1
[  722.091190][T16292] batman_adv: batadv0: Interface deactivated: vlan1
[  722.101499][T16292] batman_adv: batadv0: Removing interface: vlan1
[  722.244893][T16298] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3852'.
[  722.757442][T10711] tipc: Subscription rejected, illegal request
[  723.039229][T16319] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.3860'.
[  723.438140][T16331] netlink: 'syz.4.3865': attribute type 10 has an invalid length.
[  723.504366][T16331] bridge0: port 2(bridge_slave_1) entered disabled state
[  723.511922][T16331] bridge0: port 1(bridge_slave_0) entered disabled state
[  723.531987][T16331] bridge0: port 2(bridge_slave_1) entered blocking state
[  723.539500][T16331] bridge0: port 2(bridge_slave_1) entered forwarding state
[  723.548219][T16331] bridge0: port 1(bridge_slave_0) entered blocking state
[  723.555432][T16331] bridge0: port 1(bridge_slave_0) entered forwarding state
[  723.605729][T16336] netlink: 'syz.1.3866': attribute type 29 has an invalid length.
[  723.608042][T16331] team0: Port device bridge0 added
[  723.674948][T16336] netlink: 'syz.1.3866': attribute type 29 has an invalid length.
[  724.009956][T16346] FAULT_INJECTION: forcing a failure.
[  724.009956][T16346] name failslab, interval 1, probability 0, space 0, times 0
[  724.031458][T16349] netlink: 'syz.0.3869': attribute type 10 has an invalid length.
[  724.031533][T16349] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.3869'.
[  724.223740][T16346] CPU: 1 PID: 16346 Comm: syz.2.3868 Not tainted syzkaller #0
[  724.231273][T16346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  724.241363][T16346] Call Trace:
[  724.244695][T16346]  <TASK>
[  724.247657][T16346]  dump_stack_lvl+0x188/0x24e
[  724.252389][T16346]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  724.258614][T16346]  ? show_regs_print_info+0x12/0x12
[  724.263850][T16346]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  724.270062][T16346]  ? audit_tree_destroy_watch+0x20/0x20
[  724.275648][T16346]  should_fail_ex+0x390/0x4c0
[  724.280373][T16346]  should_failslab+0x5/0x20
[  724.284909][T16346]  slab_pre_alloc_hook+0x59/0x300
[  724.289967][T16346]  ? sctp_add_bind_addr+0x89/0x350
[  724.295136][T16346]  __kmem_cache_alloc_node+0x4f/0x270
[  724.300562][T16346]  ? sctp_add_bind_addr+0x89/0x350
[  724.305712][T16346]  kmalloc_trace+0x26/0xe0
[  724.310172][T16346]  sctp_add_bind_addr+0x89/0x350
[  724.315199][T16346]  sctp_copy_local_addr_list+0x317/0x4d0
[  724.320873][T16346]  ? sctp_copy_local_addr_list+0xa0/0x4d0
[  724.326639][T16346]  ? sctp_do_8_2_transport_strike+0x900/0x900
[  724.332759][T16346]  ? sctp_v6_is_any+0x60/0x70
[  724.337643][T16346]  ? sctp_copy_one_addr+0x93/0x660
[  724.342779][T16346]  sctp_bind_addr_copy+0xaf/0x3c0
[  724.347819][T16346]  ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190
[  724.354166][T16346]  sctp_connect_new_asoc+0x2f5/0x6a0
[  724.359468][T16346]  ? __sctp_connect+0xd80/0xd80
[  724.364335][T16346]  ? __local_bh_enable_ip+0x136/0x1c0
[  724.369743][T16346]  ? bpf_lsm_sctp_bind_connect+0x5/0x10
[  724.375306][T16346]  ? security_sctp_bind_connect+0x85/0xb0
[  724.381054][T16346]  sctp_sendmsg+0x1686/0x2940
[  724.385765][T16346]  ? sctp_getsockopt+0x8a0/0x8a0
[  724.390758][T16346]  ? __might_fault+0xa6/0x120
[  724.395468][T16346]  ? aa_af_perm+0x340/0x340
[  724.399992][T16346]  ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0
[  724.406446][T16346]  ? inet_sendmsg+0xca/0x2a0
[  724.411071][T16346]  ? inet_send_prepare+0x250/0x250
[  724.416198][T16346]  ____sys_sendmsg+0x5ed/0x9a0
[  724.420980][T16346]  ? __sys_sendmsg_sock+0x30/0x30
[  724.426045][T16346]  ? __import_iovec+0x306/0x510
[  724.430914][T16346]  ? import_iovec+0x6f/0xa0
[  724.435441][T16346]  ___sys_sendmsg+0x2a2/0x360
[  724.440151][T16346]  ? __sys_sendmsg+0x2a0/0x2a0
[  724.444940][T16346]  ? trace_call_bpf+0xbf/0x6b0
[  724.449755][T16346]  __se_sys_sendmsg+0x1c3/0x2b0
[  724.454618][T16346]  ? perf_trace_preemptirq_template+0x268/0x320
[  724.460874][T16346]  ? __x64_sys_sendmsg+0x80/0x80
[  724.465836][T16346]  ? lockdep_hardirqs_on+0x94/0x140
[  724.471056][T16346]  do_syscall_64+0x4c/0xa0
[  724.475510][T16346]  ? clear_bhb_loop+0x60/0xb0
[  724.480205][T16346]  ? clear_bhb_loop+0x60/0xb0
[  724.484905][T16346]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  724.490823][T16346] RIP: 0033:0x7fd54af9ce59
[  724.495261][T16346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  724.514893][T16346] RSP: 002b:00007fd54bf30028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  724.523332][T16346] RAX: ffffffffffffffda RBX: 00007fd54b215fa0 RCX: 00007fd54af9ce59
[  724.531318][T16346] RDX: 00000000040080c0 RSI: 00002000000003c0 RDI: 0000000000000005
[  724.539316][T16346] RBP: 00007fd54bf30090 R08: 0000000000000000 R09: 0000000000000000
[  724.547315][T16346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  724.555295][T16346] R13: 00007fd54b216038 R14: 00007fd54b215fa0 R15: 00007ffe2cef5658
[  724.563291][T16346]  </TASK>
[  725.126729][T16372] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3874'.
[  725.170985][T16371] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.3878'.
[  725.340518][T16382] netlink: 'syz.4.3881': attribute type 29 has an invalid length.
[  725.379301][T16382] netlink: 'syz.4.3881': attribute type 29 has an invalid length.
[  725.861512][T16389] device syzkaller0 entered promiscuous mode
[  727.081715][T16413] netlink: 'syz.1.3893': attribute type 2 has an invalid length.
[  727.093294][T16413] netlink: 'syz.1.3893': attribute type 1 has an invalid length.
[  727.856064][T16418] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.3894'.
[  728.336610][T16426] netlink: 'syz.0.3895': attribute type 29 has an invalid length.
[  728.673334][ T4287] Bluetooth: hci0: command 0x0406 tx timeout
[  729.638933][T16426] netlink: 'syz.0.3895': attribute type 29 has an invalid length.
[  729.937531][T16435] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3899'.
[  730.937004][T16460] netlink: 'syz.4.3907': attribute type 3 has an invalid length.
[  730.953524][T16460] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3907'.
[  731.320379][T16465] GPL: port 1(syz_tun) entered blocking state
[  731.349328][T16465] GPL: port 1(syz_tun) entered disabled state
[  731.360616][T16465] device syz_tun entered promiscuous mode
[  731.764733][T16482] netlink: 'syz.1.3915': attribute type 10 has an invalid length.
[  733.702491][T16523] device bridge_slave_1 left promiscuous mode
[  733.721483][T16523] bridge0: port 2(bridge_slave_1) entered disabled state
[  733.969135][T16523] device bridge_slave_0 left promiscuous mode
[  733.986038][T16523] bridge0: port 1(bridge_slave_0) entered disabled state
[  734.228891][ T5757] tipc: Subscription rejected, illegal request
[  734.244958][T16535] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3929'.
[  734.325183][T16544] netlink: 'syz.4.3939': attribute type 2 has an invalid length.
[  734.335177][T16544] netlink: 'syz.4.3939': attribute type 8 has an invalid length.
[  734.345958][T16544] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3939'.
[  734.569412][T16557] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  734.600247][T16557] batman_adv: batadv0: Removing interface: batadv_slave_0
[  734.636257][T16557] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  734.665797][T16557] batman_adv: batadv0: Removing interface: batadv_slave_1
[  734.695078][T16557] batman_adv: batadv0: Interface deactivated: vlan1
[  734.715214][T16557] batman_adv: batadv0: Removing interface: vlan1
[  735.007230][T16568] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.3947'.
[  735.546889][T16589] device syzkaller0 entered promiscuous mode
[  735.588597][T10709] tipc: Subscription rejected, illegal request
[  735.673355][T16596] netlink: 'syz.3.3954': attribute type 2 has an invalid length.
[  735.781893][T16596] netlink: 'syz.3.3954': attribute type 8 has an invalid length.
[  735.833184][T16596] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3954'.
[  735.859803][T16599] netlink: 'syz.0.3955': attribute type 10 has an invalid length.
[  735.893227][T16599] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3955'.
[  735.930730][T16601] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3957'.
[  735.978736][T16604] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  735.994714][T16604] batman_adv: batadv0: Removing interface: batadv_slave_0
[  736.005975][T16604] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  736.020928][T16604] batman_adv: batadv0: Removing interface: batadv_slave_1
[  736.057565][T16604] batman_adv: batadv0: Interface deactivated: vlan1
[  736.067437][T16604] batman_adv: batadv0: Removing interface: vlan1
[  736.432288][T16612] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.3962'.
[  738.644058][T16615] netlink: 'syz.1.3963': attribute type 11 has an invalid length.
[  738.656417][T16619] netlink: 'syz.0.3965': attribute type 11 has an invalid length.
[  738.677315][T16619] netlink: 176 bytes leftover after parsing attributes in process `syz.0.3965'.
[  738.906437][T16628] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.3968'.
[  738.956711][ T4326] tipc: Subscription rejected, illegal request
[  739.030574][T16636] netlink: 'syz.4.3970': attribute type 2 has an invalid length.
[  739.040270][T16636] netlink: 'syz.4.3970': attribute type 8 has an invalid length.
[  739.052466][T16636] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3970'.
[  739.080998][T16635] netlink: 'syz.2.3971': attribute type 10 has an invalid length.
[  739.299444][T16645] __nla_validate_parse: 2 callbacks suppressed
[  739.299478][T16645] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.3975'.
[  739.820361][T16664] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3981'.
[  740.065796][T10704] tipc: Subscription rejected, illegal request
[  740.135340][T16674] netlink: 'syz.4.3984': attribute type 2 has an invalid length.
[  740.173511][T16674] netlink: 'syz.4.3984': attribute type 8 has an invalid length.
[  740.225723][T16674] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3984'.
[  740.956835][T16682] netlink: 'syz.3.3988': attribute type 3 has an invalid length.
[  740.976138][T16684] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.3989'.
[  741.014497][T16682] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  741.032187][T16682] batman_adv: batadv0: Removing interface: batadv_slave_0
[  741.069243][T16682] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  741.077982][T16682] batman_adv: batadv0: Removing interface: batadv_slave_1
[  741.095710][T16682] batman_adv: batadv0: Interface deactivated: vlan1
[  741.112050][T16682] batman_adv: batadv0: Removing interface: vlan1
[  741.120491][T16687] FAULT_INJECTION: forcing a failure.
[  741.120491][T16687] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  741.188481][T16687] CPU: 0 PID: 16687 Comm: syz.1.3991 Not tainted syzkaller #0
[  741.196014][T16687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  741.206101][T16687] Call Trace:
[  741.209432][T16687]  <TASK>
[  741.212402][T16687]  dump_stack_lvl+0x188/0x24e
[  741.217130][T16687]  ? show_regs_print_info+0x12/0x12
[  741.222372][T16687]  ? load_image+0x410/0x410
[  741.226971][T16687]  ? __lock_acquire+0x7bd0/0x7bd0
[  741.232065][T16687]  ? snprintf+0xe5/0x140
[  741.236361][T16687]  should_fail_ex+0x390/0x4c0
[  741.241088][T16687]  _copy_to_user+0x2c/0x130
[  741.245643][T16687]  simple_read_from_buffer+0xe3/0x150
[  741.251055][T16687]  proc_fail_nth_read+0x1a6/0x220
[  741.256138][T16687]  ? proc_fault_inject_write+0x310/0x310
[  741.261815][T16687]  ? fsnotify_perm+0x248/0x550
[  741.266637][T16687]  ? proc_fault_inject_write+0x310/0x310
[  741.272325][T16687]  vfs_read+0x2db/0x960
[  741.276545][T16687]  ? kernel_read+0x1e0/0x1e0
[  741.281198][T16687]  ? __fget_files+0x28/0x460
[  741.285845][T16687]  ? __fget_files+0x3fc/0x460
[  741.290581][T16687]  ? __fdget_pos+0x2ae/0x360
[  741.295256][T16687]  ? ksys_read+0x70/0x260
[  741.299654][T16687]  ksys_read+0x14d/0x260
[  741.303945][T16687]  ? vfs_write+0x9a0/0x9a0
[  741.308417][T16687]  ? lockdep_hardirqs_on+0x94/0x140
[  741.313672][T16687]  do_syscall_64+0x4c/0xa0
[  741.318132][T16687]  ? clear_bhb_loop+0x60/0xb0
[  741.322844][T16687]  ? clear_bhb_loop+0x60/0xb0
[  741.327573][T16687]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  741.333536][T16687] RIP: 0033:0x7faee295d68e
[  741.337991][T16687] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  741.357651][T16687] RSP: 002b:00007faee38fafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  741.366115][T16687] RAX: ffffffffffffffda RBX: 00007faee38fb6c0 RCX: 00007faee295d68e
[  741.374127][T16687] RDX: 000000000000000f RSI: 00007faee38fb0a0 RDI: 0000000000000008
[  741.382139][T16687] RBP: 00007faee38fb090 R08: 0000000000000000 R09: 0000000000000000
[  741.390147][T16687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  741.398157][T16687] R13: 00007faee2c16038 R14: 00007faee2c15fa0 R15: 00007ffc39645ea8
[  741.406191][T16687]  </TASK>
[  741.529060][T16688] netlink: 'syz.0.3990': attribute type 10 has an invalid length.
[  741.544392][T16688] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3990'.
[  741.557668][T16688] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check.
[  742.664005][T16724] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4002'.
[  742.868740][ T5757] tipc: Subscription rejected, illegal request
[  742.939163][ T4290] Bluetooth: hci5: unexpected event 0x48 length: 15 > 3
[  742.939200][ T4290] Bluetooth: hci5: wrong event for mode 0
[  742.971309][T16734] netlink: 'syz.1.4003': attribute type 2 has an invalid length.
[  743.021377][T16734] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4003'.
[  743.294954][T16742] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4008'.
[  743.311330][T16742] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check.
[  744.023318][ T4290] Bluetooth: hci1: command 0x0406 tx timeout
[  744.777627][ T5737] tipc: Subscription rejected, illegal request
[  744.862934][T16782] validate_nla: 3 callbacks suppressed
[  744.862953][T16782] netlink: 'syz.4.4020': attribute type 2 has an invalid length.
[  744.950813][T16782] netlink: 'syz.4.4020': attribute type 8 has an invalid length.
[  744.969653][T16782] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4020'.
[  745.306727][T16790] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4025'.
[  745.446304][ T5757] tipc: Subscription rejected, illegal request
[  745.528256][T16794] netlink: 'syz.1.4026': attribute type 2 has an invalid length.
[  745.548762][T16794] netlink: 'syz.1.4026': attribute type 8 has an invalid length.
[  745.663794][T16794] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4026'.
[  746.560794][T16812] netlink: 'syz.1.4032': attribute type 3 has an invalid length.
[  746.581156][T16814] netlink: 'syz.4.4042': attribute type 10 has an invalid length.
[  746.601833][T16814] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4042'.
[  746.655605][T16814] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check.
[  746.982146][ T5737] tipc: Subscription rejected, illegal request
[  747.261649][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[  747.276116][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[  747.347606][T16830] netlink: 'syz.1.4036': attribute type 2 has an invalid length.
[  747.410164][T16830] netlink: 'syz.1.4036': attribute type 8 has an invalid length.
[  747.455410][T16830] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4036'.
[  747.483951][T16832] netlink: 'syz.0.4038': attribute type 10 has an invalid length.
[  748.356914][T16853] netlink: 'syz.2.4047': attribute type 10 has an invalid length.
[  748.397282][T16853] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4047'.
[  748.436093][T16850] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4045'.
[  748.780411][T16865] netlink: 'syz.4.4051': attribute type 11 has an invalid length.
[  748.806136][T16862] team0: Port device macvlan0 added
[  748.815686][T16865] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4051'.
[  751.750431][T16864] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  751.820604][T16871] team0: Device nlmon0 is of different type
[  751.846055][T16870] validate_nla: 3 callbacks suppressed
[  751.846087][T16870] netlink: 'syz.3.4052': attribute type 10 has an invalid length.
[  751.860659][T16870] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4052'.
[  751.874465][T16870] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check.
[  751.889535][T10711] tipc: Subscription rejected, illegal request
[  752.022351][T16878] netlink: 'syz.4.4054': attribute type 2 has an invalid length.
[  752.057575][T16878] netlink: 'syz.4.4054': attribute type 8 has an invalid length.
[  752.090821][T16878] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4054'.
[  752.665627][T16907] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.4065'.
[  753.085442][T16911] netlink: 'syz.0.4068': attribute type 10 has an invalid length.
[  753.112795][T16911] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4068'.
[  753.178271][T16911] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check.
[  753.542400][T10711] tipc: Subscription rejected, illegal request
[  753.618325][T16925] netlink: 'syz.1.4071': attribute type 2 has an invalid length.
[  753.659114][T16925] netlink: 'syz.1.4071': attribute type 8 has an invalid length.
[  753.701821][T16925] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4071'.
[  753.939284][T16937] netlink: 'syz.4.4078': attribute type 11 has an invalid length.
[  753.960777][T16937] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4078'.
[  753.980218][ T5737] tipc: Subscription rejected, illegal request
[  753.988015][T16937] FAULT_INJECTION: forcing a failure.
[  753.988015][T16937] name failslab, interval 1, probability 0, space 0, times 0
[  754.021669][T16937] CPU: 1 PID: 16937 Comm: syz.4.4078 Not tainted syzkaller #0
[  754.029191][T16937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  754.039287][T16937] Call Trace:
[  754.042625][T16937]  <TASK>
[  754.045588][T16937]  dump_stack_lvl+0x188/0x24e
[  754.050308][T16937]  ? show_regs_print_info+0x12/0x12
[  754.055541][T16937]  ? load_image+0x410/0x410
[  754.060097][T16937]  ? __might_sleep+0xd0/0xd0
[  754.064733][T16937]  ? __lock_acquire+0x7bd0/0x7bd0
[  754.069833][T16937]  should_fail_ex+0x390/0x4c0
[  754.074556][T16937]  should_failslab+0x5/0x20
[  754.079097][T16937]  slab_pre_alloc_hook+0x59/0x300
[  754.084178][T16937]  ? sk_prot_alloc+0xe7/0x210
[  754.088898][T16937]  __kmem_cache_alloc_node+0x4f/0x270
[  754.094297][T16937]  ? sk_prot_alloc+0xe7/0x210
[  754.099032][T16937]  __kmalloc+0xa3/0x240
[  754.103229][T16937]  sk_prot_alloc+0xe7/0x210
[  754.107772][T16937]  ? sk_alloc+0x20/0x330
[  754.112063][T16937]  sk_alloc+0x36/0x330
[  754.116183][T16937]  ? bpf_ctx_init+0x154/0x190
[  754.120918][T16937]  bpf_prog_test_run_skb+0x36d/0x18e0
[  754.126346][T16937]  ? __fget_files+0x28/0x460
[  754.130993][T16937]  ? __fget_files+0x3fc/0x460
[  754.135720][T16937]  ? cpu_online+0xa0/0xa0
[  754.140094][T16937]  bpf_prog_test_run+0x31c/0x390
[  754.145078][T16937]  __sys_bpf+0x62b/0x780
[  754.149396][T16937]  ? bpf_link_show_fdinfo+0x380/0x380
[  754.154820][T16937]  ? lock_chain_count+0x20/0x20
[  754.159703][T16937]  __x64_sys_bpf+0x78/0x90
[  754.164149][T16937]  do_syscall_64+0x4c/0xa0
[  754.168601][T16937]  ? clear_bhb_loop+0x60/0xb0
[  754.173298][T16937]  ? clear_bhb_loop+0x60/0xb0
[  754.177996][T16937]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  754.183913][T16937] RIP: 0033:0x7f6f5239ce59
[  754.188361][T16937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  754.208010][T16937] RSP: 002b:00007f6f53292028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  754.216455][T16937] RAX: ffffffffffffffda RBX: 00007f6f52615fa0 RCX: 00007f6f5239ce59
[  754.224440][T16937] RDX: 0000000000000050 RSI: 00002000000011c0 RDI: 000000000000000a
[  754.232445][T16937] RBP: 00007f6f53292090 R08: 0000000000000000 R09: 0000000000000000
[  754.240433][T16937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  754.248412][T16937] R13: 00007f6f52616038 R14: 00007f6f52615fa0 R15: 00007fff1e9713f8
[  754.256405][T16937]  </TASK>
[  754.349249][T16941] netlink: 'syz.1.4087': attribute type 2 has an invalid length.
[  754.381783][T16941] netlink: 'syz.1.4087': attribute type 8 has an invalid length.
[  754.409036][T16941] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4087'.
[  754.476221][T16947] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.4079'.
[  754.494534][T16936] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  754.722779][T16953] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.4083'.
[  755.032347][T16967] netlink: 125520 bytes leftover after parsing attributes in process `syz.2.4085'.
[  755.152277][T16959] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  755.159934][T16959] IPv6: NLM_F_CREATE should be set when creating new route
[  755.167329][T16959] IPv6: NLM_F_CREATE should be set when creating new route
[  755.174619][T16959] IPv6: NLM_F_CREATE should be set when creating new route
[  755.310020][T16982] netlink: 'syz.4.4090': attribute type 10 has an invalid length.
[  755.329424][T10711] tipc: Subscription rejected, illegal request
[  755.462723][T16979] netlink: 'syz.0.4092': attribute type 2 has an invalid length.
[  756.428541][ T5737] tipc: Subscription rejected, illegal request
[  756.953934][T17028] validate_nla: 4 callbacks suppressed
[  756.953978][T17028] netlink: 'syz.3.4109': attribute type 3 has an invalid length.
[  757.081362][T17034] netlink: 'syz.0.4114': attribute type 3 has an invalid length.
[  757.618642][T17050] netlink: 'syz.1.4118': attribute type 10 has an invalid length.
[  757.764747][T17054] __nla_validate_parse: 5 callbacks suppressed
[  757.764766][T17054] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.4121'.
[  757.922389][ T5737] tipc: Subscription rejected, illegal request
[  758.007907][T17061] netlink: 'syz.0.4123': attribute type 2 has an invalid length.
[  758.018896][T17061] netlink: 'syz.0.4123': attribute type 8 has an invalid length.
[  758.030628][T17061] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4123'.
[  758.108318][T17062] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4122'.
[  758.650181][T17084] netlink: 'syz.1.4130': attribute type 3 has an invalid length.
[  759.393786][T17102] FAULT_INJECTION: forcing a failure.
[  759.393786][T17102] name failslab, interval 1, probability 0, space 0, times 0
[  759.490679][T17102] CPU: 0 PID: 17102 Comm: syz.1.4134 Not tainted syzkaller #0
[  759.498248][T17102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  759.508330][T17102] Call Trace:
[  759.511642][T17102]  <TASK>
[  759.514611][T17102]  dump_stack_lvl+0x188/0x24e
[  759.519330][T17102]  ? show_regs_print_info+0x12/0x12
[  759.524562][T17102]  ? load_image+0x410/0x410
[  759.529126][T17102]  ? __might_sleep+0xd0/0xd0
[  759.533755][T17102]  ? __lock_acquire+0x7bd0/0x7bd0
[  759.538822][T17102]  should_fail_ex+0x390/0x4c0
[  759.543538][T17102]  should_failslab+0x5/0x20
[  759.548092][T17102]  slab_pre_alloc_hook+0x59/0x300
[  759.553175][T17102]  kmem_cache_alloc_node+0x5a/0x310
[  759.558429][T17102]  ? __alloc_skb+0xf9/0x7d0
[  759.562968][T17102]  __alloc_skb+0xf9/0x7d0
[  759.567329][T17102]  alloc_skb_with_frags+0xa7/0x710
[  759.572513][T17102]  ? __might_fault+0xa6/0x120
[  759.577254][T17102]  ? __lock_acquire+0x7bd0/0x7bd0
[  759.582332][T17102]  sock_alloc_send_pskb+0x87f/0x9a0
[  759.587606][T17102]  ? sock_kzfree_s+0x50/0x50
[  759.592248][T17102]  ? iov_iter_advance+0x84/0x1a0
[  759.597250][T17102]  tun_get_user+0x800/0x3c20
[  759.601901][T17102]  ? rcu_read_unlock+0xa0/0xa0
[  759.606717][T17102]  ? tun_get+0x1c/0x2e0
[  759.610918][T17102]  ? __lock_acquire+0x7bd0/0x7bd0
[  759.615993][T17102]  ? tun_get+0x1c/0x2e0
[  759.620187][T17102]  tun_chr_write_iter+0x112/0x1f0
[  759.625249][T17102]  vfs_write+0x482/0x9a0
[  759.629542][T17102]  ? file_end_write+0x250/0x250
[  759.634449][T17102]  ? __fget_files+0x3fc/0x460
[  759.639185][T17102]  ? __fdget_pos+0x1d4/0x360
[  759.643820][T17102]  ? ksys_write+0x70/0x260
[  759.648288][T17102]  ksys_write+0x14d/0x260
[  759.652689][T17102]  ? __ia32_sys_read+0x80/0x80
[  759.657500][T17102]  ? lockdep_hardirqs_on+0x94/0x140
[  759.662740][T17102]  do_syscall_64+0x4c/0xa0
[  759.667189][T17102]  ? clear_bhb_loop+0x60/0xb0
[  759.671910][T17102]  ? clear_bhb_loop+0x60/0xb0
[  759.676625][T17102]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  759.682568][T17102] RIP: 0033:0x7faee299ce59
[  759.685230][T17100] device syzkaller0 entered promiscuous mode
[  759.687024][T17102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  759.687044][T17102] RSP: 002b:00007faee38da028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  759.721151][T17102] RAX: ffffffffffffffda RBX: 00007faee2c16090 RCX: 00007faee299ce59
[  759.727396][T17105] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.4136'.
[  759.729135][T17102] RDX: 0000000000008202 RSI: 0000200000000000 RDI: 0000000000000004
[  759.729154][T17102] RBP: 00007faee38da090 R08: 0000000000000000 R09: 0000000000000000
[  759.729167][T17102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  759.729181][T17102] R13: 00007faee2c16128 R14: 00007faee2c16090 R15: 00007ffc39645ea8
[  759.729209][T17102]  </TASK>
[  760.218513][T17122] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4143'.
[  760.218589][T17119] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4143'.
[  760.362669][T17130] netlink: 'syz.2.4146': attribute type 3 has an invalid length.
[  761.724777][T17118] netlink: 10 bytes leftover after parsing attributes in process `syz.0.4143'.
[  761.734521][T17116] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4142'.
[  761.764231][T17130] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  761.771702][T17130] batman_adv: batadv0: Removing interface: batadv_slave_0
[  761.803564][T17130] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  761.821240][T17130] batman_adv: batadv0: Removing interface: batadv_slave_1
[  761.874050][T17130] batman_adv: batadv0: Interface deactivated: vlan1
[  761.880932][T17130] batman_adv: batadv0: Removing interface: vlan1
[  762.070365][T17136] netlink: 125520 bytes leftover after parsing attributes in process `syz.3.4148'.
[  762.458605][T17159] netlink: 'syz.3.4156': attribute type 11 has an invalid length.
[  762.639825][T17162] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.4157'.
[  763.254056][T17179] netlink: 'syz.3.4165': attribute type 1 has an invalid length.
[  763.283499][T17179] __nla_validate_parse: 1 callbacks suppressed
[  763.283541][T17179] netlink: 176 bytes leftover after parsing attributes in process `syz.3.4165'.
[  763.616083][T10711] tipc: Subscription rejected, illegal request
[  763.636702][T10704] tipc: Subscription rejected, illegal request
[  763.695033][T17193] netlink: 'syz.0.4172': attribute type 2 has an invalid length.
[  763.721078][T17193] netlink: 'syz.0.4172': attribute type 8 has an invalid length.
[  763.731324][T17193] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4172'.
[  763.746105][T17191] netlink: 'syz.2.4171': attribute type 2 has an invalid length.
[  763.759157][T17191] netlink: 'syz.2.4171': attribute type 8 has an invalid length.
[  763.773735][T17191] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4171'.
[  764.021872][T17202] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4169'.
[  764.047886][T17200] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4174'.
[  764.180611][T17207] netlink: 'syz.2.4177': attribute type 29 has an invalid length.
[  764.214701][T17207] netlink: 'syz.2.4177': attribute type 29 has an invalid length.
[  764.243514][T17212] netlink: 'syz.2.4177': attribute type 29 has an invalid length.
[  764.739069][T17224] netlink: 'syz.0.4183': attribute type 21 has an invalid length.
[  764.948334][T10711] tipc: Subscription rejected, illegal request
[  765.131037][T17228] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4185'.
[  765.465506][ T5757] tipc: Subscription rejected, illegal request
[  765.549450][T17233] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4186'.
[  765.605199][ T5737] tipc: Subscription rejected, illegal request
[  765.716340][T17238] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4187'.
[  767.263290][T17293] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4207'.
[  767.276605][T17293] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check.
[  767.695070][T17314] FAULT_INJECTION: forcing a failure.
[  767.695070][T17314] name failslab, interval 1, probability 0, space 0, times 0
[  767.728095][T17314] CPU: 1 PID: 17314 Comm: syz.0.4216 Not tainted syzkaller #0
[  767.735614][T17314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  767.745704][T17314] Call Trace:
[  767.749014][T17314]  <TASK>
[  767.751966][T17314]  dump_stack_lvl+0x188/0x24e
[  767.756685][T17314]  ? show_regs_print_info+0x12/0x12
[  767.761918][T17314]  ? load_image+0x410/0x410
[  767.766469][T17314]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  767.772488][T17314]  should_fail_ex+0x390/0x4c0
[  767.777202][T17314]  should_failslab+0x5/0x20
[  767.781741][T17314]  slab_pre_alloc_hook+0x59/0x300
[  767.786892][T17314]  ? lockdep_hardirqs_on+0x94/0x140
[  767.792153][T17314]  kmem_cache_alloc+0x56/0x2f0
[  767.796946][T17314]  ? skb_clone+0x1e7/0x370
[  767.801391][T17314]  skb_clone+0x1e7/0x370
[  767.805690][T17314]  bpf_clone_redirect+0x169/0x4a0
[  767.810816][T17314]  ? ktime_get+0x247/0x270
[  767.815319][T17314]  bpf_prog_9e76daf83c32d9b9+0x19/0x1d
[  767.820801][T17314]  bpf_test_run+0x2b6/0x830
[  767.825381][T17314]  ? dst_hold+0xb0/0xb0
[  767.829594][T17314]  ? eth_get_headlen+0x200/0x200
[  767.834643][T17314]  ? __build_skb+0x24b/0x3b0
[  767.839276][T17314]  ? convert___skb_to_skb+0x3d/0x580
[  767.844590][T17314]  bpf_prog_test_run_skb+0xdaf/0x18e0
[  767.850014][T17314]  ? cpu_online+0xa0/0xa0
[  767.854383][T17314]  bpf_prog_test_run+0x31c/0x390
[  767.859354][T17314]  __sys_bpf+0x62b/0x780
[  767.863642][T17314]  ? bpf_link_show_fdinfo+0x380/0x380
[  767.869062][T17314]  ? lock_chain_count+0x20/0x20
[  767.873945][T17314]  __x64_sys_bpf+0x78/0x90
[  767.878390][T17314]  do_syscall_64+0x4c/0xa0
[  767.882867][T17314]  ? clear_bhb_loop+0x60/0xb0
[  767.887574][T17314]  ? clear_bhb_loop+0x60/0xb0
[  767.892279][T17314]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  767.898207][T17314] RIP: 0033:0x7f9fe179ce59
[  767.902654][T17314] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  767.922294][T17314] RSP: 002b:00007f9fe26a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  767.930747][T17314] RAX: ffffffffffffffda RBX: 00007f9fe1a15fa0 RCX: 00007f9fe179ce59
[  767.938745][T17314] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a
[  767.946737][T17314] RBP: 00007f9fe26a5090 R08: 0000000000000000 R09: 0000000000000000
[  767.954737][T17314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  767.962729][T17314] R13: 00007f9fe1a16038 R14: 00007f9fe1a15fa0 R15: 00007ffc5bb55158
[  767.970734][T17314]  </TASK>
[  767.976432][T17280] delete_channel: no stack
[  771.519609][T17335] validate_nla: 11 callbacks suppressed
[  771.519646][T17335] netlink: 'syz.2.4222': attribute type 3 has an invalid length.
[  771.544335][T17337] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.4232'.
[  771.744886][T17343] netlink: 'syz.1.4226': attribute type 3 has an invalid length.
[  771.903068][T17351] netlink: 'syz.4.4229': attribute type 11 has an invalid length.
[  771.922573][T17354] netlink: 'syz.0.4230': attribute type 3 has an invalid length.
[  771.922599][T17354] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4230'.
[  771.995962][T17355] netlink: 'syz.2.4231': attribute type 10 has an invalid length.
[  772.033289][T17355] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4231'.
[  772.060965][T17355] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check.
[  772.813454][T17384] netlink: 'syz.4.4243': attribute type 3 has an invalid length.
[  773.046676][T17389] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.4245'.
[  773.139170][T17394] netlink: 'syz.1.4246': attribute type 21 has an invalid length.
[  774.230593][T17419] netlink: 'syz.2.4257': attribute type 2 has an invalid length.
[  774.240190][T17419] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4257'.
[  774.256970][T17414] netlink: 'syz.4.4255': attribute type 10 has an invalid length.
[  774.286494][T17414] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4255'.
[  774.329636][T17414] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check.
[  774.537735][T17427] netlink: 'syz.2.4259': attribute type 20 has an invalid length.
[  774.559177][T17429] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.4258'.
[  774.641328][T17430] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.4259'.
[  774.658647][T17430] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.4259'.
[  774.672792][T17427] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.4259'.
[  775.553084][T17455] device ip6gretap0 left promiscuous mode
[  775.567572][T10704] tipc: Subscription rejected, illegal request
[  775.574807][T17455] bridge0: port 3(ip6gretap0) entered disabled state
[  775.648911][T17455] device bridge_slave_1 left promiscuous mode
[  775.667919][T17455] bridge0: port 2(bridge_slave_1) entered disabled state
[  775.757278][T17455] device bridge_slave_0 left promiscuous mode
[  775.766610][T17455] bridge0: port 1(bridge_slave_0) entered disabled state
[  776.306894][T17476] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check.
[  776.557739][T17483] FAULT_INJECTION: forcing a failure.
[  776.557739][T17483] name failslab, interval 1, probability 0, space 0, times 0
[  776.571781][T17483] CPU: 0 PID: 17483 Comm: syz.2.4279 Not tainted syzkaller #0
[  776.579295][T17483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  776.589371][T17483] Call Trace:
[  776.592663][T17483]  <TASK>
[  776.595609][T17483]  dump_stack_lvl+0x188/0x24e
[  776.600317][T17483]  ? show_regs_print_info+0x12/0x12
[  776.605573][T17483]  ? load_image+0x410/0x410
[  776.610131][T17483]  ? __might_sleep+0xd0/0xd0
[  776.614735][T17483]  ? __lock_acquire+0x7bd0/0x7bd0
[  776.619788][T17483]  should_fail_ex+0x390/0x4c0
[  776.624492][T17483]  should_failslab+0x5/0x20
[  776.629021][T17483]  slab_pre_alloc_hook+0x59/0x300
[  776.634073][T17483]  ? sk_prot_alloc+0xe7/0x210
[  776.638792][T17483]  __kmem_cache_alloc_node+0x4f/0x270
[  776.644200][T17483]  ? sk_prot_alloc+0xe7/0x210
[  776.648923][T17483]  __kmalloc+0xa3/0x240
[  776.653112][T17483]  sk_prot_alloc+0xe7/0x210
[  776.657657][T17483]  ? sk_alloc+0x20/0x330
[  776.661922][T17483]  sk_alloc+0x36/0x330
[  776.666015][T17483]  ? bpf_ctx_init+0x154/0x190
[  776.670710][T17483]  bpf_prog_test_run_skb+0x36d/0x18e0
[  776.676104][T17483]  ? __fget_files+0x28/0x460
[  776.680716][T17483]  ? __fget_files+0x3fc/0x460
[  776.685421][T17483]  ? cpu_online+0xa0/0xa0
[  776.689795][T17483]  bpf_prog_test_run+0x31c/0x390
[  776.694761][T17483]  __sys_bpf+0x62b/0x780
[  776.699042][T17483]  ? bpf_link_show_fdinfo+0x380/0x380
[  776.704448][T17483]  ? lock_chain_count+0x20/0x20
[  776.709324][T17483]  __x64_sys_bpf+0x78/0x90
[  776.713777][T17483]  do_syscall_64+0x4c/0xa0
[  776.718215][T17483]  ? clear_bhb_loop+0x60/0xb0
[  776.722906][T17483]  ? clear_bhb_loop+0x60/0xb0
[  776.727601][T17483]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  776.733628][T17483] RIP: 0033:0x7fd54af9ce59
[  776.738051][T17483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  776.757667][T17483] RSP: 002b:00007fd54bf30028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  776.766091][T17483] RAX: ffffffffffffffda RBX: 00007fd54b215fa0 RCX: 00007fd54af9ce59
[  776.774076][T17483] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a
[  776.782061][T17483] RBP: 00007fd54bf30090 R08: 0000000000000000 R09: 0000000000000000
[  776.790060][T17483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  776.798039][T17483] R13: 00007fd54b216038 R14: 00007fd54b215fa0 R15: 00007ffe2cef5658
[  776.806036][T17483]  </TASK>
[  777.215861][ T5737] tipc: Subscription rejected, illegal request
[  777.285793][T17507] validate_nla: 5 callbacks suppressed
[  777.285809][T17507] netlink: 'syz.0.4287': attribute type 2 has an invalid length.
[  777.326477][T17507] netlink: 'syz.0.4287': attribute type 8 has an invalid length.
[  777.335011][T17507] __nla_validate_parse: 3 callbacks suppressed
[  777.335025][T17507] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4287'.
[  777.483760][T17511] netlink: 'syz.3.4290': attribute type 3 has an invalid length.
[  781.298905][T10704] tipc: Subscription rejected, illegal request
[  781.405514][T17551] netlink: 'syz.3.4304': attribute type 2 has an invalid length.
[  781.433555][T17551] netlink: 'syz.3.4304': attribute type 8 has an invalid length.
[  781.449268][T17551] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4304'.
[  782.500399][T17564] netlink: 'syz.1.4308': attribute type 3 has an invalid length.
[  785.971279][ T5757] tipc: Subscription rejected, illegal request
[  785.987393][T17586] netlink: 'syz.0.4316': attribute type 20 has an invalid length.
[  786.057960][T17580] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4317'.
[  786.093745][T17585] netlink: 'syz.3.4318': attribute type 2 has an invalid length.
[  786.123738][T17585] netlink: 'syz.3.4318': attribute type 8 has an invalid length.
[  786.132918][T17585] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4318'.
[  786.145433][T17590] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.4316'.
[  786.185140][T17590] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.4316'.
[  786.209871][T17586] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.4316'.
[  786.382958][T17596] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.4321'.
[  786.730616][T17603] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4323'.
[  786.770917][T17603] device hsr_slave_0 left promiscuous mode
[  786.798718][T17603] device hsr_slave_1 left promiscuous mode
[  786.922600][T17609] netlink: 'syz.2.4325': attribute type 3 has an invalid length.
[  787.066650][T17604] netlink: 'syz.3.4324': attribute type 10 has an invalid length.
[  787.080262][T17604] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4324'.
[  787.105390][T17604] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check.
[  787.569789][ T4326] tipc: Subscription rejected, illegal request
[  787.742650][T17628] netlink: 'syz.0.4332': attribute type 2 has an invalid length.
[  787.763187][T17628] netlink: 'syz.0.4332': attribute type 8 has an invalid length.
[  787.771012][T17628] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4332'.
[  787.856384][T17632] netlink: 'syz.2.4333': attribute type 10 has an invalid length.
[  787.914644][T17632] team0: Port device wlan1 added
[  788.084214][T17637] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4338'.
[  788.102516][T17637] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  788.171745][T17641] netlink: 'syz.1.4337': attribute type 20 has an invalid length.
[  788.517301][T17648] netlink: 'syz.2.4339': attribute type 3 has an invalid length.
[  788.688448][T17647] netlink: 'syz.0.4340': attribute type 2 has an invalid length.
[  788.706075][T17647] netlink: 'syz.0.4340': attribute type 8 has an invalid length.
[  789.315169][ T5737] tipc: Subscription rejected, illegal request
[  789.387407][T17667] netlink: 'syz.3.4345': attribute type 2 has an invalid length.
[  789.400435][T17667] netlink: 'syz.3.4345': attribute type 8 has an invalid length.
[  790.231285][T17679] tap0: tun_chr_ioctl cmd 1074025678
[  790.240646][T17679] tap0: group set to 0
[  790.502059][T17683] netlink: 'syz.1.4353': attribute type 3 has an invalid length.
[  791.074983][T17692] tap0: tun_chr_ioctl cmd 1074812118
[  792.015079][T17706] __nla_validate_parse: 10 callbacks suppressed
[  792.015124][T17706] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4363'.
[  792.038108][T17718] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.4366'.
[  792.054354][T17706] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check.
[  792.113974][T17716] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4365'.
[  792.485499][T17729] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.4369'.
[  792.627601][T17729] netlink: 14552 bytes leftover after parsing attributes in process `syz.2.4369'.
[  793.019627][T17745] validate_nla: 4 callbacks suppressed
[  793.019664][T17745] netlink: 'syz.3.4376': attribute type 3 has an invalid length.
[  793.775633][T17760] netlink: 763 bytes leftover after parsing attributes in process `syz.2.4379'.
[  793.835839][T17759] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.4380'.
[  794.054088][T17770] netlink: 'syz.2.4383': attribute type 10 has an invalid length.
[  796.006148][T17767] netlink: 'syz.4.4382': attribute type 10 has an invalid length.
[  796.015789][T17767] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4382'.
[  796.029936][T17767] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check.
[  797.036933][T17813] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.4399'.
[  797.338622][T17817] netlink: 'syz.2.4401': attribute type 2 has an invalid length.
[  797.353203][T17817] netlink: 'syz.2.4401': attribute type 8 has an invalid length.
[  797.361188][T17817] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4401'.
[  797.908952][T17841] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4409'.
[  798.070016][T17849] netlink: 'syz.1.4411': attribute type 13 has an invalid length.
[  798.102455][T17849] netlink: 24859 bytes leftover after parsing attributes in process `syz.1.4411'.
[  798.214360][T17849] netlink: 'syz.1.4411': attribute type 19 has an invalid length.
[  798.222393][T17849] netlink: 14552 bytes leftover after parsing attributes in process `syz.1.4411'.
[  798.286969][T17854] FAULT_INJECTION: forcing a failure.
[  798.286969][T17854] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  798.320697][T17854] CPU: 1 PID: 17854 Comm: syz.4.4414 Not tainted syzkaller #0
[  798.328214][T17854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  798.338294][T17854] Call Trace:
[  798.341605][T17854]  <TASK>
[  798.344568][T17854]  dump_stack_lvl+0x188/0x24e
[  798.349288][T17854]  ? show_regs_print_info+0x12/0x12
[  798.354522][T17854]  ? load_image+0x410/0x410
[  798.359061][T17854]  ? __lock_acquire+0x7bd0/0x7bd0
[  798.364128][T17854]  should_fail_ex+0x390/0x4c0
[  798.368836][T17854]  _copy_from_user+0x2c/0x170
[  798.373548][T17854]  ___sys_sendmsg+0x1c3/0x360
[  798.378258][T17854]  ? __sys_sendmsg+0x2a0/0x2a0
[  798.383062][T17854]  ? lockdep_hardirqs_on+0x94/0x140
[  798.388302][T17854]  __se_sys_sendmsg+0x1c3/0x2b0
[  798.393172][T17854]  ? perf_trace_preemptirq_template+0x268/0x320
[  798.399436][T17854]  ? __x64_sys_sendmsg+0x80/0x80
[  798.404399][T17854]  ? lockdep_hardirqs_on+0x94/0x140
[  798.409611][T17854]  do_syscall_64+0x4c/0xa0
[  798.414044][T17854]  ? clear_bhb_loop+0x60/0xb0
[  798.418726][T17854]  ? clear_bhb_loop+0x60/0xb0
[  798.423417][T17854]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  798.429332][T17854] RIP: 0033:0x7f6f5239ce59
[  798.433764][T17854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  798.453386][T17854] RSP: 002b:00007f6f53292028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  798.461812][T17854] RAX: ffffffffffffffda RBX: 00007f6f52615fa0 RCX: 00007f6f5239ce59
[  798.469802][T17854] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000008
[  798.477785][T17854] RBP: 00007f6f53292090 R08: 0000000000000000 R09: 0000000000000000
[  798.485779][T17854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  798.493755][T17854] R13: 00007f6f52616038 R14: 00007f6f52615fa0 R15: 00007fff1e9713f8
[  798.501758][T17854]  </TASK>
[  799.955743][T17896] FAULT_INJECTION: forcing a failure.
[  799.955743][T17896] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  800.003278][T17896] CPU: 1 PID: 17896 Comm: syz.3.4429 Not tainted syzkaller #0
[  800.010822][T17896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  800.020967][T17896] Call Trace:
[  800.024278][T17896]  <TASK>
[  800.027243][T17896]  dump_stack_lvl+0x188/0x24e
[  800.031978][T17896]  ? show_regs_print_info+0x12/0x12
[  800.037229][T17896]  ? load_image+0x410/0x410
[  800.041814][T17896]  ? __lock_acquire+0x7bd0/0x7bd0
[  800.046914][T17896]  should_fail_ex+0x390/0x4c0
[  800.051648][T17896]  _copy_from_user+0x2c/0x170
[  800.056391][T17896]  bpf_obj_get_info_by_fd+0x45b/0x2f70
[  800.061942][T17896]  ? bpf_map_get_fd_by_id+0x330/0x330
[  800.067385][T17896]  ? trace_event_raw_event_lock+0x230/0x230
[  800.073390][T17896]  ? __might_fault+0xa6/0x120
[  800.078109][T17896]  ? __might_fault+0xc2/0x120
[  800.082838][T17896]  ? __might_fault+0xa6/0x120
[  800.087566][T17896]  ? bpf_lsm_bpf+0x5/0x10
[  800.091935][T17896]  ? security_bpf+0x7a/0xa0
[  800.096494][T17896]  __sys_bpf+0x505/0x780
[  800.100836][T17896]  ? bpf_link_show_fdinfo+0x380/0x380
[  800.106286][T17896]  ? lock_chain_count+0x20/0x20
[  800.111179][T17896]  __x64_sys_bpf+0x78/0x90
[  800.115618][T17896]  do_syscall_64+0x4c/0xa0
[  800.120047][T17896]  ? clear_bhb_loop+0x60/0xb0
[  800.124737][T17896]  ? clear_bhb_loop+0x60/0xb0
[  800.129444][T17896]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  800.135370][T17896] RIP: 0033:0x7fc1c7d9ce59
[  800.139819][T17896] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  800.159439][T17896] RSP: 002b:00007fc1c8d31028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  800.167890][T17896] RAX: ffffffffffffffda RBX: 00007fc1c8015fa0 RCX: 00007fc1c7d9ce59
[  800.175882][T17896] RDX: 0000000000000010 RSI: 0000200000000180 RDI: 000000000000000f
[  800.183958][T17896] RBP: 00007fc1c8d31090 R08: 0000000000000000 R09: 0000000000000000
[  800.191952][T17896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  800.199945][T17896] R13: 00007fc1c8016038 R14: 00007fc1c8015fa0 R15: 00007ffd4e2b0478
[  800.207961][T17896]  </TASK>
[  800.461291][T17903] netlink: 'syz.3.4430': attribute type 13 has an invalid length.
[  800.469677][T17903] netlink: 24859 bytes leftover after parsing attributes in process `syz.3.4430'.
[  800.587073][T17903] netlink: 'syz.3.4430': attribute type 19 has an invalid length.
[  800.627166][T17903] netlink: 14552 bytes leftover after parsing attributes in process `syz.3.4430'.
[  800.807109][T17911] netlink: 'syz.0.4432': attribute type 10 has an invalid length.
[  800.859946][T17911] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4432'.
[  800.926715][T17911] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check.
[  801.064663][T17918] syz.4.4434[17918] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  801.066450][T17918] syz.4.4434[17918] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  801.975118][T17930] netlink: 'syz.2.4438': attribute type 2 has an invalid length.
[  802.080572][T17930] device .*! entered promiscuous mode
[  802.108031][T17936] FAULT_INJECTION: forcing a failure.
[  802.108031][T17936] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  802.128932][T17936] CPU: 1 PID: 17936 Comm: syz.1.4442 Not tainted syzkaller #0
[  802.136480][T17936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  802.146570][T17936] Call Trace:
[  802.149870][T17936]  <TASK>
[  802.152827][T17936]  dump_stack_lvl+0x188/0x24e
[  802.157545][T17936]  ? show_regs_print_info+0x12/0x12
[  802.162780][T17936]  ? load_image+0x410/0x410
[  802.167341][T17936]  ? __lock_acquire+0x7bd0/0x7bd0
[  802.172418][T17936]  ? __lock_acquire+0x130c/0x7bd0
[  802.177493][T17936]  should_fail_ex+0x390/0x4c0
[  802.182247][T17936]  prepare_alloc_pages+0x1e1/0x5b0
[  802.187416][T17936]  __alloc_pages+0x130/0x4f0
[  802.192058][T17936]  ? zone_statistics+0x170/0x170
[  802.197066][T17936]  ? verify_lock_unused+0x140/0x140
[  802.202317][T17936]  __folio_alloc+0xe/0x30
[  802.206700][T17936]  vma_alloc_folio+0x499/0x900
[  802.211511][T17936]  ? mpol_shared_policy_lookup+0x147/0x1e0
[  802.217371][T17936]  shmem_alloc_and_acct_folio+0x463/0xbd0
[  802.223141][T17936]  ? shmem_replace_folio+0xdc0/0xdc0
[  802.228510][T17936]  ? xas_load+0x119/0x140
[  802.232882][T17936]  ? __filemap_get_folio+0x10f/0xde0
[  802.238225][T17936]  ? __filemap_get_folio+0xb43/0xde0
[  802.243546][T17936]  ? __filemap_get_folio+0x10f/0xde0
[  802.248872][T17936]  ? page_cache_prev_miss+0x380/0x380
[  802.254296][T17936]  shmem_get_folio_gfp+0x1439/0x35e0
[  802.259665][T17936]  shmem_fallocate+0x8c1/0xfc0
[  802.264478][T17936]  ? shmem_mmap+0x170/0x170
[  802.269029][T17936]  ? rcu_read_lock_any_held+0xb0/0x130
[  802.274530][T17936]  ? rcu_read_lock_bh_held+0xf0/0xf0
[  802.279855][T17936]  vfs_fallocate+0x57b/0x6f0
[  802.284489][T17936]  do_vfs_ioctl+0x19ab/0x1d40
[  802.289197][T17936]  ? __ia32_compat_sys_ioctl+0x850/0x850
[  802.294874][T17936]  ? tomoyo_path_number_perm+0x205/0x650
[  802.300532][T17936]  ? __lock_acquire+0x7bd0/0x7bd0
[  802.305581][T17936]  ? slab_free_freelist_hook+0x133/0x1b0
[  802.311244][T17936]  ? tomoyo_path_number_perm+0x205/0x650
[  802.316898][T17936]  ? tomoyo_path_number_perm+0x5a4/0x650
[  802.322557][T17936]  ? tomoyo_path_number_perm+0x205/0x650
[  802.328221][T17936]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  802.333734][T17936]  ? __fget_files+0x28/0x460
[  802.338348][T17936]  ? bpf_lsm_file_ioctl+0x5/0x10
[  802.343303][T17936]  ? security_file_ioctl+0x7c/0xa0
[  802.348445][T17936]  __se_sys_ioctl+0x83/0x170
[  802.353069][T17936]  do_syscall_64+0x4c/0xa0
[  802.357513][T17936]  ? clear_bhb_loop+0x60/0xb0
[  802.362206][T17936]  ? clear_bhb_loop+0x60/0xb0
[  802.366909][T17936]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  802.372844][T17936] RIP: 0033:0x7faee299ce59
[  802.377276][T17936] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  802.396996][T17936] RSP: 002b:00007faee38fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  802.405431][T17936] RAX: ffffffffffffffda RBX: 00007faee2c15fa0 RCX: 00007faee299ce59
[  802.413422][T17936] RDX: 0000200000000040 RSI: 000000004030582a RDI: 0000000000000004
[  802.421414][T17936] RBP: 00007faee38fb090 R08: 0000000000000000 R09: 0000000000000000
[  802.429429][T17936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  802.437416][T17936] R13: 00007faee2c16038 R14: 00007faee2c15fa0 R15: 00007ffc39645ea8
[  802.445411][T17936]  </TASK>
[  802.999622][ T4326] tipc: Subscription rejected, illegal request
[  803.079463][T17958] netlink: 'syz.0.4450': attribute type 10 has an invalid length.
[  803.108192][T17958] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4450'.
[  803.161210][T17958] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check.
[  803.222514][T17959] netlink: 'syz.1.4448': attribute type 2 has an invalid length.
[  803.243427][T17959] netlink: 'syz.1.4448': attribute type 8 has an invalid length.
[  803.263429][T17959] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4448'.
[  803.514208][T17964] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4449'.
[  804.747247][T17991] tipc: Started in network mode
[  804.780432][T17991] tipc: Node identity 9215a268, cluster identity 4711
[  804.826384][T17991] tipc: Node number set to 2450891368
[  805.210457][T10711] tipc: Subscription rejected, illegal request
[  805.415429][T18001] netlink: 'syz.4.4463': attribute type 2 has an invalid length.
[  805.579575][T18001] netlink: 'syz.4.4463': attribute type 8 has an invalid length.
[  805.645408][T18001] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4463'.
[  806.171594][ T5737] tipc: Subscription rejected, illegal request
[  806.220417][T17993] device bridge_slave_1 left promiscuous mode
[  806.229598][T17993] bridge0: port 2(bridge_slave_1) entered disabled state
[  806.331605][T17993] device bridge_slave_0 left promiscuous mode
[  806.352966][T17993] bridge0: port 1(bridge_slave_0) entered disabled state
[  806.780599][T18011] netlink: 'syz.1.4476': attribute type 2 has an invalid length.
[  806.793970][T18011] netlink: 'syz.1.4476': attribute type 8 has an invalid length.
[  806.830344][T18011] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4476'.
[  806.848197][T18012] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4461'.
[  807.127682][T18024] netlink: 'syz.3.4468': attribute type 10 has an invalid length.
[  807.155791][T18024] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4468'.
[  807.185382][T18024] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check.
[  807.869002][T18041] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4474'.
[  808.180323][T18051] syz.3.4477[18051] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  808.181043][T18051] syz.3.4477[18051] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  808.525546][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[  808.547616][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[  809.373215][T10704] tipc: Subscription rejected, illegal request
[  809.425582][T18058] netlink: 'syz.4.4481': attribute type 2 has an invalid length.
[  809.435129][T18058] netlink: 'syz.4.4481': attribute type 8 has an invalid length.
[  809.446054][T18058] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4481'.
[  809.852789][T18071] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4487'.
[  809.907020][T18071] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  809.957599][T18071] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  810.038086][T18077] netlink: 'syz.4.4488': attribute type 10 has an invalid length.
[  810.067738][T18077] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4488'.
[  810.114425][T18077] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check.
[  810.441725][T18084] syz.0.4490[18084] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  810.442826][T18084] syz.0.4490[18084] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  810.697171][T18091] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4492'.
[  811.263495][T18101] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4493'.
[  811.460657][ T5737] tipc: Subscription rejected, illegal request
[  811.540359][T18103] netlink: 'syz.4.4496': attribute type 2 has an invalid length.
[  811.553667][T18103] netlink: 'syz.4.4496': attribute type 8 has an invalid length.
[  811.562923][T18103] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4496'.
[  811.831797][T18107] netlink: 'syz.3.4499': attribute type 11 has an invalid length.
[  811.888871][T18107] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4499'.
[  812.411814][T18122] FAULT_INJECTION: forcing a failure.
[  812.411814][T18122] name failslab, interval 1, probability 0, space 0, times 0
[  812.474225][T18122] CPU: 0 PID: 18122 Comm: syz.3.4502 Not tainted syzkaller #0
[  812.481753][T18122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  812.491854][T18122] Call Trace:
[  812.495181][T18122]  <TASK>
[  812.498144][T18122]  dump_stack_lvl+0x188/0x24e
[  812.502864][T18122]  ? show_regs_print_info+0x12/0x12
[  812.508100][T18122]  ? load_image+0x410/0x410
[  812.512746][T18122]  ? __might_sleep+0xd0/0xd0
[  812.517353][T18122]  ? __lock_acquire+0x7bd0/0x7bd0
[  812.522415][T18122]  should_fail_ex+0x390/0x4c0
[  812.527117][T18122]  should_failslab+0x5/0x20
[  812.531659][T18122]  slab_pre_alloc_hook+0x59/0x300
[  812.536712][T18122]  kmem_cache_alloc_node+0x5a/0x310
[  812.541934][T18122]  ? __alloc_skb+0xf9/0x7d0
[  812.546455][T18122]  __alloc_skb+0xf9/0x7d0
[  812.550798][T18122]  tipc_nl_compat_doit+0x1f8/0x610
[  812.555919][T18122]  ? end_current_label_crit_section+0x170/0x170
[  812.562184][T18122]  ? tipc_nl_compat_bearer_enable+0x610/0x610
[  812.568286][T18122]  ? bpf_lsm_capable+0x5/0x10
[  812.572985][T18122]  ? security_capable+0x85/0xb0
[  812.577854][T18122]  tipc_nl_compat_recv+0x536/0xaf0
[  812.582990][T18122]  ? ct_nmi_exit+0x145/0x1c0
[  812.587604][T18122]  ? tipc_netlink_compat_stop+0x20/0x20
[  812.593163][T18122]  ? __mutex_trylock_common+0x15c/0x260
[  812.598743][T18122]  ? tipc_nl_net_dump+0x770/0x770
[  812.603784][T18122]  ? tipc_nl_compat_node_dump+0x5a0/0x5a0
[  812.609526][T18122]  ? mark_lock+0x94/0x320
[  812.613885][T18122]  genl_family_rcv_msg_doit+0x22f/0x350
[  812.619453][T18122]  ? rcu_is_watching+0x11/0xa0
[  812.624242][T18122]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[  812.630158][T18122]  ? lockdep_hardirqs_on+0x94/0x140
[  812.635385][T18122]  ? memset+0x1e/0x40
[  812.639423][T18122]  ? genl_get_cmd+0x55f/0x8b0
[  812.644136][T18122]  genl_rcv_msg+0x601/0x790
[  812.648656][T18122]  ? genl_bind+0x360/0x360
[  812.653086][T18122]  ? tipc_netlink_compat_stop+0x20/0x20
[  812.658674][T18122]  netlink_rcv_skb+0x1ef/0x440
[  812.663457][T18122]  ? genl_bind+0x360/0x360
[  812.667900][T18122]  ? netlink_ack+0x1160/0x1160
[  812.672708][T18122]  ? down_read+0x1a8/0x2d0
[  812.677238][T18122]  genl_rcv+0x24/0x40
[  812.681249][T18122]  netlink_unicast+0x7ad/0x920
[  812.686044][T18122]  netlink_sendmsg+0x8ad/0xbd0
[  812.690841][T18122]  ? netlink_getsockopt+0x550/0x550
[  812.696062][T18122]  ? aa_sock_msg_perm+0x94/0x150
[  812.701018][T18122]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  812.706316][T18122]  ? security_socket_sendmsg+0x7c/0xa0
[  812.711789][T18122]  ? netlink_getsockopt+0x550/0x550
[  812.717011][T18122]  ____sys_sendmsg+0x5ed/0x9a0
[  812.721803][T18122]  ? __sys_sendmsg_sock+0x30/0x30
[  812.726849][T18122]  ? __import_iovec+0x306/0x510
[  812.731721][T18122]  ? import_iovec+0x6f/0xa0
[  812.736251][T18122]  ___sys_sendmsg+0x2a2/0x360
[  812.740964][T18122]  ? lock_chain_count+0x20/0x20
[  812.745846][T18122]  ? __sys_sendmsg+0x2a0/0x2a0
[  812.750646][T18122]  ? __lock_acquire+0x7bd0/0x7bd0
[  812.755716][T18122]  __se_sys_sendmsg+0x1c3/0x2b0
[  812.760579][T18122]  ? __x64_sys_sendmsg+0x80/0x80
[  812.765554][T18122]  ? lockdep_hardirqs_on+0x94/0x140
[  812.770776][T18122]  do_syscall_64+0x4c/0xa0
[  812.775213][T18122]  ? clear_bhb_loop+0x60/0xb0
[  812.779905][T18122]  ? clear_bhb_loop+0x60/0xb0
[  812.784602][T18122]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  812.790514][T18122] RIP: 0033:0x7fc1c7d9ce59
[  812.794941][T18122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  812.814556][T18122] RSP: 002b:00007fc1c8d31028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  812.822990][T18122] RAX: ffffffffffffffda RBX: 00007fc1c8015fa0 RCX: 00007fc1c7d9ce59
[  812.830992][T18122] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006
[  812.838993][T18122] RBP: 00007fc1c8d31090 R08: 0000000000000000 R09: 0000000000000000
[  812.846976][T18122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  812.854957][T18122] R13: 00007fc1c8016038 R14: 00007fc1c8015fa0 R15: 00007ffd4e2b0478
[  812.862952][T18122]  </TASK>
[  813.206861][T18124] netlink: 'syz.2.4503': attribute type 10 has an invalid length.
[  813.220922][T18124] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4503'.
[  813.243212][T18124] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check.
[  813.726965][T18148] syz.2.4509[18148] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  813.727444][T18148] syz.2.4509[18148] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  814.445376][ T5757] tipc: Subscription rejected, illegal request
[  814.570723][T18156] netlink: 'syz.3.4510': attribute type 2 has an invalid length.
[  814.599104][T18156] netlink: 'syz.3.4510': attribute type 8 has an invalid length.
[  814.641524][T18156] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4510'.
[  815.015943][T18161] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4512'.
[  815.026336][T18159] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.4511'.
[  815.044890][T18161] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4512'.
[  816.007560][T18183] netlink: 'syz.1.4522': attribute type 4 has an invalid length.
[  816.138317][T18186] syzkaller0: tun_chr_ioctl cmd 2147767520
[  816.597739][ T5757] tipc: Subscription rejected, illegal request
[  816.690370][T18199] netlink: 'syz.2.4526': attribute type 2 has an invalid length.
[  816.725244][T18199] netlink: 'syz.2.4526': attribute type 8 has an invalid length.
[  816.765371][T18199] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4526'.
[  817.004894][T18204] netlink: 'syz.0.4527': attribute type 22 has an invalid length.
[  817.012822][T18204] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4527'.
[  817.472725][T18207] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.4528'.
[  818.334465][T18227] FAULT_INJECTION: forcing a failure.
[  818.334465][T18227] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  818.396159][T18227] CPU: 1 PID: 18227 Comm: syz.1.4545 Not tainted syzkaller #0
[  818.403768][T18227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  818.413851][T18227] Call Trace:
[  818.417153][T18227]  <TASK>
[  818.420106][T18227]  dump_stack_lvl+0x188/0x24e
[  818.424814][T18227]  ? show_regs_print_info+0x12/0x12
[  818.430060][T18227]  ? load_image+0x410/0x410
[  818.434600][T18227]  ? __lock_acquire+0x7bd0/0x7bd0
[  818.439687][T18227]  ? snprintf+0xe5/0x140
[  818.443968][T18227]  should_fail_ex+0x390/0x4c0
[  818.448692][T18227]  _copy_to_user+0x2c/0x130
[  818.453242][T18227]  simple_read_from_buffer+0xe3/0x150
[  818.458643][T18227]  proc_fail_nth_read+0x1a6/0x220
[  818.463708][T18227]  ? proc_fault_inject_write+0x310/0x310
[  818.469371][T18227]  ? fsnotify_perm+0x248/0x550
[  818.474170][T18227]  ? proc_fault_inject_write+0x310/0x310
[  818.479834][T18227]  vfs_read+0x2db/0x960
[  818.484035][T18227]  ? kernel_read+0x1e0/0x1e0
[  818.488673][T18227]  ? __fget_files+0x28/0x460
[  818.493299][T18227]  ? __fget_files+0x3fc/0x460
[  818.498033][T18227]  ? __fdget_pos+0x2ae/0x360
[  818.502666][T18227]  ? ksys_read+0x70/0x260
[  818.507045][T18227]  ksys_read+0x14d/0x260
[  818.511345][T18227]  ? vfs_write+0x9a0/0x9a0
[  818.515800][T18227]  ? lockdep_hardirqs_on+0x94/0x140
[  818.521039][T18227]  do_syscall_64+0x4c/0xa0
[  818.525515][T18227]  ? clear_bhb_loop+0x60/0xb0
[  818.530217][T18227]  ? clear_bhb_loop+0x60/0xb0
[  818.534921][T18227]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  818.540847][T18227] RIP: 0033:0x7faee295d68e
[  818.545283][T18227] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  818.564899][T18227] RSP: 002b:00007faee38fafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  818.573323][T18227] RAX: ffffffffffffffda RBX: 00007faee38fb6c0 RCX: 00007faee295d68e
[  818.581306][T18227] RDX: 000000000000000f RSI: 00007faee38fb0a0 RDI: 0000000000000005
[  818.589289][T18227] RBP: 00007faee38fb090 R08: 0000000000000000 R09: 0000000000000000
[  818.597273][T18227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  818.605264][T18227] R13: 00007faee2c16038 R14: 00007faee2c15fa0 R15: 00007ffc39645ea8
[  818.613273][T18227]  </TASK>
[  819.542430][ T4326] tipc: Subscription rejected, illegal request
[  819.624678][T18244] netlink: 'syz.3.4541': attribute type 2 has an invalid length.
[  819.663426][T18244] netlink: 'syz.3.4541': attribute type 8 has an invalid length.
[  819.694922][T18244] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4541'.
[  819.807892][T18251] netlink: 168 bytes leftover after parsing attributes in process `syz.4.4544'.
[  819.865668][T18253] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.4543'.
[  820.029616][T18259] netlink: 'syz.0.4546': attribute type 1 has an invalid length.
[  820.093237][T18259] netlink: 'syz.0.4546': attribute type 1 has an invalid length.
[  820.120253][T18259] netlink: 116376 bytes leftover after parsing attributes in process `syz.0.4546'.
[  820.768031][T18254] delete_channel: no stack
[  821.731237][T18281] FAULT_INJECTION: forcing a failure.
[  821.731237][T18281] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  821.744624][T18281] CPU: 0 PID: 18281 Comm: syz.4.4553 Not tainted syzkaller #0
[  821.752125][T18281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  821.762222][T18281] Call Trace:
[  821.765529][T18281]  <TASK>
[  821.768486][T18281]  dump_stack_lvl+0x188/0x24e
[  821.773201][T18281]  ? show_regs_print_info+0x12/0x12
[  821.778424][T18281]  ? load_image+0x410/0x410
[  821.782998][T18281]  ? __might_fault+0xa6/0x120
[  821.787700][T18281]  should_fail_ex+0x390/0x4c0
[  821.792408][T18281]  copyin+0x1b/0x120
[  821.796338][T18281]  _copy_from_iter+0x447/0x1130
[  821.801219][T18281]  ? copyout_mc+0x110/0x110
[  821.805742][T18281]  ? __virt_addr_valid+0x188/0x540
[  821.810889][T18281]  ? __virt_addr_valid+0x188/0x540
[  821.816019][T18281]  ? __virt_addr_valid+0x467/0x540
[  821.821160][T18281]  ? __phys_addr_symbol+0x2b/0x70
[  821.826209][T18281]  ? __check_object_size+0x4f6/0xa70
[  821.831523][T18281]  netlink_sendmsg+0x755/0xbd0
[  821.836315][T18281]  ? netlink_getsockopt+0x550/0x550
[  821.841540][T18281]  ? aa_sock_msg_perm+0x94/0x150
[  821.846503][T18281]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  821.851804][T18281]  ? security_socket_sendmsg+0x7c/0xa0
[  821.857311][T18281]  ? netlink_getsockopt+0x550/0x550
[  821.862566][T18281]  ____sys_sendmsg+0x5ed/0x9a0
[  821.867367][T18281]  ? __sys_sendmsg_sock+0x30/0x30
[  821.872400][T18281]  ? __import_iovec+0x306/0x510
[  821.877282][T18281]  ? import_iovec+0x6f/0xa0
[  821.881801][T18281]  ___sys_sendmsg+0x2a2/0x360
[  821.886510][T18281]  ? __sys_sendmsg+0x2a0/0x2a0
[  821.891305][T18281]  ? __lock_acquire+0x7bd0/0x7bd0
[  821.896377][T18281]  __se_sys_sendmsg+0x1c3/0x2b0
[  821.901246][T18281]  ? __x64_sys_sendmsg+0x80/0x80
[  821.906208][T18281]  ? lockdep_hardirqs_on+0x94/0x140
[  821.911446][T18281]  do_syscall_64+0x4c/0xa0
[  821.915888][T18281]  ? clear_bhb_loop+0x60/0xb0
[  821.920582][T18281]  ? clear_bhb_loop+0x60/0xb0
[  821.925282][T18281]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  821.931203][T18281] RIP: 0033:0x7f6f5239ce59
[  821.935636][T18281] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  821.955250][T18281] RSP: 002b:00007f6f53271028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  821.963698][T18281] RAX: ffffffffffffffda RBX: 00007f6f52616090 RCX: 00007f6f5239ce59
[  821.971698][T18281] RDX: 0200000000000000 RSI: 0000200000000000 RDI: 000000000000000e
[  821.979695][T18281] RBP: 00007f6f53271090 R08: 0000000000000000 R09: 0000000000000000
[  821.987697][T18281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  821.995680][T18281] R13: 00007f6f52616128 R14: 00007f6f52616090 R15: 00007fff1e9713f8
[  822.003682][T18281]  </TASK>
[  822.550112][T18293] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4559'.
[  822.693645][T18299] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.4560'.
[  822.898561][T18308] FAULT_INJECTION: forcing a failure.
[  822.898561][T18308] name failslab, interval 1, probability 0, space 0, times 0
[  822.963267][T18308] CPU: 0 PID: 18308 Comm: syz.2.4564 Not tainted syzkaller #0
[  822.970788][T18308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  822.980891][T18308] Call Trace:
[  822.984197][T18308]  <TASK>
[  822.987240][T18308]  dump_stack_lvl+0x188/0x24e
[  822.991960][T18308]  ? show_regs_print_info+0x12/0x12
[  822.997200][T18308]  ? load_image+0x410/0x410
[  823.001758][T18308]  ? __might_sleep+0xd0/0xd0
[  823.006389][T18308]  ? __lock_acquire+0x7bd0/0x7bd0
[  823.011484][T18308]  should_fail_ex+0x390/0x4c0
[  823.016214][T18308]  should_failslab+0x5/0x20
[  823.020758][T18308]  slab_pre_alloc_hook+0x59/0x300
[  823.025833][T18308]  kmem_cache_alloc_node+0x5a/0x310
[  823.031064][T18308]  ? __alloc_skb+0xf9/0x7d0
[  823.035626][T18308]  __alloc_skb+0xf9/0x7d0
[  823.039984][T18308]  netlink_sendmsg+0x654/0xbd0
[  823.044799][T18308]  ? netlink_getsockopt+0x550/0x550
[  823.050033][T18308]  ? aa_sock_msg_perm+0x94/0x150
[  823.054999][T18308]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  823.060365][T18308]  ? security_socket_sendmsg+0x7c/0xa0
[  823.065945][T18308]  ? netlink_getsockopt+0x550/0x550
[  823.071187][T18308]  ____sys_sendmsg+0x5ed/0x9a0
[  823.076016][T18308]  ? __sys_sendmsg_sock+0x30/0x30
[  823.081072][T18308]  ? __import_iovec+0x306/0x510
[  823.085965][T18308]  ? import_iovec+0x6f/0xa0
[  823.090534][T18308]  ___sys_sendmsg+0x2a2/0x360
[  823.095251][T18308]  ? __sys_sendmsg+0x2a0/0x2a0
[  823.100066][T18308]  ? __lock_acquire+0x7bd0/0x7bd0
[  823.105164][T18308]  __se_sys_sendmsg+0x1c3/0x2b0
[  823.110048][T18308]  ? ct_nmi_exit+0x145/0x1c0
[  823.114679][T18308]  ? __x64_sys_sendmsg+0x80/0x80
[  823.119664][T18308]  ? lockdep_hardirqs_on+0x94/0x140
[  823.124902][T18308]  do_syscall_64+0x4c/0xa0
[  823.129355][T18308]  ? clear_bhb_loop+0x60/0xb0
[  823.134064][T18308]  ? clear_bhb_loop+0x60/0xb0
[  823.138796][T18308]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  823.144727][T18308] RIP: 0033:0x7fd54af9ce59
[  823.149207][T18308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  823.168844][T18308] RSP: 002b:00007fd54beee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  823.177293][T18308] RAX: ffffffffffffffda RBX: 00007fd54b216180 RCX: 00007fd54af9ce59
[  823.185293][T18308] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000010
[  823.193323][T18308] RBP: 00007fd54beee090 R08: 0000000000000000 R09: 0000000000000000
[  823.201327][T18308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  823.209335][T18308] R13: 00007fd54b216218 R14: 00007fd54b216180 R15: 00007ffe2cef5658
[  823.217358][T18308]  </TASK>
[  823.632513][T18311] GPL: port 1(syz_tun) entered blocking state
[  823.660380][T18311] GPL: port 1(syz_tun) entered disabled state
[  823.721278][T18311] device syz_tun entered promiscuous mode
[  823.923170][T18323] netlink: 212168 bytes leftover after parsing attributes in process `syz.2.4569'.
[  824.678458][T18331] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4572'.
[  824.735301][T18331] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4572'.
[  826.073605][T18352] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4578'.
[  826.127332][T18351] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.4579'.
[  826.188636][T18325] device bridge_slave_1 left promiscuous mode
[  826.228240][T18325] bridge0: port 2(bridge_slave_1) entered disabled state
[  826.520659][T18325] device bridge_slave_0 left promiscuous mode
[  826.541244][T18325] bridge0: port 1(bridge_slave_0) entered disabled state
[  826.706469][T18325] team0: Port device bridge0 removed
[  826.781339][T18361] netlink: 212168 bytes leftover after parsing attributes in process `syz.1.4582'.
[  826.801910][T18346] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4570'.
[  826.926481][T18366] syz.0.4584[18366] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  826.926836][T18366] syz.0.4584[18366] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  827.210177][T18378] netlink: 'syz.4.4588': attribute type 1 has an invalid length.
[  827.230090][T18378] netlink: 'syz.4.4588': attribute type 1 has an invalid length.
[  827.265774][T18378] netlink: 116376 bytes leftover after parsing attributes in process `syz.4.4588'.
[  827.852030][T18389] netlink: 'syz.3.4592': attribute type 3 has an invalid length.
[  828.041845][T18375] delete_channel: no stack
[  828.547587][T18393] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.4594'.
[  828.861265][T18404] netlink: 212168 bytes leftover after parsing attributes in process `syz.3.4598'.
[  828.986973][T18403] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4600'.
[  829.008083][T18405] syz.1.4599[18405] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  829.013666][T18405] syz.1.4599[18405] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  831.186800][T18432] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.4608'.
[  831.287193][T18435] netlink: 'syz.0.4617': attribute type 3 has an invalid length.
[  831.441023][T18436] netlink: 'syz.2.4607': attribute type 1 has an invalid length.
[  831.454804][T18436] netlink: 'syz.2.4607': attribute type 1 has an invalid length.
[  831.462991][T18436] netlink: 116376 bytes leftover after parsing attributes in process `syz.2.4607'.
[  832.242383][T18434] delete_channel: no stack
[  832.325079][T18453] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4613'.
[  832.708248][T18465] FAULT_INJECTION: forcing a failure.
[  832.708248][T18465] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  832.767191][T18462] netlink: 'syz.4.4619': attribute type 5 has an invalid length.
[  832.767922][T18465] CPU: 1 PID: 18465 Comm: syz.0.4618 Not tainted syzkaller #0
[  832.782868][T18465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  832.792964][T18465] Call Trace:
[  832.796277][T18465]  <TASK>
[  832.799245][T18465]  dump_stack_lvl+0x188/0x24e
[  832.803974][T18465]  ? show_regs_print_info+0x12/0x12
[  832.809221][T18465]  ? load_image+0x410/0x410
[  832.813778][T18465]  ? __lock_acquire+0x7bd0/0x7bd0
[  832.818857][T18465]  should_fail_ex+0x390/0x4c0
[  832.823578][T18465]  _copy_from_user+0x2c/0x170
[  832.828307][T18465]  iovec_from_user+0x143/0x360
[  832.833118][T18465]  __import_iovec+0x6c/0x510
[  832.837770][T18465]  import_iovec+0x6f/0xa0
[  832.842149][T18465]  ___sys_sendmsg+0x252/0x360
[  832.846876][T18465]  ? __sys_sendmsg+0x2a0/0x2a0
[  832.851702][T18465]  ? __lock_acquire+0x7bd0/0x7bd0
[  832.856799][T18465]  __se_sys_sendmsg+0x1c3/0x2b0
[  832.861704][T18465]  ? ct_nmi_exit+0x145/0x1c0
[  832.866345][T18465]  ? __x64_sys_sendmsg+0x80/0x80
[  832.871346][T18465]  ? lockdep_hardirqs_on+0x94/0x140
[  832.876596][T18465]  do_syscall_64+0x4c/0xa0
[  832.881068][T18465]  ? clear_bhb_loop+0x60/0xb0
[  832.885792][T18465]  ? clear_bhb_loop+0x60/0xb0
[  832.890506][T18465]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  832.896458][T18465] RIP: 0033:0x7f9fe179ce59
[  832.900913][T18465] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  832.920568][T18465] RSP: 002b:00007f9fe26a5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  832.929051][T18465] RAX: ffffffffffffffda RBX: 00007f9fe1a15fa0 RCX: 00007f9fe179ce59
[  832.937071][T18465] RDX: 0000000000000b00 RSI: 0000200000001180 RDI: 0000000000000003
[  832.945082][T18465] RBP: 00007f9fe26a5090 R08: 0000000000000000 R09: 0000000000000000
[  832.953093][T18465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  832.961105][T18465] R13: 00007f9fe1a16038 R14: 00007f9fe1a15fa0 R15: 00007ffc5bb55158
[  832.969130][T18465]  </TASK>
[  833.037370][T18468] netlink: 'syz.3.4620': attribute type 1 has an invalid length.
[  833.099910][T18468] netlink: 'syz.3.4620': attribute type 3 has an invalid length.
[  833.134505][T18468] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4620'.
[  833.209484][T18466] delete_channel: no stack
[  833.237286][ T5757] tipc: Subscription rejected, illegal request
[  833.360823][T18476] netlink: 'syz.4.4623': attribute type 2 has an invalid length.
[  833.383549][T18476] netlink: 'syz.4.4623': attribute type 8 has an invalid length.
[  833.392215][T18476] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4623'.
[  833.632571][T10711] tipc: Subscription rejected, illegal request
[  833.828055][T18484] netlink: 'syz.3.4625': attribute type 2 has an invalid length.
[  833.839347][T18484] netlink: 'syz.3.4625': attribute type 8 has an invalid length.
[  833.851955][T18484] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4625'.
[  834.099785][T18487] netlink: 'syz.4.4626': attribute type 10 has an invalid length.
[  834.133381][T18487] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4626'.
[  834.149046][T18487] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check.
[  834.657532][T18498] netlink: 'syz.1.4628': attribute type 1 has an invalid length.
[  834.737825][T18498] netlink: 'syz.1.4628': attribute type 1 has an invalid length.
[  834.867432][T18498] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.4628'.
[  835.578131][T18496] delete_channel: no stack
[  835.761455][T18514] syz.3.4633[18514] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  835.762073][T18514] syz.3.4633[18514] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  837.029958][ T5757] tipc: Subscription rejected, illegal request
[  837.175565][T18529] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4636'.
[  837.846480][ T5757] tipc: Subscription rejected, illegal request
[  838.252899][T18540] validate_nla: 2 callbacks suppressed
[  838.252922][T18540] netlink: 'syz.0.4641': attribute type 2 has an invalid length.
[  838.273434][T18540] netlink: 'syz.0.4641': attribute type 8 has an invalid length.
[  838.304014][T18540] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4641'.
[  838.629922][T18545] netlink: 'syz.2.4642': attribute type 3 has an invalid length.
[  838.640418][T18543] netlink: 'syz.1.4643': attribute type 10 has an invalid length.
[  838.665612][T18543] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4643'.
[  838.730141][T18543] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check.
[  838.941522][T18551] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4645'.
[  839.338071][T18557] syz.2.4647[18557] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  839.338485][T18557] syz.2.4647[18557] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  839.550621][T18567] netlink: 'syz.1.4650': attribute type 1 has an invalid length.
[  839.662364][T18567] netlink: 'syz.1.4650': attribute type 3 has an invalid length.
[  839.715046][T18567] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4650'.
[  839.799390][T18566] delete_channel: no stack
[  840.373741][T18576] netlink: 'syz.1.4652': attribute type 3 has an invalid length.
[  840.442323][T10709] tipc: Subscription rejected, illegal request
[  840.633688][T18581] netlink: 'syz.2.4654': attribute type 2 has an invalid length.
[  840.736184][T18581] netlink: 'syz.2.4654': attribute type 8 has an invalid length.
[  840.833481][T18581] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4654'.
[  841.431045][T18594] netlink: 'syz.0.4658': attribute type 3 has an invalid length.
[  842.389265][T18603] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4660'.
[  842.725036][T18613] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4663'.
[  842.836561][T18612] delete_channel: no stack
[  843.544088][T18627] validate_nla: 5 callbacks suppressed
[  843.544129][T18627] netlink: 'syz.0.4669': attribute type 21 has an invalid length.
[  843.599249][T18628] netlink: 'syz.0.4669': attribute type 1 has an invalid length.
[  843.607410][T18627] IPv6: NLM_F_CREATE should be specified when creating new route
[  843.648535][T18628] netlink: 14207 bytes leftover after parsing attributes in process `syz.0.4669'.
[  843.659394][T18627] IPv6: Can't replace route, no match found
[  844.447900][T18644] netlink: 'syz.0.4676': attribute type 10 has an invalid length.
[  844.476841][T18644] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4676'.
[  844.502277][T18644] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check.
[  844.783535][T18650] netlink: 'syz.3.4675': attribute type 10 has an invalid length.
[  844.807855][T18650] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4675'.
[  844.973614][T18650] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check.
[  846.736454][T18683] netlink: 'syz.4.4687': attribute type 41 has an invalid length.
[  850.195533][T18708] netlink: 'syz.4.4694': attribute type 10 has an invalid length.
[  850.254373][T18708] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4694'.
[  850.380180][T18708] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check.
[  852.045261][T18726] device syzkaller1 entered promiscuous mode
[  852.254127][T18733] FAULT_INJECTION: forcing a failure.
[  852.254127][T18733] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  852.303260][T18733] CPU: 1 PID: 18733 Comm: syz.4.4702 Not tainted syzkaller #0
[  852.310830][T18733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  852.320967][T18733] Call Trace:
[  852.324277][T18733]  <TASK>
[  852.327241][T18733]  dump_stack_lvl+0x188/0x24e
[  852.331965][T18733]  ? show_regs_print_info+0x12/0x12
[  852.337197][T18733]  ? load_image+0x410/0x410
[  852.341743][T18733]  ? __might_fault+0xa6/0x120
[  852.346463][T18733]  should_fail_ex+0x390/0x4c0
[  852.351186][T18733]  copyin+0x1b/0x120
[  852.355111][T18733]  _copy_from_iter+0x447/0x1130
[  852.360006][T18733]  ? copyout_mc+0x110/0x110
[  852.364539][T18733]  ? __virt_addr_valid+0x188/0x540
[  852.369683][T18733]  ? __virt_addr_valid+0x188/0x540
[  852.374826][T18733]  ? __virt_addr_valid+0x467/0x540
[  852.379982][T18733]  ? __phys_addr_symbol+0x2b/0x70
[  852.385050][T18733]  ? __check_object_size+0x4f6/0xa70
[  852.390370][T18733]  netlink_sendmsg+0x755/0xbd0
[  852.395200][T18733]  ? netlink_getsockopt+0x550/0x550
[  852.400433][T18733]  ? aa_sock_msg_perm+0x94/0x150
[  852.405411][T18733]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  852.410739][T18733]  ? security_socket_sendmsg+0x7c/0xa0
[  852.416225][T18733]  ? netlink_getsockopt+0x550/0x550
[  852.421470][T18733]  ____sys_sendmsg+0x5ed/0x9a0
[  852.426284][T18733]  ? __sys_sendmsg_sock+0x30/0x30
[  852.431338][T18733]  ? __import_iovec+0x306/0x510
[  852.436239][T18733]  ? import_iovec+0x6f/0xa0
[  852.440781][T18733]  ___sys_sendmsg+0x2a2/0x360
[  852.445500][T18733]  ? __sys_sendmsg+0x2a0/0x2a0
[  852.450326][T18733]  ? __lock_acquire+0x7bd0/0x7bd0
[  852.455426][T18733]  __se_sys_sendmsg+0x1c3/0x2b0
[  852.460316][T18733]  ? __x64_sys_sendmsg+0x80/0x80
[  852.465332][T18733]  ? lockdep_hardirqs_on+0x94/0x140
[  852.470571][T18733]  do_syscall_64+0x4c/0xa0
[  852.475021][T18733]  ? clear_bhb_loop+0x60/0xb0
[  852.479726][T18733]  ? clear_bhb_loop+0x60/0xb0
[  852.484456][T18733]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  852.490392][T18733] RIP: 0033:0x7f6f5239ce59
[  852.494844][T18733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  852.514485][T18733] RSP: 002b:00007f6f53292028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  852.522947][T18733] RAX: ffffffffffffffda RBX: 00007f6f52615fa0 RCX: 00007f6f5239ce59
[  852.530956][T18733] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000006
[  852.538958][T18733] RBP: 00007f6f53292090 R08: 0000000000000000 R09: 0000000000000000
[  852.546968][T18733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  852.554968][T18733] R13: 00007f6f52616038 R14: 00007f6f52615fa0 R15: 00007fff1e9713f8
[  852.563002][T18733]  </TASK>
[  853.183377][T18743] netlink: 'syz.0.4706': attribute type 21 has an invalid length.
[  853.235335][T18743] IPv6: Can't replace route, no match found
[  853.294587][T18745] netlink: 'syz.2.4707': attribute type 10 has an invalid length.
[  853.316149][T18745] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4707'.
[  853.333675][T18745] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check.
[  854.470649][ T5757] tipc: Subscription rejected, illegal request
[  854.483043][ T5757] tipc: Subscription rejected, illegal request
[  854.655082][T18767] netlink: 'syz.0.4715': attribute type 2 has an invalid length.
[  854.713703][T18767] netlink: 'syz.0.4715': attribute type 8 has an invalid length.
[  854.782309][T18767] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4715'.
[  854.792472][T18768] netlink: 'syz.2.4714': attribute type 2 has an invalid length.
[  854.863199][T18768] netlink: 'syz.2.4714': attribute type 8 has an invalid length.
[  854.904327][T18768] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4714'.
[  854.945918][T18772] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4718'.
[  854.980160][T18775] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4716'.
[  855.104317][T18777] device syzkaller1 entered promiscuous mode
[  855.834616][T18786] netlink: 'syz.2.4720': attribute type 21 has an invalid length.
[  855.856561][T18786] IPv6: NLM_F_CREATE should be specified when creating new route
[  855.887690][T18786] IPv6: Can't replace route, no match found
[  856.136903][T18788] netlink: 'syz.0.4721': attribute type 21 has an invalid length.
[  856.167726][T18788] IPv6: Can't replace route, no match found
[  856.304125][T18792] netlink: 'syz.2.4724': attribute type 10 has an invalid length.
[  856.343310][T18792] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4724'.
[  856.404711][T18792] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check.
[  856.459186][T18798] netlink: 'syz.4.4725': attribute type 3 has an invalid length.
[  856.469589][T18796] netlink: 'syz.0.4726': attribute type 3 has an invalid length.
[  856.694189][T18804] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.4727'.
[  856.754393][T18806] mac80211_hwsim hwsim34 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  857.264352][T10704] tipc: Subscription rejected, illegal request
[  857.300940][T18810] netlink: 'syz.0.4730': attribute type 2 has an invalid length.
[  857.333407][T18810] netlink: 'syz.0.4730': attribute type 8 has an invalid length.
[  857.341996][T18810] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4730'.
[  857.642298][T18820] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4733'.
[  857.738790][T18825] netlink: 'syz.0.4734': attribute type 21 has an invalid length.
[  857.810957][T18825] IPv6: Can't replace route, no match found
[  858.199228][T18831] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4736'.
[  858.528206][T18836] netlink: 'syz.4.4737': attribute type 21 has an invalid length.
[  858.550613][T18836] IPv6: Can't replace route, no match found
[  858.757876][T18843] netlink: 'syz.1.4739': attribute type 3 has an invalid length.
[  858.910424][T18847] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.4741'.
[  859.075534][T18857] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4743'.
[  859.086997][T18855] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.4740'.
[  859.115575][T18857] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check.
[  859.533474][ T4326] tipc: Subscription rejected, illegal request
[  859.618515][T18871] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4746'.
[  859.716718][T10704] wlan1: Trigger new scan to find an IBSS to join
[  859.968522][T18878] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4751'.
[  861.013824][T18889] validate_nla: 4 callbacks suppressed
[  861.013856][T18889] netlink: 'syz.3.4753': attribute type 21 has an invalid length.
[  861.068260][T18889] IPv6: NLM_F_CREATE should be specified when creating new route
[  861.099635][T18889] IPv6: Can't replace route, no match found
[  861.175017][T18892] netlink: 'syz.2.4755': attribute type 3 has an invalid length.
[  861.464562][T18896] netlink: 'syz.3.4758': attribute type 3 has an invalid length.
[  861.651503][T18899] device syzkaller1 entered promiscuous mode
[  862.047372][T18910] netlink: 'syz.1.4760': attribute type 10 has an invalid length.
[  862.095256][T18910] team0: Device hsr_slave_0 failed to register rx_handler
[  862.122882][T18920] netlink: 'syz.2.4763': attribute type 1 has an invalid length.
[  862.196721][T18915] netlink: 'syz.3.4762': attribute type 10 has an invalid length.
[  862.223797][T18915] __nla_validate_parse: 1 callbacks suppressed
[  862.223830][T18915] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4762'.
[  862.232297][T18920] netlink: 14207 bytes leftover after parsing attributes in process `syz.2.4763'.
[  862.300183][T18915] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check.
[  862.351945][T18918] netlink: 'syz.2.4763': attribute type 21 has an invalid length.
[  862.373601][T18918] IPv6: Can't replace route, no match found
[  862.534715][T18931] netlink: 'syz.4.4765': attribute type 10 has an invalid length.
[  862.717604][T18937] netlink: 'syz.3.4769': attribute type 3 has an invalid length.
[  862.743375][T10704] wlan1: Trigger new scan to find an IBSS to join
[  862.765170][T18936] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4770'.
[  862.794713][T18936] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  862.857137][T18936] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  862.989818][T18946] mac80211_hwsim hwsim27 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  863.465313][T18960] netlink: 'syz.4.4777': attribute type 2 has an invalid length.
[  863.606529][T18960] netlink: 180 bytes leftover after parsing attributes in process `syz.4.4777'.
[  863.649373][T18962] IPv6: Can't replace route, no match found
[  863.682351][T18962] netlink: 14207 bytes leftover after parsing attributes in process `syz.0.4778'.
[  864.760676][ T4326] wlan1: Creating new IBSS network, BSSID e6:3d:02:e1:67:36
[  865.560673][T18969] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4780'.
[  865.629203][T18969] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check.
[  866.024020][T18996] mac80211_hwsim hwsim32 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  866.158593][T19000] netlink: 16222 bytes leftover after parsing attributes in process `syz.4.4789'.
[  866.398030][T19010] validate_nla: 3 callbacks suppressed
[  866.398074][T19010] netlink: 'syz.1.4791': attribute type 3 has an invalid length.
[  866.445706][T19010] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4791'.
[  866.475351][T19011] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.4791'.
[  866.749452][ T5757] tipc: Subscription rejected, illegal request
[  866.788768][T19016] netlink: 'syz.4.4792': attribute type 29 has an invalid length.
[  866.821528][T19015] netlink: 'syz.0.4793': attribute type 2 has an invalid length.
[  866.843595][T19016] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4792'.
[  866.885544][T19015] netlink: 'syz.0.4793': attribute type 8 has an invalid length.
[  866.934355][T19016] netlink: 'syz.4.4792': attribute type 29 has an invalid length.
[  866.995911][T19014] device bridge_slave_1 entered promiscuous mode
[  867.361388][T19031] netlink: 'syz.1.4798': attribute type 10 has an invalid length.
[  867.391073][T19031] __nla_validate_parse: 4 callbacks suppressed
[  867.391115][T19031] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4798'.
[  867.441311][T19031] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check.
[  867.651279][T19030] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.4797'.
[  867.853894][T19044] netlink: 16222 bytes leftover after parsing attributes in process `syz.4.4802'.
[  867.890819][T19045] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4803'.
[  867.959309][T19050] netlink: 'syz.3.4804': attribute type 3 has an invalid length.
[  868.255605][T10709] tipc: Subscription rejected, illegal request
[  868.409693][T19057] netlink: 'syz.3.4807': attribute type 2 has an invalid length.
[  868.421495][T19060] FAULT_INJECTION: forcing a failure.
[  868.421495][T19060] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  868.435908][T19057] netlink: 'syz.3.4807': attribute type 8 has an invalid length.
[  868.446409][T19057] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4807'.
[  868.478604][T19060] CPU: 0 PID: 19060 Comm: syz.1.4809 Not tainted syzkaller #0
[  868.486228][T19060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  868.496334][T19060] Call Trace:
[  868.499671][T19060]  <TASK>
[  868.502664][T19060]  dump_stack_lvl+0x188/0x24e
[  868.507427][T19060]  ? show_regs_print_info+0x12/0x12
[  868.512722][T19060]  ? load_image+0x410/0x410
[  868.517303][T19060]  ? __lock_acquire+0x7bd0/0x7bd0
[  868.522437][T19060]  should_fail_ex+0x390/0x4c0
[  868.527191][T19060]  _copy_to_user+0x2c/0x130
[  868.531769][T19060]  bpf_test_finish+0x266/0x600
[  868.536643][T19060]  ? convert_skb_to___skb+0x420/0x420
[  868.542117][T19060]  ? bpf_test_init+0x119/0x140
[  868.546961][T19060]  bpf_prog_test_run_xdp+0x827/0xf80
[  868.552321][T19060]  ? __lock_acquire+0x7bd0/0x7bd0
[  868.557484][T19060]  ? dev_put+0x80/0x80
[  868.561722][T19060]  ? dev_put+0x80/0x80
[  868.565865][T19060]  bpf_prog_test_run+0x31c/0x390
[  868.570970][T19060]  __sys_bpf+0x62b/0x780
[  868.575309][T19060]  ? bpf_link_show_fdinfo+0x380/0x380
[  868.580823][T19060]  ? lock_chain_count+0x20/0x20
[  868.585776][T19060]  __x64_sys_bpf+0x78/0x90
[  868.590258][T19060]  do_syscall_64+0x4c/0xa0
[  868.594840][T19060]  ? clear_bhb_loop+0x60/0xb0
[  868.599570][T19060]  ? clear_bhb_loop+0x60/0xb0
[  868.604311][T19060]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  868.610278][T19060] RIP: 0033:0x7faee299ce59
[  868.614758][T19060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  868.634422][T19060] RSP: 002b:00007faee38fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  868.642904][T19060] RAX: ffffffffffffffda RBX: 00007faee2c15fa0 RCX: 00007faee299ce59
[  868.650928][T19060] RDX: 000000000000004c RSI: 0000200000002300 RDI: 000000000000000a
[  868.658951][T19060] RBP: 00007faee38fb090 R08: 0000000000000000 R09: 0000000000000000
[  868.666976][T19060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  868.675005][T19060] R13: 00007faee2c16038 R14: 00007faee2c15fa0 R15: 00007ffc39645ea8
[  868.683091][T19060]  </TASK>
[  868.753236][T10709] wlan1: Trigger new scan to find an IBSS to join
[  868.872217][T19067] netlink: 'syz.4.4810': attribute type 10 has an invalid length.
[  869.109125][T19067] team0: Port device geneve1 added
[  869.281395][T19094] netlink: 16222 bytes leftover after parsing attributes in process `syz.0.4816'.
[  869.346017][T19093] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4815'.
[  869.368025][T19093] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  869.421235][T19093] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  869.563831][T19102] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4819'.
[  869.573866][T19102] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check.
[  869.748630][T19109] IPv6: Can't replace route, no match found
[  869.758083][T19110] IPv6: Can't replace route, no match found
[  869.827874][T19109] netlink: 14207 bytes leftover after parsing attributes in process `syz.2.4821'.
[  869.858908][T19110] netlink: 14207 bytes leftover after parsing attributes in process `syz.0.4822'.
[  869.947791][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[  869.954229][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[  869.991475][ T5757] tipc: Subscription rejected, illegal request
[  870.682407][T19140] IPv6: Can't replace route, no match found
[  870.796848][T19146] IPv6: Can't replace route, no match found
[  870.919634][ T5757] tipc: Subscription rejected, illegal request
[  871.278651][T19154] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  871.308141][T19154] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  871.419131][T19169] validate_nla: 15 callbacks suppressed
[  871.419151][T19169] netlink: 'syz.0.4845': attribute type 2 has an invalid length.
[  871.926391][T19179] netlink: 'syz.4.4851': attribute type 21 has an invalid length.
[  871.972719][T19179] IPv6: Can't replace route, no match found
[  872.049385][T19179] netlink: 'syz.4.4851': attribute type 1 has an invalid length.
[  872.396721][T19184] netlink: 'syz.1.4853': attribute type 21 has an invalid length.
[  872.424954][T19184] IPv6: NLM_F_CREATE should be specified when creating new route
[  872.443838][T19184] IPv6: Can't replace route, no match found
[  872.478514][T19184] netlink: 'syz.1.4853': attribute type 1 has an invalid length.
[  872.489688][T10711] tipc: Subscription rejected, illegal request
[  872.524025][T19184] __nla_validate_parse: 8 callbacks suppressed
[  872.524060][T19184] netlink: 14207 bytes leftover after parsing attributes in process `syz.1.4853'.
[  872.598893][T19191] netlink: 'syz.3.4855': attribute type 2 has an invalid length.
[  872.613458][T19191] netlink: 'syz.3.4855': attribute type 8 has an invalid length.
[  872.621494][T19191] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4855'.
[  872.663876][T10711] wlan1: Trigger new scan to find an IBSS to join
[  872.930116][T19210] netlink: 'syz.3.4861': attribute type 10 has an invalid length.
[  873.152612][T19210] team0: Port device geneve1 added
[  873.305554][T19217] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4863'.
[  873.416242][T19221] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.4865'.
[  873.462947][T19226] netlink: 'syz.0.4867': attribute type 29 has an invalid length.
[  873.480172][T19226] netlink: 'syz.0.4867': attribute type 29 has an invalid length.
[  873.500991][T19224] FAULT_INJECTION: forcing a failure.
[  873.500991][T19224] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  873.515409][T19224] CPU: 0 PID: 19224 Comm: syz.0.4867 Not tainted syzkaller #0
[  873.522921][T19224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  873.533006][T19224] Call Trace:
[  873.536312][T19224]  <TASK>
[  873.539276][T19224]  dump_stack_lvl+0x188/0x24e
[  873.544027][T19224]  ? show_regs_print_info+0x12/0x12
[  873.549260][T19224]  ? load_image+0x410/0x410
[  873.553805][T19224]  ? __might_fault+0xa6/0x120
[  873.558526][T19224]  should_fail_ex+0x390/0x4c0
[  873.563251][T19224]  copyout+0x1b/0x120
[  873.567388][T19224]  _copy_to_iter+0x482/0x1050
[  873.572124][T19224]  ? iov_iter_init+0x1f0/0x1f0
[  873.576944][T19224]  ? __virt_addr_valid+0x188/0x540
[  873.582111][T19224]  ? __virt_addr_valid+0x467/0x540
[  873.587274][T19224]  ? __phys_addr_symbol+0x2b/0x70
[  873.592339][T19224]  ? __check_object_size+0x4f6/0xa70
[  873.597673][T19224]  __skb_datagram_iter+0xde/0x740
[  873.602740][T19224]  ? sock_load_diag_module+0x130/0x130
[  873.608237][T19224]  ? skb_copy_datagram_iter+0x290/0x290
[  873.613867][T19224]  skb_copy_datagram_iter+0xd7/0x290
[  873.619219][T19224]  netlink_recvmsg+0x2d0/0xe00
[  873.624022][T19224]  ? netlink_sendmsg+0xbd0/0xbd0
[  873.628999][T19224]  ? aa_af_perm+0x340/0x340
[  873.633546][T19224]  ? __might_fault+0xa6/0x120
[  873.638253][T19224]  ? bpf_lsm_socket_recvmsg+0x5/0x10
[  873.643594][T19224]  ? security_socket_recvmsg+0x85/0xb0
[  873.649094][T19224]  ? netlink_sendmsg+0xbd0/0xbd0
[  873.654076][T19224]  ____sys_recvmsg+0x2c8/0x5b0
[  873.658932][T19224]  ? __sys_recvmsg_sock+0x40/0x40
[  873.664002][T19224]  ? import_iovec+0x6f/0xa0
[  873.668545][T19224]  ___sys_recvmsg+0x210/0x590
[  873.673257][T19224]  ? __sys_recvmsg+0x2a0/0x2a0
[  873.678057][T19224]  ? trace_call_bpf+0xbf/0x6b0
[  873.682860][T19224]  ? trace_call_bpf+0x5d6/0x6b0
[  873.687757][T19224]  ? __fget_files+0x3fc/0x460
[  873.692688][T19224]  __x64_sys_recvmsg+0x20d/0x2e0
[  873.697684][T19224]  ? perf_trace_preemptirq_template+0x268/0x320
[  873.704004][T19224]  ? ___sys_recvmsg+0x590/0x590
[  873.708902][T19224]  ? lockdep_hardirqs_on+0x94/0x140
[  873.714153][T19224]  do_syscall_64+0x4c/0xa0
[  873.718608][T19224]  ? clear_bhb_loop+0x60/0xb0
[  873.723323][T19224]  ? clear_bhb_loop+0x60/0xb0
[  873.728029][T19224]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  873.733969][T19224] RIP: 0033:0x7f9fe179ce59
[  873.738412][T19224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  873.758041][T19224] RSP: 002b:00007f9fe26a5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  873.766487][T19224] RAX: ffffffffffffffda RBX: 00007f9fe1a15fa0 RCX: 00007f9fe179ce59
[  873.774537][T19224] RDX: 0000000000002020 RSI: 0000200000002140 RDI: 0000000000000003
[  873.782549][T19224] RBP: 00007f9fe26a5090 R08: 0000000000000000 R09: 0000000000000000
[  873.790567][T19224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  873.798564][T19224] R13: 00007f9fe1a16038 R14: 00007f9fe1a15fa0 R15: 00007ffc5bb55158
[  873.806576][T19224]  </TASK>
[  874.131910][ T5757] tipc: Subscription rejected, illegal request
[  874.232386][T19240] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4871'.
[  874.497384][T19244] mac80211_hwsim hwsim32 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  874.523882][T19246] IPv6: Can't replace route, no match found
[  874.541907][T19250] netlink: 14207 bytes leftover after parsing attributes in process `syz.2.4873'.
[  874.743467][T19256] syz.3.4877[19256] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  874.743831][T19256] syz.3.4877[19256] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  875.561543][T19261] team0: Port device geneve1 added
[  875.799783][T19270] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4885'.
[  875.870481][T19265] syz.0.4880[19265] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  875.870782][T19265] syz.0.4880[19265] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  876.104189][T10711] tipc: Subscription rejected, illegal request
[  876.173158][T19283] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4886'.
[  876.673479][T10711] wlan1: Trigger new scan to find an IBSS to join
[  876.871354][T19287] mac80211_hwsim hwsim34 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  876.891841][T19289] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4888'.
[  877.106685][T19297] validate_nla: 13 callbacks suppressed
[  877.106730][T19297] netlink: 'syz.1.4890': attribute type 21 has an invalid length.
[  877.141299][T19297] IPv6: Can't replace route, no match found
[  877.157171][T19297] netlink: 'syz.1.4890': attribute type 1 has an invalid length.
[  877.183239][T19297] netlink: 14207 bytes leftover after parsing attributes in process `syz.1.4890'.
[  877.441364][T19305] syz.4.4893[19305] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  877.442653][T19305] syz.4.4893[19305] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  877.505018][T19300] netlink: 'syz.3.4892': attribute type 3 has an invalid length.
[  878.344824][T19317] FAULT_INJECTION: forcing a failure.
[  878.344824][T19317] name failslab, interval 1, probability 0, space 0, times 0
[  878.398577][T19317] CPU: 1 PID: 19317 Comm: syz.2.4897 Not tainted syzkaller #0
[  878.406135][T19317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  878.416237][T19317] Call Trace:
[  878.419566][T19317]  <TASK>
[  878.422531][T19317]  dump_stack_lvl+0x188/0x24e
[  878.427257][T19317]  ? show_regs_print_info+0x12/0x12
[  878.432497][T19317]  ? load_image+0x410/0x410
[  878.437060][T19317]  ? __might_sleep+0xd0/0xd0
[  878.441703][T19317]  ? __lock_acquire+0x7bd0/0x7bd0
[  878.446794][T19317]  should_fail_ex+0x390/0x4c0
[  878.451552][T19317]  should_failslab+0x5/0x20
[  878.456100][T19317]  slab_pre_alloc_hook+0x59/0x300
[  878.461198][T19317]  ? __get_vm_area_node+0x122/0x330
[  878.466440][T19317]  __kmem_cache_alloc_node+0x4f/0x270
[  878.471893][T19317]  ? __get_vm_area_node+0x122/0x330
[  878.477228][T19317]  kmalloc_node_trace+0x22/0xe0
[  878.482145][T19317]  __get_vm_area_node+0x122/0x330
[  878.487242][T19317]  __vmalloc_node_range+0x357/0x1380
[  878.492574][T19317]  ? bpf_prog_alloc_no_stats+0x37/0x3a0
[  878.498188][T19317]  ? perf_trace_preemptirq_template+0x268/0x320
[  878.504489][T19317]  ? free_vm_area+0x50/0x50
[  878.509026][T19317]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  878.515225][T19317]  ? bpf_prog_alloc_no_stats+0x37/0x3a0
[  878.520799][T19317]  __vmalloc+0x76/0x80
[  878.524894][T19317]  ? bpf_prog_alloc_no_stats+0x37/0x3a0
[  878.530512][T19317]  bpf_prog_alloc_no_stats+0x37/0x3a0
[  878.535927][T19317]  ? bpf_prog_alloc+0x13/0x1b0
[  878.540736][T19317]  bpf_prog_alloc+0x1c/0x1b0
[  878.545395][T19317]  bpf_prog_load+0x7d4/0x1530
[  878.550126][T19317]  ? map_freeze+0x390/0x390
[  878.554664][T19317]  ? __might_fault+0xa6/0x120
[  878.559362][T19317]  ? __might_fault+0xa6/0x120
[  878.564051][T19317]  ? __might_fault+0xc2/0x120
[  878.568744][T19317]  ? __might_fault+0xa6/0x120
[  878.573431][T19317]  ? bpf_lsm_bpf+0x5/0x10
[  878.577780][T19317]  ? security_bpf+0x7a/0xa0
[  878.582318][T19317]  __sys_bpf+0x5b8/0x780
[  878.586586][T19317]  ? bpf_link_show_fdinfo+0x380/0x380
[  878.591995][T19317]  ? lock_chain_count+0x20/0x20
[  878.596880][T19317]  __x64_sys_bpf+0x78/0x90
[  878.601319][T19317]  do_syscall_64+0x4c/0xa0
[  878.605751][T19317]  ? clear_bhb_loop+0x60/0xb0
[  878.610437][T19317]  ? clear_bhb_loop+0x60/0xb0
[  878.615133][T19317]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  878.621046][T19317] RIP: 0033:0x7fd54af9ce59
[  878.625480][T19317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  878.645101][T19317] RSP: 002b:00007fd54bf30028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  878.653539][T19317] RAX: ffffffffffffffda RBX: 00007fd54b215fa0 RCX: 00007fd54af9ce59
[  878.661529][T19317] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005
[  878.669516][T19317] RBP: 00007fd54bf30090 R08: 0000000000000000 R09: 0000000000000000
[  878.677497][T19317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  878.685476][T19317] R13: 00007fd54b216038 R14: 00007fd54b215fa0 R15: 00007ffe2cef5658
[  878.693469][T19317]  </TASK>
[  878.890562][T10711] tipc: Subscription rejected, illegal request
[  878.949960][T19326] netlink: 'syz.4.4901': attribute type 2 has an invalid length.
[  878.955005][T19317] syz.2.4897: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz2,mems_allowed=0-1
[  878.970584][T19326] netlink: 'syz.4.4901': attribute type 8 has an invalid length.
[  878.994294][T19317] CPU: 0 PID: 19317 Comm: syz.2.4897 Not tainted syzkaller #0
[  879.001834][T19317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  879.011952][T19317] Call Trace:
[  879.015287][T19317]  <TASK>
[  879.018268][T19317]  dump_stack_lvl+0x188/0x24e
[  879.019281][T19326] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4901'.
[  879.022982][T19317]  ? cpuset_print_current_mems_allowed+0x1b/0x360
[  879.023020][T19317]  ? show_regs_print_info+0x12/0x12
[  879.023051][T19317]  ? load_image+0x410/0x410
[  879.023096][T19317]  ? __rcu_read_unlock+0x78/0xd0
[  879.023194][T19317]  ? cpuset_print_current_mems_allowed+0x1b/0x360
[  879.059835][T19317]  ? cpuset_print_current_mems_allowed+0x2e3/0x360
[  879.066406][T19317]  warn_alloc+0x242/0x330
[  879.070772][T19317]  ? __get_vm_area_node+0x122/0x330
[  879.076029][T19317]  ? zone_watermark_ok_safe+0x270/0x270
[  879.081628][T19317]  ? rcu_is_watching+0x11/0xa0
[  879.086484][T19317]  ? __get_vm_area_node+0x318/0x330
[  879.091745][T19317]  __vmalloc_node_range+0x37c/0x1380
[  879.097071][T19317]  ? perf_trace_preemptirq_template+0x268/0x320
[  879.103403][T19317]  ? free_vm_area+0x50/0x50
[  879.108027][T19317]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  879.114246][T19317]  ? bpf_prog_alloc_no_stats+0x37/0x3a0
[  879.119874][T19317]  __vmalloc+0x76/0x80
[  879.123979][T19317]  ? bpf_prog_alloc_no_stats+0x37/0x3a0
[  879.129563][T19317]  bpf_prog_alloc_no_stats+0x37/0x3a0
[  879.134966][T19317]  ? bpf_prog_alloc+0x13/0x1b0
[  879.139769][T19317]  bpf_prog_alloc+0x1c/0x1b0
[  879.144412][T19317]  bpf_prog_load+0x7d4/0x1530
[  879.149150][T19317]  ? map_freeze+0x390/0x390
[  879.153688][T19317]  ? __might_fault+0xa6/0x120
[  879.158423][T19317]  ? __might_fault+0xa6/0x120
[  879.163135][T19317]  ? __might_fault+0xc2/0x120
[  879.167841][T19317]  ? __might_fault+0xa6/0x120
[  879.172571][T19317]  ? bpf_lsm_bpf+0x5/0x10
[  879.176948][T19317]  ? security_bpf+0x7a/0xa0
[  879.181517][T19317]  __sys_bpf+0x5b8/0x780
[  879.185819][T19317]  ? bpf_link_show_fdinfo+0x380/0x380
[  879.191255][T19317]  ? lock_chain_count+0x20/0x20
[  879.196171][T19317]  __x64_sys_bpf+0x78/0x90
[  879.200636][T19317]  do_syscall_64+0x4c/0xa0
[  879.205081][T19317]  ? clear_bhb_loop+0x60/0xb0
[  879.209789][T19317]  ? clear_bhb_loop+0x60/0xb0
[  879.214498][T19317]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  879.220423][T19317] RIP: 0033:0x7fd54af9ce59
[  879.224868][T19317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  879.244512][T19317] RSP: 002b:00007fd54bf30028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  879.252979][T19317] RAX: ffffffffffffffda RBX: 00007fd54b215fa0 RCX: 00007fd54af9ce59
[  879.260976][T19317] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005
[  879.268986][T19317] RBP: 00007fd54bf30090 R08: 0000000000000000 R09: 0000000000000000
[  879.276987][T19317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  879.284987][T19317] R13: 00007fd54b216038 R14: 00007fd54b215fa0 R15: 00007ffe2cef5658
[  879.293025][T19317]  </TASK>
[  879.333437][T19324] syz.3.4900[19324] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  879.333870][T19324] syz.3.4900[19324] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  879.409066][T19317] Mem-Info:
[  879.433477][T19317] active_anon:32041 inactive_anon:0 isolated_anon:0
[  879.433477][T19317]  active_file:21968 inactive_file:40270 isolated_file:0
[  879.433477][T19317]  unevictable:768 dirty:257 writeback:0
[  879.433477][T19317]  slab_reclaimable:21625 slab_unreclaimable:93822
[  879.433477][T19317]  mapped:36260 shmem:21861 pagetables:707
[  879.433477][T19317]  sec_pagetables:0 bounce:0
[  879.433477][T19317]  kernel_misc_reclaimable:0
[  879.433477][T19317]  free:1288664 free_pcp:14681 free_cma:0
[  879.535131][T19332] mac80211_hwsim hwsim27 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  879.543474][T19317] Node 0 active_anon:124864kB inactive_anon:0kB active_file:87872kB inactive_file:160880kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:146140kB dirty:1028kB writeback:0kB shmem:82608kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10164kB pagetables:2828kB sec_pagetables:0kB all_unreclaimable? no
[  879.638880][T19317] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  879.703609][T19317] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  879.771745][T19317] lowmem_reserve[]: 0 2527 2528 2528 2528
[  879.788167][T19317] Node 0 DMA32 free:1262164kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:125872kB inactive_anon:0kB active_file:87872kB inactive_file:160880kB unevictable:1536kB writepending:1048kB present:3129332kB managed:2592972kB mlocked:0kB bounce:0kB free_pcp:21436kB local_pcp:6072kB free_cma:0kB
[  879.923130][T19317] lowmem_reserve[]: 0 0 1 1 1
[  879.938359][T19317] Node 0 Normal free:4kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB
[  880.021396][T19342] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.4907'.
[  880.024981][T19317] lowmem_reserve[]: 0 0 0 0 0
[  880.043276][T19317] Node 1 Normal free:3892184kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:24216kB local_pcp:11060kB free_cma:0kB
[  880.073659][ T4290] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18
[  880.103307][T19317] lowmem_reserve[]: 0 0 0 0 0
[  880.108177][T19317] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  880.131438][T19317] Node 0 DMA32: 3*4kB (UME) 265*8kB (UME) 590*16kB (UME) 484*32kB (UME) 706*64kB (UME) 299*128kB (UME) 190*256kB (UM) 110*512kB (UM) 58*1024kB (UME) 15*2048kB (UME) 233*4096kB (UM) = 1259956kB
[  880.161054][T19317] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB
[  880.173343][T19317] Node 1 Normal: 204*4kB (UE) 51*8kB (UE) 23*16kB (UME) 17*32kB (UME) 10*64kB (UME) 6*128kB (UME) 4*256kB (UME) 3*512kB (UME) 1*1024kB (U) 1*2048kB (E) 948*4096kB (M) = 3892184kB
[  880.209006][T19317] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  880.222824][T19348] FAULT_INJECTION: forcing a failure.
[  880.222824][T19348] name failslab, interval 1, probability 0, space 0, times 0
[  880.236517][T19317] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  880.248548][T19317] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  880.263756][T19317] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  880.283115][T19317] 84117 total pagecache pages
[  880.287905][T19317] 0 pages in swap cache
[  880.292093][T19317] Free swap  = 124996kB
[  880.298043][T19348] CPU: 0 PID: 19348 Comm: syz.3.4905 Not tainted syzkaller #0
[  880.305555][T19348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  880.315645][T19348] Call Trace:
[  880.318954][T19348]  <TASK>
[  880.321917][T19348]  dump_stack_lvl+0x188/0x24e
[  880.326639][T19348]  ? sctp_sendmsg+0x1686/0x2940
[  880.331537][T19348]  ? ___sys_sendmsg+0x2a2/0x360
[  880.336439][T19348]  ? show_regs_print_info+0x12/0x12
[  880.341688][T19348]  ? load_image+0x410/0x410
[  880.346255][T19348]  should_fail_ex+0x390/0x4c0
[  880.350994][T19348]  should_failslab+0x5/0x20
[  880.355547][T19348]  slab_pre_alloc_hook+0x59/0x300
[  880.360598][T19348]  ? sctp_add_bind_addr+0x89/0x350
[  880.365737][T19348]  __kmem_cache_alloc_node+0x4f/0x270
[  880.371129][T19348]  ? sctp_add_bind_addr+0x89/0x350
[  880.376260][T19348]  kmalloc_trace+0x26/0xe0
[  880.380709][T19348]  sctp_add_bind_addr+0x89/0x350
[  880.385659][T19348]  sctp_copy_local_addr_list+0x317/0x4d0
[  880.391305][T19348]  ? sctp_copy_local_addr_list+0xa0/0x4d0
[  880.397041][T19348]  ? sctp_do_8_2_transport_strike+0x900/0x900
[  880.403136][T19348]  ? sctp_v4_is_any+0x31/0x50
[  880.407846][T19348]  ? sctp_copy_one_addr+0x93/0x660
[  880.413017][T19348]  sctp_bind_addr_copy+0xaf/0x3c0
[  880.418065][T19348]  ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190
[  880.424421][T19348]  sctp_connect_new_asoc+0x2f5/0x6a0
[  880.429720][T19348]  ? __sctp_connect+0xd80/0xd80
[  880.434581][T19348]  ? __local_bh_enable_ip+0x136/0x1c0
[  880.439973][T19348]  ? _local_bh_enable+0xa0/0xa0
[  880.444835][T19348]  ? sctp_endpoint_lookup_assoc+0x77/0x260
[  880.450665][T19348]  ? sctp_endpoint_lookup_assoc+0x77/0x260
[  880.456508][T19348]  ? bpf_lsm_sctp_bind_connect+0x5/0x10
[  880.462126][T19348]  ? security_sctp_bind_connect+0x85/0xb0
[  880.467872][T19348]  sctp_sendmsg+0x1686/0x2940
[  880.472579][T19348]  ? sctp_getsockopt+0x8a0/0x8a0
[  880.477548][T19348]  ? __might_fault+0xa6/0x120
[  880.482245][T19348]  ? aa_af_perm+0x340/0x340
[  880.486774][T19348]  ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0
[  880.493216][T19348]  ? inet_sendmsg+0x7a/0x2a0
[  880.497822][T19348]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  880.503126][T19348]  ? inet_send_prepare+0x250/0x250
[  880.508258][T19348]  ____sys_sendmsg+0x5ed/0x9a0
[  880.513084][T19348]  ? __sys_sendmsg_sock+0x30/0x30
[  880.518127][T19348]  ? __import_iovec+0x306/0x510
[  880.523046][T19348]  ? import_iovec+0x6f/0xa0
[  880.527597][T19348]  ___sys_sendmsg+0x2a2/0x360
[  880.532303][T19348]  ? __sys_sendmsg+0x2a0/0x2a0
[  880.537105][T19348]  ? __lock_acquire+0x7bd0/0x7bd0
[  880.542181][T19348]  __se_sys_sendmsg+0x1c3/0x2b0
[  880.547057][T19348]  ? __x64_sys_sendmsg+0x80/0x80
[  880.552027][T19348]  ? lockdep_hardirqs_on+0x94/0x140
[  880.557354][T19348]  do_syscall_64+0x4c/0xa0
[  880.561785][T19348]  ? clear_bhb_loop+0x60/0xb0
[  880.566481][T19348]  ? clear_bhb_loop+0x60/0xb0
[  880.571191][T19348]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  880.577107][T19348] RIP: 0033:0x7fc1c7d9ce59
[  880.581542][T19348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  880.601197][T19348] RSP: 002b:00007fc1c8d31028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  880.609625][T19348] RAX: ffffffffffffffda RBX: 00007fc1c8015fa0 RCX: 00007fc1c7d9ce59
[  880.617613][T19348] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000003
[  880.625598][T19348] RBP: 00007fc1c8d31090 R08: 0000000000000000 R09: 0000000000000000
[  880.633582][T19348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  880.641568][T19348] R13: 00007fc1c8016038 R14: 00007fc1c8015fa0 R15: 00007ffd4e2b0478
[  880.649568][T19348]  </TASK>
[  880.663406][T10709] wlan1: Trigger new scan to find an IBSS to join
[  880.673967][T19317] Total swap = 124996kB
[  880.680548][T10711] wlan1: Trigger new scan to find an IBSS to join
[  880.683938][T19317] 2097051 pages RAM
[  880.690834][T19317] 0 pages HighMem/MovableOnly
[  880.703143][T19317] 415207 pages reserved
[  880.707427][T19317] 0 pages cma reserved
[  880.717318][T19345] mac80211_hwsim hwsim27 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  880.884218][T19354] syz.2.4909[19354] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  880.884528][T19354] syz.2.4909[19354] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  880.985114][T19356] netlink: 'syz.0.4910': attribute type 3 has an invalid length.
[  881.278434][T10709] tipc: Subscription rejected, illegal request
[  881.364439][T19368] netlink: 'syz.1.4914': attribute type 2 has an invalid length.
[  881.394000][T19368] netlink: 'syz.1.4914': attribute type 8 has an invalid length.
[  881.425170][T19368] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4914'.
[  882.082396][T19377] mac80211_hwsim hwsim27 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  882.121939][T19374] syz.1.4916[19374] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  882.122057][T19374] syz.1.4916[19374] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  882.743867][T10709] wlan1: Creating new IBSS network, BSSID d2:bd:7d:9b:e0:a1
[  882.753341][ T5757] wlan1: Trigger new scan to find an IBSS to join
[  884.919323][ T5757] wlan1: Creating new IBSS network, BSSID 62:36:e9:0c:58:20
[  885.003914][T19387] mac80211_hwsim hwsim34 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  885.014057][T10711] ------------[ cut here ]------------
[  885.019986][T10711] WARNING: CPU: 0 PID: 10711 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x419/0x4a0
[  885.030203][T10711] Modules linked in:
[  885.034184][T10711] CPU: 0 PID: 10711 Comm: kworker/u4:34 Not tainted syzkaller #0
[  885.041943][T10711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  885.052157][T10711] Workqueue: cfg80211 cfg80211_event_work
[  885.058062][T10711] RIP: 0010:__cfg80211_ibss_joined+0x419/0x4a0
[  885.064303][T10711] Code: 04 25 28 00 00 00 48 3b 44 24 60 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 b0 d7 ef f7 0f 0b eb bf e8 a7 d7 ef f7 <0f> 0b eb b6 e8 9e d7 ef f7 0f 0b e9 82 fd ff ff e8 92 d7 ef f7 0f
[  885.083985][T10711] RSP: 0018:ffffc900038e7ac0 EFLAGS: 00010293
[  885.090107][T10711] RAX: ffffffff89924969 RBX: 1ffff9200071cf5c RCX: ffff88802a251e00
[  885.098141][T10711] RDX: 0000000000000000 RSI: ffffffff8a8c17a0 RDI: ffffffff8adee1a0
[  885.106199][T10711] RBP: ffffc900038e7b70 R08: ffffffff90af22a7 R09: 1ffffffff215e454
[  885.114236][T10711] R10: dffffc0000000000 R11: fffffbfff215e455 R12: ffff888057cab5f8
[  885.122252][T10711] R13: dffffc0000000000 R14: 000000000000001f R15: ffff888057fe0c90
[  885.130301][T10711] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  885.139329][T10711] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  885.146006][T10711] CR2: 000056014be18168 CR3: 0000000020bef000 CR4: 00000000003506f0
[  885.154049][T10711] DR0: 0000200000000300 DR1: 0000200000000300 DR2: 0000000000000000
[  885.162063][T10711] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  885.170114][T10711] Call Trace:
[  885.173472][T10711]  <TASK>
[  885.176446][T10711]  ? trace_rdev_return_void+0x240/0x240
[  885.182052][T10711]  cfg80211_process_wdev_events+0x359/0x4d0
[  885.188061][T10711]  ? process_one_work+0x7b4/0x1160
[  885.193245][T10711]  cfg80211_process_rdev_events+0x9d/0x110
[  885.199099][T10711]  cfg80211_event_work+0x2b/0x40
[  885.204147][T10711]  process_one_work+0x8ab/0x1160
[  885.209180][T10711]  ? worker_detach_from_pool+0x240/0x240
[  885.214898][T10711]  ? _raw_spin_lock_irq+0x86/0xf0
[  885.220003][T10711]  ? _raw_spin_lock_irq+0xb7/0xf0
[  885.225166][T10711]  ? _raw_spin_lock_irqsave+0x100/0x100
[  885.230762][T10711]  ? wq_worker_running+0x97/0x190
[  885.235883][T10711]  worker_thread+0xaf5/0x12a0
[  885.240622][T10711]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  885.246625][T10711]  kthread+0x29d/0x330
[  885.250799][T10711]  ? worker_clr_flags+0x1a0/0x1a0
[  885.255909][T10711]  ? kthread_blkcg+0xd0/0xd0
[  885.260545][T10711]  ret_from_fork+0x1f/0x30
[  885.265090][T10711]  </TASK>
[  885.268155][T10711] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  885.275454][T10711] CPU: 0 PID: 10711 Comm: kworker/u4:34 Not tainted syzkaller #0
[  885.283231][T10711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  885.293322][T10711] Workqueue: cfg80211 cfg80211_event_work
[  885.299169][T10711] Call Trace:
[  885.302490][T10711]  <TASK>
[  885.305455][T10711]  dump_stack_lvl+0x188/0x24e
[  885.310171][T10711]  ? memcpy+0x3c/0x60
[  885.314188][T10711]  ? show_regs_print_info+0x12/0x12
[  885.319423][T10711]  ? load_image+0x410/0x410
[  885.323984][T10711]  panic+0x2d3/0x710
[  885.327921][T10711]  ? bpf_jit_dump+0xd0/0xd0
[  885.332456][T10711]  ? ret_from_fork+0x1f/0x30
[  885.337080][T10711]  __warn+0x2f8/0x4f0
[  885.341082][T10711]  ? __cfg80211_ibss_joined+0x419/0x4a0
[  885.346644][T10711]  ? __cfg80211_ibss_joined+0x419/0x4a0
[  885.352231][T10711]  report_bug+0x2ba/0x4f0
[  885.356581][T10711]  ? __cfg80211_ibss_joined+0x419/0x4a0
[  885.362153][T10711]  handle_bug+0x3a/0x70
[  885.366331][T10711]  exc_invalid_op+0x16/0x40
[  885.370845][T10711]  asm_exc_invalid_op+0x16/0x20
[  885.375718][T10711] RIP: 0010:__cfg80211_ibss_joined+0x419/0x4a0
[  885.381896][T10711] Code: 04 25 28 00 00 00 48 3b 44 24 60 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 b0 d7 ef f7 0f 0b eb bf e8 a7 d7 ef f7 <0f> 0b eb b6 e8 9e d7 ef f7 0f 0b e9 82 fd ff ff e8 92 d7 ef f7 0f
[  885.401574][T10711] RSP: 0018:ffffc900038e7ac0 EFLAGS: 00010293
[  885.407660][T10711] RAX: ffffffff89924969 RBX: 1ffff9200071cf5c RCX: ffff88802a251e00
[  885.415653][T10711] RDX: 0000000000000000 RSI: ffffffff8a8c17a0 RDI: ffffffff8adee1a0
[  885.423650][T10711] RBP: ffffc900038e7b70 R08: ffffffff90af22a7 R09: 1ffffffff215e454
[  885.431647][T10711] R10: dffffc0000000000 R11: fffffbfff215e455 R12: ffff888057cab5f8
[  885.439639][T10711] R13: dffffc0000000000 R14: 000000000000001f R15: ffff888057fe0c90
[  885.447628][T10711]  ? __cfg80211_ibss_joined+0x419/0x4a0
[  885.453204][T10711]  ? trace_rdev_return_void+0x240/0x240
[  885.458770][T10711]  cfg80211_process_wdev_events+0x359/0x4d0
[  885.464701][T10711]  ? process_one_work+0x7b4/0x1160
[  885.469842][T10711]  cfg80211_process_rdev_events+0x9d/0x110
[  885.475669][T10711]  cfg80211_event_work+0x2b/0x40
[  885.480632][T10711]  process_one_work+0x8ab/0x1160
[  885.485597][T10711]  ? worker_detach_from_pool+0x240/0x240
[  885.491243][T10711]  ? _raw_spin_lock_irq+0x86/0xf0
[  885.496297][T10711]  ? _raw_spin_lock_irq+0xb7/0xf0
[  885.501339][T10711]  ? _raw_spin_lock_irqsave+0x100/0x100
[  885.506905][T10711]  ? wq_worker_running+0x97/0x190
[  885.511940][T10711]  worker_thread+0xaf5/0x12a0
[  885.516647][T10711]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  885.522567][T10711]  kthread+0x29d/0x330
[  885.526653][T10711]  ? worker_clr_flags+0x1a0/0x1a0
[  885.531709][T10711]  ? kthread_blkcg+0xd0/0xd0
[  885.536323][T10711]  ret_from_fork+0x1f/0x30
[  885.540763][T10711]  </TASK>
[  885.544367][T10711] Kernel Offset: disabled
[  885.548798][T10711] Rebooting in 86400 seconds..