last executing test programs:

25.557905335s ago: executing program 2 (id=9133):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48)
socket$kcm(0x11, 0x6, 0x300)
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f00000005c0), 0x4)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x5, 0x81, 0x3, 0x3d, 0x0, 0x8, 0xc504, 0xb, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000080), 0x2}, 0x7429, 0xe, 0x94, 0x5, 0xfffffffffffff090, 0x2e, 0x8, 0x0, 0x0, 0x0, 0xf2}, 0x0, 0x8, r1, 0x9)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1)
openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x60)
r3 = socket$kcm(0xa, 0x2, 0x88)
sendmsg$inet(r3, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @multicast1}}}], 0x20}, 0x8000)
sendmsg$kcm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="d7eab112856b60b6a3e0e2dbde6c3d5e7680491920639d480b6b5b0e6328733b2a118af085970758b35b8eb69a86eb1e67bce340dd99e45bcdcadc74f805a09abbf42c5735c0c0bfeb02c6eba50461c506405541b1d81412f4d6e0409c", 0x5d}, {&(0x7f0000001b40)="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", 0x450}], 0x2}, 0x8000)
sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="c8fec1123a0b09cc7e0dc3f5a9429f67002f742e5bede8832b0b7f1f4eed5e3f01ceb7ace2806a3f4d63282bdb3fe486b407e80f9295666de3f31e9cecc5ee7cf654e0e3279fe27f1e540d16901b4071c379362435ed245422", 0x59}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000580)="02044a00ea0e0000000000001eafbcea06e105000000000000001104ee1606d4b8bf4a8207f0ffff74c43824cee8440000", 0x31}, {&(0x7f0000000340)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e451d14e0b3457474fe6a51671e4124fcea96a873b10996816e100ed8a93b0a9053db57d60973369f525c24533658551c3091cb88d3b", 0x4f}, {&(0x7f0000000200)="088d85d1f409000a3164ae439862807a158983661a6d2341f7", 0x19}, {&(0x7f0000000040)="df3b46a13300"/16, 0x10}, {&(0x7f0000001480)="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", 0xeb6}], 0x5}, 0x40000)
bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x1}, 0x8)

25.206962123s ago: executing program 2 (id=9135):
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000280)='blkio.bfq.sectors\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x8, 0x4, 0x4, 0x9}, 0x50)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
close(0x3)
socket$kcm(0xa, 0x1, 0x106)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x80)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8)
setsockopt$sock_attach_bpf(r1, 0x1, 0xd, &(0x7f0000000000)=r3, 0x4a)
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0xa, 0x3, 0x87)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf670000000000001507"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xf0f, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313b, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x1}, 0x94)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r5)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110c230000)
ioctl$TUNGETVNETLE(r5, 0x4010744d, &(0x7f0000000180))
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0)

24.794088733s ago: executing program 2 (id=9139):
r0 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0x2}, 0xfa}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1005e2, 0x2, 0x0, 0x0, 0x2, 0x1000000}, 0xffffffffffffffff, 0x0, r0, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_pressure(r2, &(0x7f00000000c0)='cpu.pressure\x00', 0x2, 0x0)
perf_event_open$cgroup(&(0x7f0000000280)={0x2, 0x80, 0x80, 0x9, 0x6, 0xac, 0x0, 0x92fa, 0x1, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x1}, 0x1840, 0x2, 0xbba2, 0x0, 0x7, 0x62c1, 0x2, 0x0, 0x40, 0x0, 0x9}, 0xffffffffffffffff, 0x2, r1, 0x4)
write$cgroup_pressure(r3, &(0x7f0000000080)={'full', 0x20, 0x2000000007, 0x20, 0x10000000fffff}, 0x2f)
r4 = socket$kcm(0x2, 0x1000000000000002, 0x0)
r5 = socket$kcm(0x2, 0x1000000000000002, 0x0)
sendmsg$inet(r5, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e22, @multicast1=0xe000004f}, 0x10, &(0x7f0000000040)=[{&(0x7f00000017c0)="8100108c", 0x4}], 0x1, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x44}, @remote}}}], 0x20}, 0x4c850)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4)
sendmsg$inet(r4, &(0x7f0000000040)={&(0x7f0000000880)={0x2, 0x4e1d, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="2800000000000000000000000700000083070400000000070f"], 0x28}, 0x0)

21.934247659s ago: executing program 2 (id=9147):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x9, 0x8}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, [@call={0x85, 0x0, 0x0, 0x7}], {0x95, 0x0, 0x0, 0x7000000}}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

21.694238175s ago: executing program 2 (id=9150):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000100000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000ac00000095", @ANYRES16], &(0x7f0000000300)='GPL\x00', 0x2, 0x1002, &(0x7f0000002500)=""/4106, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffdf8, 0x10, 0x0, 0x34, 0x0, 0x0, 0xfffffffffffffe65}, 0x23)

21.442345771s ago: executing program 2 (id=9153):
r0 = socket$kcm(0xa, 0x2, 0x3a)
r1 = socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7}, 0x10c002, 0xac5d, 0x0, 0x0, 0x3, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r2 = socket$kcm(0xa, 0x6, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x40, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0}, 0x10009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
setsockopt$sock_attach_bpf(r2, 0x10d, 0x1b, &(0x7f0000000100), 0x120)
setsockopt$sock_attach_bpf(r1, 0x0, 0x22, 0x0, 0x0)
socket$kcm(0xa, 0x2, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080), 0x6e, &(0x7f0000000340)=[{&(0x7f0000000100)=""/228, 0xe4}, {&(0x7f0000000200)=""/168, 0xa8}, {&(0x7f00000002c0)=""/113, 0x71}], 0x3, &(0x7f0000000380)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000040)="8b005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0)

5.067835702s ago: executing program 3 (id=9233):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f0000000100)={0x5, 0xffffffffffffff62, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4000008, 0xc81e9, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000280), 0x4}, 0x4946, 0x40, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0xaefa, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40efe, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) (async)
r6 = socket$kcm(0x15, 0x5, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
recvmsg(r6, &(0x7f00000006c0)={&(0x7f0000000180)=@l2tp={0x2, 0x0, @local}, 0x80, 0x0}, 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
r7 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f94a24fc60", 0x14}], 0x1}, 0x0) (async)
ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000200)={r6})
socket$kcm(0x2, 0x5, 0x84) (async)
r8 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x8916, 0x0)
socket$kcm(0xa, 0x5, 0x0) (async)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8936, 0x0) (async)
ioctl$TUNSETDEBUG(r1, 0x400454c9, &(0x7f00000007c0)=0x2) (async)
close(r2) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd)
r9 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r9, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a8001600a400014020000b00ffffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0)

4.986283964s ago: executing program 1 (id=9234):
r0 = socket$kcm(0xa, 0x2, 0x3a)
r1 = socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7}, 0x10c002, 0xac5d, 0x0, 0x0, 0x3, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r2 = socket$kcm(0xa, 0x6, 0x0)
setsockopt$sock_attach_bpf(r2, 0x10d, 0x1b, &(0x7f0000000100), 0x120)
setsockopt$sock_attach_bpf(r1, 0x0, 0x22, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080), 0x6e, &(0x7f0000000340)=[{&(0x7f0000000100)=""/228, 0xe4}, {&(0x7f0000000200)=""/168, 0xa8}, {&(0x7f00000002c0)=""/113, 0x71}], 0x3, &(0x7f0000000380)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000040)="8b005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0)

4.818058828s ago: executing program 4 (id=9236):
r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000801801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="07000000040000001800000003"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x13, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70300000007f781850000001b"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
syz_clone(0x1001000, 0x0, 0x0, &(0x7f0000001000), 0x0, 0x0) (fail_nth: 81)

4.797451519s ago: executing program 1 (id=9237):
socket$kcm(0xa, 0x3, 0x73)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1f0000000400000006000000070000", @ANYRES32, @ANYBLOB="000000000000000000800000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000001"], 0x50)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea", 0x34}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000580)=ANY=[], 0xfe33)
write$cgroup_subtree(r1, &(0x7f0000000580)=ANY=[], 0xfe33)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
r3 = socket$kcm(0xa, 0x1, 0x0)
setsockopt$sock_attach_bpf(r3, 0x6, 0x11, &(0x7f0000000140), 0x4)

4.232653002s ago: executing program 4 (id=9239):
close(0xffffffffffffffff) (async, rerun: 32)
close(0x3) (async, rerun: 32)
socket$kcm(0x1e, 0x4, 0x0) (async)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000002000000020000000040000000100000000000001040000002000000001"], 0x0, 0x3c}, 0x28)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c06", 0x27}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1b, 0x4, 0x0, 0x0}, 0x90) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_to_hsr\x00', 0x800}) (async)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) (async)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0)
openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) (async)
r1 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) (async)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c012, 0xac5d, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="1900000004000000080000000a"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) (async)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r4, 0x18000000000002a0, 0x28, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f088a8", 0x0, 0xd5b1, 0x60000300, 0x0, 0x0, 0x0, 0x0}, 0x50)

4.168793773s ago: executing program 0 (id=9240):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x4, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10)
sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffe0}], 0x1, 0x0, 0x0, 0xfffc}, 0x80d1)
close(r0)

4.083258725s ago: executing program 0 (id=9241):
perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec08000000006ff1f000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x0, 0xc4, 0xa, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x100882, 0x7ff, 0x6, 0x5, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x8d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0x6f5f, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)

3.829636061s ago: executing program 0 (id=9242):
r0 = getpid()
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="d8000000320081e74d81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a400014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf6395bc58a949f81df6cbdf8e1f215ce3bb9ad809d5e1cace81ed0bffece0edba241fee5de6ccd40dd6e4edef3d93", 0xd8}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_config_ext={0x7, 0x7}, 0x802c, 0x0, 0x1780, 0x7, 0x3, 0x5, 0x0, 0x0, 0x4, 0x0, 0x3}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_config_ext={0x7, 0x7}, 0x802c, 0x0, 0x1780, 0x7, 0x3, 0x5, 0x0, 0x0, 0x4, 0x0, 0x3}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce2200182f00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa35f088be"], 0xfdef) (async)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce2200182f00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa35f088be"], 0xfdef)
socket$kcm(0x10, 0x2, 0x0) (async)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)="d8000000120081414e81f782db010000001d080b01008100e8fe55a1010115000600142603600e120800040000001101a80012000500054006000d30514d3afab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef6aa98516277ce06bba020017cbec040000000000000000001fb791643a5ee0ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4688df216265e5dbf66f282ac02781245bd3f1aeb4edbb57a7025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40d", 0xd8}], 0x1}, 0xc000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], &(0x7f00000005c0)=""/217, 0x35, 0xd9, 0x1}, 0x28) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], &(0x7f00000005c0)=""/217, 0x35, 0xd9, 0x1}, 0x28)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7000000}, 0x48)

1.957979765s ago: executing program 1 (id=9243):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x5, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000021800000000000000000000180200002020702500000000002020207b0af8ff00000000bda106000000000026010000f8ffffffb702000008000000b703000000000000850000000500000018010000202070250000000000202020c31af8ff01000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_ext={0x1c, 0x3, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0xca, 0x0, 0x0, 0x0, 0x9}}, &(0x7f0000000440)='syzkaller\x00', 0xffff7fff, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xcab5, r1}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x8, [@union={0x1, 0x4, 0x0, 0x5, 0x1, 0x40, [{0xa, 0x0, 0x1}, {0xb, 0x0, 0x6}, {0x5, 0x3, 0x7ff}, {0x2, 0x1}]}]}, {0x0, [0x2e, 0x2e, 0x5f, 0x5f, 0x61, 0x5f]}}, &(0x7f00000006c0)=""/231, 0x5c, 0xe7, 0x1}, 0x28)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
r2 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10)
sendmsg$inet(r2, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0x1}], 0x1}, 0x80d1)
r4 = socket$kcm(0x29, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, 0xffffffffffffffff)
recvmsg(r2, &(0x7f0000002600)={0x0, 0x0, 0x0}, 0x102)
r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], 0x0}, 0x94)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0x1}, 0x201, 0x0, 0xc2ba, 0x0, 0x4000002, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c001ac004000202080002000300010004000600eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d487", @ANYRES32, @ANYRES8], 0xfe33)
r8 = socket$kcm(0x29, 0x5, 0x0)
sendmsg$inet(r8, &(0x7f0000000340)={0x0, 0x7ffcb000, &(0x7f0000000300)=[{&(0x7f00000000c0)='6', 0x18000}], 0x8}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x0, 0x8, 0x1, 0x40000, 0x1, 0x10, '\x00', 0x0, r5, 0x4, 0x5, 0x3, 0xc}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r6, 0x18000000000002a0, 0x5b8, 0x0, &(0x7f0000010000)="b9fa0307110800a6a4321ab9a703c8e0ffff00124000638477fbac141416e00003f511f8be4c73c30e251f5ce0fa0a", 0x0, 0xfffffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)

1.957804325s ago: executing program 3 (id=9244):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000012, 0x700, 0x0, &(0x7f0000000080)="2e4ceced000222e02df633c9e9b9", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc00}, 0x50)

1.931318455s ago: executing program 4 (id=9245):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x6b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x10c00, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x21}, 0x94)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="040009e200000000000000000500010000004000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000300)='syz0\x00', 0x200002, 0x0)
openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.threads\x00', 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001c00)={0x17, 0x2000000000000216, &(0x7f0000001dc0)=ANY=[@ANYBLOB="c1a2b494b111bb6106b31e4b7fb755f6f71084c1403572f1cdd84e7a72f17482e493fa4c7c4c7d310bfa3b5a330cd04137e2bd68e1864953"], 0x0, 0x10, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="5c00000052006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a1577ae18c819945fb4e37e70e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10)
recvmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20000000)
recvmsg$kcm(r5, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x100)
recvmsg$kcm(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x101602, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7)
mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10c)
r9 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r9, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000001d00)=ANY=[@ANYBLOB="1000000000000000840000000000009f3f7e7e1dddf33a0e000000000000000000000000000000001a5c7feeac6e6b3c7352c83a353d9087e75d6339f7b37f6cf18926ca68f826b57144e5c6bd9b3f8360a9997f7c93800e40b0ceb59391be619d07d7af54228f62f2d2fcd17a62f6b53b2708ea104a9d8f043d60d846494fef6e9cc1fdb5509930bb54bcd4e388ac0b2d8bcc35ee1c062943db82a84ecc"], 0x28}, 0x880)
ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110c230000)

1.796692119s ago: executing program 3 (id=9246):
r0 = socket$kcm(0xa, 0x2, 0x3a)
r1 = socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7}, 0x10c002, 0xac5d, 0x0, 0x0, 0x3, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r2 = socket$kcm(0xa, 0x6, 0x0)
setsockopt$sock_attach_bpf(r2, 0x10d, 0x1b, &(0x7f0000000100), 0x120)
setsockopt$sock_attach_bpf(r1, 0x0, 0x22, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080), 0x6e, &(0x7f0000000340)=[{&(0x7f0000000100)=""/228, 0xe4}, {&(0x7f0000000200)=""/168, 0xa8}, {&(0x7f00000002c0)=""/113, 0x71}], 0x3, &(0x7f0000000380)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000040)="8b005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0)

1.678047271s ago: executing program 0 (id=9247):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000b7020000000000007b2af8ff000000007b2af0ff000000007b2ae8ff000000007b2ae0ff000000007b2ad8ff000000007b2ad0ff000000007b2ac8ff000000007b2ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac4ff00000000180200000a0000010000000000000000632accff00000000180200000a0000020000000000000000632ac0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000200000095"], &(0x7f00000011c0)='GPL\x00', 0x1, 0x1000, &(0x7f0000001200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, <r1=>0xffffffffffffffff}, 0x4)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0}}, 0x10)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xcc, 0xcc, 0x5, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0x3}}, @enum={0x6, 0x9, 0x0, 0x6, 0x4, [{0x0, 0x8}, {0xd, 0x6}, {0x9, 0x10001}, {0xb, 0x7fff}, {0xb, 0xbd6}, {0x1, 0x8}, {0x10, 0x1}, {0xe, 0xf7d}, {0x6, 0x3}]}, @enum={0x0, 0x3, 0x0, 0x6, 0x4, [{0xd}, {0x8, 0x4}, {0x4}]}, @const={0xc, 0x0, 0x0, 0xa, 0x4}, @struct={0xd, 0x2, 0x0, 0x4, 0x1, 0x1, [{0x8, 0x4, 0xb}, {0x2, 0x4, 0xfffffffb}]}, @type_tag={0x7, 0x0, 0x0, 0x12, 0x5}]}, {0x0, [0x61, 0x0, 0x61]}}, &(0x7f0000000640)=""/234, 0xe9, 0xea, 0x0, 0x100, 0x10000}, 0x28)
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
r5 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r4}, 0x8)
close(r5)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r5, 0x30, 0x0}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{0xffffffffffffffff, <r6=>0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)=r0}, 0x20)
r7 = bpf$ITER_CREATE(0x21, &(0x7f00000008c0), 0x8)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000980)={{0xffffffffffffffff, <r8=>0xffffffffffffffff}, &(0x7f0000000900), &(0x7f0000000940)='%pB    \x00'}, 0x20)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x28, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@jmp={0x5, 0x0, 0x3, 0x18, 0xa, 0xffffffffffffffc0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x80000000}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @alu={0x7, 0x0, 0x1, 0x4, 0x1, 0x2}, @map_idx={0x18, 0xa}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4b}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @ldst={0x3, 0x1, 0x6, 0xa, 0x9, 0xffffffffffffffe0, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='syzkaller\x00', 0xffff, 0xe1, &(0x7f0000000280)=""/225, 0x40f00, 0x1e, '\x00', r2, 0x0, r3, 0x8, &(0x7f0000000780)={0xa, 0x3}, 0x8, 0x10, &(0x7f00000007c0)={0x2, 0x9, 0xb5}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000a40)=[r5, r6, r7, r8, r9, r10], &(0x7f0000000a80)=[{0x5, 0x1, 0x1, 0x2}, {0x4, 0x1, 0x5, 0x8}, {0x4, 0x5, 0x4, 0x9}, {0x5, 0x3, 0x3, 0xa}, {0x2, 0x2, 0xc, 0xa}, {0x5, 0x4, 0x5, 0x7}], 0x10, 0x8000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002200)={r0, 0x0, 0xe, 0x0, &(0x7f0000002280)="00f1aef59e1ec05ab201a5859511", 0x0, 0x1000009, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.621700953s ago: executing program 1 (id=9248):
socket$kcm(0x10, 0x2, 0x10)
r0 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x22, &(0x7f0000000000)=r3, 0x10)
ioctl$TUNGETFILTER(0xffffffffffffffff, 0xc0189436, 0x0)
perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x76341, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0x3, 0x0)
r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xf6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4, 0xfffff}, @func_proto={0x0, 0x0, 0x0, 0x5}, @typedef={0x2, 0x0, 0x0, 0x8, 0x2}, @volatile={0x0, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x0, 0x5f, 0x61, 0x61]}}, 0x0, 0x52}, 0x28)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYRES32=r5], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfa019fe45d308098ee68888a8", 0x0, 0x8200aded, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffd16)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xd, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000080)=0x4ca)

1.579310183s ago: executing program 4 (id=9249):
r0 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r0, 0x84, 0x4, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x900, 0x1, 0x28}, 0x50)
r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x20a8, 0x0, 0x0, 0x5, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1b, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0xc)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="5400020029000b05d25a806f8c6394f90424fc602f0011002e2f01202f3582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

1.574338444s ago: executing program 3 (id=9250):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89a0, &(0x7f0000000080))
socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x11, 0x2, 0x0)
r3 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d7"], 0x10b8}, 0x106)
recvmsg(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x42)
setsockopt$sock_attach_bpf(r2, 0x107, 0x14, &(0x7f0000000000), 0x4)
sendmsg$kcm(r2, &(0x7f0000001780)={&(0x7f00000003c0)=@caif=@rfm={0x25, 0x8, "fb95785b587f2fba61bfb990191a2af1"}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001800)="a5", 0x1}], 0x1}, 0x86ddffffffffffff)
socketpair$tipc(0x1e, 0x2, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x32, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0x4)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x3, 0x5}, 0x50)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0f0000000410000004ea000012000ce819005db21590359011b8fb616bc23d8d7e1982fa88", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e000000040000000400000001"], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000000680)={{r4}, &(0x7f0000000540), 0x0}, 0x20)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYBLOB='&'], 0x10)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[], 0x48)
r5 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8916, &(0x7f0000000040)={'wlan1\x00', @random="0200ac7f7f00"})
socket$kcm(0x29, 0x5, 0x0)
perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0xbd, 0x5, 0x80, 0x7, 0x0, 0x7fffffff, 0x7a5d4, 0x5, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xdfffffff, 0x6, @perf_bp={0x0, 0xf}, 0x803, 0xfffffffffffffffe, 0x7, 0x4, 0x81, 0x8, 0x9, 0x0, 0x20002, 0x0, 0x4}, 0x0, 0x8, 0xffffffffffffffff, 0x8)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f0, &(0x7f0000000080))

1.31219917s ago: executing program 1 (id=9251):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002300000018010000646c6c2500000000002020207b1af8ff00000000bfa100"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94)
r1 = perf_event_open(&(0x7f0000000fc0)={0x0, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x8, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xf, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="b702000010000000bfa300000000000007030000f0ffffff7a0af0ff0000000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000050000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87867c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b2314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f86bb47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8dd63d4b77b206000000000000e254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad91935a6ddfa8f90e79321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f3813e2c25a61ec45c3af9948f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469600241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c12e28ef97d9ebd9c77f1774cf4683c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f011000000f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497a6103876843ee04ed9ff002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd1304202274f20675eb781925440578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e9338c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b96508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e25c89b552d7fcd116bce9c764c714c9402c21d1aac59efb28d4f91652f6000000000000000320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a575939206d0c0f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000ff0ffd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536607a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8000000edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a996d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db76cf059f40fa2640b6bfb74dd35391b8fa18479da9f4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847db97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ccfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000000000000000000003ba34b611569a451564d3a5400f9097ffe7a37e765be352be71ee24250d6828562c7e24cb763062d6000c409de6a6135eae8a00000000008d797190a26c933f933aff5c521eeb7a84a62d148a846e74e76b515b6b8be29e8b69310fa130cf6d6b74f33205d3cc218ca554ed8085ae044f5bf2e89a0000bde05c114e7a020fc1a5fd3eeeb822008b2d7d1cc062b51b0aca4956b557e51a1385cc572b0074b0950fb1437de2590bf99ec7ceb69e1fe2465fce099c992d57b804a22e148ae3411523814aee03ee2df877edfabf4aa94f07c6fdd127e57a8bf7975f2e606c25a299980a6e52fcf7849d45bb38573fbba8afef1aa7a24c805f7aee3e39a3000000000000000000000000000000000000878f88c4742ac490951c36c610a0d266588ec6a0bd300cf160b5a5d9e9fafa49ecc8430832d795e727b7fc2b76e7fc4141fdbb82f45d3cdd3fb8d4b443ab4954fdf5c1b9a6ab3e457f098329307ccb0a1989b6c37509692e952e7244f48bc12569ff8eb30d0f887b85b5ef44fb9a7571319190be0c226ed72f346cc4aa071ae0c72fa8bd00d5590c4f4ba65d0c8e1f4870fe3c414681e41b40163eb1aa2a7429a2208cd6e69c7d959e87da3fd0101159a03ab7fe78881ee7a1ee7a2edff75fb18a181e0c54352be2b7a5b5273198291c28d9141deeb3cdba5d414ae4b0000000000000000000000000009eacd83458d8a606be71970497a4fd4ca3b48ca482ab3804e2fac216b3ba613608b1a465456a33fd08491d337d7344c01cfc9e73"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000300)={r0}, 0xc)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48)
socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x15917939fc24ceb8}, 0x94)
r3 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x1}, 0x40, 0x0, 0x0, 0x5, 0x7, 0xa, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff)
syz_clone(0x20102400, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x6b, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff88641100404863330283ac14142ce934a0a662079f4b4d2f87e56dca6aab845013f208001a3901050b038da1880b25181ac49d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b55504996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfb, 0x60006000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c)

1.065828145s ago: executing program 3 (id=9252):
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8424, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x800, 0xc8, 0x5, 0x8, 0xf9, 0x0, 0x2, 0x0, 0xea}, 0x0, 0x10, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fd1ff7907001175f37538e486dd6317010000003a00db536873f45f08c6feaa70e2aef57b20000000000000000000000000ac1414aa"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8020, 0x0, 0x1780, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2, 0xff00}, 0x48)

941.149498ms ago: executing program 1 (id=9253):
socket$kcm(0xa, 0x3, 0x73)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1f0000000400000006000000070000", @ANYRES32, @ANYBLOB="000000000000000000800000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000001"], 0x50)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea", 0x34}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000580)=ANY=[], 0xfe33)
write$cgroup_subtree(r1, &(0x7f0000000580)=ANY=[], 0xfe33)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0xa, 0x6, 0x0)
r3 = socket$kcm(0xa, 0x1, 0x0)
setsockopt$sock_attach_bpf(r3, 0x6, 0x11, &(0x7f0000000140), 0x4)

781.660212ms ago: executing program 4 (id=9254):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000001240)=@hci={0x1f, 0x300, 0x6}, 0x80, &(0x7f0000001340)=[{&(0x7f00000013c0)="62031400d70000000010122f1eafbcf72be13c30087f5c582d26116642c4", 0x1e}, {&(0x7f0000002380)="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", 0x2b0}, {&(0x7f00000012c0)="2f3e8c54", 0x4}], 0x3}, 0x4041)

628.716686ms ago: executing program 0 (id=9255):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, &(0x7f0000000280)=""/256, 0x1a, 0x100, 0x11}, 0x28)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x12, 0x2, 0x4, 0x2}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x4, &(0x7f00000000c0)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x1c}]}, &(0x7f0000000380)='GPL\x00', 0x5, 0xff92, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5d}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x9f}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = perf_event_open$cgroup(&(0x7f00000004c0)={0x5, 0x80, 0x2, 0x4, 0x47, 0x6, 0x0, 0x1, 0x40200, 0x7, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_bp={&(0x7f00000001c0), 0x4}, 0x2908, 0x8, 0x40, 0x7, 0x7, 0x6, 0x7d, 0x0, 0x5, 0x0, 0x7}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x6)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x2000300, 0xe, 0x0, &(0x7f0000000600)="63e4ed8e46080000003389f7f986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
bpf$ENABLE_STATS(0x20, &(0x7f0000000180), 0x4)
bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, &(0x7f0000000280)=""/256, 0x1a, 0x100, 0x11}, 0x28) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x12, 0x2, 0x4, 0x2}, 0x50) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x4, &(0x7f00000000c0)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x1c}]}, &(0x7f0000000380)='GPL\x00', 0x5, 0xff92, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26}, 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5d}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x9f}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
perf_event_open$cgroup(&(0x7f00000004c0)={0x5, 0x80, 0x2, 0x4, 0x47, 0x6, 0x0, 0x1, 0x40200, 0x7, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_bp={&(0x7f00000001c0), 0x4}, 0x2908, 0x8, 0x40, 0x7, 0x7, 0x6, 0x7d, 0x0, 0x5, 0x0, 0x7}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x6) (async)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x2000300, 0xe, 0x0, &(0x7f0000000600)="63e4ed8e46080000003389f7f986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async)
bpf$ENABLE_STATS(0x20, &(0x7f0000000180), 0x4) (async)

414.018231ms ago: executing program 0 (id=9256):
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
r1 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48)
bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@generic={&(0x7f0000000100)='./file0\x00', r1}, 0x18)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r1, &(0x7f00000001c0), 0x0}, 0x20)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x8000, 0x10000, 0x364, 0x5, 0x4, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$kcm(0x2a, 0x2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3efd7ab4c41335d9, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1a69, 0x5}, 0x0, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xb, 0xffffffffffffffff, 0xb)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x894b, &(0x7f0000000200))
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002980)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000002900), 0x0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1c, 0x8, &(0x7f0000000300)=ANY=[], 0x0, 0x80000001, 0x1000, &(0x7f0000001580)=""/4096, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x6, r0, 0x8, &(0x7f0000002580)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000025c0)={0x3, 0x4, 0x5, 0xd}, 0x10, 0x0, r0, 0x0, &(0x7f0000002a00)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x7}, 0x94)
ioctl$SIOCSIFHWADDR(r0, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="020000000500"})

14.96041ms ago: executing program 3 (id=9257):
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008103e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x20)

0s ago: executing program 4 (id=9258):
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8424, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x800, 0xc8, 0x5, 0x8, 0xf9, 0x0, 0x2, 0x0, 0xea}, 0x0, 0x10, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$unix(r1, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x2000c000)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81ea033b00fe08000e40000200875a65969ff57b00ff0200000000008dff00000000000001"], 0xfdef)

kernel console output (not intermixed with test programs):

722]  ? __cant_sleep+0x220/0x220
[ 1631.078665][T29722]  ? bpf_test_timer_continue+0x142/0x380
[ 1631.084305][T29722]  bpf_test_run+0x2b6/0x830
[ 1631.088828][T29722]  ? dst_hold+0xb0/0xb0
[ 1631.092984][T29722]  ? eth_get_headlen+0x200/0x200
[ 1631.097945][T29722]  ? __build_skb+0x24b/0x3b0
[ 1631.102549][T29722]  bpf_prog_test_run_skb+0xdaf/0x18e0
[ 1631.107931][T29722]  ? cpu_online+0xa0/0xa0
[ 1631.112256][T29722]  bpf_prog_test_run+0x31c/0x390
[ 1631.117215][T29722]  __sys_bpf+0x62b/0x780
[ 1631.121458][T29722]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1631.126846][T29722]  ? lock_chain_count+0x20/0x20
[ 1631.131713][T29722]  __x64_sys_bpf+0x78/0x90
[ 1631.136136][T29722]  do_syscall_64+0x4c/0xa0
[ 1631.140552][T29722]  ? clear_bhb_loop+0x60/0xb0
[ 1631.145230][T29722]  ? clear_bhb_loop+0x60/0xb0
[ 1631.149908][T29722]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1631.155813][T29722] RIP: 0033:0x7ff71819e159
[ 1631.160227][T29722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1631.179830][T29722] RSP: 002b:00007ff718fc8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1631.188242][T29722] RAX: ffffffffffffffda RBX: 00007ff718425fa0 RCX: 00007ff71819e159
[ 1631.196208][T29722] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a
[ 1631.204172][T29722] RBP: 00007ff718fc8090 R08: 0000000000000000 R09: 0000000000000000
[ 1631.212223][T29722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1631.220189][T29722] R13: 00007ff718426038 R14: 00007ff718425fa0 R15: 00007fff22046278
[ 1631.228175][T29722]  </TASK>
[ 1631.759004][T23537] wlan1: Creating new IBSS network, BSSID de:a8:4f:ee:c9:2b
[ 1631.877627][T23519] wlan1: Trigger new scan to find an IBSS to join
[ 1632.504073][T29744] device syzkaller0 entered promiscuous mode
[ 1633.874325][T23536] wlan1: Trigger new scan to find an IBSS to join
[ 1633.980611][T23536] wlan1: Creating new IBSS network, BSSID 26:e3:d8:f1:11:a4
[ 1634.831686][T23519] wlan1: Trigger new scan to find an IBSS to join
[ 1634.930355][T23536] wlan1: Creating new IBSS network, BSSID 96:ad:ac:67:dc:31
[ 1635.443234][T29760] netlink: 'syz.4.7853': attribute type 7 has an invalid length.
[ 1635.451165][T29760] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7853'.
[ 1635.651067][T29792] netlink: 'syz.3.7868': attribute type 28 has an invalid length.
[ 1635.677754][T29795] netlink: 40227 bytes leftover after parsing attributes in process `syz.1.7866'.
[ 1635.698169][T29792] netlink: 'syz.3.7868': attribute type 4 has an invalid length.
[ 1635.721691][T29792] netlink: 136 bytes leftover after parsing attributes in process `syz.3.7868'.
[ 1637.041500][T29819] FAULT_INJECTION: forcing a failure.
[ 1637.041500][T29819] name failslab, interval 1, probability 0, space 0, times 0
[ 1637.077886][T29819] CPU: 0 PID: 29819 Comm: syz.3.7877 Not tainted syzkaller #0
[ 1637.085425][T29819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1637.095527][T29819] Call Trace:
[ 1637.098849][T29819]  <TASK>
[ 1637.101817][T29819]  dump_stack_lvl+0x188/0x24e
[ 1637.106561][T29819]  ? show_regs_print_info+0x12/0x12
[ 1637.111819][T29819]  ? load_image+0x410/0x410
[ 1637.116395][T29819]  ? __might_sleep+0xd0/0xd0
[ 1637.121035][T29819]  ? __lock_acquire+0x7c40/0x7c40
[ 1637.126122][T29819]  should_fail_ex+0x390/0x4c0
[ 1637.130881][T29819]  should_failslab+0x5/0x20
[ 1637.135426][T29819]  slab_pre_alloc_hook+0x59/0x300
[ 1637.140498][T29819]  ? __lock_acquire+0x138a/0x7c40
[ 1637.145585][T29819]  ? tomoyo_realpath_from_path+0xe2/0x5c0
[ 1637.151359][T29819]  __kmem_cache_alloc_node+0x4f/0x270
[ 1637.156795][T29819]  ? tomoyo_realpath_from_path+0xe2/0x5c0
[ 1637.162566][T29819]  __kmalloc+0xa3/0x240
[ 1637.166805][T29819]  tomoyo_realpath_from_path+0xe2/0x5c0
[ 1637.172410][T29819]  ? tomoyo_domain+0xd2/0x120
[ 1637.177161][T29819]  ? tomoyo_path_number_perm+0x205/0x650
[ 1637.182836][T29819]  tomoyo_path_number_perm+0x22f/0x650
[ 1637.188317][T29819]  ? trace_event_raw_event_lock_acquire+0x290/0x290
[ 1637.194930][T29819]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[ 1637.200409][T29819]  ? ksys_write+0x1ce/0x260
[ 1637.204934][T29819]  ? common_file_perm+0x171/0x1c0
[ 1637.210076][T29819]  ? __fget_files+0x28/0x460
[ 1637.214807][T29819]  security_file_ioctl+0x6c/0xa0
[ 1637.219772][T29819]  __se_sys_ioctl+0x48/0x170
[ 1637.224398][T29819]  do_syscall_64+0x4c/0xa0
[ 1637.228854][T29819]  ? clear_bhb_loop+0x60/0xb0
[ 1637.233576][T29819]  ? clear_bhb_loop+0x60/0xb0
[ 1637.238293][T29819]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1637.244206][T29819] RIP: 0033:0x7f243f79e159
[ 1637.248901][T29819] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1637.268531][T29819] RSP: 002b:00007f24406d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1637.276973][T29819] RAX: ffffffffffffffda RBX: 00007f243fa25fa0 RCX: 00007f243f79e159
[ 1637.284971][T29819] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 0000000000000007
[ 1637.293021][T29819] RBP: 00007f24406d7090 R08: 0000000000000000 R09: 0000000000000000
[ 1637.301030][T29819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1637.309028][T29819] R13: 00007f243fa26038 R14: 00007f243fa25fa0 R15: 00007ffc7c1b98a8
[ 1637.317085][T29819]  </TASK>
[ 1637.508547][T29819] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1637.823873][T29834] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7884'.
[ 1637.853415][T29836] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7884'.
[ 1638.143834][T29847] netlink: 'syz.1.7889': attribute type 1 has an invalid length.
[ 1638.168259][T29847] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7889'.
[ 1638.207561][T29848] netlink: 'syz.1.7889': attribute type 1 has an invalid length.
[ 1638.215766][T29848] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7889'.
[ 1638.284065][T29852] netlink: 'syz.3.7891': attribute type 1 has an invalid length.
[ 1638.298819][T29852] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.7891'.
[ 1641.346042][T29921] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.7913'.
[ 1642.628615][T29967] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7928'.
[ 1643.283397][T29988] netlink: 148 bytes leftover after parsing attributes in process `syz.1.7935'.
[ 1643.435219][T29987] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7936'.
[ 1643.543328][T29987] openvswitch: netlink: Flow key attr not present in new flow.
[ 1644.244908][T30018] netlink: 14 bytes leftover after parsing attributes in process `syz.4.7945'.
[ 1644.882917][T30024] netlink: 'syz.4.7949': attribute type 5 has an invalid length.
[ 1645.425891][T30041] netlink: 212928 bytes leftover after parsing attributes in process `syz.0.7953'.
[ 1645.646249][T30055] netlink: 'syz.4.7960': attribute type 10 has an invalid length.
[ 1645.656872][T30055] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7960'.
[ 1645.682722][T30055] device ipvlan1 entered promiscuous mode
[ 1645.733324][T30055] bridge0: port 3(ipvlan1) entered blocking state
[ 1645.752493][T30055] bridge0: port 3(ipvlan1) entered disabled state
[ 1645.777148][T30055] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[ 1645.803916][T12706] Bluetooth: hci5: unexpected event 0x12 length: 15 > 8
[ 1646.531040][T30068] device syzkaller0 entered promiscuous mode
[ 1646.677754][T30068] syzkaller0: tun_net_xmit 1280
[ 1646.688940][T30068] syzkaller0: create flow: hash 1268364415 index 1
[ 1646.699947][T30068] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app
[ 1647.004102][T30086] netlink: 'syz.3.7970': attribute type 10 has an invalid length.
[ 1647.040062][T30086] netlink: 55 bytes leftover after parsing attributes in process `syz.3.7970'.
[ 1647.255384][T30067] syzkaller0: delete flow: hash 1268364415 index 1
[ 1647.304876][T30099] netlink: 'syz.3.7974': attribute type 3 has an invalid length.
[ 1647.383888][T30099] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.7974'.
[ 1650.428290][T12706] Bluetooth: hci2: command 0x0406 tx timeout
[ 1652.332604][T30132] netlink: 63723 bytes leftover after parsing attributes in process `syz.0.7980'.
[ 1652.543146][T30135] FAULT_INJECTION: forcing a failure.
[ 1652.543146][T30135] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1652.576597][T30135] CPU: 1 PID: 30135 Comm: syz.0.7981 Not tainted syzkaller #0
[ 1652.584116][T30135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1652.594282][T30135] Call Trace:
[ 1652.597576][T30135]  <TASK>
[ 1652.600579][T30135]  dump_stack_lvl+0x188/0x24e
[ 1652.605288][T30135]  ? show_regs_print_info+0x12/0x12
[ 1652.610518][T30135]  ? load_image+0x410/0x410
[ 1652.615051][T30135]  ? __lock_acquire+0x7c40/0x7c40
[ 1652.620105][T30135]  ? __might_sleep+0xd0/0xd0
[ 1652.624715][T30135]  should_fail_ex+0x390/0x4c0
[ 1652.629418][T30135]  _copy_from_user+0x2c/0x170
[ 1652.634121][T30135]  generic_map_update_batch+0x4dc/0x7f0
[ 1652.639702][T30135]  ? rcu_read_unlock+0xa0/0xa0
[ 1652.644505][T30135]  ? __fdget+0x17c/0x200
[ 1652.648773][T30135]  ? rcu_read_unlock+0xa0/0xa0
[ 1652.653572][T30135]  bpf_map_do_batch+0x475/0x5f0
[ 1652.658456][T30135]  ? bpf_lsm_xfrm_state_pol_flow_match+0x10/0x10
[ 1652.664816][T30135]  __sys_bpf+0x6f7/0x780
[ 1652.669089][T30135]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1652.674504][T30135]  ? lock_chain_count+0x20/0x20
[ 1652.679385][T30135]  __x64_sys_bpf+0x78/0x90
[ 1652.683831][T30135]  do_syscall_64+0x4c/0xa0
[ 1652.688280][T30135]  ? clear_bhb_loop+0x60/0xb0
[ 1652.692986][T30135]  ? clear_bhb_loop+0x60/0xb0
[ 1652.697698][T30135]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1652.703647][T30135] RIP: 0033:0x7f6b3719e159
[ 1652.708114][T30135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1652.727758][T30135] RSP: 002b:00007f6b380b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1652.736193][T30135] RAX: ffffffffffffffda RBX: 00007f6b37425fa0 RCX: 00007f6b3719e159
[ 1652.744166][T30135] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a
[ 1652.752147][T30135] RBP: 00007f6b380b7090 R08: 0000000000000000 R09: 0000000000000000
[ 1652.760140][T30135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1652.768133][T30135] R13: 00007f6b37426038 R14: 00007f6b37425fa0 R15: 00007fff560025f8
[ 1652.776147][T30135]  </TASK>
[ 1653.290367][T30172] netlink: 'syz.0.7991': attribute type 4 has an invalid length.
[ 1653.401276][T30175] netlink: 'syz.4.7994': attribute type 10 has an invalid length.
[ 1654.368046][T30175] team0: Device vxcan1 is of different type
[ 1654.716748][T30200] device syzkaller0 entered promiscuous mode
[ 1658.893625][T30239] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.8011'.
[ 1660.083056][T30214] netlink: 'syz.2.8002': attribute type 10 has an invalid length.
[ 1661.568220][T30268] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8023'.
[ 1661.615471][T30267] netlink: 'syz.1.8022': attribute type 10 has an invalid length.
[ 1661.627209][T30267] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8022'.
[ 1661.671131][T30267] device ipvlan1 entered promiscuous mode
[ 1661.712690][T30267] bridge0: port 3(ipvlan1) entered blocking state
[ 1661.740016][T30267] bridge0: port 3(ipvlan1) entered disabled state
[ 1661.832949][T30267] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[ 1661.884107][T30275] netlink: 'syz.2.8024': attribute type 39 has an invalid length.
[ 1662.111652][T30284] device syzkaller0 entered promiscuous mode
[ 1664.082941][T30311] netlink: 'syz.3.8037': attribute type 19 has an invalid length.
[ 1664.139074][T30311] netlink: 156 bytes leftover after parsing attributes in process `syz.3.8037'.
[ 1664.684232][T30332] mac80211_hwsim hwsim64 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1664.704284][T30333] netlink: 'syz.3.8043': attribute type 10 has an invalid length.
[ 1664.984613][T30343] device bridge_slave_1 left promiscuous mode
[ 1665.024171][T30343] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1665.055656][T30343] device bridge_slave_0 left promiscuous mode
[ 1665.094218][T30343] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1666.295537][T30385] netlink: 'syz.0.8059': attribute type 2 has an invalid length.
[ 1666.325066][T30385] netlink: 'syz.0.8059': attribute type 8 has an invalid length.
[ 1666.365921][T30385] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8059'.
[ 1666.778922][T30397] netlink: 128 bytes leftover after parsing attributes in process `syz.2.8064'.
[ 1666.800156][T30397] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[ 1666.820170][T30397] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1666.909215][T23541] wlan1: Trigger new scan to find an IBSS to join
[ 1668.835173][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[ 1668.842168][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[ 1669.247956][T30403] netlink: 'syz.1.8065': attribute type 10 has an invalid length.
[ 1669.257715][T30422] netlink: 64933 bytes leftover after parsing attributes in process `syz.2.8072'.
[ 1669.988361][T30458] netlink: 'syz.1.8086': attribute type 4 has an invalid length.
[ 1669.996338][T30458] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8086'.
[ 1670.649927][T30479] device bridge_slave_1 left promiscuous mode
[ 1670.664934][T30479] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1670.908434][T23527] wlan1: Trigger new scan to find an IBSS to join
[ 1671.707224][T30479] device bridge_slave_0 left promiscuous mode
[ 1671.749698][T30479] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1672.542231][T30515] netlink: 'syz.3.8105': attribute type 41 has an invalid length.
[ 1672.929118][T30517] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1672.936617][T30517] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1673.064133][T30517] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1673.088323][T30517] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1673.868324][ T4872] wlan1: Trigger new scan to find an IBSS to join
[ 1673.889622][T30545] netlink: 'syz.4.8112': attribute type 9 has an invalid length.
[ 1673.924086][T30545] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.8112'.
[ 1674.166668][T30548] device syzkaller0 entered promiscuous mode
[ 1674.202374][T17400] wlan1: Creating new IBSS network, BSSID 06:75:18:01:da:7f
[ 1674.853406][T30567] netlink: 'syz.2.8119': attribute type 41 has an invalid length.
[ 1674.892443][T17400] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00
[ 1674.923106][T17400] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00
[ 1675.042043][T30572] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.8121'.
[ 1676.023946][T30591] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1676.093490][T30591] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1676.153572][T30591] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1676.199075][T30591] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1676.235615][T30591] batman_adv: batadv0: Interface deactivated: veth0_vlan
[ 1676.257670][T30591] batman_adv: batadv0: Removing interface: veth0_vlan
[ 1676.906034][T30610] netlink: 'syz.0.8133': attribute type 41 has an invalid length.
[ 1676.924022][T23527] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00
[ 1676.935953][T23527] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00
[ 1677.581441][T30618] netlink: 'syz.1.8137': attribute type 7 has an invalid length.
[ 1678.120211][T30647] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1678.135344][T30647] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1678.176362][T30647] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1678.201386][T30647] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1678.242442][T30647] batman_adv: batadv0: Interface deactivated: virt_wifi0
[ 1678.282446][T30647] batman_adv: batadv0: Removing interface: virt_wifi0
[ 1678.996622][T30654] netlink: 'syz.1.8146': attribute type 2 has an invalid length.
[ 1687.189460][T30816] syz.2.8204[30816] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1687.189610][T30816] syz.2.8204[30816] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1688.103209][T30838] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8212'.
[ 1689.891627][T23333] Bluetooth: hci1: unexpected event 0x12 length: 15 > 8
[ 1689.977087][T30876] batman_adv: batadv0: Interface deactivated: veth0_vlan
[ 1691.788814][T30932] netlink: 'syz.0.8245': attribute type 3 has an invalid length.
[ 1691.822514][T30932] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.8245'.
[ 1691.974152][T30937] device syzkaller0 entered promiscuous mode
[ 1693.183850][T30962] FAULT_INJECTION: forcing a failure.
[ 1693.183850][T30962] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1693.197739][T30962] CPU: 0 PID: 30962 Comm: syz.3.8254 Not tainted syzkaller #0
[ 1693.205245][T30962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1693.215314][T30962] Call Trace:
[ 1693.218588][T30962]  <TASK>
[ 1693.221520][T30962]  dump_stack_lvl+0x188/0x24e
[ 1693.226244][T30962]  ? show_regs_print_info+0x12/0x12
[ 1693.231464][T30962]  ? load_image+0x410/0x410
[ 1693.235962][T30962]  ? __lock_acquire+0x7c40/0x7c40
[ 1693.240984][T30962]  ? __might_sleep+0xd0/0xd0
[ 1693.245576][T30962]  should_fail_ex+0x390/0x4c0
[ 1693.250270][T30962]  _copy_from_user+0x2c/0x170
[ 1693.254960][T30962]  generic_map_update_batch+0x48d/0x7f0
[ 1693.260508][T30962]  ? rcu_read_unlock+0xa0/0xa0
[ 1693.265275][T30962]  ? __fdget+0x17c/0x200
[ 1693.269530][T30962]  ? rcu_read_unlock+0xa0/0xa0
[ 1693.274289][T30962]  bpf_map_do_batch+0x475/0x5f0
[ 1693.279224][T30962]  ? bpf_lsm_xfrm_state_pol_flow_match+0x10/0x10
[ 1693.285546][T30962]  __sys_bpf+0x6f7/0x780
[ 1693.289796][T30962]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1693.295175][T30962]  ? lock_chain_count+0x20/0x20
[ 1693.300052][T30962]  __x64_sys_bpf+0x78/0x90
[ 1693.304583][T30962]  do_syscall_64+0x4c/0xa0
[ 1693.309005][T30962]  ? clear_bhb_loop+0x60/0xb0
[ 1693.313782][T30962]  ? clear_bhb_loop+0x60/0xb0
[ 1693.318460][T30962]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1693.324346][T30962] RIP: 0033:0x7f243f79e159
[ 1693.328747][T30962] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1693.348361][T30962] RSP: 002b:00007f24406d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1693.356785][T30962] RAX: ffffffffffffffda RBX: 00007f243fa25fa0 RCX: 00007f243f79e159
[ 1693.364770][T30962] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a
[ 1693.372731][T30962] RBP: 00007f24406d7090 R08: 0000000000000000 R09: 0000000000000000
[ 1693.380696][T30962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1693.388656][T30962] R13: 00007f243fa26038 R14: 00007f243fa25fa0 R15: 00007ffc7c1b98a8
[ 1693.396631][T30962]  </TASK>
[ 1694.590677][T30943] netlink: 'syz.1.8247': attribute type 10 has an invalid length.
[ 1694.614036][T30943] device dummy0 left promiscuous mode
[ 1694.620071][T30943] : port 1(dummy0) entered disabled state
[ 1695.565541][T30998] FAULT_INJECTION: forcing a failure.
[ 1695.565541][T30998] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1695.589757][T30998] CPU: 1 PID: 30998 Comm: syz.1.8267 Not tainted syzkaller #0
[ 1695.597282][T30998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1695.607360][T30998] Call Trace:
[ 1695.610655][T30998]  <TASK>
[ 1695.613654][T30998]  dump_stack_lvl+0x188/0x24e
[ 1695.618371][T30998]  ? show_regs_print_info+0x12/0x12
[ 1695.623600][T30998]  ? load_image+0x410/0x410
[ 1695.628133][T30998]  ? __lock_acquire+0x7c40/0x7c40
[ 1695.633188][T30998]  ? is_bpf_text_address+0x22/0x2a0
[ 1695.638415][T30998]  should_fail_ex+0x390/0x4c0
[ 1695.643125][T30998]  prepare_alloc_pages+0x1e1/0x5b0
[ 1695.648322][T30998]  __alloc_pages+0x130/0x4f0
[ 1695.652941][T30998]  ? zone_statistics+0x170/0x170
[ 1695.657924][T30998]  pte_alloc_one+0x7b/0x310
[ 1695.662460][T30998]  ? pfn_modify_allowed+0x560/0x560
[ 1695.667698][T30998]  ? __might_sleep+0xd0/0xd0
[ 1695.672322][T30998]  ? rcu_is_watching+0x11/0xa0
[ 1695.677294][T30998]  __pte_alloc+0x21/0x150
[ 1695.681657][T30998]  copy_page_range+0x322f/0x3a60
[ 1695.686671][T30998]  ? pfn_valid+0x450/0x450
[ 1695.691130][T30998]  ? up_write+0x1b6/0x410
[ 1695.695479][T30998]  ? vma_interval_tree_augment_rotate+0x160/0x190
[ 1695.702039][T30998]  copy_mm+0xeb0/0x1680
[ 1695.706247][T30998]  ? copy_signal+0x640/0x640
[ 1695.710867][T30998]  ? lockdep_init_map_type+0x98/0x8d0
[ 1695.716288][T30998]  ? __init_rwsem+0x11e/0x160
[ 1695.721078][T30998]  ? copy_signal+0x51f/0x640
[ 1695.725691][T30998]  copy_process+0x1952/0x4070
[ 1695.730404][T30998]  ? copy_process+0x974/0x4070
[ 1695.735205][T30998]  ? idle_dummy+0x10/0x10
[ 1695.739568][T30998]  ? __lock_acquire+0x7c40/0x7c40
[ 1695.744630][T30998]  kernel_clone+0x24b/0x900
[ 1695.749157][T30998]  ? trace_call_bpf+0xbf/0x6b0
[ 1695.753946][T30998]  ? trace_call_bpf+0xbf/0x6b0
[ 1695.758739][T30998]  ? create_io_thread+0x170/0x170
[ 1695.763809][T30998]  __x64_sys_clone+0x1a7/0x220
[ 1695.768592][T30998]  ? perf_trace_run_bpf_submit+0x124/0x1c0
[ 1695.774430][T30998]  ? __ia32_sys_vfork+0x140/0x140
[ 1695.779486][T30998]  ? lock_chain_count+0x20/0x20
[ 1695.784365][T30998]  ? lockdep_hardirqs_on+0x94/0x140
[ 1695.789621][T30998]  do_syscall_64+0x4c/0xa0
[ 1695.794110][T30998]  ? clear_bhb_loop+0x60/0xb0
[ 1695.798820][T30998]  ? clear_bhb_loop+0x60/0xb0
[ 1695.803543][T30998]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1695.809654][T30998] RIP: 0033:0x7fbc7d59e159
[ 1695.814094][T30998] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1695.833734][T30998] RSP: 002b:00007fbc7e403fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[ 1695.842177][T30998] RAX: ffffffffffffffda RBX: 00007fbc7d825fa0 RCX: 00007fbc7d59e159
[ 1695.850188][T30998] RDX: 0000200000001000 RSI: 0000000000000000 RDI: 0000000001001000
[ 1695.858185][T30998] RBP: 00007fbc7e404090 R08: 0000000000000000 R09: 0000000000000000
[ 1695.866184][T30998] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002
[ 1695.874179][T30998] R13: 00007fbc7d826038 R14: 00007fbc7d825fa0 R15: 00007ffc88b5f848
[ 1695.882190][T30998]  </TASK>
[ 1697.260463][T31008] netlink: 'syz.2.8269': attribute type 10 has an invalid length.
[ 1697.503598][T31024] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.8273'.
[ 1697.613886][T31022] device syzkaller0 entered promiscuous mode
[ 1700.011711][T31038] netlink: 'syz.1.8275': attribute type 10 has an invalid length.
[ 1701.576857][T31091] netlink: 'syz.0.8296': attribute type 2 has an invalid length.
[ 1701.639413][T31091] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.8296'.
[ 1702.392324][T31118] netlink: 'syz.3.8308': attribute type 21 has an invalid length.
[ 1702.413733][T31118] netlink: 156 bytes leftover after parsing attributes in process `syz.3.8308'.
[ 1702.484397][T31118] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8308'.
[ 1703.269358][T31136] mac80211_hwsim hwsim64 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1704.885871][T31172] netlink: 164 bytes leftover after parsing attributes in process `syz.4.8324'.
[ 1704.895343][T31180] netlink: 'syz.1.8327': attribute type 22 has an invalid length.
[ 1704.908254][T31180] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8327'.
[ 1705.515032][T31200] netlink: 'syz.1.8333': attribute type 2 has an invalid length.
[ 1705.548470][T31200] netlink: 'syz.1.8333': attribute type 8 has an invalid length.
[ 1705.587637][T31200] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8333'.
[ 1705.645470][T31206] netlink: 128 bytes leftover after parsing attributes in process `syz.3.8336'.
[ 1705.667136][T31206] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[ 1705.702809][T31206] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1705.879588][T23527] wlan1: Trigger new scan to find an IBSS to join
[ 1707.445311][T31247] delete_channel: no stack
[ 1707.464740][T31247] delete_channel: no stack
[ 1707.659541][T31258] netlink: 'syz.3.8352': attribute type 21 has an invalid length.
[ 1708.102399][T31279] netlink: 'syz.3.8360': attribute type 10 has an invalid length.
[ 1709.869286][T12285] wlan1: Trigger new scan to find an IBSS to join
[ 1710.993941][ T4872] wlan1: Creating new IBSS network, BSSID 22:11:e7:09:5e:ad
[ 1711.006321][T31293] netlink: 64929 bytes leftover after parsing attributes in process `syz.1.8363'.
[ 1711.222092][T31298] netlink: 'syz.3.8367': attribute type 10 has an invalid length.
[ 1711.238262][T31298] device dummy0 left promiscuous mode
[ 1711.243860][T31298] : port 1(dummy0) entered disabled state
[ 1711.510559][T31315] netlink: 'syz.3.8373': attribute type 4 has an invalid length.
[ 1711.556345][T31315] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8373'.
[ 1713.115994][T31349] netlink: 'syz.2.8382': attribute type 8 has an invalid length.
[ 1713.778301][T31370] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.8387'.
[ 1714.003324][T31377] netlink: 168 bytes leftover after parsing attributes in process `syz.4.8391'.
[ 1714.307359][T31389] netlink: 'syz.1.8394': attribute type 10 has an invalid length.
[ 1717.709632][T31457] netlink: 14 bytes leftover after parsing attributes in process `syz.3.8415'.
[ 1717.733145][T31457] device hsr_slave_0 left promiscuous mode
[ 1717.751060][T31469] FAULT_INJECTION: forcing a failure.
[ 1717.751060][T31469] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1717.765194][T31457] device hsr_slave_1 left promiscuous mode
[ 1717.819493][T31469] CPU: 0 PID: 31469 Comm: syz.4.8418 Not tainted syzkaller #0
[ 1717.827181][T31469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1717.837240][T31469] Call Trace:
[ 1717.840516][T31469]  <TASK>
[ 1717.843439][T31469]  dump_stack_lvl+0x188/0x24e
[ 1717.848128][T31469]  ? show_regs_print_info+0x12/0x12
[ 1717.853431][T31469]  ? load_image+0x410/0x410
[ 1717.857935][T31469]  ? __lock_acquire+0x7c40/0x7c40
[ 1717.863173][T31469]  should_fail_ex+0x390/0x4c0
[ 1717.868038][T31469]  strncpy_from_user+0x32/0x340
[ 1717.872906][T31469]  bpf_prog_load+0x200/0x1530
[ 1717.877607][T31469]  ? map_freeze+0x390/0x390
[ 1717.882120][T31469]  ? __might_fault+0xa6/0x120
[ 1717.886829][T31469]  ? __might_fault+0xa6/0x120
[ 1717.891604][T31469]  ? __might_fault+0xc2/0x120
[ 1717.896284][T31469]  ? __might_fault+0xa6/0x120
[ 1717.900965][T31469]  ? bpf_lsm_bpf+0x5/0x10
[ 1717.905285][T31469]  ? security_bpf+0x7a/0xa0
[ 1717.909787][T31469]  __sys_bpf+0x5b8/0x780
[ 1717.914055][T31469]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1717.919460][T31469]  ? lock_chain_count+0x20/0x20
[ 1717.924334][T31469]  __x64_sys_bpf+0x78/0x90
[ 1717.928848][T31469]  do_syscall_64+0x4c/0xa0
[ 1717.933282][T31469]  ? clear_bhb_loop+0x60/0xb0
[ 1717.938046][T31469]  ? clear_bhb_loop+0x60/0xb0
[ 1717.942741][T31469]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1717.948741][T31469] RIP: 0033:0x7ff71819e159
[ 1717.953150][T31469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1717.972789][T31469] RSP: 002b:00007ff718fc8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1717.981199][T31469] RAX: ffffffffffffffda RBX: 00007ff718425fa0 RCX: 00007ff71819e159
[ 1717.989203][T31469] RDX: 0000000000000094 RSI: 0000200000001400 RDI: 0000000000000005
[ 1717.997280][T31469] RBP: 00007ff718fc8090 R08: 0000000000000000 R09: 0000000000000000
[ 1718.005250][T31469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1718.013299][T31469] R13: 00007ff718426038 R14: 00007ff718425fa0 R15: 00007fff22046278
[ 1718.021297][T31469]  </TASK>
[ 1719.085788][T31504] netlink: 180900 bytes leftover after parsing attributes in process `syz.2.8430'.
[ 1719.110858][T31504] openvswitch: netlink: Flow actions attr not present in new flow.
[ 1720.704724][T31535] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8441'.
[ 1720.780800][T31535] netlink: 143932 bytes leftover after parsing attributes in process `syz.1.8441'.
[ 1720.813982][T31535] netlink: zone id is out of range
[ 1720.843301][T31535] netlink: zone id is out of range
[ 1720.861169][T31535] netlink: zone id is out of range
[ 1720.883041][T31535] netlink: zone id is out of range
[ 1720.901517][T31535] netlink: zone id is out of range
[ 1720.921559][T31535] netlink: zone id is out of range
[ 1720.944825][T31535] netlink: zone id is out of range
[ 1720.964094][T31535] netlink: zone id is out of range
[ 1720.977221][T31535] netlink: zone id is out of range
[ 1721.006063][T31543] FAULT_INJECTION: forcing a failure.
[ 1721.006063][T31543] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1721.065764][T31543] CPU: 1 PID: 31543 Comm: syz.3.8444 Not tainted syzkaller #0
[ 1721.073277][T31543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1721.083353][T31543] Call Trace:
[ 1721.086645][T31543]  <TASK>
[ 1721.089592][T31543]  dump_stack_lvl+0x188/0x24e
[ 1721.094303][T31543]  ? show_regs_print_info+0x12/0x12
[ 1721.099536][T31543]  ? load_image+0x410/0x410
[ 1721.104068][T31543]  ? __lock_acquire+0x7c40/0x7c40
[ 1721.109146][T31543]  should_fail_ex+0x390/0x4c0
[ 1721.113841][T31543]  _copy_from_user+0x2c/0x170
[ 1721.118523][T31543]  ___sys_sendmsg+0x1c3/0x360
[ 1721.123215][T31543]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1721.128027][T31543]  ? __lock_acquire+0x7c40/0x7c40
[ 1721.133078][T31543]  __se_sys_sendmsg+0x1c3/0x2b0
[ 1721.137943][T31543]  ? __x64_sys_sendmsg+0x80/0x80
[ 1721.142892][T31543]  ? lockdep_hardirqs_on+0x94/0x140
[ 1721.148094][T31543]  do_syscall_64+0x4c/0xa0
[ 1721.152518][T31543]  ? clear_bhb_loop+0x60/0xb0
[ 1721.157192][T31543]  ? clear_bhb_loop+0x60/0xb0
[ 1721.161878][T31543]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1721.167771][T31543] RIP: 0033:0x7f243f79e159
[ 1721.172183][T31543] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1721.192050][T31543] RSP: 002b:00007f24406d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1721.200893][T31543] RAX: ffffffffffffffda RBX: 00007f243fa25fa0 RCX: 00007f243f79e159
[ 1721.208860][T31543] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003
[ 1721.216834][T31543] RBP: 00007f24406d7090 R08: 0000000000000000 R09: 0000000000000000
[ 1721.224816][T31543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1721.232782][T31543] R13: 00007f243fa26038 R14: 00007f243fa25fa0 R15: 00007ffc7c1b98a8
[ 1721.240850][T31543]  </TASK>
[ 1721.916321][T31554] netlink: 'syz.3.8446': attribute type 29 has an invalid length.
[ 1721.924693][T31554] netlink: 'syz.3.8446': attribute type 29 has an invalid length.
[ 1721.956836][T31556] netlink: 'syz.3.8446': attribute type 29 has an invalid length.
[ 1721.985012][T31554] netlink: 'syz.3.8446': attribute type 29 has an invalid length.
[ 1722.013304][T31554] netlink: 'syz.3.8446': attribute type 29 has an invalid length.
[ 1724.497738][T31628] netlink: 'syz.0.8473': attribute type 7 has an invalid length.
[ 1724.506309][T31628] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8473'.
[ 1725.380670][T31659] netlink: 'syz.4.8483': attribute type 2 has an invalid length.
[ 1725.402784][T31659] netlink: 'syz.4.8483': attribute type 1 has an invalid length.
[ 1725.458192][T31659] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.8483'.
[ 1725.632253][T31667] netlink: 'syz.2.8486': attribute type 2 has an invalid length.
[ 1725.710145][T31665] netlink: 14 bytes leftover after parsing attributes in process `syz.2.8486'.
[ 1726.159069][T31681] tap0: tun_chr_ioctl cmd 1074025675
[ 1726.186895][T31681] tap0: persist disabled
[ 1726.605964][T31704] netlink: 'syz.1.8501': attribute type 29 has an invalid length.
[ 1727.594975][T31704] netlink: 'syz.1.8501': attribute type 29 has an invalid length.
[ 1727.655913][T31712] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8504'.
[ 1729.890920][T31735] netlink: 'syz.1.8510': attribute type 2 has an invalid length.
[ 1729.919428][T31735] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8510'.
[ 1730.051975][T31746] FAULT_INJECTION: forcing a failure.
[ 1730.051975][T31746] name failslab, interval 1, probability 0, space 0, times 0
[ 1730.085097][T31748] netlink: 'syz.0.8515': attribute type 29 has an invalid length.
[ 1730.136899][T31746] CPU: 1 PID: 31746 Comm: syz.3.8514 Not tainted syzkaller #0
[ 1730.144482][T31746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1730.154556][T31746] Call Trace:
[ 1730.157846][T31746]  <TASK>
[ 1730.160787][T31746]  dump_stack_lvl+0x188/0x24e
[ 1730.165496][T31746]  ? show_regs_print_info+0x12/0x12
[ 1730.170729][T31746]  ? load_image+0x410/0x410
[ 1730.175278][T31746]  ? __lock_acquire+0x7c40/0x7c40
[ 1730.180337][T31746]  should_fail_ex+0x390/0x4c0
[ 1730.185040][T31746]  should_failslab+0x5/0x20
[ 1730.189576][T31746]  slab_pre_alloc_hook+0x59/0x300
[ 1730.194651][T31746]  ? bpf_prog_test_run_skb+0x23e/0x18e0
[ 1730.200322][T31746]  __kmem_cache_alloc_node+0x4f/0x270
[ 1730.205708][T31746]  ? bpf_prog_test_run_skb+0x23e/0x18e0
[ 1730.211274][T31746]  __kmalloc+0xa3/0x240
[ 1730.215468][T31746]  bpf_prog_test_run_skb+0x23e/0x18e0
[ 1730.220852][T31746]  ? __fget_files+0x28/0x460
[ 1730.225455][T31746]  ? __fget_files+0x3fc/0x460
[ 1730.230150][T31746]  ? cpu_online+0xa0/0xa0
[ 1730.234576][T31746]  bpf_prog_test_run+0x31c/0x390
[ 1730.239534][T31746]  __sys_bpf+0x62b/0x780
[ 1730.243795][T31746]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1730.249194][T31746]  ? lock_chain_count+0x20/0x20
[ 1730.254063][T31746]  __x64_sys_bpf+0x78/0x90
[ 1730.258491][T31746]  do_syscall_64+0x4c/0xa0
[ 1730.262922][T31746]  ? clear_bhb_loop+0x60/0xb0
[ 1730.267606][T31746]  ? clear_bhb_loop+0x60/0xb0
[ 1730.272298][T31746]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1730.278202][T31746] RIP: 0033:0x7f243f79e159
[ 1730.282647][T31746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1730.302259][T31746] RSP: 002b:00007f24406d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1730.310691][T31746] RAX: ffffffffffffffda RBX: 00007f243fa25fa0 RCX: 00007f243f79e159
[ 1730.318678][T31746] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a
[ 1730.326653][T31746] RBP: 00007f24406d7090 R08: 0000000000000000 R09: 0000000000000000
[ 1730.334629][T31746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1730.342608][T31746] R13: 00007f243fa26038 R14: 00007f243fa25fa0 R15: 00007ffc7c1b98a8
[ 1730.350691][T31746]  </TASK>
[ 1730.354614][T31748] netlink: 'syz.0.8515': attribute type 29 has an invalid length.
[ 1730.368655][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[ 1730.375190][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[ 1730.921265][T31776] netlink: 'syz.0.8522': attribute type 10 has an invalid length.
[ 1732.202315][T31791] netlink: 'syz.3.8528': attribute type 29 has an invalid length.
[ 1732.421600][T31791] netlink: 'syz.3.8528': attribute type 29 has an invalid length.
[ 1732.585611][T31805] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.8534'.
[ 1732.663884][T31805] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.8534'.
[ 1732.791042][T31822] syz.1.8539[31822] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1732.791218][T31822] syz.1.8539[31822] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1732.817006][T31824] delete_channel: no stack
[ 1733.302005][T31839] netlink: 'syz.3.8544': attribute type 46 has an invalid length.
[ 1733.502453][T31844] netlink: 'syz.4.8546': attribute type 29 has an invalid length.
[ 1733.518705][T31844] netlink: 'syz.4.8546': attribute type 29 has an invalid length.
[ 1733.571394][T31852] netlink: 'syz.4.8546': attribute type 29 has an invalid length.
[ 1733.984854][T31868] delete_channel: no stack
[ 1734.404204][T31874] netlink: 146340 bytes leftover after parsing attributes in process `syz.4.8557'.
[ 1734.428477][T31874] net_ratelimit: 3551 callbacks suppressed
[ 1734.428497][T31874] openvswitch: netlink: Key type 386 is out of range max 32
[ 1734.891729][T31886] netlink: 'syz.1.8561': attribute type 29 has an invalid length.
[ 1734.910806][T31886] netlink: 'syz.1.8561': attribute type 29 has an invalid length.
[ 1734.934661][T31886] netlink: 'syz.1.8561': attribute type 29 has an invalid length.
[ 1735.386650][T23333] Bluetooth: hci1: unexpected event 0x12 length: 15 > 8
[ 1735.502592][T31897] netlink: 'syz.3.8564': attribute type 3 has an invalid length.
[ 1735.540547][T31897] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.8564'.
[ 1736.614431][T31909] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app
[ 1736.638777][T31914] delete_channel: no stack
[ 1736.644515][T31912] netlink: 'syz.4.8572': attribute type 29 has an invalid length.
[ 1736.671248][T31912] netlink: 'syz.4.8572': attribute type 29 has an invalid length.
[ 1739.140995][T31954] validate_nla: 1 callbacks suppressed
[ 1739.141014][T31954] netlink: 'syz.4.8585': attribute type 29 has an invalid length.
[ 1739.201541][T31954] netlink: 'syz.4.8585': attribute type 29 has an invalid length.
[ 1739.224269][T31958] netlink: 'syz.4.8585': attribute type 29 has an invalid length.
[ 1739.460224][T31966] device syzkaller0 entered promiscuous mode
[ 1741.825397][T31968] netlink: 'syz.4.8591': attribute type 10 has an invalid length.
[ 1741.938237][T31993] netlink: 'syz.3.8601': attribute type 29 has an invalid length.
[ 1741.976005][T31993] netlink: 'syz.3.8601': attribute type 29 has an invalid length.
[ 1742.012542][T31997] FAULT_INJECTION: forcing a failure.
[ 1742.012542][T31997] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1742.018990][T31998] netlink: 'syz.3.8601': attribute type 29 has an invalid length.
[ 1742.054603][T31997] CPU: 1 PID: 31997 Comm: syz.2.8600 Not tainted syzkaller #0
[ 1742.062122][T31997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1742.072200][T31997] Call Trace:
[ 1742.075495][T31997]  <TASK>
[ 1742.078444][T31997]  dump_stack_lvl+0x188/0x24e
[ 1742.083150][T31997]  ? show_regs_print_info+0x12/0x12
[ 1742.088382][T31997]  ? load_image+0x410/0x410
[ 1742.092892][T31997]  ? __lock_acquire+0x7c40/0x7c40
[ 1742.097921][T31997]  should_fail_ex+0x390/0x4c0
[ 1742.102656][T31997]  prepare_alloc_pages+0x1e1/0x5b0
[ 1742.107874][T31997]  __alloc_pages+0x130/0x4f0
[ 1742.112467][T31997]  ? zone_statistics+0x170/0x170
[ 1742.117416][T31997]  pte_alloc_one+0x7b/0x310
[ 1742.121920][T31997]  ? pfn_modify_allowed+0x560/0x560
[ 1742.127211][T31997]  ? __might_sleep+0xd0/0xd0
[ 1742.131803][T31997]  ? rcu_is_watching+0x11/0xa0
[ 1742.136567][T31997]  __pte_alloc+0x21/0x150
[ 1742.140908][T31997]  copy_page_range+0x322f/0x3a60
[ 1742.145883][T31997]  ? pfn_valid+0x450/0x450
[ 1742.150316][T31997]  ? up_write+0x1b6/0x410
[ 1742.154642][T31997]  ? vma_interval_tree_augment_rotate+0x160/0x190
[ 1742.161061][T31997]  copy_mm+0xeb0/0x1680
[ 1742.165222][T31997]  ? copy_signal+0x640/0x640
[ 1742.169808][T31997]  ? lockdep_init_map_type+0x98/0x8d0
[ 1742.175193][T31997]  ? __init_rwsem+0x11e/0x160
[ 1742.179871][T31997]  ? copy_signal+0x51f/0x640
[ 1742.184470][T31997]  copy_process+0x1952/0x4070
[ 1742.189169][T31997]  ? copy_process+0x974/0x4070
[ 1742.193949][T31997]  ? idle_dummy+0x10/0x10
[ 1742.198296][T31997]  kernel_clone+0x24b/0x900
[ 1742.202801][T31997]  ? ksys_write+0x1ce/0x260
[ 1742.207314][T31997]  ? create_io_thread+0x170/0x170
[ 1742.212355][T31997]  __x64_sys_clone+0x1a7/0x220
[ 1742.217142][T31997]  ? __fget_files+0x3fc/0x460
[ 1742.221825][T31997]  ? __ia32_sys_vfork+0x140/0x140
[ 1742.226858][T31997]  ? lock_chain_count+0x20/0x20
[ 1742.231717][T31997]  ? lockdep_hardirqs_on+0x94/0x140
[ 1742.237003][T31997]  do_syscall_64+0x4c/0xa0
[ 1742.241420][T31997]  ? clear_bhb_loop+0x60/0xb0
[ 1742.246111][T31997]  ? clear_bhb_loop+0x60/0xb0
[ 1742.250789][T31997]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1742.256684][T31997] RIP: 0033:0x7f357a59e159
[ 1742.261092][T31997] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1742.280694][T31997] RSP: 002b:00007f357b453fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[ 1742.289107][T31997] RAX: ffffffffffffffda RBX: 00007f357a825fa0 RCX: 00007f357a59e159
[ 1742.297157][T31997] RDX: 0000200000001000 RSI: 0000000000000000 RDI: 0000000001001000
[ 1742.305127][T31997] RBP: 00007f357b454090 R08: 0000000000000000 R09: 0000000000000000
[ 1742.313110][T31997] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002
[ 1742.321090][T31997] R13: 00007f357a826038 R14: 00007f357a825fa0 R15: 00007ffd06f96918
[ 1742.329081][T31997]  </TASK>
[ 1742.407974][T32003] netlink: 'syz.0.8604': attribute type 10 has an invalid length.
[ 1742.443541][T32005] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8603'.
[ 1743.088268][T23537] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1743.160984][T32037] netlink: 'syz.2.8615': attribute type 29 has an invalid length.
[ 1743.182751][T32037] netlink: 'syz.2.8615': attribute type 29 has an invalid length.
[ 1743.645761][T32042] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.8619'.
[ 1744.900154][T32074] mac80211_hwsim hwsim67 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1744.912536][ T4872] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00
[ 1744.967208][ T4872] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00
[ 1745.419518][T32099] validate_nla: 5 callbacks suppressed
[ 1745.419536][T32099] netlink: 'syz.1.8637': attribute type 39 has an invalid length.
[ 1745.763064][T32112] netlink: 'syz.1.8642': attribute type 29 has an invalid length.
[ 1745.799324][T32112] netlink: 'syz.1.8642': attribute type 29 has an invalid length.
[ 1745.872680][T32112] netlink: 'syz.1.8642': attribute type 29 has an invalid length.
[ 1745.966963][T32118] netlink: 128 bytes leftover after parsing attributes in process `syz.2.8644'.
[ 1745.978340][T32118] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[ 1745.993666][T32118] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1747.314360][T32156] netlink: 'syz.1.8657': attribute type 29 has an invalid length.
[ 1747.320628][T32158] netlink: 'syz.3.8658': attribute type 21 has an invalid length.
[ 1747.358228][T32156] netlink: 'syz.1.8657': attribute type 29 has an invalid length.
[ 1747.379759][T32156] netlink: 'syz.1.8657': attribute type 29 has an invalid length.
[ 1747.504039][T32169] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.8660'.
[ 1748.368466][T32177] netlink: 'syz.3.8663': attribute type 10 has an invalid length.
[ 1748.496159][T32181] netlink: 64929 bytes leftover after parsing attributes in process `syz.0.8666'.
[ 1749.855255][T32214] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.8679'.
[ 1750.896082][T32227] netlink: 'syz.1.8686': attribute type 10 has an invalid length.
[ 1754.867723][T32270] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8699'.
[ 1755.014913][T32277] netlink: 'syz.3.8702': attribute type 3 has an invalid length.
[ 1755.433637][T32290] FAULT_INJECTION: forcing a failure.
[ 1755.433637][T32290] name failslab, interval 1, probability 0, space 0, times 0
[ 1755.508846][T32290] CPU: 1 PID: 32290 Comm: syz.2.8707 Not tainted syzkaller #0
[ 1755.516362][T32290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1755.526527][T32290] Call Trace:
[ 1755.529829][T32290]  <TASK>
[ 1755.532791][T32290]  dump_stack_lvl+0x188/0x24e
[ 1755.537505][T32290]  ? show_regs_print_info+0x12/0x12
[ 1755.542741][T32290]  ? load_image+0x410/0x410
[ 1755.547297][T32290]  ? __might_sleep+0xd0/0xd0
[ 1755.551965][T32290]  ? __lock_acquire+0x7c40/0x7c40
[ 1755.557111][T32290]  should_fail_ex+0x390/0x4c0
[ 1755.561816][T32290]  should_failslab+0x5/0x20
[ 1755.566336][T32290]  slab_pre_alloc_hook+0x59/0x300
[ 1755.571424][T32290]  ? __get_vm_area_node+0x122/0x330
[ 1755.576653][T32290]  __kmem_cache_alloc_node+0x4f/0x270
[ 1755.582061][T32290]  ? __get_vm_area_node+0x122/0x330
[ 1755.587296][T32290]  kmalloc_node_trace+0x22/0xe0
[ 1755.592182][T32290]  __get_vm_area_node+0x122/0x330
[ 1755.597241][T32290]  __vmalloc_node_range+0x357/0x1380
[ 1755.602561][T32290]  ? bpf_prog_alloc_no_stats+0x37/0x3a0
[ 1755.608140][T32290]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 1755.614152][T32290]  ? aa_get_newest_label+0xf9/0x5b0
[ 1755.619369][T32290]  ? free_vm_area+0x50/0x50
[ 1755.623893][T32290]  ? end_current_label_crit_section+0x170/0x170
[ 1755.630150][T32290]  ? bpf_prog_alloc_no_stats+0x37/0x3a0
[ 1755.635734][T32290]  __vmalloc+0x76/0x80
[ 1755.639891][T32290]  ? bpf_prog_alloc_no_stats+0x37/0x3a0
[ 1755.645540][T32290]  bpf_prog_alloc_no_stats+0x37/0x3a0
[ 1755.651264][T32290]  ? bpf_prog_alloc+0x13/0x1b0
[ 1755.656050][T32290]  bpf_prog_alloc+0x1c/0x1b0
[ 1755.660640][T32290]  bpf_prog_load+0x7d4/0x1530
[ 1755.665330][T32290]  ? map_freeze+0x390/0x390
[ 1755.669833][T32290]  ? __might_fault+0xa6/0x120
[ 1755.674510][T32290]  ? __might_fault+0xa6/0x120
[ 1755.679193][T32290]  ? __might_fault+0xc2/0x120
[ 1755.684220][T32290]  ? __might_fault+0xa6/0x120
[ 1755.688894][T32290]  ? bpf_lsm_bpf+0x5/0x10
[ 1755.693223][T32290]  ? security_bpf+0x7a/0xa0
[ 1755.697728][T32290]  __sys_bpf+0x5b8/0x780
[ 1755.701972][T32290]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1755.707358][T32290]  ? lock_chain_count+0x20/0x20
[ 1755.712220][T32290]  __x64_sys_bpf+0x78/0x90
[ 1755.716635][T32290]  do_syscall_64+0x4c/0xa0
[ 1755.721054][T32290]  ? clear_bhb_loop+0x60/0xb0
[ 1755.725746][T32290]  ? clear_bhb_loop+0x60/0xb0
[ 1755.730424][T32290]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1755.736320][T32290] RIP: 0033:0x7f357a59e159
[ 1755.740731][T32290] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1755.760425][T32290] RSP: 002b:00007f357b454028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1755.768843][T32290] RAX: ffffffffffffffda RBX: 00007f357a825fa0 RCX: 00007f357a59e159
[ 1755.776817][T32290] RDX: 0000000000000094 RSI: 0000200000001400 RDI: 0000000000000005
[ 1755.784790][T32290] RBP: 00007f357b454090 R08: 0000000000000000 R09: 0000000000000000
[ 1755.792757][T32290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1755.800763][T32290] R13: 00007f357a826038 R14: 00007f357a825fa0 R15: 00007ffd06f96918
[ 1755.808749][T32290]  </TASK>
[ 1755.915476][T32294] netlink: 3291 bytes leftover after parsing attributes in process `syz.1.8709'.
[ 1756.649981][T32290] syz.2.8707: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz2,mems_allowed=0-1
[ 1756.778175][T32290] CPU: 0 PID: 32290 Comm: syz.2.8707 Not tainted syzkaller #0
[ 1756.785819][T32290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1756.795929][T32290] Call Trace:
[ 1756.799250][T32290]  <TASK>
[ 1756.802232][T32290]  dump_stack_lvl+0x188/0x24e
[ 1756.806990][T32290]  ? cpuset_print_current_mems_allowed+0x1b/0x360
[ 1756.813460][T32290]  ? show_regs_print_info+0x12/0x12
[ 1756.818712][T32290]  ? load_image+0x410/0x410
[ 1756.823278][T32290]  ? cpuset_print_current_mems_allowed+0x1b/0x360
[ 1756.829749][T32290]  ? cpuset_print_current_mems_allowed+0x2e3/0x360
[ 1756.836307][T32290]  warn_alloc+0x242/0x330
[ 1756.840694][T32290]  ? __get_vm_area_node+0x122/0x330
[ 1756.845983][T32290]  ? zone_watermark_ok_safe+0x270/0x270
[ 1756.851582][T32290]  ? rcu_is_watching+0x11/0xa0
[ 1756.856419][T32290]  ? __get_vm_area_node+0x318/0x330
[ 1756.861697][T32290]  __vmalloc_node_range+0x37c/0x1380
[ 1756.867055][T32290]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 1756.873152][T32290]  ? aa_get_newest_label+0xf9/0x5b0
[ 1756.878399][T32290]  ? free_vm_area+0x50/0x50
[ 1756.882959][T32290]  ? end_current_label_crit_section+0x170/0x170
[ 1756.889265][T32290]  ? bpf_prog_alloc_no_stats+0x37/0x3a0
[ 1756.894847][T32290]  __vmalloc+0x76/0x80
[ 1756.898948][T32290]  ? bpf_prog_alloc_no_stats+0x37/0x3a0
[ 1756.904531][T32290]  bpf_prog_alloc_no_stats+0x37/0x3a0
[ 1756.909932][T32290]  ? bpf_prog_alloc+0x13/0x1b0
[ 1756.914728][T32290]  bpf_prog_alloc+0x1c/0x1b0
[ 1756.919349][T32290]  bpf_prog_load+0x7d4/0x1530
[ 1756.924072][T32290]  ? map_freeze+0x390/0x390
[ 1756.928601][T32290]  ? __might_fault+0xa6/0x120
[ 1756.933326][T32290]  ? __might_fault+0xa6/0x120
[ 1756.938021][T32290]  ? __might_fault+0xc2/0x120
[ 1756.942714][T32290]  ? __might_fault+0xa6/0x120
[ 1756.947413][T32290]  ? bpf_lsm_bpf+0x5/0x10
[ 1756.951757][T32290]  ? security_bpf+0x7a/0xa0
[ 1756.956294][T32290]  __sys_bpf+0x5b8/0x780
[ 1756.960568][T32290]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1756.966011][T32290]  ? lock_chain_count+0x20/0x20
[ 1756.970904][T32290]  __x64_sys_bpf+0x78/0x90
[ 1756.975348][T32290]  do_syscall_64+0x4c/0xa0
[ 1756.979787][T32290]  ? clear_bhb_loop+0x60/0xb0
[ 1756.984480][T32290]  ? clear_bhb_loop+0x60/0xb0
[ 1756.989182][T32290]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1756.995097][T32290] RIP: 0033:0x7f357a59e159
[ 1756.999702][T32290] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1757.019326][T32290] RSP: 002b:00007f357b454028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1757.027847][T32290] RAX: ffffffffffffffda RBX: 00007f357a825fa0 RCX: 00007f357a59e159
[ 1757.035897][T32290] RDX: 0000000000000094 RSI: 0000200000001400 RDI: 0000000000000005
[ 1757.043908][T32290] RBP: 00007f357b454090 R08: 0000000000000000 R09: 0000000000000000
[ 1757.051914][T32290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1757.059900][T32290] R13: 00007f357a826038 R14: 00007f357a825fa0 R15: 00007ffd06f96918
[ 1757.067926][T32290]  </TASK>
[ 1757.518322][T32290] Mem-Info:
[ 1757.521695][T32290] active_anon:8400 inactive_anon:0 isolated_anon:0
[ 1757.521695][T32290]  active_file:21838 inactive_file:40613 isolated_file:0
[ 1757.521695][T32290]  unevictable:768 dirty:118 writeback:0
[ 1757.521695][T32290]  slab_reclaimable:21491 slab_unreclaimable:99216
[ 1757.521695][T32290]  mapped:31163 shmem:1361 pagetables:698
[ 1757.521695][T32290]  sec_pagetables:0 bounce:0
[ 1757.521695][T32290]  kernel_misc_reclaimable:0
[ 1757.521695][T32290]  free:1310942 free_pcp:6625 free_cma:0
[ 1757.968420][T32290] Node 0 active_anon:33512kB inactive_anon:0kB active_file:87352kB inactive_file:162248kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:128848kB dirty:472kB writeback:0kB shmem:3908kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11228kB pagetables:2704kB sec_pagetables:0kB all_unreclaimable? no
[ 1758.036901][T32290] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[ 1758.108999][T32290] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1758.154139][T32290] lowmem_reserve[]: 0 2527 2528 2528 2528
[ 1758.160898][T32290] Node 0 DMA32 free:1331648kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:33312kB inactive_anon:0kB active_file:87352kB inactive_file:162248kB unevictable:1536kB writepending:472kB present:3129332kB managed:2592908kB mlocked:0kB bounce:0kB free_pcp:9520kB local_pcp:2284kB free_cma:0kB
[ 1758.200841][T32290] lowmem_reserve[]: 0 0 1 1 1
[ 1758.205632][T32290] Node 0 Normal free:16kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB
[ 1758.236146][T32290] lowmem_reserve[]: 0 0 0 0 0
[ 1758.241358][T32290] Node 1 Normal free:3896272kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:18436kB local_pcp:5844kB free_cma:0kB
[ 1758.281368][T32290] lowmem_reserve[]: 0 0 0 0 0
[ 1758.286290][T32290] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 1758.318993][T32290] Node 0 DMA32: 1803*4kB (UME) 2529*8kB (UME) 2447*16kB (UME) 1163*32kB (UME) 881*64kB (UME) 690*128kB (UME) 312*256kB (UM) 115*512kB (UM) 34*1024kB (UM) 12*2048kB (UME) 216*4096kB (UM) = 1331396kB
[ 1758.361868][T32328] netlink: 'syz.0.8715': attribute type 29 has an invalid length.
[ 1758.374378][T32290] Node 0 Normal: 2*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB
[ 1758.393111][T32290] Node 1 Normal: 254*4kB (UME) 55*8kB (UME) 40*16kB (UME) 35*32kB (UME) 19*64kB (UME) 7*128kB (UME) 3*256kB (UE) 2*512kB (UM) 2*1024kB (UE) 2*2048kB (UE) 948*4096kB (M) = 3896272kB
[ 1758.416030][T32290] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1758.427032][T32290] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1758.440640][T32290] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1758.451399][T32290] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1758.464142][T32290] 63812 total pagecache pages
[ 1758.469530][T32290] 0 pages in swap cache
[ 1758.473954][T32290] Free swap  = 124996kB
[ 1758.481311][T32290] Total swap = 124996kB
[ 1758.485726][T32290] 2097051 pages RAM
[ 1758.490256][T32290] 0 pages HighMem/MovableOnly
[ 1758.495086][T32290] 415223 pages reserved
[ 1758.505557][T32290] 0 pages cma reserved
[ 1758.894649][T32328] netlink: 'syz.0.8715': attribute type 29 has an invalid length.
[ 1758.907273][T32334] netlink: 'syz.2.8717': attribute type 3 has an invalid length.
[ 1759.304901][T32353] FAULT_INJECTION: forcing a failure.
[ 1759.304901][T32353] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1759.378050][T32353] CPU: 0 PID: 32353 Comm: syz.0.8724 Not tainted syzkaller #0
[ 1759.385571][T32353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1759.395910][T32353] Call Trace:
[ 1759.399207][T32353]  <TASK>
[ 1759.402157][T32353]  dump_stack_lvl+0x188/0x24e
[ 1759.406883][T32353]  ? show_regs_print_info+0x12/0x12
[ 1759.412118][T32353]  ? load_image+0x410/0x410
[ 1759.416658][T32353]  ? __lock_acquire+0x7c40/0x7c40
[ 1759.421722][T32353]  should_fail_ex+0x390/0x4c0
[ 1759.426458][T32353]  _copy_from_user+0x2c/0x170
[ 1759.431165][T32353]  iovec_from_user+0x143/0x360
[ 1759.436047][T32353]  __import_iovec+0x6c/0x510
[ 1759.440683][T32353]  import_iovec+0x6f/0xa0
[ 1759.445041][T32353]  ___sys_sendmsg+0x252/0x360
[ 1759.449751][T32353]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1759.454572][T32353]  ? __lock_acquire+0x7c40/0x7c40
[ 1759.459654][T32353]  __se_sys_sendmsg+0x1c3/0x2b0
[ 1759.464547][T32353]  ? __x64_sys_sendmsg+0x80/0x80
[ 1759.469535][T32353]  ? lockdep_hardirqs_on+0x94/0x140
[ 1759.474782][T32353]  do_syscall_64+0x4c/0xa0
[ 1759.479230][T32353]  ? clear_bhb_loop+0x60/0xb0
[ 1759.482648][T32345] device syzkaller0 entered promiscuous mode
[ 1759.483952][T32353]  ? clear_bhb_loop+0x60/0xb0
[ 1759.483985][T32353]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1759.484011][T32353] RIP: 0033:0x7f6b3719e159
[ 1759.484031][T32353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1759.484049][T32353] RSP: 002b:00007f6b380b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1759.533143][T32353] RAX: ffffffffffffffda RBX: 00007f6b37425fa0 RCX: 00007f6b3719e159
[ 1759.541399][T32353] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003
[ 1759.549409][T32353] RBP: 00007f6b380b7090 R08: 0000000000000000 R09: 0000000000000000
[ 1759.557408][T32353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1759.565401][T32353] R13: 00007f6b37426038 R14: 00007f6b37425fa0 R15: 00007fff560025f8
[ 1759.573413][T32353]  </TASK>
[ 1759.664006][T32355] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.8719'.
[ 1759.894302][T23333] Bluetooth: hci2: ISO packet for unknown connection handle 1854
[ 1762.223889][T32355] netlink: 6955 bytes leftover after parsing attributes in process `syz.4.8719'.
[ 1763.670463][T32390] netlink: 'syz.4.8734': attribute type 3 has an invalid length.
[ 1764.802182][T32405] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.8741'.
[ 1765.803917][T32438] netlink: 'syz.2.8751': attribute type 3 has an invalid length.
[ 1765.812308][T32438] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8751'.
[ 1766.731587][T32450] netlink: 'syz.1.8755': attribute type 21 has an invalid length.
[ 1766.801243][T32450] netlink: 'syz.1.8755': attribute type 21 has an invalid length.
[ 1767.480321][T32472] netlink: 'syz.1.8759': attribute type 2 has an invalid length.
[ 1768.281471][T32472] device 0 entered promiscuous mode
[ 1773.076465][T32534] __sock_release: fasync list not empty!
[ 1773.105189][T32540] syz.1.8776[32540] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1773.105343][T32540] syz.1.8776[32540] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1773.136407][T32537] netlink: 279 bytes leftover after parsing attributes in process `syz.4.8774'.
[ 1773.255741][T32542] netlink: 279 bytes leftover after parsing attributes in process `syz.4.8774'.
[ 1773.397839][T32549] netlink: 'syz.1.8780': attribute type 27 has an invalid length.
[ 1773.480839][T32549] netlink: 'syz.1.8780': attribute type 25 has an invalid length.
[ 1773.821903][T32569] netlink: 180 bytes leftover after parsing attributes in process `syz.4.8784'.
[ 1774.480673][T32590] netlink: 'syz.4.8793': attribute type 6 has an invalid length.
[ 1774.525370][T32590] netlink: 164 bytes leftover after parsing attributes in process `syz.4.8793'.
[ 1774.968715][T32610] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app
[ 1775.069039][T23541] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1776.602428][T32639] ¥: port 1(team0) entered blocking state
[ 1776.636041][T32639] ¥: port 1(team0) entered disabled state
[ 1776.666367][T32639] device team0 entered promiscuous mode
[ 1776.710406][T32639] device team_slave_0 entered promiscuous mode
[ 1776.738603][T32639] device team_slave_1 entered promiscuous mode
[ 1776.765234][T32639] device wlan1 entered promiscuous mode
[ 1776.802349][T32645] device team0 left promiscuous mode
[ 1776.813526][T32645] device team_slave_0 left promiscuous mode
[ 1776.827004][T32645] device team_slave_1 left promiscuous mode
[ 1776.834544][T32645] device wlan1 left promiscuous mode
[ 1776.843711][T32645] ¥: port 1(team0) entered disabled state
[ 1777.073109][T32657] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app
[ 1778.302621][T12706] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1778.314088][T12706] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1778.322336][T12706] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1778.335223][T12706] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1778.352951][T12706] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1778.360368][T12706] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1778.487403][T32689] FAULT_INJECTION: forcing a failure.
[ 1778.487403][T32689] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1778.521609][T32691] device netdevsim0 entered promiscuous mode
[ 1778.528893][T32689] CPU: 0 PID: 32689 Comm: syz.2.8823 Not tainted syzkaller #0
[ 1778.536396][T32689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1778.546488][T32689] Call Trace:
[ 1778.549831][T32689]  <TASK>
[ 1778.552881][T32689]  dump_stack_lvl+0x188/0x24e
[ 1778.557680][T32689]  ? show_regs_print_info+0x12/0x12
[ 1778.563038][T32689]  ? load_image+0x410/0x410
[ 1778.567568][T32689]  ? __lock_acquire+0x7c40/0x7c40
[ 1778.572619][T32689]  ? __might_sleep+0xd0/0xd0
[ 1778.577234][T32689]  should_fail_ex+0x390/0x4c0
[ 1778.581954][T32689]  _copy_from_user+0x2c/0x170
[ 1778.586658][T32689]  generic_map_update_batch+0x48d/0x7f0
[ 1778.592240][T32689]  ? rcu_read_unlock+0xa0/0xa0
[ 1778.597037][T32689]  ? __fdget+0x17c/0x200
[ 1778.601308][T32689]  ? rcu_read_unlock+0xa0/0xa0
[ 1778.606097][T32689]  bpf_map_do_batch+0x475/0x5f0
[ 1778.610970][T32689]  ? bpf_lsm_xfrm_state_pol_flow_match+0x10/0x10
[ 1778.617330][T32689]  __sys_bpf+0x6f7/0x780
[ 1778.621596][T32689]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1778.626993][T32689]  ? lock_chain_count+0x20/0x20
[ 1778.631866][T32689]  __x64_sys_bpf+0x78/0x90
[ 1778.636297][T32689]  do_syscall_64+0x4c/0xa0
[ 1778.640725][T32689]  ? clear_bhb_loop+0x60/0xb0
[ 1778.645415][T32689]  ? clear_bhb_loop+0x60/0xb0
[ 1778.650107][T32689]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1778.656021][T32689] RIP: 0033:0x7f357a59e159
[ 1778.660442][T32689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1778.680143][T32689] RSP: 002b:00007f357b454028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1778.688570][T32689] RAX: ffffffffffffffda RBX: 00007f357a825fa0 RCX: 00007f357a59e159
[ 1778.696574][T32689] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a
[ 1778.704550][T32689] RBP: 00007f357b454090 R08: 0000000000000000 R09: 0000000000000000
[ 1778.712542][T32689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1778.720521][T32689] R13: 00007f357a826038 R14: 00007f357a825fa0 R15: 00007ffd06f96918
[ 1778.728536][T32689]  </TASK>
[ 1778.828028][T32706] netlink: 148 bytes leftover after parsing attributes in process `syz.1.8826'.
[ 1778.869017][T32704] netlink: 'syz.4.8825': attribute type 4 has an invalid length.
[ 1778.877274][T32704] netlink: 'syz.4.8825': attribute type 1 has an invalid length.
[ 1778.885431][T32704] netlink: 'syz.4.8825': attribute type 26 has an invalid length.
[ 1778.893646][T32704] netlink: 60519 bytes leftover after parsing attributes in process `syz.4.8825'.
[ 1779.097448][T32686] chnl_net:caif_netlink_parms(): no params data found
[ 1779.154957][T32710] device syzkaller0 entered promiscuous mode
[ 1779.167778][T32719] netlink: 'syz.4.8829': attribute type 3 has an invalid length.
[ 1779.182128][T32720] netlink: 'syz.4.8829': attribute type 3 has an invalid length.
[ 1779.190447][T32719] netlink: 'syz.4.8829': attribute type 1 has an invalid length.
[ 1779.200364][T32720] netlink: 'syz.4.8829': attribute type 1 has an invalid length.
[ 1779.208479][T32719] netlink: 198452 bytes leftover after parsing attributes in process `syz.4.8829'.
[ 1779.220611][T32720] netlink: 198452 bytes leftover after parsing attributes in process `syz.4.8829'.
[ 1780.442694][T23333] Bluetooth: hci4: command 0x0409 tx timeout
[ 1781.194362][T17400] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1781.214412][T32724] netlink: 'syz.1.8830': attribute type 10 has an invalid length.
[ 1781.234389][T32730] netlink: 'syz.4.8832': attribute type 10 has an invalid length.
[ 1781.277608][T32732] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8833'.
[ 1781.371331][T17400] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1781.577779][T32686] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1781.594040][T32686] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1781.626477][T32686] device bridge_slave_0 entered promiscuous mode
[ 1781.757392][T17400] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1781.795956][T32686] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1781.815833][T32686] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1781.833401][T32686] device bridge_slave_1 entered promiscuous mode
[ 1781.859288][T32756] netlink: 'syz.4.8842': attribute type 21 has an invalid length.
[ 1781.887721][T32756] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8842'.
[ 1781.964823][T17400] bond0: (slave netdevsim0): Releasing backup interface
[ 1781.987728][T17400] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1782.077644][T32686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1782.136764][T32686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1782.205687][T32764] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.8844'.
[ 1782.246608][T32686] team0: Port device team_slave_0 added
[ 1782.263004][T32686] team0: Port device team_slave_1 added
[ 1782.326420][T32686] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1782.333777][T32686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1782.361474][T32686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1782.409403][T32686] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1782.419428][T32686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1782.486022][T32686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1782.508339][T23333] Bluetooth: hci4: command 0x041b tx timeout
[ 1782.705770][  T308] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.8848'.
[ 1782.706776][T32686] device hsr_slave_0 entered promiscuous mode
[ 1782.728534][T32686] device hsr_slave_1 entered promiscuous mode
[ 1782.885937][T17400] device 0 left promiscuous mode
[ 1783.061680][T17400] tipc: Left network mode
[ 1783.069953][  T320] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.8851'.
[ 1783.846436][  T338] netlink: 'syz.4.8853': attribute type 11 has an invalid length.
[ 1783.881476][  T338] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.8853'.
[ 1783.937933][  T335] device syzkaller0 entered promiscuous mode
[ 1784.406984][  T337] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1784.608455][T23333] Bluetooth: hci4: command 0x040f tx timeout
[ 1786.680240][T23333] Bluetooth: hci4: command 0x0419 tx timeout
[ 1788.055626][  T360] mac80211_hwsim hwsim80 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1788.568711][  T366] validate_nla: 3 callbacks suppressed
[ 1788.568733][  T366] netlink: 'syz.1.8857': attribute type 39 has an invalid length.
[ 1788.571585][  T379] netlink: 'syz.4.8861': attribute type 9 has an invalid length.
[ 1788.720353][  T379] netlink: 165648 bytes leftover after parsing attributes in process `syz.4.8861'.
[ 1788.782504][  T376] netlink: 'syz.2.8860': attribute type 1 has an invalid length.
[ 1788.809069][  T376] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.8860'.
[ 1788.926770][T32686] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1789.045870][T32686] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1789.076582][T32686] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1789.123394][T32686] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1789.764585][T17400] team0: Port device wlan1 removed
[ 1789.808363][  T403] netlink: 64929 bytes leftover after parsing attributes in process `syz.4.8866'.
[ 1790.072675][T32686] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1790.109320][T23537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1790.137607][T23537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1790.163697][T32686] 8021q: adding VLAN 0 to HW filter on device team0
[ 1790.232951][T23536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1790.252909][T23536] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1790.288352][T23536] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1790.295623][T23536] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1790.336150][T17400] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1790.344484][T17400] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1790.353016][T17400] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1790.361099][T17400] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1790.618215][  T430] netlink: 'syz.0.8874': attribute type 29 has an invalid length.
[ 1790.660860][T17400] batman_adv: batadv0: Interface deactivated: virt_wifi0
[ 1790.676275][T17400] batman_adv: batadv0: Removing interface: virt_wifi0
[ 1790.692128][T17400] device bridge_slave_1 left promiscuous mode
[ 1790.701960][T17400] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1790.714068][  T434] netlink: 'syz.1.8875': attribute type 29 has an invalid length.
[ 1790.725821][T17400] device bridge_slave_0 left promiscuous mode
[ 1790.735516][T17400] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1790.766804][T17400] device veth1_macvtap left promiscuous mode
[ 1790.777785][T17400] device veth0_macvtap left promiscuous mode
[ 1790.838325][T23519] wlan1: Trigger new scan to find an IBSS to join
[ 1791.500731][T17400] team0 (unregistering): Port device team_slave_1 removed
[ 1791.544342][T17400] team0 (unregistering): Port device team_slave_0 removed
[ 1791.586588][T17400] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1791.630009][T17400] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1791.719915][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[ 1791.726238][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[ 1791.918680][T17400] bond0 (unregistering): Released all slaves
[ 1792.009523][T23536] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1792.017940][T23536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1792.028801][T23536] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1792.037630][T23536] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1792.044897][T23536] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1792.058398][  T430] netlink: 'syz.0.8874': attribute type 29 has an invalid length.
[ 1792.069636][  T434] netlink: 'syz.1.8875': attribute type 29 has an invalid length.
[ 1792.134985][T23519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1792.182372][T23536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1792.202776][T23536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1792.260707][T23536] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1792.306286][T23536] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1792.340168][T23536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1792.376297][T23536] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1792.406352][T23536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1792.436593][T23536] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1792.463268][  T447] netlink: 'syz.1.8878': attribute type 4 has an invalid length.
[ 1792.473462][  T447] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8878'.
[ 1792.500762][T23536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1792.521575][T23536] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1792.544272][T32686] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1793.749731][  T473] netlink: 'syz.4.8884': attribute type 10 has an invalid length.
[ 1793.880826][ T4872] wlan1: Trigger new scan to find an IBSS to join
[ 1794.104567][T23537] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1794.141203][T23537] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1794.184661][T32686] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1794.298433][T23537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1794.321449][T23537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1794.395022][T23537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1794.415862][T23537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1794.470066][T23537] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1794.478253][T23537] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1794.489856][T32686] device veth0_vlan entered promiscuous mode
[ 1794.513611][T32686] device veth1_vlan entered promiscuous mode
[ 1794.569640][T12285] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1794.626441][T12285] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1794.639424][T12285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1794.657210][T12285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1794.671924][  T489] netlink: 'syz.2.8888': attribute type 29 has an invalid length.
[ 1794.693055][  T489] netlink: 'syz.2.8888': attribute type 29 has an invalid length.
[ 1794.736142][T32686] device veth0_macvtap entered promiscuous mode
[ 1794.749819][  T489] netlink: 'syz.2.8888': attribute type 29 has an invalid length.
[ 1794.780852][T32686] device veth1_macvtap entered promiscuous mode
[ 1794.836304][T32686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1794.870012][T32686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1794.897506][T32686] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1794.916664][T12285] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1794.931191][T12285] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1794.947909][T12285] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1794.972381][T12285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1795.007431][T32686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1795.030120][T32686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1795.061661][T32686] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1795.077646][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1795.106978][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1795.158718][T32686] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1795.198929][T32686] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1795.207691][T32686] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1795.274127][T32686] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1795.579859][ T4872] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1795.639889][ T4872] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1795.687683][T12285] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1795.741471][T12285] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1795.765001][T12285] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1795.891273][T23537] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1796.420228][  T540] netlink: 'syz.3.8900': attribute type 29 has an invalid length.
[ 1796.472354][  T540] netlink: 'syz.3.8900': attribute type 29 has an invalid length.
[ 1796.512235][  T544] netlink: 'syz.3.8900': attribute type 29 has an invalid length.
[ 1796.831794][T17400] wlan1: Creating new IBSS network, BSSID fa:3f:42:e1:b9:10
[ 1796.895374][  T562] FAULT_INJECTION: forcing a failure.
[ 1796.895374][  T562] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1797.018479][  T562] CPU: 0 PID: 562 Comm: syz.2.8906 Not tainted syzkaller #0
[ 1797.025827][  T562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1797.035914][  T562] Call Trace:
[ 1797.039242][  T562]  <TASK>
[ 1797.042193][  T562]  dump_stack_lvl+0x188/0x24e
[ 1797.046924][  T562]  ? show_regs_print_info+0x12/0x12
[ 1797.052157][  T562]  ? load_image+0x410/0x410
[ 1797.056684][  T562]  ? __might_fault+0xa6/0x120
[ 1797.061481][  T562]  should_fail_ex+0x390/0x4c0
[ 1797.066192][  T562]  copyin+0x1b/0x120
[ 1797.070118][  T562]  _copy_from_iter+0x447/0x1130
[ 1797.075000][  T562]  ? copyout_mc+0x110/0x110
[ 1797.079620][  T562]  ? verify_lock_unused+0x140/0x140
[ 1797.084857][  T562]  ? __check_object_size+0x86/0xa70
[ 1797.090086][  T562]  ? ping_common_sendmsg+0x93/0x2a0
[ 1797.095398][  T562]  ping_common_sendmsg+0xb8/0x2a0
[ 1797.100452][  T562]  ping_v6_sendmsg+0x1f9/0x1170
[ 1797.105343][  T562]  ? ping_v6_pre_connect+0x30/0x30
[ 1797.110481][  T562]  ? ct_irq_exit_irqson+0x113/0x170
[ 1797.115708][  T562]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 1797.121725][  T562]  ? lock_chain_count+0x20/0x20
[ 1797.126605][  T562]  ? __local_bh_enable_ip+0x136/0x1c0
[ 1797.132000][  T562]  ? lockdep_hardirqs_on+0x94/0x140
[ 1797.137216][  T562]  ? _local_bh_enable+0xa0/0xa0
[ 1797.142080][  T562]  ? do_raw_spin_unlock+0x11d/0x230
[ 1797.147286][  T562]  ? inet_sendmsg+0x109/0x2a0
[ 1797.151964][  T562]  ? inet_sendmsg+0x109/0x2a0
[ 1797.156640][  T562]  ? inet_send_prepare+0x250/0x250
[ 1797.161745][  T562]  ____sys_sendmsg+0x5ed/0x9a0
[ 1797.166522][  T562]  ? __sys_sendmsg_sock+0x30/0x30
[ 1797.171575][  T562]  ? __import_iovec+0x306/0x510
[ 1797.176435][  T562]  ? import_iovec+0x6f/0xa0
[ 1797.180941][  T562]  ___sys_sendmsg+0x2a2/0x360
[ 1797.185624][  T562]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1797.190404][  T562]  ? __lock_acquire+0x7c40/0x7c40
[ 1797.195449][  T562]  __se_sys_sendmsg+0x1c3/0x2b0
[ 1797.200305][  T562]  ? __x64_sys_sendmsg+0x80/0x80
[ 1797.205258][  T562]  ? lockdep_hardirqs_on+0x94/0x140
[ 1797.210462][  T562]  do_syscall_64+0x4c/0xa0
[ 1797.214884][  T562]  ? clear_bhb_loop+0x60/0xb0
[ 1797.219564][  T562]  ? clear_bhb_loop+0x60/0xb0
[ 1797.224242][  T562]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1797.230226][  T562] RIP: 0033:0x7f357a59e159
[ 1797.234640][  T562] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1797.254241][  T562] RSP: 002b:00007f357b454028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1797.263116][  T562] RAX: ffffffffffffffda RBX: 00007f357a825fa0 RCX: 00007f357a59e159
[ 1797.271092][  T562] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003
[ 1797.279069][  T562] RBP: 00007f357b454090 R08: 0000000000000000 R09: 0000000000000000
[ 1797.287124][  T562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1797.295091][  T562] R13: 00007f357a826038 R14: 00007f357a825fa0 R15: 00007ffd06f96918
[ 1797.303070][  T562]  </TASK>
[ 1797.719062][  T578] netlink: 'syz.3.8914': attribute type 15 has an invalid length.
[ 1797.761268][  T578] netlink: 'syz.3.8914': attribute type 7 has an invalid length.
[ 1797.795445][  T578] netlink: 52 bytes leftover after parsing attributes in process `syz.3.8914'.
[ 1797.827512][  T581] netlink: 26 bytes leftover after parsing attributes in process `syz.1.8913'.
[ 1798.791729][  T629] FAULT_INJECTION: forcing a failure.
[ 1798.791729][  T629] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1798.850801][  T629] CPU: 0 PID: 629 Comm: syz.3.8927 Not tainted syzkaller #0
[ 1798.858155][  T629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1798.868240][  T629] Call Trace:
[ 1798.871537][  T629]  <TASK>
[ 1798.874488][  T629]  dump_stack_lvl+0x188/0x24e
[ 1798.879215][  T629]  ? show_regs_print_info+0x12/0x12
[ 1798.884462][  T629]  ? load_image+0x410/0x410
[ 1798.888997][  T629]  ? __lock_acquire+0x7c40/0x7c40
[ 1798.894065][  T629]  should_fail_ex+0x390/0x4c0
[ 1798.898780][  T629]  _copy_from_user+0x2c/0x170
[ 1798.903478][  T629]  __sys_bpf+0x2ea/0x780
[ 1798.907756][  T629]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1798.913166][  T629]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1798.919363][  T629]  __x64_sys_bpf+0x78/0x90
[ 1798.923808][  T629]  do_syscall_64+0x4c/0xa0
[ 1798.928251][  T629]  ? clear_bhb_loop+0x60/0xb0
[ 1798.932965][  T629]  ? clear_bhb_loop+0x60/0xb0
[ 1798.937675][  T629]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1798.943601][  T629] RIP: 0033:0x7fa997d9e159
[ 1798.948121][  T629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1798.967753][  T629] RSP: 002b:00007fa998c33028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1798.976197][  T629] RAX: ffffffffffffffda RBX: 00007fa998025fa0 RCX: 00007fa997d9e159
[ 1798.984197][  T629] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[ 1798.992196][  T629] RBP: 00007fa998c33090 R08: 0000000000000000 R09: 0000000000000000
[ 1799.000191][  T629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1799.008193][  T629] R13: 00007fa998026038 R14: 00007fa998025fa0 R15: 00007ffeb3601748
[ 1799.016209][  T629]  </TASK>
[ 1801.619579][  T634] netlink: 'syz.1.8928': attribute type 10 has an invalid length.
[ 1801.652354][  T650] netlink: 'syz.3.8929': attribute type 29 has an invalid length.
[ 1801.676943][  T634] team0: Port device macvlan0 added
[ 1801.701483][  T638] netlink: 'syz.1.8928': attribute type 10 has an invalid length.
[ 1802.188025][  T650] netlink: 'syz.3.8929': attribute type 29 has an invalid length.
[ 1802.218679][  T651] netlink: 'syz.3.8929': attribute type 29 has an invalid length.
[ 1802.306259][  T669] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.8933'.
[ 1803.911827][  T702] FAULT_INJECTION: forcing a failure.
[ 1803.911827][  T702] name failslab, interval 1, probability 0, space 0, times 0
[ 1803.943954][  T702] CPU: 0 PID: 702 Comm: syz.0.8944 Not tainted syzkaller #0
[ 1803.951410][  T702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1803.961559][  T702] Call Trace:
[ 1803.964887][  T702]  <TASK>
[ 1803.967860][  T702]  dump_stack_lvl+0x188/0x24e
[ 1803.972615][  T702]  ? show_regs_print_info+0x12/0x12
[ 1803.977887][  T702]  ? load_image+0x410/0x410
[ 1803.982457][  T702]  ? __might_sleep+0xd0/0xd0
[ 1803.987108][  T702]  ? __lock_acquire+0x7c40/0x7c40
[ 1803.992207][  T702]  should_fail_ex+0x390/0x4c0
[ 1803.996961][  T702]  should_failslab+0x5/0x20
[ 1804.001511][  T702]  slab_pre_alloc_hook+0x59/0x300
[ 1804.006604][  T702]  ? sk_prot_alloc+0xe7/0x210
[ 1804.011333][  T702]  __kmem_cache_alloc_node+0x4f/0x270
[ 1804.016765][  T702]  ? sk_prot_alloc+0xe7/0x210
[ 1804.021565][  T702]  __kmalloc+0xa3/0x240
[ 1804.025774][  T702]  sk_prot_alloc+0xe7/0x210
[ 1804.030309][  T702]  ? sk_alloc+0x20/0x330
[ 1804.034675][  T702]  sk_alloc+0x36/0x330
[ 1804.038853][  T702]  ? bpf_ctx_init+0x154/0x190
[ 1804.043561][  T702]  bpf_prog_test_run_skb+0x36d/0x18e0
[ 1804.048974][  T702]  ? __fget_files+0x28/0x460
[ 1804.053602][  T702]  ? __fget_files+0x3fc/0x460
[ 1804.058335][  T702]  ? cpu_online+0xa0/0xa0
[ 1804.062690][  T702]  bpf_prog_test_run+0x31c/0x390
[ 1804.067659][  T702]  __sys_bpf+0x62b/0x780
[ 1804.071935][  T702]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1804.077460][  T702]  ? lock_chain_count+0x20/0x20
[ 1804.082369][  T702]  __x64_sys_bpf+0x78/0x90
[ 1804.086814][  T702]  do_syscall_64+0x4c/0xa0
[ 1804.091251][  T702]  ? clear_bhb_loop+0x60/0xb0
[ 1804.095960][  T702]  ? clear_bhb_loop+0x60/0xb0
[ 1804.100668][  T702]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1804.106581][  T702] RIP: 0033:0x7f6b3719e159
[ 1804.111013][  T702] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1804.130734][  T702] RSP: 002b:00007f6b380b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1804.139171][  T702] RAX: ffffffffffffffda RBX: 00007f6b37425fa0 RCX: 00007f6b3719e159
[ 1804.147160][  T702] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a
[ 1804.155148][  T702] RBP: 00007f6b380b7090 R08: 0000000000000000 R09: 0000000000000000
[ 1804.163308][  T702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1804.171296][  T702] R13: 00007f6b37426038 R14: 00007f6b37425fa0 R15: 00007fff560025f8
[ 1804.179329][  T702]  </TASK>
[ 1806.964457][  T710] netlink: 'syz.2.8943': attribute type 39 has an invalid length.
[ 1806.981620][  T722] tun0: tun_chr_ioctl cmd 1074812118
[ 1806.987607][  T723] tun0: tun_chr_ioctl cmd 1074812118
[ 1807.069697][T12285] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1807.482139][  T737] netlink: 164 bytes leftover after parsing attributes in process `syz.2.8952'.
[ 1807.527971][  T740] netlink: 164 bytes leftover after parsing attributes in process `syz.2.8952'.
[ 1807.556766][  T737] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app
[ 1808.502404][  T749] netlink: 'syz.1.8953': attribute type 2 has an invalid length.
[ 1808.636512][  T749] device 1 entered promiscuous mode
[ 1809.802584][  T768] netlink: 188 bytes leftover after parsing attributes in process `syz.3.8957'.
[ 1810.296392][T12706] Bluetooth: hci2: unexpected event 0x12 length: 15 > 8
[ 1811.265837][  T822] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[ 1811.471627][  T822] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1811.610440][  T838] netlink: 76 bytes leftover after parsing attributes in process `syz.1.8987'.
[ 1811.724883][  T840] FAULT_INJECTION: forcing a failure.
[ 1811.724883][  T840] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1811.756145][  T846] netlink: 164 bytes leftover after parsing attributes in process `syz.0.8990'.
[ 1811.787391][  T840] CPU: 1 PID: 840 Comm: syz.3.8988 Not tainted syzkaller #0
[ 1811.794737][  T840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1811.804812][  T840] Call Trace:
[ 1811.808128][  T840]  <TASK>
[ 1811.811070][  T840]  dump_stack_lvl+0x188/0x24e
[ 1811.815976][  T840]  ? show_regs_print_info+0x12/0x12
[ 1811.821311][  T840]  ? load_image+0x410/0x410
[ 1811.825826][  T840]  ? __lock_acquire+0x7c40/0x7c40
[ 1811.830873][  T840]  ? __might_sleep+0xd0/0xd0
[ 1811.835480][  T840]  should_fail_ex+0x390/0x4c0
[ 1811.840192][  T840]  _copy_from_user+0x2c/0x170
[ 1811.844972][  T840]  generic_map_update_batch+0x4dc/0x7f0
[ 1811.850544][  T840]  ? rcu_read_unlock+0xa0/0xa0
[ 1811.855320][  T840]  ? __fdget+0x17c/0x200
[ 1811.859615][  T840]  ? rcu_read_unlock+0xa0/0xa0
[ 1811.864397][  T840]  bpf_map_do_batch+0x475/0x5f0
[ 1811.869265][  T840]  ? bpf_lsm_xfrm_state_pol_flow_match+0x10/0x10
[ 1811.875607][  T840]  __sys_bpf+0x6f7/0x780
[ 1811.879867][  T840]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1811.885281][  T840]  ? lock_chain_count+0x20/0x20
[ 1811.890157][  T840]  __x64_sys_bpf+0x78/0x90
[ 1811.894613][  T840]  do_syscall_64+0x4c/0xa0
[ 1811.899139][  T840]  ? clear_bhb_loop+0x60/0xb0
[ 1811.903917][  T840]  ? clear_bhb_loop+0x60/0xb0
[ 1811.908611][  T840]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1811.914521][  T840] RIP: 0033:0x7fa997d9e159
[ 1811.918968][  T840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1811.938592][  T840] RSP: 002b:00007fa998c33028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1811.947017][  T840] RAX: ffffffffffffffda RBX: 00007fa998025fa0 RCX: 00007fa997d9e159
[ 1811.955000][  T840] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a
[ 1811.962976][  T840] RBP: 00007fa998c33090 R08: 0000000000000000 R09: 0000000000000000
[ 1811.971127][  T840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1811.979100][  T840] R13: 00007fa998026038 R14: 00007fa998025fa0 R15: 00007ffeb3601748
[ 1811.987097][  T840]  </TASK>
[ 1812.006973][  T852] netlink: 164 bytes leftover after parsing attributes in process `syz.0.8990'.
[ 1812.058191][  T846] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app
[ 1812.302613][  T861] netlink: 'syz.1.9003': attribute type 8 has an invalid length.
[ 1812.311175][  T861] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.9003'.
[ 1812.325957][  T861] netlink: 58351 bytes leftover after parsing attributes in process `syz.1.9003'.
[ 1812.537854][  T869] netlink: 144 bytes leftover after parsing attributes in process `syz.3.8995'.
[ 1813.042784][  T894] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9002'.
[ 1813.076351][  T900] netlink: 'syz.4.9005': attribute type 2 has an invalid length.
[ 1813.097658][  T900] netlink: 193088 bytes leftover after parsing attributes in process `syz.4.9005'.
[ 1813.136323][  T910] netlink: 'syz.4.9005': attribute type 2 has an invalid length.
[ 1813.149594][  T910] netlink: 193088 bytes leftover after parsing attributes in process `syz.4.9005'.
[ 1813.172134][  T891] netlink: 'syz.2.9001': attribute type 10 has an invalid length.
[ 1813.195671][  T909] netlink: 'syz.4.9005': attribute type 2 has an invalid length.
[ 1813.208324][  T903] netlink: 164 bytes leftover after parsing attributes in process `syz.1.9006'.
[ 1813.208376][  T909] netlink: 193088 bytes leftover after parsing attributes in process `syz.4.9005'.
[ 1813.260360][  T913] netlink: 164 bytes leftover after parsing attributes in process `syz.1.9006'.
[ 1813.307523][  T903] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app
[ 1814.356873][  T941] netlink: 'syz.3.9015': attribute type 2 has an invalid length.
[ 1814.366606][  T941] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.9015'.
[ 1814.437800][  T951] netlink: 'syz.4.9020': attribute type 1 has an invalid length.
[ 1814.452499][  T951] netlink: 5 bytes leftover after parsing attributes in process `syz.4.9020'.
[ 1814.501011][  T953] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.9019'.
[ 1814.855591][  T962] netlink: 'syz.0.9022': attribute type 39 has an invalid length.
[ 1815.498566][  T985] openvswitch: netlink: Flow key attr not present in new flow.
[ 1815.530831][  T985] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4
[ 1815.794416][ T1001] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[ 1815.975550][ T1005] device syzkaller0 entered promiscuous mode
[ 1816.393151][ T1020] netlink: 'syz.3.9044': attribute type 21 has an invalid length.
[ 1816.509816][T23333] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1816.522732][T23333] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1816.531118][ T4275] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1816.541673][T23333] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1816.549588][T23333] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1816.557550][T23333] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1816.572649][ T1027] mac80211_hwsim hwsim67 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1816.583146][T17400] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00
[ 1816.592913][T17400] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00
[ 1816.711265][T12285] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1816.862842][T12285] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1818.598319][T23333] Bluetooth: hci0: command 0x0409 tx timeout
[ 1818.908508][T23537] wlan1: Trigger new scan to find an IBSS to join
[ 1819.856552][ T1047] __nla_validate_parse: 5 callbacks suppressed
[ 1819.856569][ T1047] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.9052'.
[ 1819.936933][ T1070] netlink: 164 bytes leftover after parsing attributes in process `syz.2.9056'.
[ 1819.965698][T12285] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1820.113455][T12285] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1820.191749][ T1026] chnl_net:caif_netlink_parms(): no params data found
[ 1820.437774][ T1091] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app
[ 1820.662159][ T1087] netlink: 164 bytes leftover after parsing attributes in process `syz.1.9062'.
[ 1820.668555][T23333] Bluetooth: hci0: command 0x041b tx timeout
[ 1820.682595][ T1089] netlink: 164 bytes leftover after parsing attributes in process `syz.1.9062'.
[ 1820.818297][ T1026] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1820.825482][ T1026] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1820.891704][ T1026] device bridge_slave_0 entered promiscuous mode
[ 1820.988034][ T1099] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.9065'.
[ 1821.006579][ T1102] netlink: 184 bytes leftover after parsing attributes in process `syz.1.9066'.
[ 1821.044507][T12706] Bluetooth: hci3: unexpected subevent 0x05 length: 150 > 12
[ 1821.083893][ T1026] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1821.092216][ T1026] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1821.101027][ T1026] device bridge_slave_1 entered promiscuous mode
[ 1821.192477][ T1026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1821.206210][ T1026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1821.335379][ T1026] team0: Port device team_slave_0 added
[ 1821.360157][ T1026] team0: Port device team_slave_1 added
[ 1821.589309][ T1026] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1821.596301][ T1026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1821.705936][ T1026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1821.741200][ T1122] netlink: 'syz.1.9073': attribute type 4 has an invalid length.
[ 1821.759742][ T1122] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9073'.
[ 1821.868598][T23527] wlan1: Trigger new scan to find an IBSS to join
[ 1821.910092][ T1139] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app
[ 1822.075787][ T1026] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1822.100086][ T1026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1822.142488][ T1026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1822.154718][ T1133] netlink: 164 bytes leftover after parsing attributes in process `syz.3.9075'.
[ 1822.185737][ T1137] netlink: 164 bytes leftover after parsing attributes in process `syz.3.9075'.
[ 1822.402164][ T1157] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.9079'.
[ 1822.417162][ T1026] device hsr_slave_0 entered promiscuous mode
[ 1822.750993][T12706] Bluetooth: hci0: command 0x040f tx timeout
[ 1822.765440][ T1026] device hsr_slave_1 entered promiscuous mode
[ 1822.782316][ T1026] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1822.790970][ T1026] Cannot create hsr debugfs directory
[ 1823.026752][ T1157] debugfs: Directory '.!
!5‚Á7>7H
€' with parent 'ieee80211' already present!
[ 1823.070453][T12706] Bluetooth: hci3: command 0x201b tx timeout
[ 1823.709881][ T1187] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app
[ 1824.627288][T12285] device hsr_slave_0 left promiscuous mode
[ 1824.637601][T12285] device hsr_slave_1 left promiscuous mode
[ 1824.830639][T23333] Bluetooth: hci0: command 0x0419 tx timeout
[ 1824.837362][T12285] device veth1_macvtap left promiscuous mode
[ 1824.854142][T12285] device veth0_macvtap left promiscuous mode
[ 1824.875639][T12285] device veth0_vlan left promiscuous mode
[ 1824.908835][T23527] wlan1: Trigger new scan to find an IBSS to join
[ 1825.273755][ T1247] netlink: 'syz.0.9106': attribute type 29 has an invalid length.
[ 1825.413511][T12285] team0 (unregistering): Port device geneve1 removed
[ 1825.808640][T23527] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00
[ 1825.929920][T12285] team0 (unregistering): Port device team_slave_1 removed
[ 1825.971069][T12285] team0 (unregistering): Port device team_slave_0 removed
[ 1826.321340][ T1235] __nla_validate_parse: 3 callbacks suppressed
[ 1826.321357][ T1235] netlink: 164 bytes leftover after parsing attributes in process `syz.1.9103'.
[ 1826.336852][ T1238] netlink: 164 bytes leftover after parsing attributes in process `syz.1.9103'.
[ 1826.349462][ T1247] netlink: 'syz.0.9106': attribute type 29 has an invalid length.
[ 1826.395163][ T1026] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1826.446314][ T1026] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1826.503892][ T1026] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1826.536415][ T1026] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1826.616911][ T1264] netlink: 'syz.0.9110': attribute type 10 has an invalid length.
[ 1827.135035][ T1264] team0: Device gre0 is of different type
[ 1827.793901][ T1277] netlink: 'syz.1.9113': attribute type 15 has an invalid length.
[ 1827.818290][ T1277] netlink: 'syz.1.9113': attribute type 7 has an invalid length.
[ 1827.888922][ T1277] netlink: 52 bytes leftover after parsing attributes in process `syz.1.9113'.
[ 1828.130410][ T1026] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1828.177664][T23527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1828.236685][T23527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1828.272278][ T1026] 8021q: adding VLAN 0 to HW filter on device team0
[ 1828.345386][T23519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1828.369760][T23519] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1828.411806][T23519] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1828.419019][T23519] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1828.446022][T23519] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1828.489611][ T1306] netlink: 164 bytes leftover after parsing attributes in process `syz.1.9119'.
[ 1828.516693][ T1310] netlink: 164 bytes leftover after parsing attributes in process `syz.1.9119'.
[ 1828.565261][T23519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1828.579273][T23519] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1828.606871][T23519] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1828.614046][T23519] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1828.650172][T23519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1828.723632][T23519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1828.734698][T23519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1828.744665][T23519] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1828.753417][T23519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1828.762843][T23519] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1828.772069][T23519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1828.785397][T23519] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1828.794183][T23519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1828.814599][T23519] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1828.840460][T23519] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1828.880295][ T1026] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1829.469788][T23519] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1829.596049][T23519] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1829.605717][T23519] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1829.631707][ T1026] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1830.908805][ T1359] netlink: 164 bytes leftover after parsing attributes in process `syz.3.9130'.
[ 1830.953968][ T1361] netlink: 164 bytes leftover after parsing attributes in process `syz.3.9130'.
[ 1831.108704][ T1385] netlink: 'syz.1.9134': attribute type 29 has an invalid length.
[ 1831.163309][ T1385] netlink: 'syz.1.9134': attribute type 29 has an invalid length.
[ 1831.182074][ T1386] netlink: 'syz.1.9134': attribute type 29 has an invalid length.
[ 1831.709360][T12285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1831.736067][T12285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1831.765643][T12285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1831.779345][T12285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1831.803590][ T1026] device veth0_vlan entered promiscuous mode
[ 1831.816686][T12285] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1831.827195][T12285] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1831.856659][ T1026] device veth1_vlan entered promiscuous mode
[ 1831.956930][T23519] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1831.971466][T23519] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1831.992559][T23519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1832.005390][T23519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1832.035810][ T1026] device veth0_macvtap entered promiscuous mode
[ 1832.073335][ T1026] device veth1_macvtap entered promiscuous mode
[ 1832.182920][ T1026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1832.212703][ T1026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1832.249256][ T1026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1832.320768][ T1026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1832.352417][ T1026] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1832.380288][T23519] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1832.390458][T23519] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1832.405043][T23519] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1832.415100][T23519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1832.427029][ T1026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1832.453902][ T1026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1832.463991][ T1026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1832.478375][ T1026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1832.493038][ T1026] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1832.505985][ T1413] netlink: 'syz.0.9144': attribute type 13 has an invalid length.
[ 1832.520569][ T1413] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9144'.
[ 1832.531927][T23519] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1832.543807][T23519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1832.573501][ T1026] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1832.586847][ T1026] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1832.601411][ T1026] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1832.611680][ T1026] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1834.250338][ T1417] netlink: 164 bytes leftover after parsing attributes in process `syz.0.9145'.
[ 1834.288943][ T1418] netlink: 164 bytes leftover after parsing attributes in process `syz.0.9145'.
[ 1834.481323][T23527] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1834.521288][T23527] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1834.565755][T23527] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1834.626205][T23519] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1834.644875][T23519] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1834.679744][T23519] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1835.703086][ T1462] netlink: 164 bytes leftover after parsing attributes in process `syz.4.9157'.
[ 1835.772483][ T1466] netlink: 164 bytes leftover after parsing attributes in process `syz.4.9157'.
[ 1835.946703][T23333] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1835.957412][T23333] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1835.962992][T23536] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1835.977107][T23333] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1835.986806][T23333] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1835.994635][T23333] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1836.002372][T23333] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1837.493987][T23536] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1837.630142][T23536] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1837.713954][ T1503] FAULT_INJECTION: forcing a failure.
[ 1837.713954][ T1503] name failslab, interval 1, probability 0, space 0, times 0
[ 1837.727497][ T1503] CPU: 0 PID: 1503 Comm: syz.0.9170 Not tainted syzkaller #0
[ 1837.734907][ T1503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1837.745015][ T1503] Call Trace:
[ 1837.748318][ T1503]  <TASK>
[ 1837.751272][ T1503]  dump_stack_lvl+0x188/0x24e
[ 1837.755997][ T1503]  ? show_regs_print_info+0x12/0x12
[ 1837.761335][ T1503]  ? load_image+0x410/0x410
[ 1837.765872][ T1503]  ? __lock_acquire+0x7c40/0x7c40
[ 1837.770933][ T1503]  should_fail_ex+0x390/0x4c0
[ 1837.775642][ T1503]  should_failslab+0x5/0x20
[ 1837.780166][ T1503]  slab_pre_alloc_hook+0x59/0x300
[ 1837.785568][ T1503]  ? security_sk_alloc+0x47/0x130
[ 1837.790670][ T1503]  __kmem_cache_alloc_node+0x4f/0x270
[ 1837.796078][ T1503]  ? security_sk_alloc+0x47/0x130
[ 1837.801142][ T1503]  __kmalloc+0xa3/0x240
[ 1837.805334][ T1503]  ? sk_prot_alloc+0xe7/0x210
[ 1837.810049][ T1503]  security_sk_alloc+0x47/0x130
[ 1837.814933][ T1503]  sk_prot_alloc+0x101/0x210
[ 1837.819820][ T1503]  ? sk_alloc+0x20/0x330
[ 1837.824105][ T1503]  sk_alloc+0x36/0x330
[ 1837.828212][ T1503]  ? bpf_ctx_init+0x154/0x190
[ 1837.832915][ T1503]  bpf_prog_test_run_skb+0x36d/0x18e0
[ 1837.838332][ T1503]  ? __fget_files+0x28/0x460
[ 1837.842930][ T1503]  ? __fget_files+0x3fc/0x460
[ 1837.847616][ T1503]  ? cpu_online+0xa0/0xa0
[ 1837.851944][ T1503]  bpf_prog_test_run+0x31c/0x390
[ 1837.856889][ T1503]  __sys_bpf+0x62b/0x780
[ 1837.861223][ T1503]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1837.866611][ T1503]  ? lock_chain_count+0x20/0x20
[ 1837.871472][ T1503]  __x64_sys_bpf+0x78/0x90
[ 1837.875895][ T1503]  do_syscall_64+0x4c/0xa0
[ 1837.880315][ T1503]  ? clear_bhb_loop+0x60/0xb0
[ 1837.885126][ T1503]  ? clear_bhb_loop+0x60/0xb0
[ 1837.889916][ T1503]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1837.895832][ T1503] RIP: 0033:0x7f6b3719e159
[ 1837.900253][ T1503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1837.919954][ T1503] RSP: 002b:00007f6b380b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1837.928379][ T1503] RAX: ffffffffffffffda RBX: 00007f6b37425fa0 RCX: 00007f6b3719e159
[ 1837.936350][ T1503] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a
[ 1837.944321][ T1503] RBP: 00007f6b380b7090 R08: 0000000000000000 R09: 0000000000000000
[ 1837.952288][ T1503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1837.960250][ T1503] R13: 00007f6b37426038 R14: 00007f6b37425fa0 R15: 00007fff560025f8
[ 1837.968232][ T1503]  </TASK>
[ 1838.040162][T23536] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1838.044652][T12706] Bluetooth: hci3: command 0x0409 tx timeout
[ 1838.153041][ T1468] chnl_net:caif_netlink_parms(): no params data found
[ 1838.487676][ T1468] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1838.504125][ T1468] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1838.521553][ T1468] device bridge_slave_0 entered promiscuous mode
[ 1838.581824][ T1468] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1838.612776][ T1468] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1838.635534][ T1468] device bridge_slave_1 entered promiscuous mode
[ 1838.713083][ T1506] netlink: 164 bytes leftover after parsing attributes in process `syz.1.9171'.
[ 1838.818241][ T1508] netlink: 164 bytes leftover after parsing attributes in process `syz.1.9171'.
[ 1838.855816][ T1468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1838.887707][ T1522] netlink: 'syz.0.9173': attribute type 21 has an invalid length.
[ 1838.948406][ T1522] netlink: 'syz.0.9173': attribute type 1 has an invalid length.
[ 1838.962236][ T1468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1839.043753][ T1468] team0: Port device team_slave_0 added
[ 1839.078497][ T1468] team0: Port device team_slave_1 added
[ 1839.139699][ T1468] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1839.161535][ T1468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1839.242727][ T1468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1839.283715][ T1468] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1839.303623][ T1468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1839.371647][ T1468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1839.495123][ T1468] device hsr_slave_0 entered promiscuous mode
[ 1839.546401][ T1468] device hsr_slave_1 entered promiscuous mode
[ 1839.613920][ T1468] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1839.627328][ T1468] Cannot create hsr debugfs directory
[ 1839.703414][ T1536] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9174'.
[ 1839.856729][ T1538] netlink: 164 bytes leftover after parsing attributes in process `syz.0.9175'.
[ 1839.869735][ T1536] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9174'.
[ 1839.891721][ T1535] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9174'.
[ 1839.923875][ T1545] netlink: 164 bytes leftover after parsing attributes in process `syz.0.9175'.
[ 1840.004227][ T1544] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9174'.
[ 1840.034882][ T1540] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9174'.
[ 1840.058034][ T1542] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9174'.
[ 1840.110003][T12706] Bluetooth: hci3: command 0x041b tx timeout
[ 1840.506616][ T1561] netlink: 'syz.4.9179': attribute type 10 has an invalid length.
[ 1841.161780][ T1574] netlink: 'syz.3.9183': attribute type 27 has an invalid length.
[ 1841.430484][ T1574] bond0: (slave bond_slave_0): Releasing backup interface
[ 1842.188781][T23333] Bluetooth: hci3: command 0x040f tx timeout
[ 1843.041731][ T1598] netlink: 'syz.0.9191': attribute type 21 has an invalid length.
[ 1843.112782][ T1598] netlink: 'syz.0.9191': attribute type 7 has an invalid length.
[ 1843.827915][ T1468] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1843.878507][ T1468] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1843.954435][ T1468] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1844.064853][ T1468] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1844.111253][ T1634] __nla_validate_parse: 2 callbacks suppressed
[ 1844.111291][ T1634] netlink: 164 bytes leftover after parsing attributes in process `syz.3.9197'.
[ 1844.246690][ T1641] netlink: 164 bytes leftover after parsing attributes in process `syz.3.9197'.
[ 1844.269256][T23333] Bluetooth: hci3: command 0x0419 tx timeout
[ 1844.717788][T23333] Bluetooth: hci1: unexpected event 0x12 length: 15 > 8
[ 1844.851980][ T1648] netlink: 'syz.4.9199': attribute type 27 has an invalid length.
[ 1845.010617][ T1648] bond0: (slave bond_slave_0): Releasing backup interface
[ 1845.528683][ T1468] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1845.665894][T23536] device bridge_slave_1 left promiscuous mode
[ 1845.673241][T23536] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1845.691182][T23536] device bridge_slave_0 left promiscuous mode
[ 1845.697393][T23536] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1845.774572][T23536] device veth0_macvtap left promiscuous mode
[ 1846.640223][T23536] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1846.691958][T23536] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1846.937909][T23536] bond0 (unregistering): Released all slaves
[ 1847.029183][ T1468] 8021q: adding VLAN 0 to HW filter on device team0
[ 1847.042114][ T1683] netlink: 'syz.1.9209': attribute type 21 has an invalid length.
[ 1847.050207][ T1683] netlink: 156 bytes leftover after parsing attributes in process `syz.1.9209'.
[ 1847.067287][ T1627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1847.104185][ T1627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1847.115975][ T1689] netlink: 164 bytes leftover after parsing attributes in process `syz.0.9211'.
[ 1847.129966][ T1690] netlink: 164 bytes leftover after parsing attributes in process `syz.0.9211'.
[ 1847.243034][T23527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1847.282622][T23527] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1847.336918][T23527] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1847.344133][T23527] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1847.436538][T23527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1847.493748][T23527] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1847.534069][T23527] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1847.541324][T23527] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1847.556884][ T1707] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app
[ 1847.614713][T23527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1847.653564][T23527] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1847.670983][ T1702] netlink: 188 bytes leftover after parsing attributes in process `syz.0.9215'.
[ 1847.697787][ T1627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1847.753250][T23527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1847.828322][T23527] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1847.847335][ T1468] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1847.940122][ T1468] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1847.954573][ T1719] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.9219'.
[ 1848.000715][T23527] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1848.030063][T23527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1848.050633][T23527] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1848.099755][T23527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1848.120009][T23527] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1848.140234][T23527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1848.164175][T23527] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1848.206827][T23527] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1848.614143][ T1737] device syzkaller0 entered promiscuous mode
[ 1848.644706][ T1740] netlink: 164 bytes leftover after parsing attributes in process `syz.0.9224'.
[ 1848.665729][ T1745] netlink: 164 bytes leftover after parsing attributes in process `syz.0.9224'.
[ 1851.006284][ T1753] netlink: 'syz.0.9227': attribute type 10 has an invalid length.
[ 1851.057722][ T1770] netlink: 'syz.4.9231': attribute type 10 has an invalid length.
[ 1851.186045][ T1628] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1851.204035][ T1628] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1851.265361][ T1468] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1851.358368][ T1778] syzkaller0: create flow: hash 1268364415 index 1
[ 1851.393709][ T1778] netlink: 128 bytes leftover after parsing attributes in process `syz.3.9233'.
[ 1851.426342][ T1778] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[ 1851.449111][ T1778] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1851.464165][ T1790] FAULT_INJECTION: forcing a failure.
[ 1851.464165][ T1790] name failslab, interval 1, probability 0, space 0, times 0
[ 1851.483348][ T1790] CPU: 0 PID: 1790 Comm: syz.4.9236 Not tainted syzkaller #0
[ 1851.490848][ T1790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1851.500910][ T1790] Call Trace:
[ 1851.504224][ T1790]  <TASK>
[ 1851.507156][ T1790]  dump_stack_lvl+0x188/0x24e
[ 1851.511934][ T1790]  ? show_regs_print_info+0x12/0x12
[ 1851.517161][ T1790]  ? load_image+0x410/0x410
[ 1851.521677][ T1790]  ? __might_sleep+0xd0/0xd0
[ 1851.526267][ T1790]  ? __lock_acquire+0x7c40/0x7c40
[ 1851.531319][ T1790]  should_fail_ex+0x390/0x4c0
[ 1851.536005][ T1790]  should_failslab+0x5/0x20
[ 1851.540509][ T1790]  slab_pre_alloc_hook+0x59/0x300
[ 1851.545559][ T1790]  ? mas_next_entry+0xde9/0xe90
[ 1851.550419][ T1790]  kmem_cache_alloc+0x56/0x2f0
[ 1851.555185][ T1790]  ? vm_area_dup+0x23/0x1a0
[ 1851.559693][ T1790]  vm_area_dup+0x23/0x1a0
[ 1851.564024][ T1790]  copy_mm+0xb13/0x1680
[ 1851.568193][ T1790]  ? copy_signal+0x640/0x640
[ 1851.572781][ T1790]  ? lockdep_init_map_type+0x98/0x8d0
[ 1851.578263][ T1790]  ? __init_rwsem+0x11e/0x160
[ 1851.582942][ T1790]  ? copy_signal+0x51f/0x640
[ 1851.587544][ T1790]  copy_process+0x1952/0x4070
[ 1851.592236][ T1790]  ? copy_process+0x974/0x4070
[ 1851.597027][ T1790]  ? idle_dummy+0x10/0x10
[ 1851.601567][ T1790]  kernel_clone+0x24b/0x900
[ 1851.606071][ T1790]  ? ksys_write+0x1ce/0x260
[ 1851.610580][ T1790]  ? create_io_thread+0x170/0x170
[ 1851.615619][ T1790]  __x64_sys_clone+0x1a7/0x220
[ 1851.620377][ T1790]  ? __fget_files+0x3fc/0x460
[ 1851.625055][ T1790]  ? __ia32_sys_vfork+0x140/0x140
[ 1851.630108][ T1790]  ? lock_chain_count+0x20/0x20
[ 1851.634968][ T1790]  ? lockdep_hardirqs_on+0x94/0x140
[ 1851.640182][ T1790]  do_syscall_64+0x4c/0xa0
[ 1851.644605][ T1790]  ? clear_bhb_loop+0x60/0xb0
[ 1851.649285][ T1790]  ? clear_bhb_loop+0x60/0xb0
[ 1851.654050][ T1790]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1851.659972][ T1790] RIP: 0033:0x7f40e639e159
[ 1851.664393][ T1790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1851.684008][ T1790] RSP: 002b:00007f40e71cdfd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[ 1851.692598][ T1790] RAX: ffffffffffffffda RBX: 00007f40e6625fa0 RCX: 00007f40e639e159
[ 1851.700569][ T1790] RDX: 0000200000001000 RSI: 0000000000000000 RDI: 0000000001001000
[ 1851.708545][ T1790] RBP: 00007f40e71ce090 R08: 0000000000000000 R09: 0000000000000000
[ 1851.716596][ T1790] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002
[ 1851.724563][ T1790] R13: 00007f40e6626038 R14: 00007f40e6625fa0 R15: 00007ffe03168888
[ 1851.732634][ T1790]  </TASK>
[ 1851.747383][T23619] syzkaller0: tun_net_xmit 76
[ 1851.759567][T23619] syzkaller0: tun_net_xmit 48
[ 1851.778354][ T4316] syzkaller0: tun_net_xmit 76
[ 1851.801278][ T1627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1851.818498][ T1451] syzkaller0: tun_net_xmit 76
[ 1851.824425][ T1627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1851.839605][ T1793] netlink: 164 bytes leftover after parsing attributes in process `syz.1.9237'.
[ 1851.863281][ T1777] syzkaller0: delete flow: hash 1268364415 index 1
[ 1853.152819][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[ 1853.159733][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[ 1854.156082][ T1792] netlink: 164 bytes leftover after parsing attributes in process `syz.1.9237'.
[ 1854.191793][ T1801] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.9239'.
[ 1854.218918][T23537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1854.236739][T23537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1854.262480][T23537] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1854.296003][T23537] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1854.320234][ T1809] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9242'.
[ 1854.330280][ T1809] tc_dump_action: action bad kind
[ 1854.348542][ T1468] device veth0_vlan entered promiscuous mode
[ 1854.399692][ T1468] device veth1_vlan entered promiscuous mode
[ 1854.534890][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1854.568657][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1854.592842][ T1468] device veth0_macvtap entered promiscuous mode
[ 1854.723435][ T1468] device veth1_macvtap entered promiscuous mode
[ 1854.726349][ T1828] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.9249'.
[ 1854.792075][ T1468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1854.818875][ T1468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1854.830254][ T1468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1854.863181][ T1468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1854.873283][ T1468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1854.883980][ T1468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1854.901388][ T1468] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1854.963328][ T1468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1854.978808][ T1468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1854.999040][ T1468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1855.009999][ T1468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1855.020141][ T1468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1855.041529][ T1468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1855.061335][ T1468] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1855.082008][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1855.095727][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1855.104476][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1855.120291][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1855.134520][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1855.144379][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1855.241690][ T1468] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1855.268617][ T1468] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1855.277365][ T1468] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1855.326813][ T1468] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1855.415821][ T1838] netlink: 164 bytes leftover after parsing attributes in process `syz.1.9253'.
[ 1856.139507][ T1839] netlink: 164 bytes leftover after parsing attributes in process `syz.1.9253'.
[ 1856.173433][ T1851] mac80211_hwsim hwsim77 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1856.183553][ T1627] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00
[ 1856.220019][ T1627] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00
[ 1856.236745][T23527] ------------[ cut here ]------------
[ 1856.242836][T23527] WARNING: CPU: 0 PID: 23527 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x419/0x4a0
[ 1856.252947][T23527] Modules linked in:
[ 1856.256862][T23527] CPU: 0 PID: 23527 Comm: kworker/u4:14 Not tainted syzkaller #0
[ 1856.264669][T23527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1856.274786][T23527] Workqueue: cfg80211 cfg80211_event_work
[ 1856.280611][T23527] RIP: 0010:__cfg80211_ibss_joined+0x419/0x4a0
[ 1856.286796][T23527] Code: 04 25 28 00 00 00 48 3b 44 24 60 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 10 d0 e9 f7 0f 0b eb bf e8 07 d0 e9 f7 <0f> 0b eb b6 e8 fe cf e9 f7 0f 0b e9 82 fd ff ff e8 f2 cf e9 f7 0f
[ 1856.306470][T23527] RSP: 0018:ffffc90003b07ac0 EFLAGS: 00010293
[ 1856.312607][T23527] RAX: ffffffff89987189 RBX: 1ffff92000760f5c RCX: ffff888030303c00
[ 1856.320672][T23527] RDX: 0000000000000000 RSI: ffffffff8a8c18a0 RDI: ffffffff8adf6420
[ 1856.328709][T23527] RBP: ffffc90003b07b70 R08: ffffffff90b132af R09: 1ffffffff2162655
[ 1856.336707][T23527] R10: dffffc0000000000 R11: fffffbfff2162656 R12: ffff88807dbb35f8
[ 1856.344763][T23527] R13: dffffc0000000000 R14: 000000000000001f R15: ffff8880265e8c90
[ 1856.352777][T23527] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[ 1856.361769][T23527] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1856.368403][T23527] CR2: 00007f2e75df81cc CR3: 000000002e872000 CR4: 00000000003506f0
[ 1856.376396][T23527] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1856.384442][T23527] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[ 1856.392553][T23527] Call Trace:
[ 1856.395847][T23527]  <TASK>
[ 1856.398824][T23527]  ? trace_rdev_return_void+0x240/0x240
[ 1856.404407][T23527]  cfg80211_process_wdev_events+0x359/0x4d0
[ 1856.410404][T23527]  ? process_one_work+0x7b4/0x1160
[ 1856.415557][T23527]  cfg80211_process_rdev_events+0x9d/0x110
[ 1856.421550][T23527]  cfg80211_event_work+0x2b/0x40
[ 1856.426539][T23527]  process_one_work+0x8ab/0x1160
[ 1856.431591][T23527]  ? worker_detach_from_pool+0x240/0x240
[ 1856.437256][T23527]  ? _raw_spin_lock_irq+0x86/0xf0
[ 1856.442380][T23527]  ? _raw_spin_lock_irq+0xb7/0xf0
[ 1856.447435][T23527]  ? _raw_spin_lock_irqsave+0x100/0x100
[ 1856.453092][T23527]  ? wq_worker_running+0x97/0x190
[ 1856.458279][T23527]  worker_thread+0xaf5/0x12a0
[ 1856.463004][T23527]  kthread+0x29d/0x330
[ 1856.467079][T23527]  ? worker_clr_flags+0x1a0/0x1a0
[ 1856.472191][T23527]  ? kthread_blkcg+0xd0/0xd0
[ 1856.476814][T23527]  ret_from_fork+0x1f/0x30
[ 1856.481352][T23527]  </TASK>
[ 1856.484410][T23527] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1856.491699][T23527] CPU: 0 PID: 23527 Comm: kworker/u4:14 Not tainted syzkaller #0
[ 1856.499430][T23527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1856.509480][T23527] Workqueue: cfg80211 cfg80211_event_work
[ 1856.515223][T23527] Call Trace:
[ 1856.518765][T23527]  <TASK>
[ 1856.521688][T23527]  dump_stack_lvl+0x188/0x24e
[ 1856.526365][T23527]  ? memcpy+0x3c/0x60
[ 1856.530354][T23527]  ? show_regs_print_info+0x12/0x12
[ 1856.535561][T23527]  ? load_image+0x410/0x410
[ 1856.540071][T23527]  panic+0x2d3/0x710
[ 1856.543975][T23527]  ? bpf_jit_dump+0xd0/0xd0
[ 1856.548483][T23527]  ? ret_from_fork+0x1f/0x30
[ 1856.553084][T23527]  __warn+0x2f8/0x4f0
[ 1856.557064][T23527]  ? __cfg80211_ibss_joined+0x419/0x4a0
[ 1856.562609][T23527]  ? __cfg80211_ibss_joined+0x419/0x4a0
[ 1856.568242][T23527]  report_bug+0x2ba/0x4f0
[ 1856.572642][T23527]  ? __cfg80211_ibss_joined+0x419/0x4a0
[ 1856.578185][T23527]  handle_bug+0x3a/0x70
[ 1856.582342][T23527]  exc_invalid_op+0x16/0x40
[ 1856.586844][T23527]  asm_exc_invalid_op+0x16/0x20
[ 1856.591691][T23527] RIP: 0010:__cfg80211_ibss_joined+0x419/0x4a0
[ 1856.597851][T23527] Code: 04 25 28 00 00 00 48 3b 44 24 60 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 10 d0 e9 f7 0f 0b eb bf e8 07 d0 e9 f7 <0f> 0b eb b6 e8 fe cf e9 f7 0f 0b e9 82 fd ff ff e8 f2 cf e9 f7 0f
[ 1856.617461][T23527] RSP: 0018:ffffc90003b07ac0 EFLAGS: 00010293
[ 1856.623532][T23527] RAX: ffffffff89987189 RBX: 1ffff92000760f5c RCX: ffff888030303c00
[ 1856.631498][T23527] RDX: 0000000000000000 RSI: ffffffff8a8c18a0 RDI: ffffffff8adf6420
[ 1856.639480][T23527] RBP: ffffc90003b07b70 R08: ffffffff90b132af R09: 1ffffffff2162655
[ 1856.647451][T23527] R10: dffffc0000000000 R11: fffffbfff2162656 R12: ffff88807dbb35f8
[ 1856.655419][T23527] R13: dffffc0000000000 R14: 000000000000001f R15: ffff8880265e8c90
[ 1856.663390][T23527]  ? __cfg80211_ibss_joined+0x419/0x4a0
[ 1856.669123][T23527]  ? trace_rdev_return_void+0x240/0x240
[ 1856.674689][T23527]  cfg80211_process_wdev_events+0x359/0x4d0
[ 1856.680668][T23527]  ? process_one_work+0x7b4/0x1160
[ 1856.686037][T23527]  cfg80211_process_rdev_events+0x9d/0x110
[ 1856.691837][T23527]  cfg80211_event_work+0x2b/0x40
[ 1856.696806][T23527]  process_one_work+0x8ab/0x1160
[ 1856.701755][T23527]  ? worker_detach_from_pool+0x240/0x240
[ 1856.707384][T23527]  ? _raw_spin_lock_irq+0x86/0xf0
[ 1856.712407][T23527]  ? _raw_spin_lock_irq+0xb7/0xf0
[ 1856.717448][T23527]  ? _raw_spin_lock_irqsave+0x100/0x100
[ 1856.722997][T23527]  ? wq_worker_running+0x97/0x190
[ 1856.728026][T23527]  worker_thread+0xaf5/0x12a0
[ 1856.732809][T23527]  kthread+0x29d/0x330
[ 1856.736870][T23527]  ? worker_clr_flags+0x1a0/0x1a0
[ 1856.741975][T23527]  ? kthread_blkcg+0xd0/0xd0
[ 1856.746561][T23527]  ret_from_fork+0x1f/0x30
[ 1856.750990][T23527]  </TASK>
[ 1856.754240][T23527] Kernel Offset: disabled
[ 1856.758610][T23527] Rebooting in 86400 seconds..