last executing test programs:

2m47.761842692s ago: executing program 2 (id=1941):
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYRES32=0x0], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000005000000000000008510000002000000850000007600000095000000000000009500a50500000000"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$kcm(0xa, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2, @perf_config_ext={0x9}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x2, 0x1000000000000002, 0x0)
sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
sendmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)="a6", 0xffffff58}], 0x1}, 0x40001)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a40)={&(0x7f0000000b40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6e, 0x6e, 0x6, [@datasec={0xd, 0x8, 0x0, 0xf, 0x2, [{0x1, 0x7, 0x5}, {0x5, 0x3, 0x5}, {0x3, 0x0, 0x9}, {0x5, 0x1, 0x25f}, {0x2, 0x1, 0x7}, {0x4, 0xfffffffe, 0x3}, {0x1, 0x677}, {0x2, 0x3, 0x8}], "0568"}]}, {0x0, [0x2e, 0x0, 0x5f, 0x2e]}}, &(0x7f0000000c00)=""/127, 0x8e, 0x7f, 0x0, 0x1, 0x10000}, 0x28)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000d00)={0x0, 0x5, 0x8}, 0xc)

2m46.577413631s ago: executing program 2 (id=1951):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e7", 0x4b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000002000)=""/4087, 0xff7}, {&(0x7f0000000300)=""/166, 0xa6}, {&(0x7f0000000e80)=""/49, 0x31}], 0x3}, 0x22)

2m45.423882347s ago: executing program 2 (id=1963):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000080000000000000064ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0xff, 0x2, 0x3, 0x118c0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x1, 0x5}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140), 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0x1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xa, 0x4d9d69bb, 0x2, 0x8, 0x2000, 0xffffffffffffffff, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x3}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r0, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffff31, &(0x7f0000001440)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffcac, 0xfffffffffffffffd}}, 0x10)

2m44.550803697s ago: executing program 2 (id=1967):
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x13, 0x20, 0x2, 0x0, 0x20000000002, 0x521a9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0xf}, 0x8008, 0xca, 0x0, 0x1, 0x0, 0x40000010, 0x0, 0x0, 0x2000000, 0x0, 0x4}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$tipc(0x1e, 0x4, 0x0, 0x0)
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0xfffffdfc, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, 0x0}, 0x0)
perf_event_open(&(0x7f0000000840)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0xffffffff, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x29, 0x5, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x1000, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x50)
r4 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)="5c00000014006b03000000d86e6c1d0010ffff0af32c6e021fffffff000000000f00000017d3a705251e6182949a369f3d3b48dfd8cd3f9367c1fa51f60a64c9f4d4938037e786a6d0bdd7000000000000", 0x51}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x200040c0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r3, &(0x7f0000000600), 0x0}, 0x20)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000b40)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1300000024000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES64=0x0], 0x20)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000a80)="d80000001d0081044e81f777db44b904021d080201000000040000a1bc0001000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c16fb4007134cf6ee08000a0e408e8d8ef075c11503c6bbace801bcb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322107c9fd6", 0x81}, {&(0x7f00000006c0)="54f6d4d87eb3f140c5", 0x9}, {&(0x7f0000000980)="027a64c0072ebbb1512b328dda11b4efd4ba07fc642b7e012bea071dbbdea51e41958755533ccce04d3e635cbe848495e723490d8e93db224d82d4fbfe76bd22fd358cd467795ad7febfc220d72f", 0x4e}], 0x3, 0x0, 0x0, 0x7400}, 0x10)
r6 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000016000b63d25a80648c25940121", 0x11}, {&(0x7f0000000280)="e26248", 0x3}], 0x2}, 0x40050)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000900)='|#^*)\x00')
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)}, 0x8090)
r7 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @dev, 0x1}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000300)='`', 0x1}], 0x1}, 0x0)
socket$kcm(0x2, 0xa, 0x2)

2m43.511721686s ago: executing program 2 (id=1975):
socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB='@\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400000002000000050000000000a8"], 0x50)
r0 = socket$kcm(0xa, 0x5, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)="d80000001a0081044e81f782db4cb904021d0800fe007c05e81156a10a0015000200142603600e12080010007a010401a8001600200002400400077c035c0400a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7eef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e101ce81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a9412dd09206da6f7ddef7b39b27ee", 0xd8}], 0x1}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x6, &(0x7f0000000040), 0x4)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0xa, 0x2, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x6}, 0x5000, 0x0, 0x0, 0x0, 0x0, 0xa}, 0xffffffffffffffff, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(r2, 0x29, 0x23, &(0x7f0000000040), 0xcf)
sendmsg$kcm(r2, &(0x7f0000001240)={&(0x7f0000000940)=@generic={0xa, "8ab77fa26849ff263ef30c98b353011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'bond_slave_1\x00', 0x8000})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open$cgroup(&(0x7f00000001c0)={0x1, 0x80, 0x19, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0xffffffffffffffff, 0x200000, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xc, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffebe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018edff00000000000c0000000c00000002800000030000000000008c000000c53959"], 0x0, 0x26, 0x0, 0x4}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a0, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a2, &(0x7f0000000080))
ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x45, 0x0, 0xb, 0x200004}, {0x0, 0x3, 0x9}]})
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x5, 0x4}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000080)='n', 0x1}], 0x1}, 0x2600c055)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b23d25a806c8c6f94f90424fc60100005000a000200053582c137153e37000c0680050002000300", 0x33fe0}], 0x1}, 0x0)

2m38.691984328s ago: executing program 2 (id=1979):
r0 = socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0x3)
socket$kcm(0xf, 0x3, 0x2)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffe84, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c00810ce00f80ecdb4cb9f207c804a00d000000020006fb0a0002000a0ada1b40d805481100c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) (fail_nth: 5)

2m23.621965449s ago: executing program 32 (id=1979):
r0 = socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0x3)
socket$kcm(0xf, 0x3, 0x2)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffe84, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c00810ce00f80ecdb4cb9f207c804a00d000000020006fb0a0002000a0ada1b40d805481100c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) (fail_nth: 5)

6.245784735s ago: executing program 0 (id=2765):
r0 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x1)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffbf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3}, 0xc)
r4 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6)
close(0xffffffffffffffff)
r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1807000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7001d3c000000000000851000000300000018000000000000000000000000000000c355460500000000950000000000"], &(0x7f0000000000)='GPL\x00'}, 0x90)
socket$kcm(0x10, 0x2, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x4, 0x8, 0x43, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffff"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r9 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r11 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r11, 0x10f, 0x87, 0x0, 0x0)
r12 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r12, 0x10f, 0x87, &(0x7f00000008c0), 0x43)

6.095762137s ago: executing program 0 (id=2768):
r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0xff, 0x0, 0x0, 0x5d31, 0x21, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x5, 0xff0000000}, 0x4000, 0x6, 0x0, 0x1, 0x8, 0x0, 0x3}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x0, 0xff, 0x0, 0xfd, 0x0, 0xb0, 0x25108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x1, @perf_config_ext={0x4}, 0x2a10, 0xffffffffffffffff, 0x2, 0x0, 0x5, 0x8002000a, 0x0, 0x0, 0xfffffff8, 0x0, 0x5}, 0x0, 0x4, 0xffffffffffffffff, 0x2)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x3, 0x0, &(0x7f0000000400)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080))
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0x2a}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETFILTEREBPF(r5, 0x800454e1, &(0x7f00000001c0)=r7)
write$cgroup_devices(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r8 = socket$kcm(0x23, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f00000003c0)={&(0x7f0000000000)=@phonet={0x23, 0x0, 0xfc}, 0x80, 0x0}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000140)=0x3)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272})
ioctl$TUNSETOFFLOAD(r9, 0x400454c9, 0x9)
ioctl$TUNSETLINK(r9, 0x400454cd, 0x325)
socket$kcm(0xa, 0x2, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r0, 0xa)
socket$kcm(0x10, 0x3, 0x10)

5.361891416s ago: executing program 4 (id=2771):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000002000)=""/4087, 0xff7}], 0x1}, 0x22)

3.435993127s ago: executing program 4 (id=2772):
r0 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x1)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4)
close(0xffffffffffffffff)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0xffffff85, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x90)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, 0x0, 0x0)

3.422605615s ago: executing program 4 (id=2773):
socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="fe099c34c2640608000080000000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x60, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000000001000000000000", 0x20}], 0x1}, 0x40000)
r3 = socket$kcm(0x2, 0x6, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe0e41b0000900ac00060411000000040012000a0005000248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db7259826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d00"/216, 0xd8}], 0x1}, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x21, &(0x7f0000000240), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x4, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4004, @dev={0xac, 0x14, 0x14, 0x4}}, 0x10, 0x0}, 0x28008840)
r5 = socket$kcm(0x15, 0x5, 0x0)
setsockopt$sock_attach_bpf(r5, 0x1, 0x3c, &(0x7f0000000380), 0x4)

3.413616963s ago: executing program 1 (id=2774):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x4, 0xfffffffffffffee3, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x10882a, 0x0, 0x0, 0x4, 0x10000, 0x800000, 0x9, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x57, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000190000001d00000000000000864b46d50000000000000000"], 0x50)
socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'})
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000000000000000000000008500000053000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000000)='\x00'/14, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000100000000000000000000008500000007000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x9}, 0x50)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f9, &(0x7f0000000080))
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x26e1, 0x0)
write$cgroup_int(r4, 0x0, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'pim6reg0\x00', 0x2})
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, 0x0)

3.413017733s ago: executing program 3 (id=2775):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000100)="c2", 0x1}], 0x1}, 0x80)
unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00')
perf_event_open(&(0x7f0000000800)={0x2, 0xa6, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xd}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000201, 0x8002, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x400009, 0x0, 0x0, 0x4, 0x82f, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50)
recvmsg(0xffffffffffffffff, &(0x7f0000001a00)={0x0, 0x0, 0x0}, 0x21)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180))
r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000140)='sit0\x00')
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @var={0x9, 0x0, 0x0, 0xe, 0x1, 0x1}, @struct={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}}, 0x0, 0x42, 0x0, 0x4}, 0x28)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}})
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001880)='\\\x00\x00\x00', 0x4}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r3 = socket$kcm(0x2, 0x1, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
setsockopt$sock_attach_bpf(r3, 0x84, 0x25, &(0x7f0000000000), 0x20000010)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="87b153ac4ba7abdf7cc2cb91db7989b200000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000300"/28], 0x20)

3.247832601s ago: executing program 0 (id=2776):
r0 = socket$kcm(0xa, 0x5, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)="d80000001a0081044e81f782db4cb904021d0800fe007c05e81156a10a0015000200142603600e12080010007a010401a8001600200002400400077c035c0400a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7eef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e101ce81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a9412dd09206da6f7ddef7b39b27ee", 0xd8}], 0x1}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x6, &(0x7f0000000040), 0x4)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0xa, 0x2, 0x0)
perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x4, 0x1040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x6}, 0x5000, 0x2000000000, 0x0, 0x4, 0x0, 0xa}, 0xffffffffffffffff, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(r2, 0x29, 0x23, &(0x7f0000000040), 0xcf)
sendmsg$kcm(r2, &(0x7f0000001240)={&(0x7f0000000940)=@generic={0xa, "8ab77fa26849ff263ef30c98b353011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open$cgroup(&(0x7f00000003c0)={0x0, 0x80, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x7}, 0x6002, 0x0, 0x0, 0x0, 0x0, 0x4f, 0xb}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x7)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffebe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018edff00000000000c0000000c00000002000000030000000000008c000000000000"], 0x0, 0x26, 0x0, 0x4}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a0, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a2, &(0x7f0000000080))
ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x45, 0x0, 0xb, 0x200004}, {0x0, 0x3, 0x9}]})
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x5, 0x4}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000080)='n', 0x1}], 0x1}, 0x2600c055)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b23d25a806c8c6f94f90424fc60100005000a000200053582c137153e37000c0680050002000300", 0x33fe0}], 0x1}, 0x0)
r8 = socket$kcm(0x29, 0x2, 0x0)
recvmsg$kcm(r8, &(0x7f0000003600)={&(0x7f0000000180)=@x25={0x9, @remote}, 0x80, &(0x7f00000034c0)=[{&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/42, 0x2a}, {&(0x7f0000000200)=""/133, 0x85}, {&(0x7f00000002c0)=""/200, 0xc8}, {&(0x7f0000002440)=""/4096, 0x1000}, {&(0x7f0000003440)=""/77, 0x4d}, {&(0x7f00000003c0)=""/9, 0x9}], 0x8, &(0x7f0000003540)=""/154, 0x9a}, 0x40000000)

2.443318637s ago: executing program 4 (id=2777):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffeb5)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x64b2074d57f2d605, 0x400000, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_clone(0x80090000, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
close(r0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, 0x0, 0x0, 0x3, 0x6, &(0x7f0000000180)=""/6, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x2, 0x1000005, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0xb)
r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000340)}, 0x0, 0x0, 0x0, 0x0, 0xf60, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x5}, 0x0, 0xffffffffffffffff, r1, 0x3)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"})
socket$kcm(0xa, 0x6, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"})

2.09110402s ago: executing program 3 (id=2778):
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x8, 0x5, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8a10ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x3000c085)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4)
sendmsg$inet(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000500)="91", 0x1}], 0x1}, 0x4845)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc)

1.927878489s ago: executing program 3 (id=2779):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000002b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x114}, 0x10)
setsockopt$sock_attach_bpf(r1, 0x1, 0x22, 0x0, 0x0)
recvmsg(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002d00)=""/78, 0x4e}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = socket$kcm(0xa, 0x5, 0x0)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000000c0)={&(0x7f0000000000)="d67c6d956f70496e43ac310fb9e2bc3bfb3a72603cee05ff8cdb662da83b7eb57f44cec49e985bfaba2b1e46558305c747f740410417c197d6b2ba3cf6d367b25f32946f3177133e8bc6706153f2290e0d9d", &(0x7f0000000140)=""/162, &(0x7f0000000080)="1d054709cd39cbea4d3da7bc257541d0366e9d9df18c2f9a7e95fd436fec7fe6d54d5be0a1921409542800f9dc6fddee455c7cd9d778d483ad5d67", &(0x7f0000000200)="daec880e06fcd7f58c706d3fd15ad2b488ae662578a890e84dc1395830ef8ca7852b851ec546fa9ea1e4d6bb7ba42953a9f511c8a894630c1257b35ced70bdfe2d82ab1a9979f1332da502afca318636fb3c500379e81594ef5442f290c6502fa9398b8b50f70c3665700c470832c4255e3dd20a6731acad1fd00716995d44fee5f74be460d961aff3ba4cb40a96106cc8881642", 0x101, r4, 0x4}, 0x38)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x2e, &(0x7f0000000c40)=ANY=[@ANYBLOB="18000000001000000000000000feffff1811", @ANYRES8, @ANYBLOB="0000000000000000b702000014000000b7"], 0x0}, 0x94)
r5 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r5, 0x0, 0xff0f000020000080)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x2, 0xfffffffffffff7fd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x10)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000180)="27031c0016001400020000000000000006e1f0000000894f000f1102ee1680ca82973d2bd4b8", 0x26}, {&(0x7f0000000280)="7d3ed2ea1f2f23edbb324820e73b5f4b1100201a03df64a4853ed1b39e5d175223317057", 0x24}, {&(0x7f0000000340)="551d389992c228e384254107", 0xc}], 0x3}, 0x24000008)
ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f00000002c0)={r4})

1.801269315s ago: executing program 3 (id=2780):
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz0\x00', 0x200002, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB='+cpu'], 0x5)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@base={0x12, 0x1, 0x4, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r2}, 0x20)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r3, &(0x7f0000000040)}, 0x20)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB='-cpu'], 0x5)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000300009116144f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a400014006", 0x39}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c48000000e8fe55a1180015000600142603600e120900210000000401a80016000a", 0x35}], 0x1}, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfe33)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r5, 0x20e, 0x5ee, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x9)

1.698146164s ago: executing program 4 (id=2781):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000002000)=""/4087, 0xff7}], 0x1}, 0x22)

1.521022221s ago: executing program 1 (id=2782):
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz0\x00', 0x200002, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB='+cpu'], 0x5)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@base={0x12, 0x1, 0x4, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r2}, 0x20)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r3, &(0x7f0000000040)}, 0x20)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB='-cpu'], 0x5)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000300009116144f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a400014006", 0x39}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c48000000e8fe55a1180015000600142603600e120900210000000401a80016000a", 0x35}], 0x1}, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfe33)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r5, 0x20e, 0x5ee, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x9)

1.480643043s ago: executing program 0 (id=2783):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000340), &(0x7f00000003c0), 0x2000000}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x40, 0x20}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000080), 0x1003, r1}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0), 0xfffffffffffffffc, 0x6, r1}, 0x38)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514a11ac004000202080002000300010004000300eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x300)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x6, &(0x7f0000000080)=[{&(0x7f0000000200)="c9fe00001d008104e00f80ecdb4cb9f207c804a01000000088080efb0a000200250ada1b40d80800c521c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0)

1.237468706s ago: executing program 4 (id=2784):
socketpair(0x25, 0x4, 0x1, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$kcm(0xa, 0x1, 0x106)
socket$kcm(0x29, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffe, 0x1, @perf_config_ext={0x400, 0x391ce2f7}, 0x1000, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
setsockopt$sock_attach_bpf(r1, 0x1, 0x19, 0x0, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x2)
sendmsg$kcm(r2, 0x0, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1a3803, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETLINK(r3, 0x400454cd, 0x0)
sendmsg$sock(r0, &(0x7f0000002640)={&(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x1, 0x1, 0x4, {0xa, 0x4e24, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}}}}, 0x80, &(0x7f00000025c0)=[{&(0x7f0000000180)="e93a52e5658c61b86276c2e6e09648f4f00bd8dbfde256550aca2b3ba0ce0949dfa85183aa8f58e15132fc1da810ff489a73a78b", 0x34}, {&(0x7f0000000240)="ddd1bb2f304cb7626fa305a02f5c0470a74723ab7e49f707106727c104ddcac0b961e8e6c5fda7c8f1c69b944aa4dc0abb687f9f0d34256282a8365b72c228e2288f8944ec4ce47bb7c7be33f0eba90441405dedcebf39e4d4803a43137c7f18ded7feb824c7b836bec175199cf9f50c2938d37cc96184e4107ce0a48fda52c4472e26219854222ff20ed86482429ffc9c2c1cf520c43ef288d985fcc2172a2c495d127d8442a3becff26cba3f2bef346b526c8ef31db0e29e1eb778dd666339655c98d3a83f1a4e75057c85c045d5f4a282215200fe287520a6cda07252f6027d8857fe9e690f35aa635d37d78e249e3ea7523322dc370a354f2a8951efb26a10e7835ee48ed557731ba5c348f4ca4426fea1d89db0fc7596766984710a679a0f08d61a1cec3f55f83616a9f462dda64a787558221da53c9f39d5c716c23600b8813ae1318d8d20166a7aeea8d2cfd6a6ee1dd8e70330499692a4348d7251867496f09684088158d95cd8b03451884bf3f1a62d29db60631a64eee780a486e029273f775d93d40dfc61018ee68e7f9efc5127c34fb7c72a15fc528ed1d458fadf9344a1b693f3e2e3d0be03fc94dd80557d1059dd5c855d1089193ec24ea2ddbd3409fca31b1867a59a0c1fe4d8336534b816c9cb86065c659b66201d54b4c997ad0be39db8ee75a72c0e81a27a3d631e13dc1ce7c0b44880ee6200ab2760c366f3aa21872faee4014bdc1d3cd7f9cd3e41b0611ad4ed7464723c46c6ffadbb8ad871e972b5d0315fd1c84feafe6c1ffd86cbbdfbb3353446030ff2a7d6b833b015a4b0f9f027ef1c488a5972a61b1752ea7e578a428dd5bb89110674c660ada7621e4e249e66a0ec9c33d39092e2f9cd97416fdf7b0f91bf001ddc8efe1241addcd86c2ad0a35229b6f9388b5caf4249a8c64dab82f557b532bc74510e70a72d8695131033337ef1d33043797bd89a3b3c801360ef78c8621e13d27f7badbc58533635219693441e85a3b638b85bcb1591b0d35e270029e4853e9cfa379c7b935bd9ae1eedb6f96a3d00e863bc5051f5b4a22ba8dbab764e2d28d198cca787c03191615f8a7f843aeca8a12c9a5ccb16d3829e3e37124d02b8c3ba849f105f29d71459a034236279e0f8fc8b9cf3503eab2a72e89b2bf1d72d713ba2e001e9a8548469260be8df97a33be680cb75f7da0249c68d30fb5d3f46d2dc4924102bffd54862e6609a00f0614d5afa3f0a87ab483bbcfe2114fd165621a4def72cf202a4b15e5b1fd107c8d6aa113f6ca45dba2235fb8ad00d438bff7e0ffbc25d67c3838af8db39a30cc13021644621e417964a5e7c17407dca119607bdb5cb014c302bd3051be24751243acf482307c7a1aefe805f1081f9aea90c6d235abf9884f255090e673334fd8ae614242a79d599ccba1f2966e517cbf5bdccd1bcbbb72fe53a5558be9bbe8f470d302566764dfc05d18b6ebde5e78f0d542b6bf0ce781a0020d025b9569fb7e80fd8a892b80445173fa0dfdfa69188fedf01155040658bfd498fc72ad610d21de6ae13b6e0431ffd84716b2adb5369cef9a3e60ee08fdcea8524d0f53c15fca81c640eb342f14f6caf366336d3d4fe732da71459a8fa955f1d32ad72cf5273cedfa60ba34b172978cd62ad129053170bd7c951e8f79f55735ed32eebb1c0298c1658f0b516daaf5241db153b680e5e95d336952aa7ce8c79b498831b7de06a66446a985098c4cfe4729bb3812a74075242175d463649747d866bab30b4d42364a245f9800901e12db8a2b4905d8aea2f465a66339a20031f61ce2f5d9964099e2500464c9556f26c654db648376420ad5adfb0a01333a5503c06ac04502a0515b10a63234b9a8eacb0f32e4cba7f843d26abd2e02f3398a1f1eebecd959ffcc6fec864d2a1915b3fa07537a3d64c5fff46b747e05d6804518ee6d1f6a95f8e56779bd0816baba5af6c246208088a18b56cd6e9aec4a21b268108d7975a364edf6b2a32b04cf83840898f1a489dc02aa0401a48eba435bf7efd3788b8fb70eaba46be491c5dee7a58bc24615ee70eff705ff2a215c642d9859ba3c175d569febfe32d31d4352e79d4b47197a42f7bf6c187e9498f7c8ac77396d0f7d252323cdefc5356caeb940397b382f57b3df75f22e2b241bbdd71c565b7b17dee33694b1a51aba08717b2b64e7edee570da6475a0a6e3b5124ee2861e3f6b68989089895b7ca203b868b5e1a4d09b172efeffd41282d46422bcd08ce3b5be5a6281b70a6a524bd64cb5c80053c11a54a3e56095b993d085208ad1769594f934d36165946c306b1ebe2e5a6dd6dcfca3b6dd396de281e28c9ff985abc58091ddb9a8c072288d1569a2b309b95bc661e87d29e3352de1817b7315d7f682d051baf0596fdd104f54d0282fc43244ef6961630b643ee45e2dcd2aab39d9007c8d1a9d74e4b71bd56ea5e50715ae88bcfeda9549d4dc2c66f786d9cfca8d960762e366f7a24ad667928d94a7a60294d543e387256a3d14a74e3c4e694107626be16ea63c6784757bd36858958dc30640ccece6fc92ff1f50e7d64855a32c6be601f9635044caba0a3e334dd71dc6f9baf2ec930c97dbcb73dae93a01dc33680f7ccbcb02216377587b556e249dfd45866a4fb7ec6be750c5b87e716cb8e86221f177ee08eeffbbb9da1d1b767d3ddce34b426b378212ee4ce00c31f1d3aba9dd8901f4e1e34e1eece506d83987315cb9afde98392dfd99d460f598d54cabaa49852e7d1d25a934f645541c04701797f707f4903db96f24c896352e903415c12ac05f0bc399bab5802eae38d651e94624de9622278c9923f2be1c6a87223c3091939634cc97b4475699a7d3d1080b172621aa802621438bf1b07e31ca662400cb5efbdef8102484d3f16b993de499c386cc4055b53bd7e3671de82f9a6e135eaa0242c24ffb52e24c81bc0b76ce78e0dc7ea629de470652a454ceb0d89e915ccab1c53ec54976d81fcaa4d5ce0574e6eb04f709c3624446299a3732dfe903b5f604588321388638fb663f962323066640066152527e8fa69f6fec6bfdfd9b7d474ce3d2f4c0dd8f914f9874e7d3777b45f4b7fff3b5f5d1f25108c2a8c66be71b14115f4f439850e5aaacab61d69f6cc59e2913deb3de3d057c65deed7b06ac902bdb56f6d1259f8fe6546389fe0af2bece773c44307b3c980ccda8be82176ad802983ee29ab527395b60d074407d02917911bf1701c595c9d10cbcabc88adb68e11204f0043292e0c1d9aef6fdab14692dc2074236f583b1a11b16d316e41551a069b4396c57ac510d03ef4549f7cf5d85978b972b27b8d9d35b8bd604657f43bfe49dcc291d6de531e97556db32679fad39eaa8035e1d265b180e16d567dfc759ab347047d8c01992f2ccc0a2f04382e3ea54152057d71fd1ae953a4f8eed683a69b1971d3899e4d3bdc489c3f6557033e0f06ad08c516a7b8999511a3c87f711c0ba21572c4e4d47bf2c60a60cf1516bccfdcb36945d08641b19644938c15d3c8c3102de6f98172297dc5b2b57eaf7d39713d809c071809c18463734a7e77cc0c3581f934e68219ee5072ff0ded119b69ad16ce03389882ef4361d1febc788c0f72fe5c136bcda1ded112dc35f81e35d714fbd6028fb2915f06ae30cbfd5d4c83985a0fcec75b15fd9f268bd5d09f4e7c29141d38f4a6b6e778a12817a8863f3ba64234b737d5280a72c93e11b8ba1ee400bbf10b40f1e6463b3dc7bdbfec59b8b31facd87320e91f455f2af99eeab07ae6070472b3fde01c18d3bd3019b46c4a5394f6702a358dbdd2464b3306b6c0e6448f89d70ddedb38395621a20c0073572a539e0a9ab1b0f50579fc500278bef1a831d659d56e8847a9e16635b03f5a9eeed35516e8fc348fb3f3d6bb078c8be8edfaf91840e08048e94d9f7a99f37daa58cd4b69852c11811001aafb0eddc34bfb60d156441ba29618dcd9bd7fae52b16e9140430193335d9550cbc8bb065b2d4d5e3c3fe3b3840fbdb8c346ff0adbeb36821e300b8e17d797a68edff7da44c057eb61c3884827f0798747f27350b8c26a52cf6fbc8a6cb3febca90840b0275b3d266e8e13c4e5e3d52f51ebd846cb3f23010f1a294d1f71259b0878f442c88a2ce67f05039d32aa8c86cd7c5ea8f15bce8ccc8f47d4de1f106d732a35e20dd4f3c657720db77b366b429ca32732b50ac3071160b550fd728da709582bf6e40201ba997fdd006331e672c07a4c88037248acbf525b7e8da513b4106a7dde6e0fe040d8d288d6171de358ecc5818b3317025fde82b68e1c5c81758d04d19d317ca105c600703ce4bb2621a5736a8fe9cefe00e3964b1897956c133da8c2965b128e220a861387d4f4e3d9f447ee9edf2e3d6b3525c165dcf1c5706e41f66c344d18c71e2558055fac4b1af10d57b3d67a4241105855a2367873789535041eca55d9285607f83f79a025c0bb6570cccf9a498949ca4bc593c6f6b1554a0a0e2de03af9039eccbaac162f6666f5c640c650d43ca54650298ad1c1186c9e0b9d251a7fdbb5c1260ecc56b048851bb0651db427288d8f4725b1ee0fa964455d4616b5c6b40262629ba738a04564b93475bfa711be931c90c61fb891017c6f550d02f9794d2f73504b8aa688c0f42a1eda18c1a4e6c0f3081693f9642e9bf37c526177a69c36dc6191c645b2a327891544e46bd04f0050b22121fa252281b7ec29818200c46ab904c3604186c258fdd82d2549e5e338e382581788e8ca94fbd46a87bd193683760651aec64f64faf83564169d0a5420934169866fadf605ffdb2affd1eb23a76463f8484f555d2604d366c038f7297b579b3b8d1f00e199766bdbfa0ce875b93d8dcfc5517fc9f85454d5e9646259290f2ce49243ccae465ed00b111e3c45f03d8e882a0459090aeffec46f8f7d3f4b625b82b2bb036940c5dbd7c04ada85b691543d19971d61853c9c287549c6d5de3bbf721cdcc3b8be690bfcffdc8d90b396a9d370ac3f5e8dcb084658d17635cc77482e5aab13fbfb2a0c2cbf1c87fc58deaa835d0f3bf0c1b336215d348ec80cec3d5f0443fccbfb538ff956e61669ceed611553186cf59cde4fff9bca3ec016c627827873f5a73cc6cc363d059aceb5c1c9a975fae1d580167707818a1ce7b94a0412ae204bcc69dc9566d0c792d064a0d02614bc915369707fb4f9fde2cec9e27d0b9da45292f5f89b3e895e5af1af8eef602070f9053978053afa27782dab8a936ac19ad1ee0beec09923022b707e71147c90ed5ebdbb9e02b685536f4c9e55efb5009d8cee4e1efec92a48b7c33733a1c532e88bcecec1929b6209c424500256e7f4104872ab9f3aba18b032da649af65b883c333abe84b9d25dd40932d703b034a541b4abfc89683d60c8ad3c06e27604750ae39907bb9f29d0d645058ba0046c716ca890462ef94ce723e8812a6f87e487b49951853fc93f9068a4a9766fb380cdf419d964e1db42e915076e336701b238f144e9c14ba0e4f7d1ec5bb1cde85d92da297dd8fc78e87f281653c41aebda6860d373557f1179c2a106933116c2021049df230b45aa01470ab24d87ceb5dd4d2476bb80ce25c0887f4193e531e706e9193b8df10de28cf8036e0ba3a1dc422100ffccd64152d7263d665c13bfeaaaec3ed364ad86c90288608716a0f24e27f455eab2f32185cef21162232ac27f2ed443ca15353a9d8c985a8f8d51ddd22c3963da40d70065241e8b096be9818f989f54ea79898e9fcae08a2a0960659bea390e5acf8beb4", 0x1000}, {&(0x7f0000001240)="df7f8ae527538cf8864346ee3935f74bb6c0ba6dfdd1e039ece3ddcd2577e86adf9b6ccd9d194b15b6d57ba813cc90c1df958402033242d0d42a7946d2834146f5ac3d58b955c6d4cfd4003dd7850018fce453a6c51355cdedaeb310f2dc61d0df023300179f01e553cdec6d568686fe91ad580923c251a8d4f6c014b4545cb85cac913bf512e5132cba3725d0452d6133df765aedb5cf1caeebba47805641714fb2745b7c48a627cdd59996bb823aec91dcafcf3e60f578d923cd52d4bb2f06b2f41092dfddbcc56e8d0bb9e5", 0xcd}, {&(0x7f0000001340)="d1311b21a229fafdd48f39d3a6587b400882b17f54893b71b41e63f979998263a0b77ecfe0e1075fe02a6179c35151e5fd6b85f502a9c77b5ec98ee8ab4680074a13f3c4017b8114b473305f17f056948dfcc0dfdb7d13e4c0179cd078c702ec9786e51b33569d0e4862bdc64539aad1540d05c0054d865e1b93f30fcaa990cc19b51b64b901a6750e6050ba3075936569549e53ed8c2a2056f111a2a5c04fa058f1a82b7e5f1a4b7b6b20e900508d10492913534130a193456a45dec9e2e5ad2e40e3015718a2f962c8cff23420c34c27effc54e0", 0xd5}, {&(0x7f0000001440)="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", 0x1000}, {&(0x7f0000002440)="e7a06d6f19935585864f5cf9fe2c2fce30ef4d2c0d17d37550eff4ca26f84fb8b10d1c32aaa2f728746819f1cf94e4ceb223b6151331d79e678e891491c05b82c0ea7038659b810cf8dd13bd63eb738c16051aea80a73f2158594a3c8a132c6e5f0c56d30a2be9b9eccadb4ae6e025b33d115c72aa1d3062749334aaff023124e8e70d58f5bcfe6e7fb96f162e7494b8723e5599da5daea8b3fff6f74b65e1f8b2375db24c0e0fc1e29fe0abc16883d53aa256550ab51c7bc6b1cd423091135cccea02ca5b66943610d3feb62bf74e7cd5bb53e3af5017de0c22c1f144930abb23ae2f295c73d7106af2", 0xea}, {&(0x7f0000002540)="d551fd2df6b7e5e9bdab27916826f8822d17d7e81dc8b52eb9857c4606876cf1147469701c6a9e881032b01169d551e52bc44c3eed45e49c5f860edb6962ed0a5fa8d4ac867ab4fdb38a171cc31f97db525b436876ba7efb0899a2621b939e27777ab0bbda2b3ed150f7bbf8", 0x6c}], 0x7, &(0x7f00000001c0)=[@mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}], 0x30}, 0x40001)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r4, 0x6, 0x24, &(0x7f0000000200), 0x4)

1.20444836s ago: executing program 3 (id=2785):
socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="fe099c34c2640608000080000000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x60, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000000001000000000000", 0x20}], 0x1}, 0x40000)
r3 = socket$kcm(0x2, 0x6, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe0e41b0000900ac00060411000000040012000a0005000248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db7259826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d00"/216, 0xd8}], 0x1}, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x21, &(0x7f0000000240), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x4, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4004, @dev={0xac, 0x14, 0x14, 0x4}}, 0x10, 0x0}, 0x28008840)
r5 = socket$kcm(0x15, 0x5, 0x0)
setsockopt$sock_attach_bpf(r5, 0x1, 0x3c, &(0x7f0000000380), 0x4)

779.393129ms ago: executing program 1 (id=2786):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000100)="c2", 0x1}], 0x1}, 0x80)
unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00')
perf_event_open(&(0x7f0000000800)={0x2, 0xa6, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xd}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000201, 0x8002, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x400009, 0x0, 0x0, 0x4, 0x82f, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50)
recvmsg(0xffffffffffffffff, &(0x7f0000001a00)={0x0, 0x0, 0x0}, 0x21)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180))
r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000140)='sit0\x00')
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @var={0x9, 0x0, 0x0, 0xe, 0x1, 0x1}, @struct={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}}, 0x0, 0x42, 0x0, 0x4}, 0x28)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}})
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001880)='\\\x00\x00\x00', 0x4}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r3 = socket$kcm(0x2, 0x1, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
setsockopt$sock_attach_bpf(r3, 0x84, 0x25, &(0x7f0000000000), 0x20000010)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="87b153ac4ba7abdf7cc2cb91db7989b200000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000300"/28], 0x20)

408.537908ms ago: executing program 1 (id=2787):
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x8, 0x5, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8a10ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x3000c085)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4)
sendmsg$inet(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000500)="91", 0x1}], 0x1}, 0x4845)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc)

211.9532ms ago: executing program 0 (id=2788):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000002b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x114}, 0x10)
setsockopt$sock_attach_bpf(r1, 0x1, 0x22, 0x0, 0x0)
recvmsg(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002d00)=""/78, 0x4e}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = socket$kcm(0xa, 0x5, 0x0)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000000c0)={&(0x7f0000000000)="d67c6d956f70496e43ac310fb9e2bc3bfb3a72603cee05ff8cdb662da83b7eb57f44cec49e985bfaba2b1e46558305c747f740410417c197d6b2ba3cf6d367b25f32946f3177133e8bc6706153f2290e0d9d", &(0x7f0000000140)=""/162, &(0x7f0000000080)="1d054709cd39cbea4d3da7bc257541d0366e9d9df18c2f9a7e95fd436fec7fe6d54d5be0a1921409542800f9dc6fddee455c7cd9d778d483ad5d67", &(0x7f0000000200)="daec880e06fcd7f58c706d3fd15ad2b488ae662578a890e84dc1395830ef8ca7852b851ec546fa9ea1e4d6bb7ba42953a9f511c8a894630c1257b35ced70bdfe2d82ab1a9979f1332da502afca318636fb3c500379e81594ef5442f290c6502fa9398b8b50f70c3665700c470832c4255e3dd20a6731acad1fd00716995d44fee5f74be460d961aff3ba4cb40a96106cc8881642", 0x101, r4, 0x4}, 0x38)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x2e, &(0x7f0000000c40)=ANY=[@ANYBLOB="18000000001000000000000000feffff1811", @ANYRES8, @ANYBLOB="0000000000000000b702000014000000b7"], 0x0}, 0x94)
r5 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r5, 0x0, 0xff0f000020000080)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x2, 0xfffffffffffff7fd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x10)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000180)="27031c0016001400020000000000000006e1f0000000894f000f1102ee1680ca82973d2bd4b8", 0x26}, {&(0x7f0000000280)="7d3ed2ea1f2f23edbb324820e73b5f4b1100201a03df64a4853ed1b39e5d175223317057", 0x24}, {&(0x7f0000000340)="551d389992c228e384254107", 0xc}], 0x3}, 0x24000008)
ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f00000002c0)={r4})

206.247469ms ago: executing program 1 (id=2789):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c03406910927c6b0b55b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfe79578e51bc53099e90f4580d760551b5b342f7cbdb9cd38bdb2209c676b2ac2deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f132020000002cbe7bc04b82d2789cb1b2b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c41146dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a42b359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780c70014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e506d1387b63112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece08ac772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2ef0ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a3f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099bdae7ed04935c2c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adeb988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ffa3c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe4a3ced846891180604b6dd2499d16d7d9158ffffff069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb0814040000007874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dbae3428d2129ecfce1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296c6a298c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f050000000000000026049fe86e09623524f390bf79b441b75fc790c58e273cd905deb28c13c1ed1c0d9cae846b03008cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc48f97496079654f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b4749c28eb5167e9936ed327fb237a56224e49d9ea956d1798571b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecf743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be182724d95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd0403a099f32468f1561f058960d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b656dc0e32384f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bbe3e8ef76f57a2d0e69115d33394e86e4b83c0f3c2a34635f3eee4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cd082027c641ec4355eb4acff90756d1a1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8cc3fe28bc3586844f5fecb92aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a5906002fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128ab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0afd9ae134400f70b5e6aefb7eee403502732df858a2ea033b6c91c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80ffb8f386bb79f5589829b6b0679b5d65a00000000000000e6ff00000000000000000000faff0000bab50bc8508a9644d3e7c328b0ff22035c8073f8c1f0e3da7339fc81d4ab3ef2857ef70a81d8a1628da28c942571880e22df7cabae56d5ff5e483c9c1f5a258b8f1f34cc300312f76a374a6e9b3f9dbd7f538a80b00f97e47895b3201c5126feca0888956a7d768198d9c2109ac508a47ebb99c539ef45af7d87b308117a9e321a3861bc42cf41942c31268a4020221d7b1622585094eddd83c7f4acdd7f5c23d8b730bf03118261edada8b8487a3b1b7548a4687a91f12bf70bb1df3bfe7d4b92ad6fcbf401efd6eb004cf20016ad8d1dad136dd856ffca238b39482811f9c8524bf182f1956a3d044423927df28880bbd11c06407220df8e1d1d483d947d990dc175803d765ca14a915a0040b641959ad3e776b4bb4852fea12983dc18b7404914a6137dc4a78f1e0d331c60a9019c21698cd18753491df962f496f2395563e9c3d7b1228d0e488cf7e50a29541aa757f2e2ee9ff4433d65db0de5a123d569e39dce481156cbec584c9a32a8e3b032fa003192c891d83119bc950abac9147b9fcb0acd9a207b5ceb7e8ed1d91c000000000000000000000000000000141258373281153fa27e586ea82650f070d8851ac9e7ac07b37a6479d4017b5b5af3ff4c91235df4f657d77e386a329aec4d766369c86b62b01ceb028c6fcf206883633cb143016b9f5351a45a8cb4ea110ba700000000000000883416b6eff6a793c71deb7d780c4f51d86ece127c0714144916f397d398ad2fe72b710b932c15c2369cb5d2d2f6ae420672c4a626195a891ac51825077fbc286aa3866bbf18a4a8b836ea8c90af0d5f0aff55b50bc18c27875ed2628b91224b7f"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @sched_cls=0x2e}, 0x94)
r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180100"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32, @ANYBLOB="01000000000000000000000000000000000000006e6a35915e39f122fc885ff1433022db848ea0acf5051b890f55bc2c0a3f655d85", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4421, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x8, 0x92, 0x3, 0x9, 0x0, 0x80001, 0x180731, 0xa, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0xbe, 0x1}, 0x102000, 0x1, 0xb, 0x2, 0x1, 0x8, 0x43, 0x0, 0x7f, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0xb)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4fb5b6f85a83c771}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r5, 0x0, 0xfe33)
r6 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
close(r8)
recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r9=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r6, 0x84, 0x17, &(0x7f0000000000)=r9, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0xfffffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r10 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
openat$cgroup_type(r10, 0x0, 0x2, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
recvmsg$unix(r7, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)}, 0x10000)

159.17373ms ago: executing program 3 (id=2790):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x64b2074d57f2d605, 0x400000, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_clone(0x80090000, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0)
sendmsg$kcm(r2, &(0x7f0000000580)={&(0x7f0000000500)=@generic={0x5, "9cd7027e410d79ab2570a9868315f61cb2945e00dcda013610b6d9c19fe3788d1cb9069d382efb3f21dfd7aea495360043252796e7e52bc24a611142e31a8d6584a7bea3f089b01f1c7f4c849c4c345a1ff71eb56db57bea2bd89b7fb7489922434f0935dff5a066c6bfdc26caebfb02ead83f11732597306492d1cc5ef8"}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000940)="eefc5623f9c816e0a785572ee641cec1f557d8a4d369066bcb9ee822972840e5bafcbeb7c47901bbbfcefd0dad83070db414ec75746d0fd11b99233c1b7b0d6e459091e2220e7caffaa8950236929802e05acaf6014a8bf87581d17965e9fc7fa5ed6fab8dcd91360965f129e08adcd03850db1043ed9efe9bd754c193935e2b38017e8cd36a6550", 0x88}, {&(0x7f0000000a00)="ba35fa0fa0884ed9cd797b7f86d8a562ed6f21317b91915d5a1445d809900d250df8606ffab1f1bb6f48a6199da52bed906ea1af757e401fb235f109cf23021c860d3725dc", 0x45}, {&(0x7f0000000380)="057b74a078bb0a26eca6", 0xa}, {&(0x7f0000000b80)="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", 0xfb}, {&(0x7f0000001340)="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", 0xa90}, {0x0}, {&(0x7f0000000400)="f3cbe51c575d2fa108fd2c23169e91674737c1ad522f902013440431c96740fd9cdefbe459ec1127acd557ad9c21ac725bd8b6311cbadceb6fb216", 0x3b}], 0x7}, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
ioctl$SIOCSIFHWADDR(r3, 0x8be0, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
close(r4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000009003000000000000ff000000950000f9ff000000"], &(0x7f0000000140)='GPL\x00', 0x3, 0x6, &(0x7f0000000180)=""/6, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x2, 0x1000005, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0xb)
r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x4, 0x0, 0x2, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xf, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000340)}, 0x0, 0x0, 0x0, 0x0, 0xf60, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x5}, 0x0, 0xffffffffffffffff, r5, 0x3)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"})
socket$kcm(0xa, 0x6, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r7, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"})

133.223265ms ago: executing program 0 (id=2791):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x4, 0xfffffffffffffee3, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x10882a, 0x0, 0x0, 0x4, 0x10000, 0x800000, 0x9, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x57, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000190000001d00000000000000864b46d50000000000000000"], 0x50)
socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'})
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000000000000000000000008500000053000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000000)='\x00'/14, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000100000000000000000000008500000007000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x9}, 0x50)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f9, &(0x7f0000000080))
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x26e1, 0x0)
write$cgroup_int(r4, 0x0, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'pim6reg0\x00', 0x2})
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, 0x0)

0s ago: executing program 1 (id=2792):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000002000)=""/4087, 0xff7}, {0x0}], 0x2}, 0x22)

kernel console output (not intermixed with test programs):

40][T11224]  __kmem_cache_alloc_node+0x53/0x250
[  317.377606][T11224]  ? tcp_set_ulp+0xb1/0x5f0
[  317.382106][T11224]  ? subflow_ulp_init+0x95/0x530
[  317.387034][T11224]  kmalloc_trace+0x2a/0xe0
[  317.391451][T11224]  subflow_ulp_init+0x95/0x530
[  317.396204][T11224]  ? tcp_set_ulp+0xb1/0x5f0
[  317.400706][T11224]  tcp_set_ulp+0x536/0x5f0
[  317.405125][T11224]  mptcp_subflow_create_socket+0x60e/0xac0
[  317.410923][T11224]  ? mark_lock+0x94/0x320
[  317.415256][T11224]  ? __mptcp_subflow_connect+0x1450/0x1450
[  317.421224][T11224]  ? lock_chain_count+0x20/0x20
[  317.426085][T11224]  __mptcp_nmpc_sk+0x157/0x740
[  317.430850][T11224]  ? __local_bh_enable_ip+0x13a/0x1c0
[  317.436214][T11224]  ? __bpf_trace_subflow_check_data_avail+0x160/0x160
[  317.442976][T11224]  mptcp_setsockopt+0x1745/0x3390
[  317.448085][T11224]  ? aa_sk_perm+0x83c/0x970
[  317.452588][T11224]  ? __fget_files+0x28/0x4b0
[  317.457179][T11224]  ? pm_nl_exit_net+0x230/0x230
[  317.462025][T11224]  ? aa_af_perm+0x330/0x330
[  317.466614][T11224]  ? __fget_files+0x28/0x4b0
[  317.471199][T11224]  ? __fget_files+0x28/0x4b0
[  317.475790][T11224]  ? aa_sock_opt_perm+0x74/0x100
[  317.480719][T11224]  ? sock_common_setsockopt+0x36/0xc0
[  317.486086][T11224]  ? sock_common_recvmsg+0x190/0x190
[  317.491367][T11224]  do_sock_setsockopt+0x175/0x1a0
[  317.496407][T11224]  __x64_sys_setsockopt+0x182/0x200
[  317.501606][T11224]  do_syscall_64+0x55/0xa0
[  317.506036][T11224]  ? clear_bhb_loop+0x40/0x90
[  317.510882][T11224]  ? clear_bhb_loop+0x40/0x90
[  317.515550][T11224]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  317.521433][T11224] RIP: 0033:0x7f3480b9c799
[  317.525842][T11224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  317.545447][T11224] RSP: 002b:00007f3481af9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  317.553876][T11224] RAX: ffffffffffffffda RBX: 00007f3480e15fa0 RCX: 00007f3480b9c799
[  317.561843][T11224] RDX: 0000000000000019 RSI: 0000000000000001 RDI: 0000000000000003
[  317.569806][T11224] RBP: 00007f3481af9090 R08: 000000000000003b R09: 0000000000000000
[  317.577951][T11224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  317.586256][T11224] R13: 00007f3480e16038 R14: 00007f3480e15fa0 R15: 00007fffdcac3b68
[  317.594230][T11224]  </TASK>
[  317.614220][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  317.620723][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[  317.851042][T11228] netlink: 'syz.0.1994': attribute type 33 has an invalid length.
[  317.864637][T11228] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1994'.
[  317.897843][T11228] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  318.259713][T11241] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1998'.
[  318.299337][T11241] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1998'.
[  318.344700][T11243] netlink: 'syz.1.1999': attribute type 16 has an invalid length.
[  318.359526][T11243] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1999'.
[  318.376671][T11244] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1998'.
[  318.388711][T11246] netlink: 'syz.3.2000': attribute type 21 has an invalid length.
[  318.524104][T11250] FAULT_INJECTION: forcing a failure.
[  318.524104][T11250] name failslab, interval 1, probability 0, space 0, times 0
[  318.551781][T11250] CPU: 0 PID: 11250 Comm: syz.3.2001 Not tainted syzkaller #0
[  318.559310][T11250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  318.569405][T11250] Call Trace:
[  318.572726][T11250]  <TASK>
[  318.575689][T11250]  dump_stack_lvl+0x18c/0x250
[  318.580402][T11250]  ? show_regs_print_info+0x20/0x20
[  318.585740][T11250]  ? load_image+0x400/0x400
[  318.590274][T11250]  ? __might_sleep+0xe0/0xe0
[  318.594901][T11250]  ? __lock_acquire+0x7d40/0x7d40
[  318.599963][T11250]  should_fail_ex+0x39d/0x4d0
[  318.604675][T11250]  should_failslab+0x9/0x20
[  318.609204][T11250]  slab_pre_alloc_hook+0x59/0x310
[  318.614267][T11250]  ? bpf_prog_test_run_flow_dissector+0x259/0x640
[  318.620714][T11250]  ? bpf_prog_test_run_flow_dissector+0x259/0x640
[  318.627161][T11250]  __kmem_cache_alloc_node+0x53/0x250
[  318.632575][T11250]  ? bpf_prog_test_run_flow_dissector+0x259/0x640
[  318.639011][T11250]  __kmalloc+0xa4/0x230
[  318.643199][T11250]  bpf_prog_test_run_flow_dissector+0x259/0x640
[  318.649467][T11250]  ? lock_chain_count+0x20/0x20
[  318.654344][T11250]  ? xdp_convert_buff_to_md+0x200/0x200
[  318.660003][T11250]  ? lockdep_hardirqs_on+0x98/0x150
[  318.665311][T11250]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  318.671505][T11250]  ? xdp_convert_buff_to_md+0x200/0x200
[  318.677162][T11250]  bpf_prog_test_run+0x321/0x390
[  318.682220][T11250]  __sys_bpf+0x49d/0x890
[  318.686487][T11250]  ? bpf_link_show_fdinfo+0x390/0x390
[  318.691893][T11250]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  318.698091][T11250]  __x64_sys_bpf+0x7c/0x90
[  318.702537][T11250]  do_syscall_64+0x55/0xa0
[  318.706973][T11250]  ? clear_bhb_loop+0x40/0x90
[  318.711667][T11250]  ? clear_bhb_loop+0x40/0x90
[  318.716373][T11250]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  318.722290][T11250] RIP: 0033:0x7f93ca19c799
[  318.726735][T11250] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  318.746623][T11250] RSP: 002b:00007f93cb0a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  318.755077][T11250] RAX: ffffffffffffffda RBX: 00007f93ca415fa0 RCX: 00007f93ca19c799
[  318.763080][T11250] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a
[  318.771082][T11250] RBP: 00007f93cb0a4090 R08: 0000000000000000 R09: 0000000000000000
[  318.779077][T11250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  318.787160][T11250] R13: 00007f93ca416038 R14: 00007f93ca415fa0 R15: 00007ffd9f7667f8
[  318.795188][T11250]  </TASK>
[  318.841038][T11251] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.2002'.
[  319.885688][T11273] netlink: 'syz.3.2010': attribute type 16 has an invalid length.
[  319.894198][T11273] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2010'.
[  319.997123][T11279] netlink: 'syz.3.2013': attribute type 21 has an invalid length.
[  323.619731][T11301] netlink: 'syz.0.2022': attribute type 16 has an invalid length.
[  323.627613][T11301] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2022'.
[  324.946646][T11324] netlink: 142556 bytes leftover after parsing attributes in process `syz.3.2033'.
[  324.964892][T11324] netlink: 'syz.3.2033': attribute type 1 has an invalid length.
[  324.973546][T11324] netlink: 'syz.3.2033': attribute type 2 has an invalid length.
[  324.981989][T11324] netlink: 'syz.3.2033': attribute type 3 has an invalid length.
[  324.990283][T11324] netlink: 'syz.3.2033': attribute type 4 has an invalid length.
[  325.107075][T11329] netlink: 'syz.1.2035': attribute type 16 has an invalid length.
[  325.115326][T11329] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2035'.
[  325.547666][T11343] netlink: 'syz.1.2043': attribute type 21 has an invalid length.
[  325.556271][T11343] netlink: 'syz.1.2043': attribute type 6 has an invalid length.
[  325.565042][T11343] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2043'.
[  326.375550][T11347] netlink: 'syz.0.2052': attribute type 29 has an invalid length.
[  326.386600][T11347] netlink: 'syz.0.2052': attribute type 29 has an invalid length.
[  326.555872][T11351] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2046'.
[  327.085401][T11379] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2058'.
[  327.386484][T11389] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2063'.
[  328.307908][T11393] syzkaller0: entered promiscuous mode
[  328.314469][T11393] syzkaller0: entered allmulticast mode
[  328.338011][T11399] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2067'.
[  329.107574][T11416] validate_nla: 8 callbacks suppressed
[  329.107599][T11416] netlink: 'syz.1.2073': attribute type 29 has an invalid length.
[  330.305632][T11416] netlink: 'syz.1.2073': attribute type 29 has an invalid length.
[  330.436500][T11425] netlink: 'syz.3.2076': attribute type 16 has an invalid length.
[  330.446366][T11425] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2076'.
[  330.859229][T11440] netlink: 'syz.0.2083': attribute type 29 has an invalid length.
[  330.867577][T11440] netlink: 'syz.0.2083': attribute type 29 has an invalid length.
[  330.877638][T11440] netlink: 'syz.0.2083': attribute type 29 has an invalid length.
[  331.045047][T11444] netlink: 'syz.3.2086': attribute type 16 has an invalid length.
[  331.054400][T11444] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2086'.
[  331.244590][T11448] FAULT_INJECTION: forcing a failure.
[  331.244590][T11448] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  331.279692][T11448] CPU: 0 PID: 11448 Comm: syz.0.2088 Not tainted syzkaller #0
[  331.287225][T11448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  331.297308][T11448] Call Trace:
[  331.300678][T11448]  <TASK>
[  331.303632][T11448]  dump_stack_lvl+0x18c/0x250
[  331.308348][T11448]  ? show_regs_print_info+0x20/0x20
[  331.313577][T11448]  ? load_image+0x400/0x400
[  331.318111][T11448]  ? __might_fault+0xaa/0x120
[  331.322813][T11448]  ? __lock_acquire+0x7d40/0x7d40
[  331.327871][T11448]  should_fail_ex+0x39d/0x4d0
[  331.332647][T11448]  _copy_from_user+0x2f/0xe0
[  331.337279][T11448]  kstrtouint_from_user+0xde/0x170
[  331.342432][T11448]  ? kstrtol_from_user+0x190/0x190
[  331.347929][T11448]  proc_fail_nth_write+0x8f/0x250
[  331.352980][T11448]  ? proc_fail_nth_read+0x260/0x260
[  331.358212][T11448]  ? proc_fail_nth_read+0x260/0x260
[  331.363441][T11448]  vfs_write+0x296/0x990
[  331.367738][T11448]  ? file_end_write+0x250/0x250
[  331.372619][T11448]  ? __fget_files+0x28/0x4b0
[  331.377218][T11448]  ? __fget_files+0x28/0x4b0
[  331.381805][T11448]  ? __fget_files+0x43d/0x4b0
[  331.386484][T11448]  ? __fdget_pos+0x2a3/0x330
[  331.391070][T11448]  ? ksys_write+0x75/0x260
[  331.395483][T11448]  ksys_write+0x150/0x260
[  331.399822][T11448]  ? __ia32_sys_read+0x90/0x90
[  331.404589][T11448]  ? lockdep_hardirqs_on+0x98/0x150
[  331.409957][T11448]  do_syscall_64+0x55/0xa0
[  331.414378][T11448]  ? clear_bhb_loop+0x40/0x90
[  331.419054][T11448]  ? clear_bhb_loop+0x40/0x90
[  331.423730][T11448]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  331.429622][T11448] RIP: 0033:0x7f3480b5cfce
[  331.434035][T11448] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  331.453654][T11448] RSP: 002b:00007f3481af8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  331.462069][T11448] RAX: ffffffffffffffda RBX: 00007f3481af96c0 RCX: 00007f3480b5cfce
[  331.470209][T11448] RDX: 0000000000000001 RSI: 00007f3481af90a0 RDI: 0000000000000004
[  331.478173][T11448] RBP: 00007f3481af9090 R08: 0000000000000000 R09: 0000000000000000
[  331.486399][T11448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  331.494404][T11448] R13: 00007f3480e16038 R14: 00007f3480e15fa0 R15: 00007fffdcac3b68
[  331.502385][T11448]  </TASK>
[  331.673760][ T5775] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  331.685225][ T5775] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  331.725789][T11456] netlink: 'syz.3.2092': attribute type 29 has an invalid length.
[  331.729687][ T5775] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  331.744422][ T5775] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  331.763697][ T5775] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  331.775148][ T5775] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  331.880225][T11456] netlink: 'syz.3.2092': attribute type 29 has an invalid length.
[  331.897865][T11460] netlink: 'syz.3.2092': attribute type 29 has an invalid length.
[  332.028898][T11465] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2094'.
[  332.366011][T11451] chnl_net:caif_netlink_parms(): no params data found
[  332.459626][T11451] bridge0: port 1(bridge_slave_0) entered blocking state
[  332.467000][T11451] bridge0: port 1(bridge_slave_0) entered disabled state
[  332.474627][T11451] bridge_slave_0: entered allmulticast mode
[  332.487395][T11451] bridge_slave_0: entered promiscuous mode
[  332.496613][T11451] bridge0: port 2(bridge_slave_1) entered blocking state
[  332.504018][T11451] bridge0: port 2(bridge_slave_1) entered disabled state
[  332.511773][T11451] bridge_slave_1: entered allmulticast mode
[  332.519408][T11451] bridge_slave_1: entered promiscuous mode
[  332.576711][T11451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  332.590142][T11451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  332.694602][T11451] team0: Port device team_slave_0 added
[  332.734193][T11451] team0: Port device team_slave_1 added
[  332.790450][T11451] batman_adv: batadv0: Adding interface: batadv_slave_0
[  332.797449][T11451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  332.823494][T11451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  332.836608][T11451] batman_adv: batadv0: Adding interface: batadv_slave_1
[  332.843873][T11451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  332.870144][T11451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  332.967955][T11451] hsr_slave_0: entered promiscuous mode
[  332.998252][T11451] hsr_slave_1: entered promiscuous mode
[  333.038971][T11451] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  333.059847][T11451] Cannot create hsr debugfs directory
[  333.095275][T11494] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2104'.
[  333.228748][T11500] FAULT_INJECTION: forcing a failure.
[  333.228748][T11500] name failslab, interval 1, probability 0, space 0, times 0
[  333.247729][T11500] CPU: 1 PID: 11500 Comm: syz.1.2107 Not tainted syzkaller #0
[  333.255252][T11500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  333.265333][T11500] Call Trace:
[  333.268627][T11500]  <TASK>
[  333.271583][T11500]  dump_stack_lvl+0x18c/0x250
[  333.276299][T11500]  ? show_regs_print_info+0x20/0x20
[  333.281536][T11500]  ? load_image+0x400/0x400
[  333.286088][T11500]  ? __might_sleep+0xe0/0xe0
[  333.290722][T11500]  ? __lock_acquire+0x7d40/0x7d40
[  333.295772][T11500]  should_fail_ex+0x39d/0x4d0
[  333.300469][T11500]  should_failslab+0x9/0x20
[  333.304996][T11500]  slab_pre_alloc_hook+0x59/0x310
[  333.310053][T11500]  ? apparmor_sk_alloc_security+0x77/0x100
[  333.315887][T11500]  __kmem_cache_alloc_node+0x53/0x250
[  333.321308][T11500]  ? apparmor_sk_alloc_security+0x77/0x100
[  333.327140][T11500]  kmalloc_trace+0x2a/0xe0
[  333.331607][T11500]  apparmor_sk_alloc_security+0x77/0x100
[  333.337368][T11500]  security_sk_alloc+0x6e/0xa0
[  333.342168][T11500]  sk_prot_alloc+0x101/0x210
[  333.347137][T11500]  ? sk_alloc+0x24/0x360
[  333.351412][T11500]  sk_alloc+0x3a/0x360
[  333.355523][T11500]  xsk_create+0x102/0x660
[  333.359886][T11500]  __sock_create+0x4a6/0x940
[  333.364540][T11500]  __sys_socket+0xd7/0x1a0
[  333.368992][T11500]  __x64_sys_socket+0x7a/0x90
[  333.373708][T11500]  do_syscall_64+0x55/0xa0
[  333.378153][T11500]  ? clear_bhb_loop+0x40/0x90
[  333.382853][T11500]  ? clear_bhb_loop+0x40/0x90
[  333.387556][T11500]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  333.393468][T11500] RIP: 0033:0x7f81fb79c799
[  333.397904][T11500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  333.401107][T11451] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  333.417692][T11500] RSP: 002b:00007f81fc67f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  333.417726][T11500] RAX: ffffffffffffffda RBX: 00007f81fba15fa0 RCX: 00007f81fb79c799
[  333.417737][T11500] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 000000000000002c
[  333.417745][T11500] RBP: 00007f81fc67f090 R08: 0000000000000000 R09: 0000000000000000
[  333.417755][T11500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  333.417763][T11500] R13: 00007f81fba16038 R14: 00007f81fba15fa0 R15: 00007ffcd9adf738
[  333.417789][T11500]  </TASK>
[  333.512840][T11451] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  333.525098][T11451] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  333.544434][T11451] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  333.670670][T11451] 8021q: adding VLAN 0 to HW filter on device bond0
[  333.750618][T11451] 8021q: adding VLAN 0 to HW filter on device team0
[  333.790870][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state
[  333.798052][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state
[  333.848113][   T51] Bluetooth: hci2: command tx timeout
[  333.869720][ T1114] bridge0: port 2(bridge_slave_1) entered blocking state
[  333.876871][ T1114] bridge0: port 2(bridge_slave_1) entered forwarding state
[  334.178619][T11520] validate_nla: 8 callbacks suppressed
[  334.178635][T11520] netlink: 'syz.1.2114': attribute type 16 has an invalid length.
[  334.197893][T11523] netlink: 'syz.0.2115': attribute type 29 has an invalid length.
[  334.199409][T11520] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2114'.
[  334.233707][T11523] netlink: 'syz.0.2115': attribute type 29 has an invalid length.
[  334.252880][T11523] netlink: 'syz.0.2115': attribute type 29 has an invalid length.
[  334.483908][T11451] 8021q: adding VLAN 0 to HW filter on device batadv0
[  334.949989][T11540] netlink: 'syz.1.2120': attribute type 33 has an invalid length.
[  335.004253][T11540] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2120'.
[  335.058556][T11540] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  335.077049][T11451] veth0_vlan: entered promiscuous mode
[  335.150188][T11451] veth1_vlan: entered promiscuous mode
[  335.227492][T11551] netlink: 'syz.1.2123': attribute type 29 has an invalid length.
[  335.254913][T11552] netlink: 'syz.0.2124': attribute type 16 has an invalid length.
[  335.263655][T11552] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2124'.
[  335.276298][T11551] netlink: 'syz.1.2123': attribute type 29 has an invalid length.
[  335.288565][T11451] veth0_macvtap: entered promiscuous mode
[  335.307006][T11553] netlink: 'syz.1.2123': attribute type 29 has an invalid length.
[  335.337536][T11451] veth1_macvtap: entered promiscuous mode
[  335.387941][T11451] batman_adv: batadv0: Interface activated: batadv_slave_0
[  335.411610][T11451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  335.432361][T11451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  335.479721][T11451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  335.517239][T11451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  335.545221][T11451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  335.569489][T11451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  335.583469][T11451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  335.594502][T11451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  335.620421][T11451] batman_adv: batadv0: Interface activated: batadv_slave_1
[  335.658522][T11451] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  335.689441][T11451] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  335.698192][T11451] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  335.724956][T11451] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  335.887099][   T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  335.899471][   T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  335.922493][   T51] Bluetooth: hci2: command tx timeout
[  335.972358][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  336.040107][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  336.261164][T11576] netlink: 'syz.4.2084': attribute type 21 has an invalid length.
[  336.279970][T11576] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2084'.
[  336.294023][T11578] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2133'.
[  337.473509][ T5775] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  337.483480][ T5775] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  337.496099][ T5775] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  337.521426][ T5775] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  337.530757][ T5775] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  337.538269][ T5775] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  337.594614][T11599] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2142'.
[  337.932573][T11596] chnl_net:caif_netlink_parms(): no params data found
[  337.999841][ T5775] Bluetooth: hci2: command tx timeout
[  338.114116][T11596] bridge0: port 1(bridge_slave_0) entered blocking state
[  338.139789][T11596] bridge0: port 1(bridge_slave_0) entered disabled state
[  338.162758][T11596] bridge_slave_0: entered allmulticast mode
[  338.185055][T11596] bridge_slave_0: entered promiscuous mode
[  338.207543][T11596] bridge0: port 2(bridge_slave_1) entered blocking state
[  338.222513][T11596] bridge0: port 2(bridge_slave_1) entered disabled state
[  338.236318][T11596] bridge_slave_1: entered allmulticast mode
[  338.260396][T11596] bridge_slave_1: entered promiscuous mode
[  338.331082][T11596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  338.342454][T11619] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2149'.
[  338.405065][T11619] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  338.427646][T11596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  338.493651][T11596] team0: Port device team_slave_0 added
[  338.505657][T11596] team0: Port device team_slave_1 added
[  338.598599][T11596] batman_adv: batadv0: Adding interface: batadv_slave_0
[  338.606359][T11596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  338.640442][T11596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  338.682035][T11626] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2151'.
[  338.738841][T11596] batman_adv: batadv0: Adding interface: batadv_slave_1
[  338.752832][T11596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  338.798175][T11596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  338.884929][T11596] hsr_slave_0: entered promiscuous mode
[  338.943405][T11596] hsr_slave_1: entered promiscuous mode
[  338.961519][T11596] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  338.976389][T11596] Cannot create hsr debugfs directory
[  339.286562][T11596] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  339.332441][T11637] bridge0: port 3(dummy0) entered disabled state
[  339.602323][ T5775] Bluetooth: hci0: command tx timeout
[  339.608643][T11637] bridge_slave_1: left allmulticast mode
[  339.628001][T11637] bridge_slave_1: left promiscuous mode
[  339.638188][T11637] bridge0: port 2(bridge_slave_1) entered disabled state
[  339.663573][T11637] bridge_slave_0: left promiscuous mode
[  339.669908][T11637] bridge0: port 1(bridge_slave_0) entered disabled state
[  339.745797][T11637] .`: (slave bridge0): Releasing backup interface
[  339.882999][T11596] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  340.006596][T11596] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  340.045633][T11650] validate_nla: 14 callbacks suppressed
[  340.045654][T11650] netlink: 'syz.3.2160': attribute type 16 has an invalid length.
[  340.072628][T11650] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2160'.
[  340.084247][ T5775] Bluetooth: hci2: command tx timeout
[  340.134280][T11596] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  340.312913][T11655] netlink: 56537 bytes leftover after parsing attributes in process `syz.3.2162'.
[  340.371775][T11655] netlink: 'syz.3.2162': attribute type 10 has an invalid length.
[  340.376617][T11657] netlink: 'syz.0.2163': attribute type 29 has an invalid length.
[  340.394407][T11655] team0: Port device wlan1 added
[  340.418535][T11657] netlink: 'syz.0.2163': attribute type 29 has an invalid length.
[  340.427043][T11596] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  340.441806][T11596] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  340.460331][T11658] netlink: 'syz.0.2163': attribute type 29 has an invalid length.
[  340.480991][T11596] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  340.509737][T11660] netlink: 'syz.3.2164': attribute type 29 has an invalid length.
[  340.521697][T11660] netlink: 'syz.3.2164': attribute type 29 has an invalid length.
[  340.529940][T11596] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  340.547941][T11660] netlink: 'syz.3.2164': attribute type 29 has an invalid length.
[  340.781252][T11596] 8021q: adding VLAN 0 to HW filter on device bond0
[  340.808000][T11596] 8021q: adding VLAN 0 to HW filter on device team0
[  340.833398][ T1114] bridge0: port 1(bridge_slave_0) entered blocking state
[  340.840733][ T1114] bridge0: port 1(bridge_slave_0) entered forwarding state
[  340.877074][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state
[  340.884267][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state
[  341.085034][T11675] netlink: 'syz.0.2169': attribute type 16 has an invalid length.
[  341.093472][T11675] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2169'.
[  341.364688][T11596] 8021q: adding VLAN 0 to HW filter on device batadv0
[  341.472791][T11596] veth0_vlan: entered promiscuous mode
[  341.494100][T11596] veth1_vlan: entered promiscuous mode
[  341.546932][T11596] veth0_macvtap: entered promiscuous mode
[  341.571897][T11596] veth1_macvtap: entered promiscuous mode
[  341.622784][T11685] netlink: 'syz.0.2172': attribute type 29 has an invalid length.
[  341.623053][T11596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  341.660013][T11596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  341.679380][ T5775] Bluetooth: hci0: command tx timeout
[  341.688027][T11596] batman_adv: batadv0: Interface activated: batadv_slave_0
[  341.708122][T11596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  341.728342][T11596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  341.759030][T11596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  341.789108][T11596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  341.809166][T11596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  341.838021][T11596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  341.848696][T11596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  341.859420][T11596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  341.869540][T11596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  341.880903][T11596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  341.894675][T11596] batman_adv: batadv0: Interface activated: batadv_slave_1
[  341.912249][T11689] netlink: 56537 bytes leftover after parsing attributes in process `syz.4.2173'.
[  341.954886][T11692] team0: Port device wlan1 added
[  341.964054][T11596] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  341.974245][T11596] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  341.983241][T11596] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  341.993414][T11596] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  342.146722][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  342.180810][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  342.241237][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  342.258106][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  342.361125][T11699] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2178'.
[  342.742769][T11706] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2180'.
[  342.834978][T11706] `: renamed from team0 (while UP)
[  342.902857][T11704] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2179'.
[  343.486594][   T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  343.497465][   T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  343.509564][   T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  343.522688][   T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  343.540758][T11715] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2191'.
[  343.556338][   T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  343.563979][   T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  343.760174][ T5775] Bluetooth: hci0: command tx timeout
[  343.836924][T11718] chnl_net:caif_netlink_parms(): no params data found
[  343.976045][T11718] bridge0: port 1(bridge_slave_0) entered blocking state
[  344.039296][T11718] bridge0: port 1(bridge_slave_0) entered disabled state
[  344.046757][T11718] bridge_slave_0: entered allmulticast mode
[  344.067900][T11718] bridge_slave_0: entered promiscuous mode
[  344.088060][T11718] bridge0: port 2(bridge_slave_1) entered blocking state
[  344.097590][T11718] bridge0: port 2(bridge_slave_1) entered disabled state
[  344.115290][T11718] bridge_slave_1: entered allmulticast mode
[  344.124284][T11718] bridge_slave_1: entered promiscuous mode
[  344.154822][T11733] netlink: 56537 bytes leftover after parsing attributes in process `syz.1.2186'.
[  344.197370][T11737] `: Port device wlan1 added
[  344.226645][T11718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  344.241048][T11718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  344.285055][T11718] team0: Port device team_slave_0 added
[  344.294212][T11718] team0: Port device team_slave_1 added
[  344.336576][T11718] batman_adv: batadv0: Adding interface: batadv_slave_0
[  344.359472][T11718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  344.386283][T11718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  344.401362][T11718] batman_adv: batadv0: Adding interface: batadv_slave_1
[  344.408617][T11718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  344.436057][T11718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  344.499453][T11718] hsr_slave_0: entered promiscuous mode
[  344.506525][T11718] hsr_slave_1: entered promiscuous mode
[  344.514419][T11718] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  344.530460][T11718] Cannot create hsr debugfs directory
[  344.614192][T11745] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2192'.
[  344.623613][T11745] `: renamed from team0
[  344.802978][T11750] FAULT_INJECTION: forcing a failure.
[  344.802978][T11750] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  344.842286][T11750] CPU: 0 PID: 11750 Comm: syz.3.2194 Not tainted syzkaller #0
[  344.849814][T11750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  344.859905][T11750] Call Trace:
[  344.863215][T11750]  <TASK>
[  344.866192][T11750]  dump_stack_lvl+0x18c/0x250
[  344.870925][T11750]  ? show_regs_print_info+0x20/0x20
[  344.876259][T11750]  ? load_image+0x400/0x400
[  344.880797][T11750]  ? __might_fault+0xaa/0x120
[  344.885482][T11750]  ? __lock_acquire+0x7d40/0x7d40
[  344.890520][T11750]  should_fail_ex+0x39d/0x4d0
[  344.895215][T11750]  _copy_from_iter+0x1d9/0x12e0
[  344.900077][T11750]  ? slab_post_alloc_hook+0x8a/0x4b0
[  344.905367][T11750]  ? __virt_addr_valid+0x18c/0x540
[  344.910573][T11750]  ? __lock_acquire+0x7d40/0x7d40
[  344.915596][T11750]  ? rcu_is_watching+0x15/0xb0
[  344.920455][T11750]  ? copyout_mc+0x70/0x70
[  344.924784][T11750]  ? __virt_addr_valid+0x18c/0x540
[  344.929900][T11750]  ? __virt_addr_valid+0x18c/0x540
[  344.935018][T11750]  ? __virt_addr_valid+0x469/0x540
[  344.940169][T11750]  ? __check_object_size+0x506/0xa20
[  344.945479][T11750]  netlink_sendmsg+0x76b/0xbf0
[  344.950250][T11750]  ? perf_trace_lock+0x304/0x3b0
[  344.955196][T11750]  ? netlink_getsockopt+0x590/0x590
[  344.960487][T11750]  ? aa_sock_msg_perm+0x94/0x150
[  344.965459][T11750]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  344.970743][T11750]  ? security_socket_sendmsg+0x80/0xa0
[  344.976201][T11750]  ? netlink_getsockopt+0x590/0x590
[  344.981408][T11750]  ____sys_sendmsg+0x5ba/0x960
[  344.986177][T11750]  ? __asan_memset+0x22/0x40
[  344.990771][T11750]  ? __sys_sendmsg_sock+0x30/0x30
[  344.995792][T11750]  ? __import_iovec+0x5f2/0x850
[  345.000670][T11750]  ? import_iovec+0x73/0xa0
[  345.005178][T11750]  ___sys_sendmsg+0x2a6/0x360
[  345.009863][T11750]  ? __sys_sendmsg+0x2a0/0x2a0
[  345.014650][T11750]  ? __lock_acquire+0x7d40/0x7d40
[  345.019709][T11750]  __se_sys_sendmsg+0x1c2/0x2b0
[  345.024564][T11750]  ? __x64_sys_sendmsg+0x80/0x80
[  345.029518][T11750]  ? lockdep_hardirqs_on+0x98/0x150
[  345.034721][T11750]  do_syscall_64+0x55/0xa0
[  345.039289][T11750]  ? clear_bhb_loop+0x40/0x90
[  345.043989][T11750]  ? clear_bhb_loop+0x40/0x90
[  345.048681][T11750]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  345.054675][T11750] RIP: 0033:0x7f93ca19c799
[  345.059102][T11750] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  345.078719][T11750] RSP: 002b:00007f93cb0a4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  345.087174][T11750] RAX: ffffffffffffffda RBX: 00007f93ca415fa0 RCX: 00007f93ca19c799
[  345.095180][T11750] RDX: 0000000000008094 RSI: 0000200000000080 RDI: 0000000000000003
[  345.103235][T11750] RBP: 00007f93cb0a4090 R08: 0000000000000000 R09: 0000000000000000
[  345.111220][T11750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  345.119197][T11750] R13: 00007f93ca416038 R14: 00007f93ca415fa0 R15: 00007ffd9f7667f8
[  345.127325][T11750]  </TASK>
[  345.192125][T11718] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  345.324581][T11718] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  345.378641][T11756] validate_nla: 9 callbacks suppressed
[  345.378658][T11756] netlink: 'syz.3.2197': attribute type 39 has an invalid length.
[  345.614256][T11761] netlink: 'syz.4.2198': attribute type 2 has an invalid length.
[  345.622444][T11761] netlink: 51 bytes leftover after parsing attributes in process `syz.4.2198'.
[  345.665177][T11718] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  345.679382][ T5775] Bluetooth: hci1: command tx timeout
[  345.785047][T11718] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  345.839487][ T5775] Bluetooth: hci0: command tx timeout
[  346.208660][T11767] netlink: 'syz.1.2203': attribute type 33 has an invalid length.
[  346.224150][T11767] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2203'.
[  346.297785][T11718] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  346.357125][T11718] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  346.371472][T11718] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  346.415589][T11718] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  346.572281][T11718] 8021q: adding VLAN 0 to HW filter on device bond0
[  346.641028][T11718] 8021q: adding VLAN 0 to HW filter on device team0
[  346.656995][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  346.664237][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  346.679114][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[  346.686306][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[  347.450745][T11718] 8021q: adding VLAN 0 to HW filter on device batadv0
[  347.579748][T11718] veth0_vlan: entered promiscuous mode
[  347.615790][T11718] veth1_vlan: entered promiscuous mode
[  347.699756][T11718] veth0_macvtap: entered promiscuous mode
[  347.735331][T11718] veth1_macvtap: entered promiscuous mode
[  347.759290][ T5775] Bluetooth: hci1: command tx timeout
[  347.796901][T11718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  347.816393][T11718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  347.836945][T11718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  347.856584][T11718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  347.868899][T11718] batman_adv: batadv0: Interface activated: batadv_slave_0
[  347.895415][T11718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  347.915596][T11718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  347.937947][T11718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  347.960325][T11718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  347.977355][T11718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  347.996308][T11718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  348.016972][T11718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  348.029384][T11718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  348.048031][T11718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  348.071159][T11718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  348.091370][T11718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  348.108319][T11718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  348.128229][T11718] batman_adv: batadv0: Interface activated: batadv_slave_1
[  348.174750][T11718] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  348.201117][T11718] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  348.216799][T11718] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  348.228553][T11718] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  349.791996][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  349.806519][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  349.835481][T11791] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  349.842833][T11791] IPv6: NLM_F_CREATE should be set when creating new route
[  349.850286][T11791] IPv6: NLM_F_CREATE should be set when creating new route
[  349.857611][T11791] IPv6: NLM_F_CREATE should be set when creating new route
[  349.867420][ T5775] Bluetooth: hci1: command tx timeout
[  349.951204][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  349.989156][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  350.074003][T11794] bridge_slave_1: left allmulticast mode
[  350.101216][T11794] bridge_slave_1: left promiscuous mode
[  350.109098][T11794] bridge0: port 2(bridge_slave_1) entered disabled state
[  350.333606][T11794] bridge_slave_0: left allmulticast mode
[  350.341206][T11794] bridge_slave_0: left promiscuous mode
[  350.360947][T11794] bridge0: port 1(bridge_slave_0) entered disabled state
[  350.708013][T11795] netlink: 'syz.4.2214': attribute type 33 has an invalid length.
[  350.724293][T11795] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2214'.
[  350.747112][T11801] netlink: 'syz.0.2187': attribute type 16 has an invalid length.
[  350.758660][T11801] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2187'.
[  350.769928][T11801] bridge0: port 1(bridge_slave_0) entered disabled state
[  351.447267][T11817] syzkaller0: entered promiscuous mode
[  351.454561][T11817] syzkaller0: entered allmulticast mode
[  351.462867][ T1148] syzkaller0: tun_net_xmit 48
[  351.485948][T11817] syzkaller0: create flow: hash 1836213577 index 1
[  351.580608][T11819] netlink: 56537 bytes leftover after parsing attributes in process `syz.1.2223'.
[  351.616624][T11822] netlink: 'syz.1.2223': attribute type 10 has an invalid length.
[  351.657310][T11816] syzkaller0: delete flow: hash 1836213577 index 1
[  351.919946][ T5775] Bluetooth: hci1: command tx timeout
[  352.127520][T11835] netlink: 'syz.1.2228': attribute type 29 has an invalid length.
[  356.973041][T11830] netlink: 'syz.0.2226': attribute type 16 has an invalid length.
[  356.981535][T11830] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2226'.
[  356.990817][T11835] netlink: 'syz.1.2228': attribute type 29 has an invalid length.
[  357.271881][T11850] netlink: 56537 bytes leftover after parsing attributes in process `syz.4.2236'.
[  357.320332][T11850] netlink: 'syz.4.2236': attribute type 10 has an invalid length.
[  358.342225][T11872] netlink: 'syz.1.2241': attribute type 29 has an invalid length.
[  358.379622][T11872] netlink: 'syz.1.2241': attribute type 29 has an invalid length.
[  358.396682][T11874] netlink: 'syz.1.2241': attribute type 29 has an invalid length.
[  358.867259][T11878] netlink: 'syz.1.2245': attribute type 33 has an invalid length.
[  358.889396][T11878] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2245'.
[  359.102108][T11878] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  359.137353][T11884] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  359.664520][T11891] FAULT_INJECTION: forcing a failure.
[  359.664520][T11891] name failslab, interval 1, probability 0, space 0, times 0
[  359.677441][T11891] CPU: 1 PID: 11891 Comm: syz.1.2246 Not tainted syzkaller #0
[  359.684938][T11891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  359.695042][T11891] Call Trace:
[  359.698343][T11891]  <TASK>
[  359.701301][T11891]  dump_stack_lvl+0x18c/0x250
[  359.706020][T11891]  ? rt6_nlmsg_size+0xd0/0x490
[  359.710819][T11891]  ? show_regs_print_info+0x20/0x20
[  359.716052][T11891]  ? load_image+0x400/0x400
[  359.720600][T11891]  ? rt6_nlmsg_size+0xd0/0x490
[  359.725422][T11891]  ? __lock_acquire+0x7d40/0x7d40
[  359.730485][T11891]  should_fail_ex+0x39d/0x4d0
[  359.735201][T11891]  should_failslab+0x9/0x20
[  359.739732][T11891]  slab_pre_alloc_hook+0x59/0x310
[  359.744785][T11891]  ? rt6_nlmsg_size+0x404/0x490
[  359.749664][T11891]  kmem_cache_alloc_node+0x60/0x320
[  359.754908][T11891]  ? __alloc_skb+0x103/0x2c0
[  359.759630][T11891]  __alloc_skb+0x103/0x2c0
[  359.764078][T11891]  inet6_rt_notify+0xb4/0x240
[  359.768784][T11891]  fib6_del+0x10d2/0x1580
[  359.773166][T11891]  ? fib6_locate_1+0x6c0/0x6c0
[  359.777979][T11891]  ? perf_trace_lock+0xfc/0x3b0
[  359.782889][T11891]  fib6_clean_node+0x297/0x540
[  359.787716][T11891]  ? node_free_rcu+0x30/0x30
[  359.792354][T11891]  ? __local_bh_enable_ip+0x13a/0x1c0
[  359.797763][T11891]  fib6_walk_continue+0x672/0x900
[  359.802839][T11891]  fib6_walk+0x149/0x290
[  359.807121][T11891]  __fib6_clean_all+0x283/0x3e0
[  359.812061][T11891]  ? __fib6_clean_all+0xb2/0x3e0
[  359.817028][T11891]  ? rt6_sync_down_dev+0x160/0x160
[  359.822256][T11891]  ? fib6_clean_all+0x30/0x30
[  359.826976][T11891]  ? node_free_rcu+0x30/0x30
[  359.831594][T11891]  ? rt6_sync_down_dev+0x160/0x160
[  359.836735][T11891]  ? trace_event_raw_event_lock+0x250/0x250
[  359.842693][T11891]  rt6_disable_ip+0x12d/0x7b0
[  359.847417][T11891]  ? fib6_ifdown+0x4b0/0x4b0
[  359.852079][T11891]  ? __lock_acquire+0x7d40/0x7d40
[  359.857128][T11891]  ? rcu_is_watching+0x15/0xb0
[  359.861932][T11891]  addrconf_ifdown+0x16c/0x18c0
[  359.866826][T11891]  ? __mutex_unlock_slowpath+0x1b4/0x6c0
[  359.872498][T11891]  ? tls_dev_event+0x74d/0xf40
[  359.877293][T11891]  ? addrconf_cleanup+0x1e0/0x1e0
[  359.882379][T11891]  addrconf_notify+0x6c6/0x1010
[  359.887323][T11891]  notifier_call_chain+0x197/0x380
[  359.892479][T11891]  dev_set_mtu_ext+0x463/0x680
[  359.897308][T11891]  ? dev_validate_mtu+0x170/0x170
[  359.902389][T11891]  ? __mutex_trylock_common+0x159/0x260
[  359.907980][T11891]  ? trace_raw_output_contention_end+0xd0/0xd0
[  359.914188][T11891]  dev_set_mtu+0xec/0x1c0
[  359.918658][T11891]  ? dev_set_mtu_ext+0x680/0x680
[  359.923657][T11891]  ? __dev_get_by_name+0xe5/0x130
[  359.928714][T11891]  ? dev_ifsioc+0x4f9/0xc40
[  359.933253][T11891]  dev_ioctl+0x7b4/0x1140
[  359.937647][T11891]  sock_do_ioctl+0x239/0x310
[  359.942287][T11891]  ? sock_show_fdinfo+0xb0/0xb0
[  359.947199][T11891]  sock_ioctl+0x5ba/0x7e0
[  359.951564][T11891]  ? sock_poll+0x3e0/0x3e0
[  359.956030][T11891]  ? bpf_lsm_file_ioctl+0x9/0x10
[  359.961035][T11891]  ? security_file_ioctl+0x80/0xa0
[  359.966188][T11891]  ? sock_poll+0x3e0/0x3e0
[  359.970631][T11891]  __se_sys_ioctl+0xfd/0x170
[  359.975270][T11891]  do_syscall_64+0x55/0xa0
[  359.979719][T11891]  ? clear_bhb_loop+0x40/0x90
[  359.984422][T11891]  ? clear_bhb_loop+0x40/0x90
[  359.989130][T11891]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  359.995059][T11891] RIP: 0033:0x7f44e7d9c799
[  359.999499][T11891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  360.019236][T11891] RSP: 002b:00007f44e8bdb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  360.027707][T11891] RAX: ffffffffffffffda RBX: 00007f44e8016090 RCX: 00007f44e7d9c799
[  360.036064][T11891] RDX: 0000200000000080 RSI: 0000000000008922 RDI: 000000000000000b
[  360.044072][T11891] RBP: 00007f44e8bdb090 R08: 0000000000000000 R09: 0000000000000000
[  360.052173][T11891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  360.060174][T11891] R13: 00007f44e8016128 R14: 00007f44e8016090 R15: 00007fffcfd466d8
[  360.068204][T11891]  </TASK>
[  362.036441][T11908] netlink: 'syz.4.2251': attribute type 13 has an invalid length.
[  362.052091][T11908] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.2251'.
[  362.182002][T11913] netlink: 'syz.3.2253': attribute type 29 has an invalid length.
[  362.199658][T11913] netlink: 'syz.3.2253': attribute type 29 has an invalid length.
[  362.225318][T11913] netlink: 'syz.3.2253': attribute type 29 has an invalid length.
[  362.734353][T11917] netlink: 'syz.3.2256': attribute type 33 has an invalid length.
[  362.768085][T11917] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2256'.
[  362.916308][T11917] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  366.112201][T11941] netlink: 'syz.4.2264': attribute type 29 has an invalid length.
[  366.170737][T11941] netlink: 'syz.4.2264': attribute type 29 has an invalid length.
[  366.178977][T11948] netlink: 'syz.4.2264': attribute type 29 has an invalid length.
[  366.255292][T11943] netlink: 'syz.3.2262': attribute type 33 has an invalid length.
[  366.288269][T11943] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2262'.
[  366.341358][T11943] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  366.404971][T11942] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  366.412610][T11942] IPv6: NLM_F_CREATE should be set when creating new route
[  366.420452][T11942] IPv6: NLM_F_CREATE should be set when creating new route
[  366.428065][T11942] IPv6: NLM_F_CREATE should be set when creating new route
[  366.877642][T11961] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2270'.
[  367.104601][T11970] netlink: 'syz.3.2274': attribute type 10 has an invalid length.
[  367.126026][T11970] `: Device vxcan0 is of different type
[  367.343359][T11973] netlink: 'syz.4.2275': attribute type 29 has an invalid length.
[  367.362868][T11973] netlink: 'syz.4.2275': attribute type 29 has an invalid length.
[  367.380247][T11975] netlink: 'syz.1.2276': attribute type 1 has an invalid length.
[  367.385037][T11973] netlink: 'syz.4.2275': attribute type 29 has an invalid length.
[  367.429545][T11975] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.2276'.
[  367.516471][T11977] netlink: 'syz.0.2277': attribute type 33 has an invalid length.
[  367.631510][T11977] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2277'.
[  367.964979][T11982] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  368.203292][T11994] netlink: 'syz.4.2283': attribute type 16 has an invalid length.
[  368.220170][T11994] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2283'.
[  368.250603][T11994] bridge0: port 1(bridge_slave_0) entered disabled state
[  368.351189][T11992] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2282'.
[  368.593881][T12001] netlink: 'syz.0.2286': attribute type 29 has an invalid length.
[  368.630903][T12001] netlink: 'syz.0.2286': attribute type 29 has an invalid length.
[  368.666089][T12001] netlink: 'syz.0.2286': attribute type 29 has an invalid length.
[  368.990359][T12002] delete_channel: no stack
[  369.074121][T12008] team0: Device vxcan0 is of different type
[  369.140807][   T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  369.151330][   T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  369.159912][   T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  369.168754][   T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  369.178512][   T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  369.189415][   T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  369.460365][T12022] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2292'.
[  369.904639][T12009] chnl_net:caif_netlink_parms(): no params data found
[  370.023301][T12009] bridge0: port 1(bridge_slave_0) entered blocking state
[  370.030774][T12009] bridge0: port 1(bridge_slave_0) entered disabled state
[  370.039442][T12009] bridge_slave_0: entered allmulticast mode
[  370.047956][T12009] bridge_slave_0: entered promiscuous mode
[  370.059855][T12009] bridge0: port 2(bridge_slave_1) entered blocking state
[  370.067342][T12009] bridge0: port 2(bridge_slave_1) entered disabled state
[  370.075103][T12009] bridge_slave_1: entered allmulticast mode
[  370.085956][T12009] bridge_slave_1: entered promiscuous mode
[  370.143644][T12009] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  370.161565][T12009] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  370.365458][T12032] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2300'.
[  370.532052][T12037] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  370.539547][T12037] IPv6: NLM_F_CREATE should be set when creating new route
[  370.546905][T12037] IPv6: NLM_F_CREATE should be set when creating new route
[  370.554287][T12037] IPv6: NLM_F_CREATE should be set when creating new route
[  370.663836][T12009] team0: Port device team_slave_0 added
[  370.707800][T12009] team0: Port device team_slave_1 added
[  370.822780][T12009] batman_adv: batadv0: Adding interface: batadv_slave_0
[  370.835136][T12009] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  370.911151][T12009] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  370.926272][T12009] batman_adv: batadv0: Adding interface: batadv_slave_1
[  370.934294][T12009] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  370.963392][T12009] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  371.272423][T12009] hsr_slave_0: entered promiscuous mode
[  371.279359][ T5775] Bluetooth: hci3: command tx timeout
[  371.296702][T12009] hsr_slave_1: entered promiscuous mode
[  371.307178][T12009] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  371.318399][T12009] Cannot create hsr debugfs directory
[  371.400955][T12048] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2298'.
[  371.744536][T12056] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2303'.
[  371.954619][T12009] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  372.084184][T12009] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  372.213725][T12009] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  372.230521][T12067] validate_nla: 7 callbacks suppressed
[  372.230539][T12067] netlink: 'syz.4.2306': attribute type 29 has an invalid length.
[  372.247435][T12067] netlink: 'syz.4.2306': attribute type 29 has an invalid length.
[  372.256716][T12067] netlink: 'syz.4.2306': attribute type 29 has an invalid length.
[  372.315345][T12009] batman_adv: batadv0: Removing interface: netdevsim0
[  372.330866][T12009] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  372.693492][T12009] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  373.360165][ T5775] Bluetooth: hci3: command tx timeout
[  373.429420][T12009] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  373.442476][T12009] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  373.457683][T12009] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  373.574507][T12077] netlink: 'syz.4.2311': attribute type 16 has an invalid length.
[  373.583057][T12077] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2311'.
[  373.777788][T12009] 8021q: adding VLAN 0 to HW filter on device bond0
[  374.044833][T12009] 8021q: adding VLAN 0 to HW filter on device team0
[  374.114987][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  374.122240][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  374.141584][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  374.148795][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  374.693160][T12009] 8021q: adding VLAN 0 to HW filter on device batadv0
[  374.756277][T12105] netlink: 'syz.0.2320': attribute type 16 has an invalid length.
[  374.774235][T12105] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2320'.
[  374.857244][T12009] veth0_vlan: entered promiscuous mode
[  374.882113][T12009] veth1_vlan: entered promiscuous mode
[  374.928038][T12009] veth0_macvtap: entered promiscuous mode
[  374.930883][T12109] FAULT_INJECTION: forcing a failure.
[  374.930883][T12109] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  374.941285][T12009] veth1_macvtap: entered promiscuous mode
[  374.957937][T12109] CPU: 0 PID: 12109 Comm: syz.0.2322 Not tainted syzkaller #0
[  374.965457][T12109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  374.971493][T12009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  374.975518][T12109] Call Trace:
[  374.975532][T12109]  <TASK>
[  374.975540][T12109]  dump_stack_lvl+0x18c/0x250
[  374.975574][T12109]  ? show_regs_print_info+0x20/0x20
[  374.975596][T12109]  ? load_image+0x400/0x400
[  374.987463][T12009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  374.989266][T12109]  ? __lock_acquire+0x7d40/0x7d40
[  374.989292][T12109]  ? snprintf+0xe9/0x140
[  374.989316][T12109]  should_fail_ex+0x39d/0x4d0
[  374.989343][T12109]  _copy_to_user+0x2f/0xa0
[  374.989364][T12109]  simple_read_from_buffer+0xe7/0x150
[  374.989394][T12109]  proc_fail_nth_read+0x1e8/0x260
[  374.989420][T12109]  ? proc_fault_inject_write+0x360/0x360
[  374.989444][T12109]  ? fsnotify_perm+0x271/0x5e0
[  374.989467][T12109]  ? proc_fault_inject_write+0x360/0x360
[  374.994701][T12009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  374.997043][T12109]  vfs_read+0x28b/0x970
[  375.002829][T12009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  375.006709][T12109]  ? kernel_read+0x1e0/0x1e0
[  375.017120][T12009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  375.021487][T12109]  ? __fget_files+0x28/0x4b0
[  375.021513][T12109]  ? __fget_files+0x28/0x4b0
[  375.021532][T12109]  ? __fget_files+0x43d/0x4b0
[  375.021558][T12109]  ? __fdget_pos+0x2a3/0x330
[  375.021574][T12109]  ? ksys_read+0x75/0x260
[  375.021602][T12109]  ksys_read+0x150/0x260
[  375.021624][T12109]  ? vfs_write+0x990/0x990
[  375.021649][T12109]  ? lockdep_hardirqs_on+0x98/0x150
[  375.021668][T12109]  do_syscall_64+0x55/0xa0
[  375.021687][T12109]  ? clear_bhb_loop+0x40/0x90
[  375.021704][T12109]  ? clear_bhb_loop+0x40/0x90
[  375.021720][T12109]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  375.021735][T12109] RIP: 0033:0x7fe35bb5cfce
[  375.021751][T12109] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  375.021764][T12109] RSP: 002b:00007fe35c9bbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  375.021783][T12109] RAX: ffffffffffffffda RBX: 00007fe35c9bc6c0 RCX: 00007fe35bb5cfce
[  375.021796][T12109] RDX: 000000000000000f RSI: 00007fe35c9bc0a0 RDI: 0000000000000004
[  375.021805][T12109] RBP: 00007fe35c9bc090 R08: 0000000000000000 R09: 0000000000000000
[  375.021813][T12109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  375.021822][T12109] R13: 00007fe35be16038 R14: 00007fe35be15fa0 R15: 00007ffc401d7eb8
[  375.021845][T12109]  </TASK>
[  375.245503][T12009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  375.258145][T12009] batman_adv: batadv0: Interface activated: batadv_slave_0
[  375.304873][T12009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  375.325992][T12009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  375.344301][T12009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  375.356231][T12009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  375.377193][T12009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  375.429271][T12009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  375.439614][ T5775] Bluetooth: hci3: command tx timeout
[  375.448999][T12009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  375.461427][T12009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  375.471882][T12009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  375.483813][T12009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  375.494389][T12009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  375.505481][T12009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  375.515888][T12009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  375.540470][T12009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  375.564128][T12009] batman_adv: batadv0: Interface activated: batadv_slave_1
[  375.597293][T12111] netlink: 124 bytes leftover after parsing attributes in process `syz.0.2323'.
[  375.624724][T12009] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  375.644257][T12009] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  375.659128][T12009] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  375.670255][T12009] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  375.813380][T12120] netlink: set zone limit has 8 unknown bytes
[  376.042890][T12120] netlink: set zone limit has 8 unknown bytes
[  376.112026][T12120] netlink: set zone limit has 8 unknown bytes
[  376.126092][T12117] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2325'.
[  376.128485][   T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  376.146062][T12117] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8
[  376.156472][T12120] netlink: set zone limit has 8 unknown bytes
[  376.174595][T12120] netlink: set zone limit has 8 unknown bytes
[  376.175546][   T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  376.237166][T12120] netlink: set zone limit has 8 unknown bytes
[  376.261723][   T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  376.262761][T12120] netlink: set zone limit has 8 unknown bytes
[  376.271181][   T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  376.280546][T12120] netlink: set zone limit has 8 unknown bytes
[  376.294271][T12120] netlink: set zone limit has 8 unknown bytes
[  376.578053][T12127] netlink: 'syz.3.2284': attribute type 29 has an invalid length.
[  376.628868][T12127] netlink: 'syz.3.2284': attribute type 29 has an invalid length.
[  376.660641][T12125] FAULT_INJECTION: forcing a failure.
[  376.660641][T12125] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  376.675638][T12125] CPU: 0 PID: 12125 Comm: syz.1.2327 Not tainted syzkaller #0
[  376.683174][T12125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  376.693285][T12125] Call Trace:
[  376.696612][T12125]  <TASK>
[  376.699573][T12125]  dump_stack_lvl+0x18c/0x250
[  376.704282][T12125]  ? show_regs_print_info+0x20/0x20
[  376.709508][T12125]  ? load_image+0x400/0x400
[  376.714030][T12125]  ? __might_fault+0xaa/0x120
[  376.718720][T12125]  ? __lock_acquire+0x7d40/0x7d40
[  376.723769][T12125]  should_fail_ex+0x39d/0x4d0
[  376.728651][T12125]  _copy_from_user+0x2f/0xe0
[  376.733269][T12125]  ___sys_sendmsg+0x1c7/0x360
[  376.737968][T12125]  ? __sys_sendmsg+0x2a0/0x2a0
[  376.742742][T12125]  ? rcu_is_watching+0x5e/0xb0
[  376.747619][T12125]  __se_sys_sendmsg+0x1c2/0x2b0
[  376.752518][T12125]  ? __x64_sys_sendmsg+0x80/0x80
[  376.757509][T12125]  ? syscall_enter_from_user_mode+0x2e/0x80
[  376.763423][T12125]  do_syscall_64+0x55/0xa0
[  376.767861][T12125]  ? clear_bhb_loop+0x40/0x90
[  376.772541][T12125]  ? clear_bhb_loop+0x40/0x90
[  376.777227][T12125]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  376.783125][T12125] RIP: 0033:0x7f44e7d9c799
[  376.787548][T12125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  376.807204][T12125] RSP: 002b:00007f44e8bfc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  376.815736][T12125] RAX: ffffffffffffffda RBX: 00007f44e8015fa0 RCX: 00007f44e7d9c799
[  376.823807][T12125] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000e
[  376.831789][T12125] RBP: 00007f44e8bfc090 R08: 0000000000000000 R09: 0000000000000000
[  376.839764][T12125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  376.847843][T12125] R13: 00007f44e8016038 R14: 00007f44e8015fa0 R15: 00007fffcfd466d8
[  376.855855][T12125]  </TASK>
[  377.028863][T12129] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.2328'.
[  377.050211][T12129] netlink: 21068 bytes leftover after parsing attributes in process `syz.0.2328'.
[  377.104841][T12129] tipc: Started in network mode
[  377.146373][T12129] tipc: Node identity d, cluster identity 56
[  377.157067][T12129] tipc: Node number set to 13
[  377.352797][T12141] netlink: 124 bytes leftover after parsing attributes in process `syz.4.2332'.
[  377.371622][T12137] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.2330'.
[  377.520753][ T5775] Bluetooth: hci3: command tx timeout
[  377.639962][T12149] netlink: 'syz.3.2334': attribute type 10 has an invalid length.
[  377.648436][T12149] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2334'.
[  377.706229][T12149] bridge0: port 3(ipvlan1) entered blocking state
[  377.730097][T12149] bridge0: port 3(ipvlan1) entered disabled state
[  377.740625][T12149] ipvlan1: entered allmulticast mode
[  377.762281][T12149] veth0_vlan: entered allmulticast mode
[  377.786826][T12149] ipvlan1: left allmulticast mode
[  377.803140][T12149] veth0_vlan: left allmulticast mode
[  377.896557][T12149] syz.3.2334 (12149) used greatest stack depth: 19112 bytes left
[  377.988684][T12159] netlink: 'syz.4.2338': attribute type 29 has an invalid length.
[  378.007301][T12159] netlink: 'syz.4.2338': attribute type 29 has an invalid length.
[  378.283160][T12166] netlink: 'syz.3.2341': attribute type 29 has an invalid length.
[  378.296899][T12166] netlink: 'syz.3.2341': attribute type 29 has an invalid length.
[  378.598009][T12173] netlink: 124 bytes leftover after parsing attributes in process `syz.3.2343'.
[  378.705295][T12175] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.2344'.
[  379.300148][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  379.306706][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[  379.454834][T12187] netlink: 'syz.0.2347': attribute type 29 has an invalid length.
[  379.526079][T12187] netlink: 'syz.0.2347': attribute type 29 has an invalid length.
[  379.633248][T12191] netlink: 'syz.4.2348': attribute type 10 has an invalid length.
[  379.669582][T12191] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2348'.
[  379.765385][T12191] bridge0: port 3(ipvlan1) entered blocking state
[  379.787983][T12191] bridge0: port 3(ipvlan1) entered disabled state
[  379.802497][T12191] ipvlan1: entered allmulticast mode
[  379.808767][T12191] veth0_vlan: entered allmulticast mode
[  379.889843][T12191] ipvlan1: left allmulticast mode
[  379.904503][T12191] veth0_vlan: left allmulticast mode
[  380.012318][T12191] syz.4.2348 (12191) used greatest stack depth: 18728 bytes left
[  380.463011][T12208] netlink: 'syz.1.2355': attribute type 33 has an invalid length.
[  380.473788][T12208] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2355'.
[  380.648379][T12214] FAULT_INJECTION: forcing a failure.
[  380.648379][T12214] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  380.672096][T12214] CPU: 0 PID: 12214 Comm: syz.4.2357 Not tainted syzkaller #0
[  380.679618][T12214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  380.689691][T12214] Call Trace:
[  380.692982][T12214]  <TASK>
[  380.695930][T12214]  dump_stack_lvl+0x18c/0x250
[  380.700632][T12214]  ? show_regs_print_info+0x20/0x20
[  380.706054][T12214]  ? load_image+0x400/0x400
[  380.710659][T12214]  ? __might_fault+0xaa/0x120
[  380.715433][T12214]  ? __lock_acquire+0x7d40/0x7d40
[  380.720489][T12214]  should_fail_ex+0x39d/0x4d0
[  380.725276][T12214]  _copy_to_user+0x2f/0xa0
[  380.729722][T12214]  bpf_test_finish+0x4e7/0x650
[  380.734590][T12214]  ? convert_skb_to___skb+0x420/0x420
[  380.739972][T12214]  ? _copy_from_user+0xa5/0xe0
[  380.744840][T12214]  ? bpf_test_init+0x119/0x140
[  380.749612][T12214]  bpf_prog_test_run_xdp+0x8a9/0x10e0
[  380.755006][T12214]  ? dev_put+0x80/0x80
[  380.759091][T12214]  ? dev_put+0x80/0x80
[  380.763168][T12214]  bpf_prog_test_run+0x321/0x390
[  380.768120][T12214]  __sys_bpf+0x49d/0x890
[  380.772372][T12214]  ? bpf_link_show_fdinfo+0x390/0x390
[  380.777762][T12214]  ? lock_chain_count+0x20/0x20
[  380.782769][T12214]  __x64_sys_bpf+0x7c/0x90
[  380.787280][T12214]  do_syscall_64+0x55/0xa0
[  380.791710][T12214]  ? clear_bhb_loop+0x40/0x90
[  380.796405][T12214]  ? clear_bhb_loop+0x40/0x90
[  380.801090][T12214]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  380.806987][T12214] RIP: 0033:0x7fbd4ff9c799
[  380.811411][T12214] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  380.831111][T12214] RSP: 002b:00007fbd50dfa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  380.839530][T12214] RAX: ffffffffffffffda RBX: 00007fbd50215fa0 RCX: 00007fbd4ff9c799
[  380.847503][T12214] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a
[  380.855477][T12214] RBP: 00007fbd50dfa090 R08: 0000000000000000 R09: 0000000000000000
[  380.863460][T12214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  380.871520][T12214] R13: 00007fbd50216038 R14: 00007fbd50215fa0 R15: 00007ffc01efb818
[  380.879508][T12214]  </TASK>
[  380.941669][T12212] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.2356'.
[  381.197752][T12221] netlink: 'syz.1.2360': attribute type 29 has an invalid length.
[  381.470878][T12228] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2362'.
[  381.487702][T12228] net_ratelimit: 58 callbacks suppressed
[  381.487718][T12228] openvswitch: netlink: Geneve option length err (len 1788, max 255).
[  383.824338][T12233] validate_nla: 1 callbacks suppressed
[  383.824351][T12233] netlink: 'syz.0.2363': attribute type 10 has an invalid length.
[  383.841923][T12233] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2363'.
[  383.873298][T12233] bridge0: port 3(ipvlan1) entered blocking state
[  383.889283][T12233] bridge0: port 3(ipvlan1) entered disabled state
[  383.896065][T12233] ipvlan1: entered allmulticast mode
[  383.913511][T12233] veth0_vlan: entered allmulticast mode
[  383.932081][T12233] ipvlan1: left allmulticast mode
[  383.942064][T12233] veth0_vlan: left allmulticast mode
[  383.950722][T12233] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  384.259335][T12235] netlink: 'syz.4.2364': attribute type 33 has an invalid length.
[  384.281646][T12235] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2364'.
[  385.200646][T12252] netlink: 'syz.1.2370': attribute type 29 has an invalid length.
[  385.216762][T12252] netlink: 'syz.1.2370': attribute type 29 has an invalid length.
[  385.311016][T12249] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.2369'.
[  388.922545][T12273] netlink: 'syz.0.2376': attribute type 33 has an invalid length.
[  388.935230][T12273] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2376'.
[  389.324821][T12285] netlink: 'syz.0.2380': attribute type 29 has an invalid length.
[  389.352675][T12285] netlink: 'syz.0.2380': attribute type 29 has an invalid length.
[  389.378922][T12283] netlink: 'syz.4.2379': attribute type 21 has an invalid length.
[  389.403305][T12285] netlink: 'syz.0.2380': attribute type 29 has an invalid length.
[  389.755650][T12298] netlink: 'syz.4.2393': attribute type 16 has an invalid length.
[  389.775857][T12298] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2393'.
[  389.928346][T12304] netlink: 'syz.4.2387': attribute type 16 has an invalid length.
[  389.937287][T12304] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2387'.
[  390.548160][T12315] TCP: TCP_TX_DELAY enabled
[  393.595310][T12325] netlink: 'syz.1.2396': attribute type 16 has an invalid length.
[  393.613599][T12325] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2396'.
[  393.631759][T12325] bridge_slave_0: entered allmulticast mode
[  393.663983][T12328] netlink: 'syz.0.2397': attribute type 16 has an invalid length.
[  393.687419][T12328] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2397'.
[  393.977595][T12337] netlink: 'syz.3.2401': attribute type 33 has an invalid length.
[  393.989460][T12337] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2401'.
[  394.139538][T12339] netlink: 'syz.0.2402': attribute type 33 has an invalid length.
[  394.148055][T12339] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2402'.
[  395.668653][T12361] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2410'.
[  398.584517][T12375] netlink: 'syz.0.2413': attribute type 33 has an invalid length.
[  398.599182][T12375] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2413'.
[  398.975534][T12380] netlink: 'syz.3.2415': attribute type 33 has an invalid length.
[  399.000490][T12380] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2415'.
[  404.386889][T12422] netlink: 'syz.0.2427': attribute type 33 has an invalid length.
[  404.396649][T12422] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2427'.
[  405.580875][T12451] netlink: 'syz.1.2437': attribute type 33 has an invalid length.
[  405.621368][T12451] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2437'.
[  405.670703][T12451] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  409.277516][T12475] wg2: entered allmulticast mode
[  409.553707][T12478] wg2: entered promiscuous mode
[  410.100107][T12494] netlink: 'syz.0.2454': attribute type 6 has an invalid length.
[  413.390243][T12501] netlink: 'syz.1.2457': attribute type 33 has an invalid length.
[  413.438274][T12501] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2457'.
[  413.649579][T12501] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  413.690969][T12509] FAULT_INJECTION: forcing a failure.
[  413.690969][T12509] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  413.729273][T12509] CPU: 0 PID: 12509 Comm: syz.0.2459 Not tainted syzkaller #0
[  413.736814][T12509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  413.746908][T12509] Call Trace:
[  413.750224][T12509]  <TASK>
[  413.753178][T12509]  dump_stack_lvl+0x18c/0x250
[  413.757900][T12509]  ? show_regs_print_info+0x20/0x20
[  413.763136][T12509]  ? load_image+0x400/0x400
[  413.767671][T12509]  ? __might_fault+0xaa/0x120
[  413.772371][T12509]  ? __lock_acquire+0x7d40/0x7d40
[  413.777433][T12509]  should_fail_ex+0x39d/0x4d0
[  413.782177][T12509]  _copy_to_user+0x2f/0xa0
[  413.786622][T12509]  ethtool_get_features+0x202/0x280
[  413.791872][T12509]  ? ethtool_set_rxfh+0xa10/0xa10
[  413.796946][T12509]  ? full_name_hash+0x92/0xe0
[  413.801671][T12509]  dev_ethtool+0x106b/0x18d0
[  413.806290][T12509]  ? ethtool_get_module_eeprom_call+0x170/0x170
[  413.812557][T12509]  ? __lock_acquire+0x7d40/0x7d40
[  413.817610][T12509]  ? __might_fault+0xaa/0x120
[  413.822312][T12509]  ? full_name_hash+0x92/0xe0
[  413.827019][T12509]  ? dev_load+0x21/0x1f0
[  413.831281][T12509]  dev_ioctl+0x392/0x1140
[  413.835621][T12509]  sock_do_ioctl+0x239/0x310
[  413.840313][T12509]  ? sock_show_fdinfo+0xb0/0xb0
[  413.845363][T12509]  sock_ioctl+0x5ba/0x7e0
[  413.849787][T12509]  ? sock_poll+0x3e0/0x3e0
[  413.854208][T12509]  ? bpf_lsm_file_ioctl+0x9/0x10
[  413.859147][T12509]  ? security_file_ioctl+0x80/0xa0
[  413.864359][T12509]  ? sock_poll+0x3e0/0x3e0
[  413.868785][T12509]  __se_sys_ioctl+0xfd/0x170
[  413.873379][T12509]  do_syscall_64+0x55/0xa0
[  413.877802][T12509]  ? clear_bhb_loop+0x40/0x90
[  413.882475][T12509]  ? clear_bhb_loop+0x40/0x90
[  413.887238][T12509]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  413.893230][T12509] RIP: 0033:0x7fe35bb9c799
[  413.897644][T12509] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  413.917249][T12509] RSP: 002b:00007fe35c9bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  413.925843][T12509] RAX: ffffffffffffffda RBX: 00007fe35be15fa0 RCX: 00007fe35bb9c799
[  413.933809][T12509] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000004
[  413.941784][T12509] RBP: 00007fe35c9bc090 R08: 0000000000000000 R09: 0000000000000000
[  413.949747][T12509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  413.957713][T12509] R13: 00007fe35be16038 R14: 00007fe35be15fa0 R15: 00007ffc401d7eb8
[  413.965690][T12509]  </TASK>
[  414.185148][T12524] netlink: 'syz.3.2462': attribute type 16 has an invalid length.
[  414.207442][T12524] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2462'.
[  414.230765][T12524] bridge0: port 1(bridge_slave_0) entered disabled state
[  418.015383][T12538] netlink: 'syz.3.2469': attribute type 33 has an invalid length.
[  418.029354][T12538] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2469'.
[  418.494145][T12544] netlink: 'syz.4.2471': attribute type 33 has an invalid length.
[  418.506916][T12544] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2471'.
[  418.544152][T12544] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  418.689286][T12549] netlink: 'syz.0.2479': attribute type 33 has an invalid length.
[  418.714009][T12549] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2479'.
[  418.848764][T12550] wg2: entered allmulticast mode
[  418.970865][T12552] wg2: entered promiscuous mode
[  419.012599][T12557] netlink: 'syz.3.2474': attribute type 16 has an invalid length.
[  419.020729][T12557] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2474'.
[  419.555041][T12571] netlink: 207496 bytes leftover after parsing attributes in process `syz.1.2481'.
[  419.604714][T12572] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  419.612184][T12572] IPv6: NLM_F_CREATE should be set when creating new route
[  419.633915][ T5775] Bluetooth: hci0: ISO packet for unknown connection handle 2622
[  419.676652][T12572] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2482'.
[  419.698902][T12572] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2482'.
[  419.722108][T12572] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2482'.
[  419.766192][T12572] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2482'.
[  421.084881][T12578] netlink: 'syz.3.2483': attribute type 33 has an invalid length.
[  421.114506][T12578] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2483'.
[  421.158612][T12583] netlink: 'syz.1.2484': attribute type 33 has an invalid length.
[  421.194189][T12583] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2484'.
[  421.222735][T12583] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  421.353207][T12593] netlink: 'syz.3.2487': attribute type 16 has an invalid length.
[  421.619691][T12597] netlink: 'syz.4.2488': attribute type 12 has an invalid length.
[  422.610970][T12614] FAULT_INJECTION: forcing a failure.
[  422.610970][T12614] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  422.680001][T12614] CPU: 0 PID: 12614 Comm: syz.4.2497 Not tainted syzkaller #0
[  422.687536][T12614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  422.697616][T12614] Call Trace:
[  422.700910][T12614]  <TASK>
[  422.703849][T12614]  dump_stack_lvl+0x18c/0x250
[  422.708562][T12614]  ? show_regs_print_info+0x20/0x20
[  422.713787][T12614]  ? load_image+0x400/0x400
[  422.718414][T12614]  ? __might_fault+0xaa/0x120
[  422.723112][T12614]  should_fail_ex+0x39d/0x4d0
[  422.727810][T12614]  copyin+0x1a/0x90
[  422.731638][T12614]  _copy_from_iter+0x404/0x12e0
[  422.736519][T12614]  ? copyout_mc+0x70/0x70
[  422.740864][T12614]  ? verify_lock_unused+0x140/0x140
[  422.746081][T12614]  ? dev_get_by_index+0x22/0x2d0
[  422.751033][T12614]  ? dev_get_by_index+0x22/0x2d0
[  422.755996][T12614]  packet_sendmsg+0x2e23/0x4d70
[  422.760864][T12614]  ? aa_sk_perm+0x970/0x970
[  422.765402][T12614]  ? __might_sleep+0xe0/0xe0
[  422.770012][T12614]  ? verify_lock_unused+0x140/0x140
[  422.775231][T12614]  ? mark_lock+0x94/0x320
[  422.779587][T12614]  ? __lock_acquire+0x1273/0x7d40
[  422.784631][T12614]  ? verify_lock_unused+0x140/0x140
[  422.789930][T12614]  ? aa_sk_perm+0x83c/0x970
[  422.794455][T12614]  ? packet_getsockopt+0xad0/0xad0
[  422.799694][T12614]  ? aa_sock_msg_perm+0x94/0x150
[  422.804651][T12614]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  422.810036][T12614]  ? security_socket_sendmsg+0x80/0xa0
[  422.815505][T12614]  ? packet_getsockopt+0xad0/0xad0
[  422.820638][T12614]  ____sys_sendmsg+0x5ba/0x960
[  422.825414][T12614]  ? __lock_acquire+0x7d40/0x7d40
[  422.830464][T12614]  ? __asan_memset+0x22/0x40
[  422.832935][T12618] netlink: 'syz.0.2499': attribute type 16 has an invalid length.
[  422.835065][T12614]  ? __sys_sendmsg_sock+0x30/0x30
[  422.847889][T12614]  ? __import_iovec+0x3fa/0x850
[  422.852763][T12614]  ? import_iovec+0x73/0xa0
[  422.857312][T12614]  ___sys_sendmsg+0x2a6/0x360
[  422.861983][T12614]  ? get_pid_task+0x20/0x1e0
[  422.866590][T12614]  ? __sys_sendmsg+0x2a0/0x2a0
[  422.871355][T12614]  ? __lock_acquire+0x7d40/0x7d40
[  422.876480][T12614]  __se_sys_sendmsg+0x1c2/0x2b0
[  422.881348][T12614]  ? __x64_sys_sendmsg+0x80/0x80
[  422.886320][T12614]  ? lockdep_hardirqs_on+0x98/0x150
[  422.891538][T12614]  do_syscall_64+0x55/0xa0
[  422.895978][T12614]  ? clear_bhb_loop+0x40/0x90
[  422.900680][T12614]  ? clear_bhb_loop+0x40/0x90
[  422.905386][T12614]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  422.911313][T12614] RIP: 0033:0x7fbd4ff9c799
[  422.915756][T12614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  422.935649][T12614] RSP: 002b:00007fbd50dd9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  422.944094][T12614] RAX: ffffffffffffffda RBX: 00007fbd50216090 RCX: 00007fbd4ff9c799
[  422.952091][T12614] RDX: 0000000014000805 RSI: 0000200000000100 RDI: 0000000000000003
[  422.960173][T12614] RBP: 00007fbd50dd9090 R08: 0000000000000000 R09: 0000000000000000
[  422.968175][T12614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  422.976176][T12614] R13: 00007fbd50216128 R14: 00007fbd50216090 R15: 00007ffc01efb818
[  422.984193][T12614]  </TASK>
[  423.651041][T12626] netlink: 'syz.0.2501': attribute type 33 has an invalid length.
[  423.660594][T12626] __nla_validate_parse: 2 callbacks suppressed
[  423.660609][T12626] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2501'.
[  424.601239][T12646] netlink: 'syz.3.2504': attribute type 12 has an invalid length.
[  424.782167][T12641] netlink: 'syz.1.2506': attribute type 33 has an invalid length.
[  424.822732][T12641] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2506'.
[  424.884471][T12641] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  424.977607][T12650] netlink: 'syz.4.2508': attribute type 16 has an invalid length.
[  424.986870][T12650] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2508'.
[  425.406088][T12658] netlink: 'syz.4.2512': attribute type 33 has an invalid length.
[  425.416225][T12658] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2512'.
[  425.506014][T12658] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  428.623047][T12684] netlink: 'syz.3.2520': attribute type 16 has an invalid length.
[  428.663784][T12684] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2520'.
[  428.949908][T12688] netlink: 'syz.0.2519': attribute type 12 has an invalid length.
[  429.492708][T12701] netlink: 'syz.1.2523': attribute type 33 has an invalid length.
[  429.500791][T12701] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2523'.
[  429.511050][T12701] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  430.057789][T12705] netlink: 'syz.0.2527': attribute type 10 has an invalid length.
[  430.089098][T12705] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.2527'.
[  430.311321][T12714] FAULT_INJECTION: forcing a failure.
[  430.311321][T12714] name failslab, interval 1, probability 0, space 0, times 0
[  430.407059][T12714] CPU: 1 PID: 12714 Comm: syz.4.2528 Not tainted syzkaller #0
[  430.414708][T12714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  430.424781][T12714] Call Trace:
[  430.428084][T12714]  <TASK>
[  430.431038][T12714]  dump_stack_lvl+0x18c/0x250
[  430.435743][T12714]  ? sctp_sendmsg+0x1575/0x28c0
[  430.440626][T12714]  ? ___sys_sendmsg+0x2a6/0x360
[  430.445499][T12714]  ? show_regs_print_info+0x20/0x20
[  430.450815][T12714]  ? load_image+0x400/0x400
[  430.451098][T12716] netlink: 'syz.0.2530': attribute type 16 has an invalid length.
[  430.455346][T12714]  should_fail_ex+0x39d/0x4d0
[  430.467888][T12714]  should_failslab+0x9/0x20
[  430.472420][T12714]  slab_pre_alloc_hook+0x59/0x310
[  430.477470][T12714]  ? sctp_add_bind_addr+0x8c/0x360
[  430.482614][T12714]  __kmem_cache_alloc_node+0x53/0x250
[  430.488010][T12714]  ? sctp_add_bind_addr+0x8c/0x360
[  430.488523][T12716] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2530'.
[  430.493127][T12714]  kmalloc_trace+0x2a/0xe0
[  430.493157][T12714]  sctp_add_bind_addr+0x8c/0x360
[  430.493183][T12714]  sctp_copy_local_addr_list+0x315/0x4f0
[  430.493211][T12714]  ? sctp_copy_local_addr_list+0xa5/0x4f0
[  430.493233][T12714]  ? sctp_do_8_2_transport_strike+0x8a0/0x8a0
[  430.529013][T12714]  ? sctp_v4_is_any+0x35/0x60
[  430.533713][T12714]  ? sctp_copy_one_addr+0x8c/0x350
[  430.538859][T12714]  sctp_bind_addr_copy+0xb3/0x3c0
[  430.543921][T12714]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  430.550278][T12714]  sctp_connect_new_asoc+0x2f9/0x6a0
[  430.555602][T12714]  ? __sctp_connect+0xd80/0xd80
[  430.560561][T12714]  ? __local_bh_enable_ip+0x13a/0x1c0
[  430.566049][T12714]  ? _local_bh_enable+0xa0/0xa0
[  430.570917][T12714]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  430.576925][T12714]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  430.582753][T12714]  ? bpf_lsm_sctp_bind_connect+0x9/0x10
[  430.588324][T12714]  ? security_sctp_bind_connect+0x89/0xb0
[  430.594068][T12714]  sctp_sendmsg+0x1575/0x28c0
[  430.598865][T12714]  ? sctp_getsockopt+0xb60/0xb60
[  430.603823][T12714]  ? aa_sk_perm+0x83c/0x970
[  430.608371][T12714]  ? aa_af_perm+0x330/0x330
[  430.613074][T12714]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[  430.619518][T12714]  ? sock_rps_record_flow+0x19/0x3f0
[  430.624834][T12714]  ? inet_sendmsg+0x7c/0x2f0
[  430.629560][T12714]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  430.634904][T12714]  ? security_socket_sendmsg+0x80/0xa0
[  430.640360][T12714]  ? inet_send_prepare+0x260/0x260
[  430.645478][T12714]  ____sys_sendmsg+0x5ba/0x960
[  430.650234][T12714]  ? __lock_acquire+0x7d40/0x7d40
[  430.655267][T12714]  ? __asan_memset+0x22/0x40
[  430.659856][T12714]  ? __sys_sendmsg_sock+0x30/0x30
[  430.664870][T12714]  ? __import_iovec+0x5f2/0x850
[  430.669761][T12714]  ? import_iovec+0x73/0xa0
[  430.674260][T12714]  ___sys_sendmsg+0x2a6/0x360
[  430.678926][T12714]  ? get_pid_task+0x20/0x1e0
[  430.683511][T12714]  ? __sys_sendmsg+0x2a0/0x2a0
[  430.688277][T12714]  ? __lock_acquire+0x7d40/0x7d40
[  430.693313][T12714]  __se_sys_sendmsg+0x1c2/0x2b0
[  430.698153][T12714]  ? __x64_sys_sendmsg+0x80/0x80
[  430.703093][T12714]  ? lockdep_hardirqs_on+0x98/0x150
[  430.708456][T12714]  do_syscall_64+0x55/0xa0
[  430.712868][T12714]  ? clear_bhb_loop+0x40/0x90
[  430.717537][T12714]  ? clear_bhb_loop+0x40/0x90
[  430.722212][T12714]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  430.728108][T12714] RIP: 0033:0x7fbd4ff9c799
[  430.732523][T12714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  430.752127][T12714] RSP: 002b:00007fbd50dd9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  430.760542][T12714] RAX: ffffffffffffffda RBX: 00007fbd50216090 RCX: 00007fbd4ff9c799
[  430.768612][T12714] RDX: 0000000000004000 RSI: 0000200000000480 RDI: 0000000000000003
[  430.776578][T12714] RBP: 00007fbd50dd9090 R08: 0000000000000000 R09: 0000000000000000
[  430.784538][T12714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  430.792505][T12714] R13: 00007fbd50216128 R14: 00007fbd50216090 R15: 00007ffc01efb818
[  430.800489][T12714]  </TASK>
[  431.242312][T12727] netlink: 'syz.1.2535': attribute type 33 has an invalid length.
[  431.280429][T12727] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2535'.
[  431.335659][T12727] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  431.416868][T12736] netlink: 'syz.4.2538': attribute type 7 has an invalid length.
[  431.440600][T12736] netlink: 'syz.4.2538': attribute type 1 has an invalid length.
[  431.497864][T12736] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.2538'.
[  431.562802][T12740] netlink: 'syz.1.2539': attribute type 16 has an invalid length.
[  431.579165][T12740] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2539'.
[  432.101023][T12761] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2547'.
[  432.328115][T12765] netlink: 'syz.4.2549': attribute type 29 has an invalid length.
[  432.345336][T12765] netlink: 'syz.4.2549': attribute type 29 has an invalid length.
[  432.399923][T12770] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2551'.
[  432.537951][T12775] netlink: 668 bytes leftover after parsing attributes in process `syz.0.2552'.
[  432.551107][T12775] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  432.571548][T12775] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  433.031586][T12792] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2560'.
[  433.720521][T12815] FAULT_INJECTION: forcing a failure.
[  433.720521][T12815] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  433.758249][T12815] CPU: 1 PID: 12815 Comm: syz.1.2568 Not tainted syzkaller #0
[  433.765804][T12815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  433.775895][T12815] Call Trace:
[  433.779201][T12815]  <TASK>
[  433.782153][T12815]  dump_stack_lvl+0x18c/0x250
[  433.786884][T12815]  ? show_regs_print_info+0x20/0x20
[  433.792130][T12815]  ? load_image+0x400/0x400
[  433.796760][T12815]  ? __lock_acquire+0x7d40/0x7d40
[  433.801815][T12815]  ? snprintf+0xe9/0x140
[  433.806172][T12815]  should_fail_ex+0x39d/0x4d0
[  433.810886][T12815]  _copy_to_user+0x2f/0xa0
[  433.815330][T12815]  simple_read_from_buffer+0xe7/0x150
[  433.820761][T12815]  proc_fail_nth_read+0x1e8/0x260
[  433.825829][T12815]  ? proc_fault_inject_write+0x360/0x360
[  433.831510][T12815]  ? fsnotify_perm+0x271/0x5e0
[  433.836305][T12815]  ? proc_fault_inject_write+0x360/0x360
[  433.841965][T12815]  vfs_read+0x28b/0x970
[  433.846151][T12815]  ? kernel_read+0x1e0/0x1e0
[  433.850783][T12815]  ? __fget_files+0x28/0x4b0
[  433.855483][T12815]  ? __fget_files+0x28/0x4b0
[  433.860095][T12815]  ? __fget_files+0x43d/0x4b0
[  433.864801][T12815]  ? __fdget_pos+0x2a3/0x330
[  433.869425][T12815]  ? ksys_read+0x75/0x260
[  433.873939][T12815]  ksys_read+0x150/0x260
[  433.878264][T12815]  ? vfs_write+0x990/0x990
[  433.882713][T12815]  ? lockdep_hardirqs_on+0x98/0x150
[  433.887938][T12815]  do_syscall_64+0x55/0xa0
[  433.892385][T12815]  ? clear_bhb_loop+0x40/0x90
[  433.897079][T12815]  ? clear_bhb_loop+0x40/0x90
[  433.901776][T12815]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  433.907690][T12815] RIP: 0033:0x7f44e7d5cfce
[  433.912143][T12815] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  433.931781][T12815] RSP: 002b:00007f44e8bfbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  433.940226][T12815] RAX: ffffffffffffffda RBX: 00007f44e8bfc6c0 RCX: 00007f44e7d5cfce
[  433.948221][T12815] RDX: 000000000000000f RSI: 00007f44e8bfc0a0 RDI: 0000000000000004
[  433.956221][T12815] RBP: 00007f44e8bfc090 R08: 0000000000000000 R09: 0000000000000000
[  433.964221][T12815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  433.972222][T12815] R13: 00007f44e8016038 R14: 00007f44e8015fa0 R15: 00007fffcfd466d8
[  433.980339][T12815]  </TASK>
[  434.076658][T12817] validate_nla: 5 callbacks suppressed
[  434.076679][T12817] netlink: 'syz.4.2569': attribute type 16 has an invalid length.
[  434.686382][T12828] netlink: 'syz.1.2574': attribute type 33 has an invalid length.
[  434.700002][T12828] __nla_validate_parse: 5 callbacks suppressed
[  434.700016][T12828] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2574'.
[  434.950189][T12838] netlink: 'syz.1.2578': attribute type 16 has an invalid length.
[  435.009460][T12838] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2578'.
[  435.092459][T12843] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2579'.
[  435.178883][T12847] FAULT_INJECTION: forcing a failure.
[  435.178883][T12847] name failslab, interval 1, probability 0, space 0, times 0
[  435.214442][T12847] CPU: 1 PID: 12847 Comm: syz.3.2582 Not tainted syzkaller #0
[  435.221974][T12847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  435.232055][T12847] Call Trace:
[  435.235360][T12847]  <TASK>
[  435.238312][T12847]  dump_stack_lvl+0x18c/0x250
[  435.243025][T12847]  ? show_regs_print_info+0x20/0x20
[  435.248250][T12847]  ? load_image+0x400/0x400
[  435.252794][T12847]  ? __might_sleep+0xe0/0xe0
[  435.257485][T12847]  ? __lock_acquire+0x7d40/0x7d40
[  435.262531][T12847]  should_fail_ex+0x39d/0x4d0
[  435.267233][T12847]  should_failslab+0x9/0x20
[  435.271773][T12847]  slab_pre_alloc_hook+0x59/0x310
[  435.276821][T12847]  ? __lock_acquire+0x7d40/0x7d40
[  435.281878][T12847]  kmem_cache_alloc_node+0x60/0x320
[  435.287102][T12847]  ? __alloc_skb+0x103/0x2c0
[  435.291716][T12847]  __alloc_skb+0x103/0x2c0
[  435.296153][T12847]  netlink_sendmsg+0x66a/0xbf0
[  435.300948][T12847]  ? netlink_getsockopt+0x590/0x590
[  435.306217][T12847]  ? aa_sock_msg_perm+0x94/0x150
[  435.311176][T12847]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  435.316482][T12847]  ? security_socket_sendmsg+0x80/0xa0
[  435.321953][T12847]  ? netlink_getsockopt+0x590/0x590
[  435.327170][T12847]  ____sys_sendmsg+0x5ba/0x960
[  435.331956][T12847]  ? __asan_memset+0x22/0x40
[  435.336568][T12847]  ? __sys_sendmsg_sock+0x30/0x30
[  435.341610][T12847]  ? __import_iovec+0x5f2/0x850
[  435.346493][T12847]  ? import_iovec+0x73/0xa0
[  435.351023][T12847]  ___sys_sendmsg+0x2a6/0x360
[  435.355718][T12847]  ? get_pid_task+0x20/0x1e0
[  435.360333][T12847]  ? __sys_sendmsg+0x2a0/0x2a0
[  435.365131][T12847]  ? __lock_acquire+0x7d40/0x7d40
[  435.370215][T12847]  __se_sys_sendmsg+0x1c2/0x2b0
[  435.375106][T12847]  ? __x64_sys_sendmsg+0x80/0x80
[  435.380094][T12847]  ? lockdep_hardirqs_on+0x98/0x150
[  435.385332][T12847]  do_syscall_64+0x55/0xa0
[  435.389788][T12847]  ? clear_bhb_loop+0x40/0x90
[  435.394488][T12847]  ? clear_bhb_loop+0x40/0x90
[  435.399183][T12847]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  435.405099][T12847] RIP: 0033:0x7fe24719c799
[  435.409530][T12847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  435.429172][T12847] RSP: 002b:00007fe24802b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  435.437618][T12847] RAX: ffffffffffffffda RBX: 00007fe247415fa0 RCX: 00007fe24719c799
[  435.445613][T12847] RDX: 0000000000048084 RSI: 0000200000000380 RDI: 0000000000000003
[  435.453608][T12847] RBP: 00007fe24802b090 R08: 0000000000000000 R09: 0000000000000000
[  435.461598][T12847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  435.469676][T12847] R13: 00007fe247416038 R14: 00007fe247415fa0 R15: 00007fffb8673c58
[  435.477694][T12847]  </TASK>
[  436.200840][T12866] netlink: 'syz.3.2591': attribute type 16 has an invalid length.
[  436.208815][T12866] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2591'.
[  436.505833][T12874] FAULT_INJECTION: forcing a failure.
[  436.505833][T12874] name failslab, interval 1, probability 0, space 0, times 0
[  436.560031][T12874] CPU: 0 PID: 12874 Comm: syz.3.2594 Not tainted syzkaller #0
[  436.567571][T12874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  436.577668][T12874] Call Trace:
[  436.580957][T12874]  <TASK>
[  436.583884][T12874]  dump_stack_lvl+0x18c/0x250
[  436.588565][T12874]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  436.594725][T12874]  ? show_regs_print_info+0x20/0x20
[  436.599987][T12874]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  436.606238][T12874]  ? dump_stack+0x9/0x20
[  436.610695][T12874]  should_fail_ex+0x39d/0x4d0
[  436.615378][T12874]  should_failslab+0x9/0x20
[  436.619887][T12874]  slab_pre_alloc_hook+0x59/0x310
[  436.624996][T12874]  ? mark_lock+0x94/0x320
[  436.629325][T12874]  ? __dev_alloc_name+0x278/0x5d0
[  436.634365][T12874]  ? __dev_alloc_name+0x278/0x5d0
[  436.639400][T12874]  __kmem_cache_alloc_node+0x53/0x250
[  436.644802][T12874]  ? __dev_alloc_name+0x278/0x5d0
[  436.649860][T12874]  __kmalloc+0xa4/0x230
[  436.654135][T12874]  __dev_alloc_name+0x278/0x5d0
[  436.658991][T12874]  ? __netdev_printk+0x4a0/0x4a0
[  436.664033][T12874]  ? dev_valid_name+0x207/0x2f0
[  436.668887][T12874]  dev_prep_valid_name+0x49/0x180
[  436.673911][T12874]  register_netdevice+0x4b5/0x1bb0
[  436.679143][T12874]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  436.685467][T12874]  ? lockdep_hardirqs_on+0x98/0x150
[  436.690686][T12874]  ? netif_stacked_transfer_operstate+0x210/0x210
[  436.697116][T12874]  ? ipip6_tunnel_create+0x81/0x2d0
[  436.702329][T12874]  ipip6_tunnel_create+0x10c/0x2d0
[  436.707444][T12874]  ipip6_tunnel_locate+0x527/0x760
[  436.712564][T12874]  ? check_6rd+0x670/0x670
[  436.716974][T12874]  ? bpf_lsm_capable+0x9/0x10
[  436.721656][T12874]  ipip6_tunnel_ctl+0x6ae/0x9e0
[  436.726520][T12874]  addrconf_set_dstaddr+0x22b/0x320
[  436.731720][T12874]  ? ipv6_inherit_eui64+0x1a0/0x1a0
[  436.736921][T12874]  ? trace_call_bpf+0xc3/0x6c0
[  436.741685][T12874]  ? trace_call_bpf+0x5e9/0x6c0
[  436.746532][T12874]  ? trace_call_bpf+0xc3/0x6c0
[  436.751292][T12874]  inet6_ioctl+0x164/0x2d0
[  436.755701][T12874]  ? inet6_getname+0x650/0x650
[  436.760566][T12874]  ? tomoyo_path_number_perm+0x5b4/0x620
[  436.766227][T12874]  ? tomoyo_path_number_perm+0x217/0x620
[  436.771894][T12874]  sock_do_ioctl+0xfc/0x310
[  436.776423][T12874]  ? sock_show_fdinfo+0xb0/0xb0
[  436.781288][T12874]  ? lock_chain_count+0x20/0x20
[  436.786159][T12874]  sock_ioctl+0x5ba/0x7e0
[  436.790496][T12874]  ? sock_poll+0x3e0/0x3e0
[  436.794920][T12874]  ? security_file_ioctl+0x38/0xa0
[  436.800036][T12874]  ? bpf_lsm_file_ioctl+0x9/0x10
[  436.804971][T12874]  ? security_file_ioctl+0x80/0xa0
[  436.810084][T12874]  ? sock_poll+0x3e0/0x3e0
[  436.814498][T12874]  __se_sys_ioctl+0xfd/0x170
[  436.819099][T12874]  do_syscall_64+0x55/0xa0
[  436.823600][T12874]  ? clear_bhb_loop+0x40/0x90
[  436.828370][T12874]  ? clear_bhb_loop+0x40/0x90
[  436.833040][T12874]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  436.838936][T12874] RIP: 0033:0x7fe24719c799
[  436.843346][T12874] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  436.862951][T12874] RSP: 002b:00007fe24802b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  436.871535][T12874] RAX: ffffffffffffffda RBX: 00007fe247415fa0 RCX: 00007fe24719c799
[  436.879520][T12874] RDX: 0000200000000000 RSI: 0000000000008918 RDI: 0000000000000000
[  436.887503][T12874] RBP: 00007fe24802b090 R08: 0000000000000000 R09: 0000000000000000
[  436.895504][T12874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  436.903489][T12874] R13: 00007fe247416038 R14: 00007fe247415fa0 R15: 00007fffb8673c58
[  436.911573][T12874]  </TASK>
[  437.466110][T12890] netlink: 'syz.1.2599': attribute type 10 has an invalid length.
[  437.552817][T12897] netlink: 'syz.0.2602': attribute type 16 has an invalid length.
[  437.569400][T12897] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2602'.
[  437.881289][T12905] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2607'.
[  437.979347][T12910] netlink: 'syz.3.2608': attribute type 11 has an invalid length.
[  439.011221][T12932] netlink: 'syz.0.2616': attribute type 16 has an invalid length.
[  439.056684][T12932] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2616'.
[  439.109881][T12930] bridge_slave_1: left allmulticast mode
[  439.120063][T12930] bridge_slave_1: left promiscuous mode
[  439.138649][T12930] bridge0: port 2(bridge_slave_1) entered disabled state
[  439.161217][T12937] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2617'.
[  439.222329][T12930] bridge_slave_0: left promiscuous mode
[  439.260971][T12930] bridge0: port 1(bridge_slave_0) entered disabled state
[  439.403334][T12941] netlink: 'syz.1.2619': attribute type 1 has an invalid length.
[  439.471649][T12941] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.2619'.
[  439.760248][T12933] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2617'.
[  439.776735][T12937] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2617'.
[  439.800936][T12938] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2617'.
[  439.844612][T12948] netlink: 'syz.1.2623': attribute type 21 has an invalid length.
[  439.879309][T12948] IPv6: NLM_F_CREATE should be specified when creating new route
[  440.234784][T12968] netlink: 'syz.0.2628': attribute type 16 has an invalid length.
[  440.245527][T12968] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2628'.
[  440.268029][T12969] netlink: 'syz.1.2629': attribute type 3 has an invalid length.
[  440.289603][T12969] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2629'.
[  440.508797][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  440.515205][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[  440.992460][T12984] FAULT_INJECTION: forcing a failure.
[  440.992460][T12984] name failslab, interval 1, probability 0, space 0, times 0
[  441.019602][T12984] CPU: 1 PID: 12984 Comm: syz.1.2635 Not tainted syzkaller #0
[  441.027122][T12984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  441.037197][T12984] Call Trace:
[  441.040493][T12984]  <TASK>
[  441.043440][T12984]  dump_stack_lvl+0x18c/0x250
[  441.048161][T12984]  ? show_regs_print_info+0x20/0x20
[  441.053480][T12984]  ? load_image+0x400/0x400
[  441.058004][T12984]  ? __might_sleep+0xe0/0xe0
[  441.062615][T12984]  ? __lock_acquire+0x7d40/0x7d40
[  441.067666][T12984]  should_fail_ex+0x39d/0x4d0
[  441.072559][T12984]  should_failslab+0x9/0x20
[  441.077088][T12984]  slab_pre_alloc_hook+0x59/0x310
[  441.082142][T12984]  ? sctp_transport_new+0x7e/0x630
[  441.087279][T12984]  __kmem_cache_alloc_node+0x53/0x250
[  441.092682][T12984]  ? sctp_transport_new+0x7e/0x630
[  441.097859][T12984]  kmalloc_trace+0x2a/0xe0
[  441.102323][T12984]  sctp_transport_new+0x7e/0x630
[  441.107286][T12984]  sctp_assoc_add_peer+0x259/0x1390
[  441.112508][T12984]  ? sctp_bind_addr_copy+0x37b/0x3c0
[  441.117914][T12984]  sctp_connect_new_asoc+0x323/0x6a0
[  441.123233][T12984]  ? __sctp_connect+0xd80/0xd80
[  441.128108][T12984]  ? __local_bh_enable_ip+0x13a/0x1c0
[  441.133508][T12984]  ? _local_bh_enable+0xa0/0xa0
[  441.138380][T12984]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  441.144205][T12984]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  441.150035][T12984]  ? bpf_lsm_sctp_bind_connect+0x9/0x10
[  441.155606][T12984]  ? security_sctp_bind_connect+0x89/0xb0
[  441.161367][T12984]  sctp_sendmsg+0x1575/0x28c0
[  441.166078][T12984]  ? sctp_getsockopt+0xb60/0xb60
[  441.171044][T12984]  ? aa_sk_perm+0x83c/0x970
[  441.175583][T12984]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  441.181757][T12984]  ? lockdep_hardirqs_on+0x98/0x150
[  441.186980][T12984]  ? aa_af_perm+0x330/0x330
[  441.191504][T12984]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[  441.197948][T12984]  ? sock_rps_record_flow+0x19/0x3f0
[  441.203259][T12984]  ? inet_sendmsg+0x7c/0x2f0
[  441.207884][T12984]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  441.213188][T12984]  ? security_socket_sendmsg+0x80/0xa0
[  441.218673][T12984]  ? inet_send_prepare+0x260/0x260
[  441.223809][T12984]  ____sys_sendmsg+0x5ba/0x960
[  441.228595][T12984]  ? __lock_acquire+0x7d40/0x7d40
[  441.233648][T12984]  ? __asan_memset+0x22/0x40
[  441.238267][T12984]  ? __sys_sendmsg_sock+0x30/0x30
[  441.243327][T12984]  ? __import_iovec+0x5f2/0x850
[  441.248229][T12984]  ? import_iovec+0x73/0xa0
[  441.252774][T12984]  ___sys_sendmsg+0x2a6/0x360
[  441.257482][T12984]  ? __sys_sendmsg+0x2a0/0x2a0
[  441.262281][T12984]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  441.268311][T12984]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  441.274519][T12984]  ? __fdget+0x180/0x210
[  441.278799][T12984]  ? __fdget+0x180/0x210
[  441.283085][T12984]  __se_sys_sendmsg+0x1c2/0x2b0
[  441.287972][T12984]  ? __x64_sys_sendmsg+0x80/0x80
[  441.292961][T12984]  ? lockdep_hardirqs_on+0x98/0x150
[  441.298206][T12984]  do_syscall_64+0x55/0xa0
[  441.302657][T12984]  ? clear_bhb_loop+0x40/0x90
[  441.307384][T12984]  ? clear_bhb_loop+0x40/0x90
[  441.312110][T12984]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  441.318041][T12984] RIP: 0033:0x7f44e7d9c799
[  441.322489][T12984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  441.342136][T12984] RSP: 002b:00007f44e8bfc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  441.350589][T12984] RAX: ffffffffffffffda RBX: 00007f44e8015fa0 RCX: 00007f44e7d9c799
[  441.358610][T12984] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000006
[  441.366614][T12984] RBP: 00007f44e8bfc090 R08: 0000000000000000 R09: 0000000000000000
[  441.374620][T12984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  441.382706][T12984] R13: 00007f44e8016038 R14: 00007f44e8015fa0 R15: 00007fffcfd466d8
[  441.390719][T12984]  </TASK>
[  441.600065][T12994] netlink: 'syz.4.2639': attribute type 16 has an invalid length.
[  441.643153][T12994] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2639'.
[  445.959285][T13022] netlink: 'syz.4.2647': attribute type 33 has an invalid length.
[  445.979149][T13022] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2647'.
[  446.038191][T13022] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  446.640124][T12412] gretap0 (unregistering): left allmulticast mode
[  446.647126][T12412] gretap0 (unregistering): left promiscuous mode
[  446.690901][T12412] bridge0: port 3(gretap0) entered disabled state
[  446.810818][T13033] netlink: 'syz.4.2651': attribute type 16 has an invalid length.
[  446.819195][T13033] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2651'.
[  447.192096][T13043] netlink: 'syz.1.2654': attribute type 11 has an invalid length.
[  448.660409][T13060] netlink: 'syz.0.2659': attribute type 3 has an invalid length.
[  448.668196][T13060] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2659'.
[  451.703121][T12412] hsr_slave_0: left promiscuous mode
[  451.716080][T12412] hsr_slave_1: left promiscuous mode
[  451.730392][T12412] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  451.752490][T12412] batman_adv: batadv0: Removing interface: batadv_slave_1
[  451.785383][T12412] bridge_slave_1: left allmulticast mode
[  451.812105][T12412] bridge_slave_1: left promiscuous mode
[  451.839976][T12412] bridge0: port 2(bridge_slave_1) entered disabled state
[  451.870506][T12412] bridge_slave_0: left promiscuous mode
[  451.886611][T12412] bridge0: port 1(bridge_slave_0) entered disabled state
[  451.982422][T12412] veth0_macvtap: left promiscuous mode
[  451.989249][T12412] veth1_vlan: left promiscuous mode
[  451.995258][T12412] veth0_vlan: left promiscuous mode
[  452.592449][T12412] .` (unregistering): (slave geneve0): Releasing backup interface
[  453.140715][T12412] .` (unregistering): (slave batadv_slave_0): Releasing backup interface
[  453.218140][T12412] team0 (unregistering): Port device team_slave_1 removed
[  453.298915][T12412] team0 (unregistering): Port device team_slave_0 removed
[  453.407516][T12412] .` (unregistering): (slave bond_slave_1): Releasing backup interface
[  453.473695][T12412] .` (unregistering): (slave bond_slave_0): Releasing backup interface
[  453.788115][T12412] .` (unregistering): (slave team0): Releasing backup interface
[  453.830217][T12412] .` (unregistering): (slave bridge0): Releasing backup interface
[  453.838922][T12412] .` (unregistering): Released all slaves
[  453.925678][T13071] netlink: 'syz.3.2663': attribute type 16 has an invalid length.
[  453.934914][T13071] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2663'.
[  454.148356][T13090] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.2667'.
[  454.179994][T13095] netlink: 'syz.3.2667': attribute type 10 has an invalid length.
[  454.188266][T13095] team0: Device ipvlan1 is up. Set it down before adding it as a team port
[  454.267496][T13091] netlink: 'syz.0.2669': attribute type 33 has an invalid length.
[  454.281074][T13091] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2669'.
[  454.610869][T13104] netlink: 'syz.0.2673': attribute type 6 has an invalid length.
[  454.876161][T13108] netlink: 'syz.0.2675': attribute type 16 has an invalid length.
[  454.884616][T13108] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2675'.
[  454.998362][T13113] netlink: 'syz.0.2677': attribute type 6 has an invalid length.
[  455.006698][T13113] FAULT_INJECTION: forcing a failure.
[  455.006698][T13113] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  455.061910][T13113] CPU: 0 PID: 13113 Comm: syz.0.2677 Not tainted syzkaller #0
[  455.069455][T13113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  455.079657][T13113] Call Trace:
[  455.082959][T13113]  <TASK>
[  455.085905][T13113]  dump_stack_lvl+0x18c/0x250
[  455.090631][T13113]  ? show_regs_print_info+0x20/0x20
[  455.095862][T13113]  ? load_image+0x400/0x400
[  455.100399][T13113]  ? __lock_acquire+0x7d40/0x7d40
[  455.105537][T13113]  ? snprintf+0xe9/0x140
[  455.109810][T13113]  should_fail_ex+0x39d/0x4d0
[  455.114610][T13113]  _copy_to_user+0x2f/0xa0
[  455.119134][T13113]  simple_read_from_buffer+0xe7/0x150
[  455.124541][T13113]  proc_fail_nth_read+0x1e8/0x260
[  455.129615][T13113]  ? proc_fault_inject_write+0x360/0x360
[  455.135363][T13113]  ? fsnotify_perm+0x271/0x5e0
[  455.140148][T13113]  ? proc_fault_inject_write+0x360/0x360
[  455.145979][T13113]  vfs_read+0x28b/0x970
[  455.150137][T13113]  ? kernel_read+0x1e0/0x1e0
[  455.154728][T13113]  ? __fget_files+0x28/0x4b0
[  455.159316][T13113]  ? __fget_files+0x28/0x4b0
[  455.163905][T13113]  ? __fget_files+0x43d/0x4b0
[  455.168586][T13113]  ? __fdget_pos+0x2a3/0x330
[  455.173177][T13113]  ? ksys_read+0x75/0x260
[  455.177512][T13113]  ksys_read+0x150/0x260
[  455.181755][T13113]  ? vfs_write+0x990/0x990
[  455.186176][T13113]  ? lockdep_hardirqs_on+0x98/0x150
[  455.191382][T13113]  do_syscall_64+0x55/0xa0
[  455.195805][T13113]  ? clear_bhb_loop+0x40/0x90
[  455.200473][T13113]  ? clear_bhb_loop+0x40/0x90
[  455.205141][T13113]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  455.211024][T13113] RIP: 0033:0x7fe35bb5cfce
[  455.215434][T13113] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  455.235124][T13113] RSP: 002b:00007fe35c9bbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  455.243536][T13113] RAX: ffffffffffffffda RBX: 00007fe35c9bc6c0 RCX: 00007fe35bb5cfce
[  455.251499][T13113] RDX: 000000000000000f RSI: 00007fe35c9bc0a0 RDI: 0000000000000004
[  455.259464][T13113] RBP: 00007fe35c9bc090 R08: 0000000000000000 R09: 0000000000000000
[  455.267466][T13113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  455.275432][T13113] R13: 00007fe35be16038 R14: 00007fe35be15fa0 R15: 00007ffc401d7eb8
[  455.283416][T13113]  </TASK>
[  455.480343][T13122] Q�6�`Ҙ: renamed from lo (while UP)
[  455.864397][T13128] netlink: 'syz.4.2683': attribute type 33 has an invalid length.
[  455.909380][T13128] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2683'.
[  456.042303][T13128] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  456.885666][T12412] ip6gretap0 (unregistering): left allmulticast mode
[  456.900167][T12412] ip6gretap0 (unregistering): left promiscuous mode
[  456.908493][T12412] ��
: port 1(ip6gretap0) entered disabled state
[  457.245294][T13162] netlink: 'syz.4.2694': attribute type 2 has an invalid length.
[  457.352324][T13170] netlink: 'syz.0.2707': attribute type 29 has an invalid length.
[  457.389798][T13170] netlink: 'syz.0.2707': attribute type 29 has an invalid length.
[  457.579730][T13173] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2698'.
[  458.319666][ T5775] Bluetooth: hci2: command 0x0406 tx timeout
[  460.013773][T12412] hsr_slave_0: left promiscuous mode
[  460.056772][T12412] hsr_slave_1: left promiscuous mode
[  460.063593][T12412] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  460.071767][T12412] batman_adv: batadv0: Removing interface: batadv_slave_1
[  460.092971][T12412] veth0_macvtap: left promiscuous mode
[  460.098673][T12412] veth1_vlan: left promiscuous mode
[  460.104193][T12412] veth0_vlan: left promiscuous mode
[  460.681354][T13229] validate_nla: 3 callbacks suppressed
[  460.681387][T13229] netlink: 'syz.4.2720': attribute type 29 has an invalid length.
[  461.476451][T12412] team0 (unregistering): Port device team_slave_1 removed
[  461.526110][T12412] team0 (unregistering): Port device team_slave_0 removed
[  461.567747][T12412] .` (unregistering): (slave bond_slave_1): Releasing backup interface
[  461.625184][T12412] .` (unregistering): (slave bond_slave_0): Releasing backup interface
[  461.983626][T12412] .` (unregistering): (slave team0): Releasing backup interface
[  462.024386][T12412] .` (unregistering): Released all slaves
[  462.069103][T13220] netlink: 'syz.1.2716': attribute type 33 has an invalid length.
[  462.077146][T13220] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2716'.
[  462.088343][T13220] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  462.104896][T13229] netlink: 'syz.4.2720': attribute type 29 has an invalid length.
[  462.671087][T13258] netlink: 'syz.3.2732': attribute type 29 has an invalid length.
[  462.709845][T13258] netlink: 'syz.3.2732': attribute type 29 has an invalid length.
[  462.735435][T13258] netlink: 'syz.3.2732': attribute type 29 has an invalid length.
[  463.016642][T13264] netlink: 'syz.3.2733': attribute type 21 has an invalid length.
[  463.040027][ T5775] Bluetooth: hci0: command 0x0406 tx timeout
[  463.655781][T13271] veth0_vlan: entered allmulticast mode
[  463.983403][T13278] FAULT_INJECTION: forcing a failure.
[  463.983403][T13278] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  464.009740][T13278] CPU: 1 PID: 13278 Comm: syz.1.2740 Not tainted syzkaller #0
[  464.017301][T13278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  464.027387][T13278] Call Trace:
[  464.030678][T13278]  <TASK>
[  464.033603][T13278]  dump_stack_lvl+0x18c/0x250
[  464.038291][T13278]  ? show_regs_print_info+0x20/0x20
[  464.043491][T13278]  ? load_image+0x400/0x400
[  464.047991][T13278]  ? __lock_acquire+0x7d40/0x7d40
[  464.053020][T13278]  ? snprintf+0xe9/0x140
[  464.057256][T13278]  should_fail_ex+0x39d/0x4d0
[  464.061936][T13278]  _copy_to_user+0x2f/0xa0
[  464.066354][T13278]  simple_read_from_buffer+0xe7/0x150
[  464.071728][T13278]  proc_fail_nth_read+0x1e8/0x260
[  464.076753][T13278]  ? proc_fault_inject_write+0x360/0x360
[  464.082386][T13278]  ? fsnotify_perm+0x271/0x5e0
[  464.087149][T13278]  ? proc_fault_inject_write+0x360/0x360
[  464.092796][T13278]  vfs_read+0x28b/0x970
[  464.096953][T13278]  ? kernel_read+0x1e0/0x1e0
[  464.101537][T13278]  ? __fget_files+0x28/0x4b0
[  464.106120][T13278]  ? __fget_files+0x28/0x4b0
[  464.110794][T13278]  ? __fget_files+0x43d/0x4b0
[  464.115470][T13278]  ? __fdget_pos+0x2a3/0x330
[  464.120063][T13278]  ? ksys_read+0x75/0x260
[  464.124478][T13278]  ksys_read+0x150/0x260
[  464.128930][T13278]  ? vfs_write+0x990/0x990
[  464.133351][T13278]  ? lockdep_hardirqs_on+0x98/0x150
[  464.138549][T13278]  do_syscall_64+0x55/0xa0
[  464.143079][T13278]  ? clear_bhb_loop+0x40/0x90
[  464.147862][T13278]  ? clear_bhb_loop+0x40/0x90
[  464.152649][T13278]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  464.158555][T13278] RIP: 0033:0x7f44e7d5cfce
[  464.162977][T13278] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  464.182585][T13278] RSP: 002b:00007f44e8bfbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  464.190994][T13278] RAX: ffffffffffffffda RBX: 00007f44e8bfc6c0 RCX: 00007f44e7d5cfce
[  464.198960][T13278] RDX: 000000000000000f RSI: 00007f44e8bfc0a0 RDI: 0000000000000008
[  464.206926][T13278] RBP: 00007f44e8bfc090 R08: 0000000000000000 R09: 0000000000000000
[  464.214977][T13278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  464.223117][T13278] R13: 00007f44e8016038 R14: 00007f44e8015fa0 R15: 00007fffcfd466d8
[  464.231099][T13278]  </TASK>
[  464.257898][T13285] netlink: 'syz.3.2741': attribute type 29 has an invalid length.
[  464.266599][T13285] netlink: 'syz.3.2741': attribute type 29 has an invalid length.
[  464.277194][T13285] netlink: 'syz.3.2741': attribute type 29 has an invalid length.
[  464.703670][T13301] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2746'.
[  464.977209][T13304] syzkaller0: entered promiscuous mode
[  464.986304][T13304] syzkaller0: entered allmulticast mode
[  464.997266][T13301] bridge0: port 3(gretap0) entered blocking state
[  465.017353][T13301] bridge0: port 3(gretap0) entered disabled state
[  465.034212][T13301] gretap0: entered allmulticast mode
[  465.081095][T13301] gretap0: entered promiscuous mode
[  465.108895][T13301] bridge0: port 3(gretap0) entered blocking state
[  465.123393][T13301] bridge0: port 3(gretap0) entered forwarding state
[  467.362475][T13315] validate_nla: 3 callbacks suppressed
[  467.362492][T13315] netlink: 'syz.0.2752': attribute type 21 has an invalid length.
[  467.376681][T13315] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2752'.
[  467.386676][T13315] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2752'.
[  467.396171][T13316] netlink: 'syz.0.2752': attribute type 10 has an invalid length.
[  467.405058][T13316] team0: Device ipvlan1 is up. Set it down before adding it as a team port
[  467.429069][T13319] netlink: 'syz.3.2753': attribute type 10 has an invalid length.
[  467.464270][T13319] 8021q: adding VLAN 0 to HW filter on device batadv0
[  467.498532][T13319] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  467.519214][T13324] netlink: 'syz.1.2755': attribute type 13 has an invalid length.
[  467.540022][T13324] netlink: 160 bytes leftover after parsing attributes in process `syz.1.2755'.
[  467.579990][T13324] erspan0: refused to change device tx_queue_len
[  467.592684][T13324] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  467.770077][T13332] netlink: 'syz.4.2759': attribute type 29 has an invalid length.
[  467.789971][T13326] IPv6: Can't replace route, no match found
[  467.863990][T13326] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  467.874753][T13332] netlink: 'syz.4.2759': attribute type 29 has an invalid length.
[  467.886507][T13336] netlink: 'syz.4.2759': attribute type 29 has an invalid length.
[  467.964763][T13338] netlink: 'syz.1.2761': attribute type 3 has an invalid length.
[  467.999126][T13338] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2761'.
[  468.081246][T13338] netlink: 'syz.1.2761': attribute type 3 has an invalid length.
[  468.102437][T13338] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2761'.
[  468.161684][ T5775] Bluetooth: hci1: command 0x0406 tx timeout
[  468.416129][T13354] syzkaller0: entered promiscuous mode
[  468.439959][T13354] syzkaller0: entered allmulticast mode
[  468.502365][T13354] tap0: tun_chr_ioctl cmd 1074025677
[  468.508628][T13354] tap0: linktype set to 805
[  469.343947][T13366] netlink: 'syz.4.2771': attribute type 29 has an invalid length.
[  470.319466][   T12] wlan1: Trigger new scan to find an IBSS to join
[  471.674128][T13374] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2773'.
[  471.986985][T13382] ��
: port 1(ip6gretap0) entered blocking state
[  472.009275][T13382] ��
: port 1(ip6gretap0) entered disabled state
[  472.022975][T13382] ip6gretap0: entered allmulticast mode
[  472.041463][T13382] ip6gretap0: entered promiscuous mode
[  472.656233][T13388] IPv6: Can't replace route, no match found
[  472.807262][T13401] validate_nla: 2 callbacks suppressed
[  472.807280][T13401] netlink: 'syz.4.2781': attribute type 29 has an invalid length.
[  472.984962][T13401] netlink: 'syz.4.2781': attribute type 29 has an invalid length.
[  473.001950][T13398] netlink: 'syz.3.2780': attribute type 33 has an invalid length.
[  473.108357][T13398] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2780'.
[  473.156039][T13402] netlink: 'syz.4.2781': attribute type 29 has an invalid length.
[  473.490038][T13407] netlink: 'syz.1.2782': attribute type 33 has an invalid length.
[  473.510786][T13407] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2782'.
[  473.540058][T13407] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  473.573424][T13412] bridge_slave_1: left allmulticast mode
[  473.586501][T13412] bridge_slave_1: left promiscuous mode
[  473.601796][T13412] bridge0: port 2(bridge_slave_1) entered disabled state
[  473.648069][T13412] bridge_slave_0: left promiscuous mode
[  473.684597][T13412] bridge0: port 1(bridge_slave_0) entered disabled state
[  474.097310][T13415] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2785'.
[  474.110995][T13408] netlink: 56537 bytes leftover after parsing attributes in process `syz.0.2783'.
[  474.320621][ T3521] wlan1: Trigger new scan to find an IBSS to join
[  474.399236][   T28] INFO: task syz.2.1979:11187 blocked for more than 143 seconds.
[  474.409148][   T28]       Not tainted syzkaller #0
[  474.414218][   T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  474.446275][   T28] task:syz.2.1979      state:D stack:26856 pid:11187 ppid:5776   flags:0x00004002
[  474.479476][   T28] Call Trace:
[  474.483390][   T28]  <TASK>
[  474.486352][   T28]  __schedule+0x1553/0x45a0
[  474.497406][   T28]  ? rcu_is_watching+0x15/0xb0
[  474.507992][   T28]  ? asan.module_dtor+0x20/0x20
[  474.522343][   T28]  ? trace_contention_end+0x39/0xe0
[  474.527601][   T28]  ? task_work_cancel+0xa5/0x220
[  474.540079][T13433] netlink: 'syz.1.2792': attribute type 29 has an invalid length.
[  474.548266][T13433] netlink: 'syz.1.2792': attribute type 29 has an invalid length.
[  474.557092][   T28]  ? task_work_cancel_func+0x210/0x210
[  474.569060][   T28]  schedule+0xbd/0x170
[  474.573198][   T28]  ? _free_event+0xfe/0xf30
[  474.577734][   T28]  _free_event+0x174/0xf30
[  474.604657][T13433] netlink: 'syz.1.2792': attribute type 29 has an invalid length.
[  474.612778][   T28]  perf_event_release_kernel+0x842/0x8d0
[  474.618455][   T28]  ? __might_sleep+0xe0/0xe0
[  474.634863][T13435] IPv6: Can't replace route, no match found
[  474.654792][   T28]  ? calc_timer_values+0x400/0x400
[  474.662569][   T28]  ? __fput+0x61c/0x970
[  474.678580][   T28]  ? perf_mmap+0x15c0/0x15c0
[  474.691398][   T28]  perf_release+0x3b/0x40
[  474.695896][   T28]  __fput+0x234/0x970
[  474.709521][   T28]  task_work_run+0x1d4/0x260
[  474.720496][   T28]  ? task_work_cancel+0x220/0x220
[  474.735286][   T28]  do_exit+0x95a/0x2460
[  474.744107][   T28]  ? preempt_schedule+0xc0/0xd0
[  474.749467][   T28]  ? put_task_struct+0xc0/0xc0
[  474.754385][   T28]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  474.760876][   T28]  ? lock_chain_count+0x20/0x20
[  474.765963][   T28]  ? preempt_schedule_thunk+0x1a/0x30
[  474.772019][   T28]  do_group_exit+0x21b/0x2d0
[  474.776778][   T28]  __x64_sys_exit_group+0x3f/0x40
[  474.783280][   T28]  do_syscall_64+0x55/0xa0
[  474.788450][   T28]  ? clear_bhb_loop+0x40/0x90
[  474.793692][   T28]  ? clear_bhb_loop+0x40/0x90
[  474.798467][   T28]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  474.805236][   T28] RIP: 0033:0x7f3aeff9c799
[  474.810133][   T28] RSP: 002b:00007f3af0e84f38 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  474.818741][   T28] RAX: ffffffffffffffda RBX: 00007f3af00093e8 RCX: 00007f3aeff9c799
[  474.827217][   T28] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001
[  474.837106][   T28] RBP: 000000000000000e R08: 0000000000000000 R09: 00007f3af0216038
[  474.846529][   T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  474.855034][   T28] R13: 00007f3af0216038 R14: 00007f3af0215fa0 R15: 00007ffe9cd45ed8
[  474.863405][   T28]  </TASK>
[  474.867043][   T28] 
[  474.867043][   T28] Showing all locks held in the system:
[  474.875856][   T28] 1 lock held by khungtaskd/28:
[  474.881330][   T28]  #0: ffffffff8d131fa0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290
[  474.896308][   T28] 3 locks held by kworker/u4:3/49:
[  474.906457][   T28]  #0: ffff888017c71538 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0
[  474.920947][   T28]  #1: ffffc90000ba7d00 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0
[  474.935692][   T28]  #2: ffff88804e608768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: cfg80211_wiphy_work+0x35/0x260
[  474.946541][   T28] 4 locks held by kworker/u4:4/60:
[  474.953005][   T28]  #0: ffff888017c73938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0
[  474.967297][   T28]  #1: ffffc900015b7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0
[  474.978528][   T28]  #2: ffffffff8e3b3310 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x14c/0xbb0
[  474.988450][   T28]  #3: ffffffff8e3c0348 (rtnl_mutex){+.+.}-{3:3}, at: xfrmi_exit_batch_net+0xbc/0x360
[  474.999090][   T28] 2 locks held by kworker/1:2/786:
[  475.006486][   T28]  #0: ffff888017c72538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0
[  475.023082][   T28]  #1: ffffc90003d47d00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0
[  475.040290][   T28] 2 locks held by getty/5530:
[  475.045097][   T28]  #0: ffff88823bd428a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  475.055700][   T28]  #1: ffffc900015d72f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x433/0x1390
[  475.067440][   T28] 1 lock held by syz.0.2791/13427:
[  475.072991][   T28] 1 lock held by syz.0.2791/13430:
[  475.078230][   T28]  #0: ffffffff8e3c0348 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x83c/0x1140
[  475.087561][   T28] 4 locks held by syz.3.2790/13435:
[  475.093144][   T28]  #0: ffffffff8e3c0348 (rtnl_mutex){+.+.}-{3:3}, at: wext_ioctl_dispatch+0x115/0x600
[  475.103586][   T28]  #1: ffff88804e608768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: cfg80211_wext_siwfreq+0xfd/0x7f0
[  475.114257][   T28]  #2: ffff888045264d40 (&wdev->mtx){+.+.}-{3:3}, at: cfg80211_ibss_wext_siwfreq+0x1db/0x370
[  475.125036][   T28]  #3: ffffffff8d137978 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x306/0x880
[  475.136589][   T28] 
[  475.139354][   T28] =============================================
[  475.139354][   T28] 
[  475.148002][   T28] NMI backtrace for cpu 0
[  475.152435][   T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0
[  475.159918][   T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  475.170078][   T28] Call Trace:
[  475.173376][   T28]  <TASK>
[  475.176318][   T28]  dump_stack_lvl+0x18c/0x250
[  475.181000][   T28]  ? show_regs_print_info+0x20/0x20
[  475.186217][   T28]  ? load_image+0x400/0x400
[  475.190830][   T28]  nmi_cpu_backtrace+0x3a6/0x3e0
[  475.195855][   T28]  ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0
[  475.202012][   T28]  ? _printk+0xde/0x130
[  475.206173][   T28]  ? load_image+0x400/0x400
[  475.210672][   T28]  ? load_image+0x400/0x400
[  475.215180][   T28]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  475.221248][   T28]  nmi_trigger_cpumask_backtrace+0x17a/0x2f0
[  475.227229][   T28]  watchdog+0xf3d/0xf80
[  475.231379][   T28]  ? watchdog+0x1e1/0xf80
[  475.235708][   T28]  kthread+0x2fa/0x390
[  475.239767][   T28]  ? hungtask_pm_notify+0x90/0x90
[  475.244790][   T28]  ? kthread_blkcg+0xd0/0xd0
[  475.249541][   T28]  ret_from_fork+0x48/0x80
[  475.253965][   T28]  ? kthread_blkcg+0xd0/0xd0
[  475.258545][   T28]  ret_from_fork_asm+0x11/0x20
[  475.263318][   T28]  </TASK>
[  475.266997][   T28] Sending NMI from CPU 0 to CPUs 1:
[  475.272281][    C1] NMI backtrace for cpu 1
[  475.272291][    C1] CPU: 1 PID: 13427 Comm: syz.0.2791 Not tainted syzkaller #0
[  475.272305][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  475.272313][    C1] RIP: 0010:kasan_check_range+0x3a/0x290
[  475.272336][    C1] Code: 41 57 41 56 41 55 41 54 53 4c 8d 04 37 49 39 f8 0f 82 13 02 00 00 49 89 f9 49 c1 e9 2f 41 81 f9 ff ff 01 00 0f 82 ff 01 00 00 <49> 89 ff 49 c1 ef 03 49 ba 00 00 00 00 00 fc ff df 4f 8d 1c 17 49
[  475.272348][    C1] RSP: 0018:ffffc900048bfa40 EFLAGS: 00000246
[  475.272360][    C1] RAX: ffffffff88b4f401 RBX: 1ffff92000917f6d RCX: ffffffff88b4f464
[  475.272371][    C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff8880297a9e00
[  475.272380][    C1] RBP: 0000000000000000 R08: ffff8880297a9e08 R09: 000000000001ffff
[  475.272389][    C1] R10: dffffc0000000000 R11: ffffed10052f53c1 R12: ffff8880297a9e00
[  475.272399][    C1] R13: 1ffff110052f53c0 R14: ffffc900048bfb68 R15: ffffc900048bfb6c
[  475.272409][    C1] FS:  00007fe35c9bc6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  475.272422][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  475.272431][    C1] CR2: 0000001b32d0dff8 CR3: 0000000066e88000 CR4: 00000000003506e0
[  475.272444][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  475.272452][    C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  475.272460][    C1] Call Trace:
[  475.272465][    C1]  <TASK>
[  475.272473][    C1]  bpf_test_timer_continue+0xc4/0x380
[  475.272493][    C1]  ? bpf_test_run+0x174/0x870
[  475.272507][    C1]  bpf_test_run+0x3fe/0x870
[  475.272527][    C1]  ? bpf_test_run+0x174/0x870
[  475.272543][    C1]  ? convert___skb_to_skb+0x590/0x590
[  475.272559][    C1]  ? eth_get_headlen+0x210/0x210
[  475.272581][    C1]  ? slab_build_skb+0x25f/0x3f0
[  475.272602][    C1]  ? convert___skb_to_skb+0x3d/0x590
[  475.272617][    C1]  bpf_prog_test_run_skb+0xad2/0x12b0
[  475.272649][    C1]  ? cpu_online+0x60/0x60
[  475.272663][    C1]  bpf_prog_test_run+0x321/0x390
[  475.272681][    C1]  __sys_bpf+0x49d/0x890
[  475.272696][    C1]  ? bpf_link_show_fdinfo+0x390/0x390
[  475.272719][    C1]  ? lock_chain_count+0x20/0x20
[  475.272739][    C1]  __x64_sys_bpf+0x7c/0x90
[  475.272753][    C1]  do_syscall_64+0x55/0xa0
[  475.272773][    C1]  ? clear_bhb_loop+0x40/0x90
[  475.272788][    C1]  ? clear_bhb_loop+0x40/0x90
[  475.272804][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  475.272819][    C1] RIP: 0033:0x7fe35bb9c799
[  475.272830][    C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  475.272842][    C1] RSP: 002b:00007fe35c9bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  475.272855][    C1] RAX: ffffffffffffffda RBX: 00007fe35be15fa0 RCX: 00007fe35bb9c799
[  475.272865][    C1] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a
[  475.272873][    C1] RBP: 00007fe35bc32bd9 R08: 0000000000000000 R09: 0000000000000000
[  475.272882][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  475.272890][    C1] R13: 00007fe35be16038 R14: 00007fe35be15fa0 R15: 00007ffc401d7eb8
[  475.272908][    C1]  </TASK>
[  475.322805][   T28] Kernel panic - not syncing: hung_task: blocked tasks
[  475.322824][   T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0
[  475.322842][   T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  475.322852][   T28] Call Trace:
[  475.322860][   T28]  <TASK>
[  475.322867][   T28]  dump_stack_lvl+0x18c/0x250
[  475.322899][   T28]  ? show_regs_print_info+0x20/0x20
[  475.322921][   T28]  ? load_image+0x400/0x400
[  475.322950][   T28]  panic+0x2dc/0x730
[  475.322967][   T28]  ? schedule_preempt_disabled+0x20/0x20
[  475.322992][   T28]  ? bpf_jit_dump+0xd0/0xd0
[  475.323007][   T28]  ? __irq_work_queue_local+0x13a/0x3b0
[  475.323030][   T28]  ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0
[  475.323059][   T28]  watchdog+0xf7c/0xf80
[  475.323079][   T28]  ? watchdog+0x1e1/0xf80
[  475.323105][   T28]  kthread+0x2fa/0x390
[  475.323120][   T28]  ? hungtask_pm_notify+0x90/0x90
[  475.323140][   T28]  ? kthread_blkcg+0xd0/0xd0
[  475.323156][   T28]  ret_from_fork+0x48/0x80
[  475.323175][   T28]  ? kthread_blkcg+0xd0/0xd0
[  475.323190][   T28]  ret_from_fork_asm+0x11/0x20
[  475.323222][   T28]  </TASK>
[  475.327247][   T28] Kernel Offset: disabled
[  475.699809][   T28] Rebooting in 86400 seconds..