last executing test programs:

8.702784106s ago: executing program 1 (id=2083):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
r1 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x20008000)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x4, 0x4, 0x12}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)
recvmsg$kcm(r1, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x2)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2006}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff00000000000000001801000020646c2500000000002020207b1ae8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000002300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3fc, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000004, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, &(0x7f00000004c0)=ANY=[@ANYBLOB="911023000000000095"], &(0x7f0000000580)='GPL\x00'}, 0x94)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r5, &(0x7f0000000180), 0x40001)

7.364088223s ago: executing program 0 (id=2089):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r1, &(0x7f0000000280), 0x9)
r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x6, 0xfffffffffffffff7}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000000)
write$cgroup_pid(r2, &(0x7f0000000c40), 0x12)
r4 = syz_clone(0xc920000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0100000004000000400000004000000041000000", @ANYBLOB="f63b23eabef2265cff6b0e88d125da8b5b5337adb6994c7e426bdffda974421253b0c4a94edc979911327ef38287fdebe11efc4a68f0bde5a780592b6b834abdbda3b6415c8c4974ac701964feae9f913802c0da3d98b152273b0c7a1d33e684f59eb9d22fab7e54a323848edd88da803d17b70bd299262de67b3915adda3b0f85135aa902f6881304df0e07ccfc39221fe2d72decf4a67fd17c9a04bccfdd50c957e17da9ac18e7b1dc6e4834d87c8eb4d7a070d030f4758b279b7a550356f2ea5789a59b1eb5d659d1000000000000", @ANYRESOCT=r4, @ANYRES64=r3, @ANYRES32=0x0, @ANYBLOB], 0x50)
r7 = openat$cgroup_subtree(r5, &(0x7f0000000140), 0x2, 0x0)
syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000100)={[{0x2b, 'pids'}]}, 0x6)
r8 = socket$kcm(0xa, 0x2, 0x88)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000d600000000000000000000008500000041000000850000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
sendmsg$inet(r8, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x2, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x16}, @multicast1}}}], 0x30}, 0x8000)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r6, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r10=>0x0}}, 0x10)
r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x1}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="8500000005000000070000000000000095000000000000005bee1ea01c7814c00980e99a5df1f0614e1942612258708ff9dfaef11bd5504710e1d85587ee4727c9802ba8f5bd83e27c5585207b4e19cee40a9cab915f98eeb1e5a448c0d934224a13ed92a919f303d06b06833168000000000000000000000000f828967cd7352bed054c35edcb5548bcc8573fa4bcd1b87b8bc4a080d48368c87caa011f9f43f44dce6f7896caa82c8cc94a6f9f01ea49effd5ddd45908a22dc23876180f09a80e42135896d93fc510cbde2b03f40dab9c5904a59c5a7a47d173f8001e59332bbea03c2b6"], &(0x7f0000000040)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, r11, 0x14, &(0x7f00000000c0)={0x0, 0x11}, 0x1, 0x10, &(0x7f0000000000), 0xa, 0x0, 0xffffffffffffffff, 0x4c}, 0x70)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x0, &(0x7f00000001c0), &(0x7f0000000200)='GPL\x00', 0xc, 0x69, &(0x7f0000000300)=""/105, 0x40f00, 0x20, '\x00', r10, 0x0, r11, 0x8, &(0x7f0000000400)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000440)={0x5, 0xb, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd4f}, 0x94)
openat$cgroup_int(r5, &(0x7f0000000080)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0)

7.213778712s ago: executing program 1 (id=2090):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="1b"], 0x20)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8922, &(0x7f0000000080))
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x8, 0x10002, 0x0, 0x1}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0xf, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1000000}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r4, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000081)
sendmsg$sock(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000640)='`', 0x1}], 0x1}, 0x408a0)
r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x20000000009, 0x64019, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7a, 0x1, @perf_config_ext={0xf4, 0x3}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r5, 0xc008240a, &(0x7f00000002c0)={0x3, 0x0, [0x0, 0x0, 0x0]})
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x5)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={&(0x7f00000000c0)="3008cd960b5055617acd28c196c49058e544c17bc5fca92763cb34a2eca7729f67b3cf4e8815fb2e5e6a904a81374ec98f3b3af815118a45a4db8cfa0f550a43eec03dcd8eb9fe5dcb1eb144396a0b461599a656", &(0x7f0000000880)=""/251, &(0x7f0000000a80)="d7a12493414f4676f698e0cccecc748bb9e172e9e8a97a20f1f8ea05eff96b6a2f0581457085f94660950e31442e31b619a52d83e26780294aec6329a3df1b9db40f535ac8013b7531c2129797f6ecfb4a5b7dd395b548158b05c18347baf05764a6a36bbd420c646cd27f0fb81f6cfe3a3cef90467b072bf9d8e33ba73fdae497f56fd46f9f8435135f303dc97d0c49b535b4d10319df061dfe77b778d18c1c4a54315c2981da046055ba38a84b5a615e3606df8ce1250780eb89dbeada6ed639957e11e67e72766f0afd0bde1b7f64c5", &(0x7f00000001c0)="27ad56e39ff88e46e3564aaba75439af8c02bc9d039609c0d0ae90fee8417b29b6a5216ef3cf088c51cb6d3d613e1daf23fb145bf230fc5e27806846439a2946f4523930f6d5835862e4dcb9", 0x9, r2}, 0x38)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[], 0x48)
r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$TUNATTACHFILTER(r7, 0x401054d5, 0x0)
socketpair(0x1d, 0x2, 0x2, &(0x7f0000000300)={0x0, 0x0})
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x894b, &(0x7f0000000040)={<r8=>0xffffffffffffffff})
close(r8)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000080)='cpu&20\t&&')
syz_clone(0xae12e400, 0x0, 0x0, 0x0, 0x0, 0x0)

5.622068774s ago: executing program 0 (id=2095):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000001380)}}, 0x10) (async)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac08294020208000200060001618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x50}, {&(0x7f0000000000)="affd014d47e231698e46e684", 0xc}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x882)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40000000000000079109000000000006200000a00000000950000086594aa00e9a9b6d219c966441748cd450a5aac76190960783a2d9a931e57b37d6ca3a33f5f65f458741158302a6c"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @flow_dissector}, 0x48) (async)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x8}, 0x6018, 0x0, 0x2, 0x6, 0x3fe, 0x7ffffffc, 0x400, 0x0, 0x0, 0x0, 0x2000000000}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0xa) (async)
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="1400000016000b63d25a80648c2594f922240685", 0x14}], 0x1}, 0x0) (async)
socket$kcm(0x29, 0x5, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
r3 = socket$kcm(0x23, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="b8", 0x1ff48}], 0x1, 0x0, 0x0, 0xeaff}, 0x0)

5.496167382s ago: executing program 1 (id=2096):
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000440), 0x4) (async)
r1 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="b00000001a007f029e78f6030f7a0a762353bfb89fd8c902317bab30f89f080aaaaeb9d8091c815dcf03e14e877733fff4fe20a5be870f576b162e7de2d02673e789a4950c9cdc206e086fd0dc8ca9afcd9d525146add31b7bc77c26d8982be29d889d1e35355848794ca3f8b38aef1e114ab9fbebe9c6609e64b1e5a3b0c81c6f8144e74fe12780ca46c1a6c04ad73c9d44b605f9000000000000000000", 0x9e}, {&(0x7f00000001c0)="68cabf2dfb58fc0af787a8ffff0200258f00", 0x12}], 0x2}, 0x0)

5.242344486s ago: executing program 1 (id=2097):
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x8, 0xb}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
r0 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000180)={r0})
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2000, 0x2, 0xfffffffe, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x1}, 0x50)
close(r1)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0)
close(r3)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1200000009000000040000000200000000000000"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4, <r5=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000140)=r3}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r5}, &(0x7f00000004c0), &(0x7f0000000400)=r3}, 0x20)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000040))
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff15, 0x10, &(0x7f0000000000), 0xf000000}, 0x48)

5.241979916s ago: executing program 0 (id=2098):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$unix(r1, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x48)
r2 = socket$kcm(0x10, 0x100000000002, 0x4)
sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x45, 0x0, 0x3, 0x4}, {}, {0x4}, {0x0, 0x0, 0x0, 0x1}, {0x6}]})

4.907483236s ago: executing program 3 (id=2100):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b9040a1d080220000000051296a1180002000000000000000e1208000f0100810401a8001600200001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async)
r1 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="0bf600004e"], 0xfe33) (async)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a115000100ff00142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r3}, 0xc)

4.839721889s ago: executing program 1 (id=2102):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xc000000, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x9, 0x7, 0x8, 0x6, 0x0, 0x6, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f00000000c0), 0x6}, 0x4100, 0x1, 0x9, 0x1, 0x8001, 0xe, 0xc8f, 0x0, 0x0, 0x0, 0x81}, 0xffffffffffffffff, 0x1, r0, 0x2)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f00000001c0)={0x1, 0x80, 0x0, 0x80, 0xc4, 0x8, 0x0, 0x60986336, 0x20004, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x2, @perf_config_ext={0x5b, 0x8}, 0x10044, 0xfffffffffffffffc, 0x7, 0x2, 0x100000000, 0x7, 0x314, 0x0, 0x3})
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x8fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30)
r2 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff})
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r2, 0x84, 0x10, &(0x7f0000000000)=r4, 0xc)
ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000240))
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xa)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
unlink(&(0x7f0000000280)='./file0\x00')
mkdirat$cgroup(r5, &(0x7f0000000040)='syz1\x00', 0x1ff)

4.82074052s ago: executing program 0 (id=2103):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x400000002, 0x0)
r3 = socket$kcm(0x2, 0x200000000000001, 0x106)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x541b, &(0x7f0000000b40))
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r5)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4072f00", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0)

4.404747505s ago: executing program 3 (id=2105):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r1=>0xffffffffffffffff]}}], 0x18}, 0x40010040)
r2 = socket$kcm(0x2c, 0x3, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000000c0)={r1, r1})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x2a, &(0x7f0000000100)=r5, 0x4)
recvmsg$unix(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002)
sendmsg$inet(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x2404c140)
write$cgroup_subtree(r4, &(0x7f0000000200)={[{0x2b, 'perf_event'}]}, 0xc)
setsockopt$sock_attach_bpf(r2, 0x11b, 0x2, &(0x7f0000000900)=r1, 0x4)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0x0, 0x35, 0x0, 0x0, 0x0, 0x10000, @value=r1}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0xe3, 0xf9, &(0x7f0000000780)="cd0dd9fa6d2e22eaca9e914bcf6c9ba9c1f3bff5718499947dfc4d336562ec4943cbbba36397ab896f27cbf7ad3f98038916462c4c2a68d5d7529879dfb47f3306e0d31605b07b134906f6e940307803e0202c33e81bd7c7cedf5e7ba92d39b186bbe1211a000f544b9e2a958af0c305af956a5d98d8eb0a3c7ae601210e8a654dd8c9731ec5a65af172299f630db01b4ac98e62265664d92a40cfd82479d784ba10c55e523ae7a539b24a5b03f6239c590f15a35e4e31ba857cfb95beb4eb4c4c44e7662ae71c52e05f5853b38a724584af5fb074f186f744cf3234f78771f1ed24a8", &(0x7f0000000940)=""/249, 0x3, 0x0, 0x3, 0x6, &(0x7f0000000140)="8d1c1e", &(0x7f0000000180)="b0c82cbd12c4", 0x2, 0x0, 0xfffffff9}, 0x50)

3.96330566s ago: executing program 3 (id=2106):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) (async)
r1 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="7e3f18a703bb1180334ef0ad18afe7020a31", 0x12}], 0x1}, 0x0) (async)
r2 = socket$kcm(0x10, 0x2, 0x4) (async)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0)
mkdirat$cgroup(r3, &(0x7f00000000c0)='syz1\x00', 0x1ff) (async)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e272f750375ed08a56331dbf9ed7a15e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800020004000000bdad446b9bbc7ace5b0dd385dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff00"/137, 0x89}], 0x1}, 0x0)
recvmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40012100) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x27, 0x36, 0x0, &(0x7f0000000540)="f8ad48cc8bd37071c8007f5b86dd1555f459d057450700e754084e74b0ccfe29ed5a6f6dc3343571d97c3c05414fd7d04f1f3779073d", 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)

3.850115307s ago: executing program 0 (id=2107):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0xa, 0x5, 0x0)
r3 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r3, 0x84, 0x78, &(0x7f0000000040), 0x4)
sendmsg$inet(r2, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0x0, @local}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0x34000}], 0x8, 0x0, 0x0, 0x2044}, 0x60)
r4 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@hci={0x1f, 0xa888, 0x4}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000040)="02042700ea0e0300000000001eaf", 0x5c8}], 0x1}, 0x40000)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000000)=@raw=[@ldst={0x0, 0x0, 0x2, 0x0, 0x6, 0xfffffffffffffff0}], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x1e00, 0x2, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4)
close(r6)
recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8100036c00fc08000000000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef)
sendmsg$kcm(r2, &(0x7f0000000400)={&(0x7f00000000c0)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000002740)=[{&(0x7f0000002780)='\f', 0x1}], 0x1}, 0x4040040)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000000000000000}, 0x104101, 0x4, 0x0, 0x3, 0x2000000, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = socket$kcm(0x2, 0x200000000000001, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0xb}, 0x109008, 0x0, 0x93c0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0)
setsockopt$sock_attach_bpf(r8, 0x1, 0x9, &(0x7f00000000c0), 0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="19000000040000000400000077f8a32400000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48)

3.761218712s ago: executing program 1 (id=2108):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={0xffffffffffffffff, &(0x7f00000014c0), &(0x7f0000000100)=""/31}, 0x20)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="d80000001000810468f70082db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x20000000)
recvmsg(r1, 0x0, 0x20)
ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0)
r2 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0)
sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000f5de6d42dc1e11cd0000dc00000000000000"], 0x18}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12}, 0x94)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0x2, 0x300)
socket$kcm(0x11, 0x200000000000002, 0x300)
socket$kcm(0x11, 0xa, 0x300)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0xa, 0x200, 0x7, 0x1}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r5, &(0x7f0000000a40)='&', &(0x7f0000000040)=""/98}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r5, &(0x7f0000000000), &(0x7f0000000040)=""/89}, 0x20)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={0x0, &(0x7f0000000300)=""/239, &(0x7f0000000400), &(0x7f0000000480), 0x3, r5}, 0x38)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000080))
write$cgroup_devices(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="1e0308004d8c71ef288563"], 0xffdd)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28)
ioctl$TUNSETVNETLE(r4, 0x400454dc, &(0x7f00000002c0)=0x1)

3.6173293s ago: executing program 3 (id=2109):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x216, 0xc, 0x7f}, 0x50)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%pB    \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r2}, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000018000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f00000002c0), &(0x7f0000000580)=r3}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000c80)="b9ff03076003008cb88680b00800", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x0, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r4=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r4, 0x1, 0x6, &(0x7f0000000040), 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffff8}, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {0x3, 0x3, 0x6}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222}, 0x78)

3.329648967s ago: executing program 0 (id=2111):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x80, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x200, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x80, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x200, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x15)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)

3.018437975s ago: executing program 3 (id=2112):
r0 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000840000000000000001"], 0x18}, 0x41)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000604"], 0x0, 0x26}, 0x20)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r1, 0x29, &(0x7f0000003fc0)}, 0x10)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x11, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09200000000000650901000000000066000000ffffff80180100002020692500000000002020207b9a00fe000000005e9100000000000037010100f8ffffffb702000008000000b70300000000000056000000060000002c93000000000000b5030000020000008500000076000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r3, 0x6, 0x6, &(0x7f0000000540), 0x4)
r4 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r4, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x10014, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x1000, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0x10, 0x400000002, 0x0)
openat$cgroup_netprio_ifpriomap(r2, &(0x7f00000003c0), 0x2, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="c00e00007200911fdabcf8b30771a54a07"], 0xfe33)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYRESOCT=r4], &(0x7f0000000000)='GPL\x00', 0x3be3}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r6, 0x27, 0x37, 0x0, &(0x7f00000002c0)="000000000000f5ffcc244f7f86dd415886a021d8606f48654a38a3356063630eb0515e2271b382de83f7e4fbffff2543f93253b49adfdd", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@fallback=r1, 0x36, 0x1, 0x1, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40)

2.655413026s ago: executing program 2 (id=2115):
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0x1, &(0x7f0000000000)="de193a76c1f72c5065b9"}, 0x20) (async)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0x1, &(0x7f0000000000)="de193a76c1f72c5065b9"}, 0x20)
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_tracing={0x1a, 0x11, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x874}}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffd}, @alu={0x7, 0x0, 0x7, 0x9, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x61, &(0x7f0000000180)=""/97, 0x41000, 0x18, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0xe, 0x10000, 0xa37}, 0x10, 0x25359, 0xffffffffffffffff, 0x0, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x7}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x17, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0xbd}, @map_fd={0x18, 0x6}, @generic={0x7, 0x9, 0x9, 0x1ff, 0x1}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x101}}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6a86}}]}, &(0x7f0000000440)='syzkaller\x00', 0x80000001, 0x53, &(0x7f0000000480)=""/83, 0x41000, 0x13, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0x5, 0xa, 0x0, 0x8}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000580)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f00000005c0)=[{0x4, 0x1, 0xa, 0x4}, {0x1, 0x5, 0x8, 0x3}, {0x5, 0x5, 0x10}, {0x3, 0x2, 0x8, 0xb}], 0x10, 0x4}, 0x94) (async)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x17, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0xbd}, @map_fd={0x18, 0x6}, @generic={0x7, 0x9, 0x9, 0x1ff, 0x1}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x101}}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6a86}}]}, &(0x7f0000000440)='syzkaller\x00', 0x80000001, 0x53, &(0x7f0000000480)=""/83, 0x41000, 0x13, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0x5, 0xa, 0x0, 0x8}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000580)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f00000005c0)=[{0x4, 0x1, 0xa, 0x4}, {0x1, 0x5, 0x8, 0x3}, {0x5, 0x5, 0x10}, {0x3, 0x2, 0x8, 0xb}], 0x10, 0x4}, 0x94)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000007c0)={@cgroup, 0x32, 0x0, 0x57, &(0x7f00000006c0)=[0x0], 0x1, 0x0, &(0x7f0000000700)=[0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000007c0)={@cgroup=<r2=>0xffffffffffffffff, 0x32, 0x0, 0x57, &(0x7f00000006c0)=[0x0], 0x1, 0x0, &(0x7f0000000700)=[0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r3=>0x0}, 0x40)
r4 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000840)='tasks\x00', 0x2, 0x0)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000880)={0x9, <r5=>0x0}, 0x8)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000800)={@fallback=r4, r0, 0x0, 0x6020, r1, @void, @void, @value=r5, @void, r3}, 0x20) (async)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000800)={@fallback=r4, r0, 0x0, 0x6020, r1, @void, @void, @value=r5, @void, r3}, 0x20)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000a00)={0xffffffffffffffff, &(0x7f00000008c0)="74b5a1cfbec41f12e555a29f37b56711dbae6ee03cb7ae03e3e38218446e54818b37eb932d71c98b", &(0x7f0000000900)=""/201}, 0x20)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000a80)=@o_path={&(0x7f0000000a40)='./file0\x00', r0, 0x4000, r4}, 0x18)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000bc0)={&(0x7f0000000ac0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x4, [@type_tag={0x10, 0x0, 0x0, 0x12, 0x1}, @struct={0xe, 0x6, 0x0, 0x4, 0x0, 0x4, [{0x8, 0x3, 0x8000}, {0x9, 0x2, 0x5}, {0xa, 0x4, 0x441a}, {0xf, 0x4, 0x7}, {0x10, 0x5, 0x3ff}, {0x9, 0x2, 0x40}]}, @fwd={0x5}]}, {0x0, [0x5f, 0x2e]}}, &(0x7f0000000b80)=""/1, 0x88, 0x1, 0x0, 0xc69}, 0x28)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000c00)={0x7}, 0x8)
socket$kcm(0x29, 0x5, 0x0) (async)
r7 = socket$kcm(0x29, 0x5, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000c40)={0x1, <r8=>0xffffffffffffffff}, 0x4)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000e00)={0x1, <r9=>0xffffffffffffffff}, 0x4)
r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000e80)=@generic={&(0x7f0000000e40)='./file0\x00', 0x0, 0x8}, 0x18)
r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f40)=@bpf_ext={0x1c, 0xe, &(0x7f0000000c80)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}], &(0x7f0000000d00)='GPL\x00', 0xc000, 0x14, &(0x7f0000000d40)=""/20, 0x41000, 0x30, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000000d80)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000dc0)={0x1, 0x4, 0x7, 0x8}, 0x10, 0x2b2ea, 0xffffffffffffffff, 0x2, &(0x7f0000000ec0)=[r9, r7, r10, 0xffffffffffffffff], &(0x7f0000000f00)=[{0x1, 0x4, 0x8, 0x8}, {0x2, 0x4, 0x9, 0x6}], 0x10, 0x6}, 0x94)
close(r10) (async)
close(r10)
r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001000)='./cgroup.net/syz0\x00', 0x200002, 0x0)
mkdirat$cgroup(r12, &(0x7f0000001040)='syz1\x00', 0x1ff) (async)
mkdirat$cgroup(r12, &(0x7f0000001040)='syz1\x00', 0x1ff)
mkdirat$cgroup(r2, &(0x7f0000001080)='syz0\x00', 0x1ff)
socketpair(0x2, 0x80000, 0x200, &(0x7f00000010c0)={0xffffffffffffffff, <r13=>0xffffffffffffffff})
r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000001100), 0x252040, 0x0)
ioctl$TUNATTACHFILTER(r14, 0x401054d5, &(0x7f0000001180)={0x2, &(0x7f0000001140)=[{0x2, 0x2, 0x9, 0x1a}, {0x7, 0x1, 0x4, 0x3}]}) (async)
ioctl$TUNATTACHFILTER(r14, 0x401054d5, &(0x7f0000001180)={0x2, &(0x7f0000001140)=[{0x2, 0x2, 0x9, 0x1a}, {0x7, 0x1, 0x4, 0x3}]})
r15 = perf_event_open$cgroup(&(0x7f00000011c0)={0x1, 0x80, 0xca, 0x2, 0x2, 0x6, 0x0, 0x0, 0xa, 0xa, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0x2}, 0x13508, 0x6, 0xc91722ad, 0x4, 0x6, 0x5, 0xfff}, r12, 0x2, 0xffffffffffffffff, 0x8)
ioctl$PERF_EVENT_IOC_SET_FILTER(r15, 0x40082406, &(0x7f0000001240)='\x00')
close(r11)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{r10}, &(0x7f0000001280), &(0x7f00000012c0)=r11}, 0x20) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{r10, <r16=>0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r11}, 0x20)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000001340)={r1, r16}, 0xc) (async)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000001340)={r1, r16}, 0xc)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001640)={r1, 0xe0, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001400)=[0x0, 0x0], 0x0, 0xe2, &(0x7f0000001440)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001480), &(0x7f00000014c0), 0x8, 0x74, 0x8, 0x8, &(0x7f0000001500)}}, 0x10)
setsockopt$sock_attach_bpf(r13, 0x1, 0x32, &(0x7f0000001980), 0x4)

2.576979771s ago: executing program 3 (id=2116):
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x400, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x7, 0x2, 0x1, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000640)='net_prio.prioidx\x00', 0x26e1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x160, &(0x7f00000000c0)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x5, 0xff92, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26}, 0x48)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
socket$kcm(0x10, 0x3, 0x10)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r3, 0x1, 0x15, &(0x7f0000000040), 0x10)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)

2.541337782s ago: executing program 2 (id=2117):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffeffffffff}, 0xc001, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x3, 0x10)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x29, 0x3, 0x0)
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x46, 0x0, &(0x7f0000000000)="378303076844268cb89e14f086dd4ee0ffff00febabec41177fb86dd1402e000030c", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
close(0x3)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x8, 0x4, 0x4, 0x9}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000009c0)={{r4, <r5=>0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000980)=r2}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001340)={{r5}, &(0x7f00000012c0), &(0x7f0000001300)=r2}, 0x20)
sendmsg$inet(r0, &(0x7f0000002b00)={0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000002800)='A', 0x1}], 0x1}, 0x4040)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="b8", 0x1}], 0x1, 0x0, 0x0, 0x10000000}, 0x5a99)

1.459595935s ago: executing program 2 (id=2118):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r1, &(0x7f0000000280), 0x9)
r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x6, 0xfffffffffffffff7}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000000)
write$cgroup_pid(r2, &(0x7f0000000c40), 0x12)
r4 = syz_clone(0xc920000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0100000004000000400000004000000041000000", @ANYBLOB="f63b23eabef2265cff6b0e88d125da8b5b5337adb6994c7e426bdffda974421253b0c4a94edc979911327ef38287fdebe11efc4a68f0bde5a780592b6b834abdbda3b6415c8c4974ac701964feae9f913802c0da3d98b152273b0c7a1d33e684f59eb9d22fab7e54a323848edd88da803d17b70bd299262de67b3915adda3b0f85135aa902f6881304df0e07ccfc39221fe2d72decf4a67fd17c9a04bccfdd50c957e17da9ac18e7b1dc6e4834d87c8eb4d7a070d030f4758b279b7a550356f2ea5789a59b1eb5d659d1000000000000", @ANYRESOCT=r4, @ANYRES64=r3, @ANYRES32=0x0, @ANYBLOB='\x00'/14], 0x50)
r7 = openat$cgroup_subtree(r5, &(0x7f0000000140), 0x2, 0x0)
syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000100)={[{0x2b, 'pids'}]}, 0x6)
r8 = socket$kcm(0xa, 0x2, 0x88)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000d600000000000000000000008500000041000000850000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
sendmsg$inet(r8, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x2, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x16}, @multicast1}}}], 0x30}, 0x8000)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r6, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r10=>0x0}}, 0x10)
r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x1}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="8500000005000000070000000000000095000000000000005bee1ea01c7814c00980e99a5df1f0614e1942612258708ff9dfaef11bd5504710e1d85587ee4727c9802ba8f5bd83e27c5585207b4e19cee40a9cab915f98eeb1e5a448c0d934224a13ed92a919f303d06b06833168000000000000000000000000f828967cd7352bed054c35edcb5548bcc8573fa4bcd1b87b8bc4a080d48368c87caa011f9f43f44dce6f7896caa82c8cc94a6f9f01ea49effd5ddd45908a22dc23876180f09a80e42135896d93fc510cbde2b03f40dab9c5904a59c5a7a47d173f8001e59332bbea03c2b6"], &(0x7f0000000040)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, r11, 0x14, &(0x7f00000000c0)={0x0, 0x11}, 0x1, 0x10, &(0x7f0000000000), 0xa, 0x0, 0xffffffffffffffff, 0x4c}, 0x70)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x0, &(0x7f00000001c0), &(0x7f0000000200)='GPL\x00', 0xc, 0x69, &(0x7f0000000300)=""/105, 0x40f00, 0x20, '\x00', r10, 0x0, r11, 0x8, &(0x7f0000000400)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000440)={0x5, 0xb, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd4f}, 0x94)
openat$cgroup_int(r5, &(0x7f0000000080)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0)

598.484855ms ago: executing program 2 (id=2119):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[@ANYRESOCT=r0], 0xfe33) (async)
socket$kcm(0x11, 0x7, 0x0) (async)
r1 = socket$kcm(0x23, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeaff}, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x10)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0}}, 0x10) (async)
sendmsg$inet(r2, 0x0, 0x4) (async)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x7f, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x4, @perf_bp={0x0, 0x3}, 0xa380, 0x1, 0x43a1bd76, 0x7, 0x9, 0x80, 0x2, 0x0, 0x0, 0x0, 0x200d}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) (async)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0xfffffffffffffd70)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x3, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x2191, 0x2, 0x0, 0x0, 0x7, 0x4, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
socket$kcm(0x2, 0x2, 0x0)
sendmsg$kcm(r2, 0x0, 0x4) (async)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_ro(r4, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0)
write$cgroup_pid(r5, &(0x7f0000000040), 0x12) (async)
r6 = openat$cgroup_ro(r5, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0)
r7 = openat$cgroup_freezer_state(r6, &(0x7f0000000140), 0x2, 0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYRES8=r7], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x50, '\x00', r3}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x2f, 0xd, 0x0, &(0x7f00000000c0)="e0b9547ed387dbe9abc8996f5b", 0x0, 0x400a5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$sock(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)}, 0x0) (async)
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8f3, 0xfffffffffffffffa}, 0x19810, 0x8, 0x10000, 0x5, 0xfffffffffff7bbfe, 0x0, 0x0, 0x0, 0x5ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, 0x0) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89f1, &(0x7f0000000280)='\xf1\xa8\xc7\xce\xcb\xbaJ}\x06\f\xf3;\xae3hu\xfe\x99rc,\x9e</_\xad \xd4\x1e\x1f\xf5n\xfb\x18\xdb\xc56')
recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001a80)}, 0xcd380fa2ca9420a6)

293.928063ms ago: executing program 2 (id=2120):
r0 = socket$kcm(0xa, 0x3, 0x106)
setsockopt$sock_attach_bpf(r0, 0x29, 0x2, 0x0, 0x0) (async)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{}, &(0x7f0000000000), &(0x7f0000000140)='%ps    \x00'}, 0x20)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x50)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000100)="b9ff0307684426", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x101, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x2}, 0x50) (async)
r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1001}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
socketpair(0x1d, 0x802, 0x6, &(0x7f0000000280)) (async)
socketpair(0x1, 0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80100, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x80080001, 0xacf}, 0x90c, 0x401, 0x1, 0x4, 0x1, 0x200, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0xa, 0x3, 0x106)
setsockopt$sock_attach_bpf(r4, 0x29, 0x4c, 0x0, 0x4) (async, rerun: 32)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x1a, 0x5, &(0x7f0000000440)=ANY=[@ANYRESDEC=r3], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r6, 0x8923, &(0x7f0000000040)={'wlan1\x00', @random="2e33e363a4b1"})

0s ago: executing program 2 (id=2121):
r0 = gettid()
syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/time_for_children\x00')
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0xf, &(0x7f0000000040)=@raw=[@call={0x85, 0x0, 0x0, 0xb3}, @map_fd, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7ad6}, @ldst={0x1, 0x3, 0x3, 0x9, 0x6, 0x30, 0x10}], &(0x7f00000000c0)='GPL\x00', 0xf2, 0x86, &(0x7f0000000100)=""/134, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x4, 0x6, 0x7}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)=[{0x2, 0x1, 0x1}], 0x10, 0x6}, 0x94)
bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f00000004c0)={r1, 0x0, 0x7d, 0x0, &(0x7f0000000340)="de3aa3fd23ffa78d4cb9629b94b27de205aa91a399d5a4160dc41f2411831357cc50a05eefbb737a0c0e204075452a3e473df17ff4078fc70f80e2559f47470295ee4fc816d15b2acdc0c802a25ef380c172418e85101e01bf47a380ab4e51d01f4b222d4e8519141824419fad6cd9e8f01ca23c4e03e0c49e13a300ba", 0x0, 0xf, 0x0, 0xd7, 0x0, &(0x7f00000003c0)="7b77a476c9833a7873f64b90523aa3e01687c508789ee832ddf8077e6ce1de1f8cd747aa601342adf9c916e0b33a667798c6ec11d6548b840085fd1788f658ada8481a0c6a4b75f6d864301a470c21b20ee6cbc003bfbac5d5ed4ac45de1a9130bdf796c1230b06f8cf6a5184c7c62e698c62e626f19468a5b8761504a30210a77b8af743bcd437121e0db06d359f5b9dfcc8c6ac48d6fdfb75fa557d6372e7174f5def23687df001ec90455a83a352523a33edb9ed42aee400b59850a6cf76a8edca9400206c07f034f6ba792212ce6de8e8459e6091f", 0x0, 0x2, 0x0, 0x5}, 0x50)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x9, 0x3, 0x6, 0x66, 0x0, 0xcb3, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7f, 0x6, @perf_bp={&(0x7f0000000540), 0xa}, 0x1000, 0x7, 0x487, 0x5, 0x7792, 0x2, 0x3748, 0x0, 0x4, 0x0, 0x7}, 0x0, 0xc, 0xffffffffffffffff, 0x9)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000600)={r1, 0x1}, 0xc)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
recvmsg$unix(r2, &(0x7f0000001840)={&(0x7f0000000680)=@abs, 0x6e, &(0x7f0000001700)=[{&(0x7f0000000700)=""/4096, 0x1000}], 0x1, &(0x7f0000001740)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, <r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff, <r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [<r15=>0xffffffffffffffff, 0xffffffffffffffff, <r16=>0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd0}, 0x0)
sendmsg$tipc(r16, &(0x7f0000002080)={&(0x7f0000001880)=@nameseq={0x1e, 0x1, 0x0, {0x2, 0x1, 0x3}}, 0x10, &(0x7f0000001f80)=[{&(0x7f00000018c0)="2c9211fe25e7d63c9f89128074d3cf975b307f66abfe96684b05c25149b0d6268002a39319006bfb228c6c2d45e5419eda9b1b84c6499dafed9e21392e25f12d75eb1706755922c0e35e6d3b48d7e75d689a7000a000950d75645a72fbcb30049eb6712fb47b1aef50de031e5ffb92e1182af218485a91c93ee56c6b0466097b05aa866c10bdcfda4e0f050f171adb", 0x8f}, {&(0x7f0000001980)="3552847106f0323dddf9d34db96cffcc323ca340f10ecc82197fa01760511b0d45436b41951adbd371aa51fa58f789dc091251129923c84dc28ce7e357875e26ffb0c905068da7c0042ffe6e7645de39bce4850464cf688b23468e9080a48460f265f18f1670f504a1fe1e7d1ac9c095063efc79bb4b7291dc1cc1491afb8930bf571d3bc8a8e096281b10ee415245f4009e5eda84c8d3d3dc8e224dfa076af7040c63adac6015923175a8c227f96315eb1e63b184c7adb3f088e3355c2a91cbc9e4d047ad37dc8b6e10ef9826f62ac05fa3d6068be00af2c0c084c46a899427f1f72e9d6d", 0xe5}, {&(0x7f0000001a80)="2d4348b159cb15042a0c52882ee9601c8b300be8aad3889566311a95d3ebd6697701f0a12a80cb01baa97dcd58fb6bedd903d200b4416cba8cd0635c09f112cd190fbcd9f5561e10b361f896ab509806cd7e2ec2930a13670f1da1295be8aad41471c169a110d6d21bec5dd42e2426cd107d04038827f000e852fba15463487743fc1002725b481eaeea8103851b146322f525ef2f5286538eb2de387e886160e54f830f05a7395bb06442b31b2cb6fd01be7030bbea7ad3a458835f81a9e37138ac6270bd2417cdfcdfbcdea16c97defca09302f2a318a0e8020d5473137e3079c8eea4c589bda2c9efcca6844cc1ee0ce2", 0xf2}, {&(0x7f0000001b80)="8126a9260aa16d6fd7e6cd430a705aebea8b38bb0af79a98908258207328895034663189f156ef371b888256b956fc", 0x2f}, {&(0x7f0000001bc0)="9f9cdb8a3d55b64944a4c0d9d8fe921b3b015ba913dace5fc660d5cf020453f7dee9414c7d4b59cf16ec780b4fba0e811128fcbb8a60e9350472d1e4383d99b599d420da7104aaf8b0e32c8c9c7e82f60c25a05d63c5606103c7e3cabd7087f4233c8c93edb021e661f7e41470538e688d611a2c161d61ef860e73f07de6b92f8f66e0c5775c47d524edcd32da9664cd390b7a694940c3ecbb2cff2ce6759a2436b7295de72ee93407b7c63ce21441840a32ed6ed24e967039dd1b1daecbb3", 0xbf}, {&(0x7f0000001c80)="e47bc8a0e6a55a4d3b1208a04fba7dfae72a944f65e3e9091cd125117476264784e4263642aac35b65576a6256e290441fb7a4faae22b4cec8354f83b449514feca2dab7e5cf790b3aefb327a7ea88846c2338743141b855945800ce29527adfd86135f3e4c02086e59a3a8b987ae9d618deba74374cfd59342a651ad012ab1e7a84e973c006c1357eba8e0bc62e1bcbefb5ae5cdb1370b2d3cdb61d4983b0b5a36db65e314e3b0799e37fffdc4180f3a0e89cdec2eeff71b4be09c7729f1bee5ab0d766b567bc043d358488fa213eac080a2060061bea95ae37d4eb6d37", 0xde}, {&(0x7f0000001d80)}, {&(0x7f0000001dc0)="6790fd383003b50e659b0c89b3cab24b77617803c7c8af3e5c6033f5b3f1f3ee63fa932e020a4d005206c7d0bd1dfa5001478aaad04a18b0daaa6ae13c9a46c00662e4a7794c8d108c481a7fcae466cf1ab3e36fbed6148f7923de6f01fd5910928d1f5461cb28f39b5431545d", 0x6d}, {&(0x7f0000001e40)="35164941f9deb53ce549b4775013a784351f4d9b3a538881f4d279848046d00cdab1042af73f862417d136f3cdb2774af7906d7082bd7b9980029b9c746abb05fc435d7a8c7bd0aecb66caf7552c0b65a620b8308baccc493885850b5fb64784bef8af10d79be8d2f6ba2bc2401e33f6aed8db787d0379174883c717aae410c09cbada8de875731d3d94f55f87790ecb58b6fe16224bb556e27a5c8982cc14f9cf6a58e003ee733c0388d7981ca17ad331d8585d18381c3da6eac24d21ca0e54dde909061f80f1062fe16da79634794226253458dcabe17c7d13b6e44b86db09adc18ee4d460c22734c20043ddb2", 0xee}, {&(0x7f0000001f40)="216baaab", 0x4}], 0xa, &(0x7f0000002040)="8456ccddd34cef81cb6b3b720f97db2cb93316d0", 0x14, 0x4008840}, 0x40)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f00000020c0)={'veth0\x00', @multicast})
r17 = perf_event_open(&(0x7f0000002140)={0x3, 0x80, 0x3, 0xfa, 0xe2, 0x1, 0x0, 0x10001, 0x33e40, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xfff, 0x0, @perf_bp={&(0x7f0000002100), 0x1}, 0x0, 0xf, 0x1, 0x0, 0xbd, 0x8, 0x2, 0x0, 0x7, 0x0, 0xffffffffffffffff}, 0x0, 0x10, r14, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r17, 0x40082406, &(0x7f00000021c0)='+&,[^#\x00')
ioctl$TUNGETDEVNETNS(r11, 0x54e3, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002200)=0xffffffffffffffff, 0x4)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000002240)={r12})
r18 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000022c0)=@generic={&(0x7f0000002280)='./file0\x00'}, 0x18)
ioctl$sock_kcm_SIOCKCMATTACH(r15, 0x89e0, &(0x7f0000002300)={r11, r18})
ioctl$sock_kcm_SIOCKCMUNATTACH(r14, 0x89e1, &(0x7f0000002340)={r6})
sendmsg(r3, &(0x7f0000002780)={&(0x7f0000002380)=@pptp={0x18, 0x2, {0x2, @loopback}}, 0x80, &(0x7f0000002680)=[{&(0x7f0000002400)="e82f6d66458f0712f2532afe309b047921a4b445557897f51f7bb83245b86c2ced069f56b2f5ea9ff4040b1fc872d098a9f195b72bf6d5aa53d0e71aa20b49f52471ea05e96f20add07af5865f6610070d068be113a08c20505822ebb38bd8750d3de667d97fd0a43fb43559e5c2860e4c5e709e4ed063cef96ec962bb42bc768fbea18b4d6c43b25c41db81e58380faa6be54e8bd0c24616a02c8bc8bc55bb52ea2c49beee7b9291ff1da47ad4baa2ddf", 0xb1}, {&(0x7f00000024c0)="e677185ae0802b70ef6f4e3ce90ca0df02e24ac5aa61b7a02f0ab79843e30df910e5f5178e24cd20e3507f9cab45f72d125b20d4c5255fad17f55f6b1e75480c9693930691e238873958bdf723eeae58c54cd7ba2e6aadc35c05c875009c95a7857873fb558cfe24bd182573a1e4e5fff86307947fd0f8dd65b8124b74a44d186070c6ac4ede18068c0e32e0818be51fa85fc04b8c97ee214d7277fb4fd4d22d862058c6163fc6bd2a166080f9521826c6f570", 0xb3}, {&(0x7f0000002580)="f32fb7f422ca900c24fe7e2b8453e4f3413519e6914bea", 0x17}, {&(0x7f00000025c0)="4e1726a026b08d80aa316238fe510b6dc698305589b936d53186948f6a6dd38bce614ac6e6494cd2325ff591f4802698f9e500ffb31aa1f7fc7a6926cc2b29ccc993cfb2aef4a403edc28773898a23f2951402e542b5f9b194afbbda3ac842ac89c723b202cd1ce86971fdd480b6ef3deba90fcf03dbc20975278a99b33119238f97a24cd410795f5df4087e3ea40c7c6db50d5aa965", 0x96}], 0x4, &(0x7f00000026c0)=[{0x90, 0x1, 0x11a3, "8a206c74ebe6527ebf674dec6ac3e1dad21ad148aad1a71de3b3353cec4be7d234207a46f9204cdb8040ce0dcde8941064372c23602bbd3a17bd8d334a1a403ef7582e908125ad986d9f5dea907e6f4938e724200fd03062d6f369ca7957f0130aa8ea7e3a3d7f889e8d23c179700dca2f8bf32786aae856f5dde74500cf7f"}], 0x90}, 0x6091)
socket$kcm(0x29, 0x5, 0x0)
r19 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002880)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
r20 = perf_event_open$cgroup(&(0x7f0000002800)={0x0, 0x80, 0x7f, 0x6, 0x7, 0x0, 0x0, 0x8, 0x2100, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xc1d, 0x3, @perf_bp={&(0x7f00000027c0), 0x9}, 0x410, 0x3, 0xa2, 0x8, 0x0, 0x2, 0x1, 0x0, 0x7e1, 0x0, 0xb}, r19, 0xf, r5, 0xc)
ioctl$PERF_EVENT_IOC_SET_FILTER(r17, 0x40082406, &(0x7f00000028c0)='veth0\x00')
ioctl$TUNSETSTEERINGEBPF(r13, 0x800454e0, &(0x7f0000002900)=r10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002940))
write$cgroup_subtree(r6, &(0x7f0000002980)={[{0x2b, 'rdma'}, {0x2d, 'io'}, {0x2d, 'devices'}, {0x2d, 'cpuacct'}, {0x2b, 'pids'}, {0x2b, 'rdma'}]}, 0x28)
ioctl$PERF_EVENT_IOC_SET_BPF(r20, 0x40042408, r7)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000002a00)=@o_path={&(0x7f00000029c0)='./file0\x00', r8, 0x4000, r3}, 0x18)
ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x40082406, &(0x7f0000002a40)='devices')
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003180)={&(0x7f0000002ac0)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000002c00)=[{&(0x7f0000002b00)="a625f6949ef6164c665770bdea8ea27374cb5e609f58dbf6337b19ced14919636e52e6911e30f1eac0c5dca59347b050fbcdee07f762fbaf1cc156a6382252fa02ecce28fd41100f591902b1c281236ebd10e07d3ad9eb3d9c610f60b1b2793187e78f9104aacbd2922f93a6f748531f43858eb268af20baa0f5d4afb97e2570a49a670576e59d006fa2d9da2d12e2bea2c55bef847944345175e5703531f58dc9bcbbf1436ff9874854ed3b8e2e66e6e960db99542403f4d357e1017a9d133a6f84f1e21eec6464308d54f7ac3d1b80aa42c3de361186e7106ee5", 0xdb}], 0x1, &(0x7f00000030c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @private=0xa010101}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x38}, @empty}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfd4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0xa8}, 0x1)

kernel console output (not intermixed with test programs):

48
[  143.619419][ T6944] RSP: 002b:00007f8961ed0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  143.627918][ T6944] RAX: ffffffffffffffda RBX: 00007f8961216180 RCX: 00007f8960f9aeb9
[  143.635956][ T6944] RDX: 0000000000000020 RSI: 0000200000000000 RDI: 0000000000000003
[  143.643987][ T6944] RBP: 00007f8961ed0090 R08: 0000000000000000 R09: 0000000000000000
[  143.652020][ T6944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  143.660065][ T6944] R13: 00007f8961216218 R14: 00007f8961216180 R15: 00007fffd6717eb8
[  143.668171][ T6944]  </TASK>
[  143.679868][ T6944] netlink: 60 bytes leftover after parsing attributes in process `syz.2.320'.
[  143.801817][ T6955] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  145.756848][ T6994] netlink: 60 bytes leftover after parsing attributes in process `syz.2.333'.
[  145.777474][ T6994] netlink: 60 bytes leftover after parsing attributes in process `syz.2.333'.
[  145.854467][ T6996] netlink: 60 bytes leftover after parsing attributes in process `syz.2.333'.
[  145.855160][ T6994] FAULT_INJECTION: forcing a failure.
[  145.855160][ T6994] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  145.887612][ T6994] CPU: 1 PID: 6994 Comm: syz.2.333 Not tainted syzkaller #0
[  145.894966][ T6994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  145.905058][ T6994] Call Trace:
[  145.908349][ T6994]  <TASK>
[  145.911288][ T6994]  dump_stack_lvl+0x18c/0x250
[  145.916253][ T6994]  ? show_regs_print_info+0x20/0x20
[  145.921471][ T6994]  ? load_image+0x400/0x400
[  145.925996][ T6994]  ? __lock_acquire+0x7d40/0x7d40
[  145.931045][ T6994]  ? verify_lock_unused+0x140/0x140
[  145.936271][ T6994]  should_fail_ex+0x39d/0x4d0
[  145.940977][ T6994]  prepare_alloc_pages+0x1e2/0x5f0
[  145.946115][ T6994]  __alloc_pages+0x134/0x460
[  145.950721][ T6994]  ? zone_statistics+0x170/0x170
[  145.955686][ T6994]  ? mt_find+0x169/0x650
[  145.959944][ T6994]  ? handle_mm_fault+0xe7/0x4c00
[  145.964898][ T6994]  __folio_alloc+0x10/0x20
[  145.969326][ T6994]  vma_alloc_folio+0x47a/0x8f0
[  145.974117][ T6994]  handle_mm_fault+0x1b3b/0x4c00
[  145.979078][ T6994]  ? handle_mm_fault+0xe7/0x4c00
[  145.984034][ T6994]  ? numa_migrate_prep+0x350/0x350
[  145.989169][ T6994]  ? up_read+0x20/0x20
[  145.993264][ T6994]  ? lock_mm_and_find_vma+0x9c/0x2f0
[  145.998636][ T6994]  do_user_addr_fault+0x730/0x12c0
[  146.003777][ T6994]  exc_page_fault+0x64/0x100
[  146.008384][ T6994]  asm_exc_page_fault+0x26/0x30
[  146.013251][ T6994] RIP: 0010:rep_movs_alternative+0x4a/0x90
[  146.019076][ T6994] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 <f3> a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01
[  146.038801][ T6994] RSP: 0018:ffffc9000c63f630 EFLAGS: 00050202
[  146.044891][ T6994] RAX: ffffffff84270001 RBX: 0000000000000af0 RCX: 00000000000002b0
[  146.052877][ T6994] RDX: 0000000000000000 RSI: ffff88807d86c8f0 RDI: 0000200000003000
[  146.061124][ T6994] RBP: ffffc9000c63f7c0 R08: ffff88807d86cb9f R09: 1ffff1100fb0d973
[  146.069110][ T6994] R10: dffffc0000000000 R11: ffffed100fb0d974 R12: 00002000000032b0
[  146.077092][ T6994] R13: ffffc9000c63fe40 R14: 00002000000027c0 R15: ffff88807d86c0b0
[  146.085081][ T6994]  ? _copy_to_iter+0x1091/0x1120
[  146.090049][ T6994]  copyout+0x70/0x90
[  146.093981][ T6994]  _copy_to_iter+0x432/0x1120
[  146.098687][ T6994]  ? iov_iter_init+0x1e0/0x1e0
[  146.103477][ T6994]  ? __virt_addr_valid+0x18c/0x540
[  146.108604][ T6994]  ? __virt_addr_valid+0x469/0x540
[  146.113735][ T6994]  ? __phys_addr_symbol+0x2f/0x70
[  146.119214][ T6994]  __skb_datagram_iter+0xdb/0x780
[  146.124345][ T6994]  ? skb_copy_datagram_iter+0x200/0x200
[  146.129912][ T6994]  skb_copy_datagram_iter+0xb1/0x200
[  146.135218][ T6994]  netlink_recvmsg+0x2d4/0xe60
[  146.140032][ T6994]  ? netlink_sendmsg+0xbf0/0xbf0
[  146.144990][ T6994]  ? aa_af_perm+0x330/0x330
[  146.149509][ T6994]  ? __lock_acquire+0x1273/0x7d40
[  146.154551][ T6994]  ? verify_lock_unused+0x140/0x140
[  146.159768][ T6994]  ? bpf_lsm_socket_recvmsg+0x9/0x10
[  146.165084][ T6994]  ? security_socket_recvmsg+0x89/0xb0
[  146.170555][ T6994]  ? netlink_sendmsg+0xbf0/0xbf0
[  146.175511][ T6994]  ____sys_recvmsg+0x2ce/0x5e0
[  146.180295][ T6994]  ? __sys_recvmsg_sock+0x50/0x50
[  146.185345][ T6994]  ? import_iovec+0x73/0xa0
[  146.189874][ T6994]  ___sys_recvmsg+0x216/0x590
[  146.194569][ T6994]  ? __sys_recvmsg+0x2a0/0x2a0
[  146.199437][ T6994]  ? ksys_write+0x1c4/0x260
[  146.204061][ T6994]  ? __fget_files+0x43d/0x4b0
[  146.208767][ T6994]  __x64_sys_recvmsg+0x20c/0x2e0
[  146.213718][ T6994]  ? ___sys_recvmsg+0x590/0x590
[  146.218593][ T6994]  ? lockdep_hardirqs_on+0x98/0x150
[  146.223813][ T6994]  do_syscall_64+0x55/0xa0
[  146.228247][ T6994]  ? clear_bhb_loop+0x40/0x90
[  146.232936][ T6994]  ? clear_bhb_loop+0x40/0x90
[  146.237626][ T6994]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  146.243538][ T6994] RIP: 0033:0x7f8960f9aeb9
[  146.247966][ T6994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  146.267591][ T6994] RSP: 002b:00007f8961f12028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  146.276018][ T6994] RAX: ffffffffffffffda RBX: 00007f8961215fa0 RCX: 00007f8960f9aeb9
[  146.284004][ T6994] RDX: 0000000000000020 RSI: 0000200000000000 RDI: 0000000000000003
[  146.291988][ T6994] RBP: 00007f8961f12090 R08: 0000000000000000 R09: 0000000000000000
[  146.299969][ T6994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  146.307957][ T6994] R13: 00007f8961216038 R14: 00007f8961215fa0 R15: 00007fffd6717eb8
[  146.315952][ T6994]  </TASK>
[  146.332522][ T6994] netlink: 60 bytes leftover after parsing attributes in process `syz.2.333'.
[  146.337950][ T6785] wlan1: Trigger new scan to find an IBSS to join
[  146.823931][ T7004] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.339'.
[  147.480797][ T7020] veth0_macvtap: entered allmulticast mode
[  147.548438][ T6165] wlan1: Creating new IBSS network, BSSID 3a:aa:d7:cb:a9:bf
[  147.746293][ T7025] netlink: 'syz.0.342': attribute type 1 has an invalid length.
[  147.893383][ T7034] netlink: 60 bytes leftover after parsing attributes in process `syz.2.346'.
[  147.912572][ T7034] netlink: 60 bytes leftover after parsing attributes in process `syz.2.346'.
[  147.939415][ T7034] netlink: 60 bytes leftover after parsing attributes in process `syz.2.346'.
[  147.973447][ T7034] netlink: 60 bytes leftover after parsing attributes in process `syz.2.346'.
[  148.255730][ T7037] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.347'.
[  148.411803][ T7037] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8
[  149.579767][ T7054] netlink: 'syz.0.353': attribute type 10 has an invalid length.
[  150.142420][ T7054] team0: Port device macvlan0 added
[  150.332505][ T7054] syz.0.353 (7054) used greatest stack depth: 17960 bytes left
[  151.491421][ T7091] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.366'.
[  151.558412][ T7091] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.366'.
[  151.886605][ T7096] netlink: 'syz.0.368': attribute type 23 has an invalid length.
[  151.926618][ T7096] netlink: 168 bytes leftover after parsing attributes in process `syz.0.368'.
[  153.600334][ T7130] netlink: 'syz.1.377': attribute type 1 has an invalid length.
[  153.714820][ T7131] pimreg: tun_chr_ioctl cmd 1074025677
[  153.757243][ T7131] pimreg: linktype set to 780
[  153.763189][ T7130] netlink: 156 bytes leftover after parsing attributes in process `syz.1.377'.
[  153.827364][ T7138] �: renamed from bond_slave_0
[  153.943458][ T7140] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.380'.
[  154.028037][ T7140] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.380'.
[  156.615421][ T7186] netlink: 60 bytes leftover after parsing attributes in process `syz.0.393'.
[  156.630149][ T7186] netlink: 60 bytes leftover after parsing attributes in process `syz.0.393'.
[  156.644519][ T7186] netlink: 60 bytes leftover after parsing attributes in process `syz.0.393'.
[  157.742747][ T7224] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.403'.
[  158.281119][ T7229] netlink: 60 bytes leftover after parsing attributes in process `syz.1.404'.
[  158.746962][ T7229] netlink: 60 bytes leftover after parsing attributes in process `syz.1.404'.
[  158.771365][ T7230] netlink: 60 bytes leftover after parsing attributes in process `syz.1.404'.
[  158.804208][ T7231] netlink: 60 bytes leftover after parsing attributes in process `syz.1.404'.
[  159.523128][ T7249] netlink: 10 bytes leftover after parsing attributes in process `syz.0.410'.
[  159.963095][ T7255] netlink: 'syz.1.411': attribute type 6 has an invalid length.
[  160.019760][ T7255] netlink: 168 bytes leftover after parsing attributes in process `syz.1.411'.
[  161.363745][ T7266] netlink: 'syz.2.415': attribute type 29 has an invalid length.
[  161.383294][ T7266] netlink: 'syz.2.415': attribute type 29 has an invalid length.
[  161.398015][ T7277] netlink: 'syz.2.415': attribute type 29 has an invalid length.
[  161.408244][ T7277] netlink: 'syz.2.415': attribute type 29 has an invalid length.
[  161.495328][ T7266] netlink: 'syz.2.415': attribute type 29 has an invalid length.
[  161.741015][ T7272] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.418'.
[  162.795445][ T7293] netlink: 'syz.0.423': attribute type 10 has an invalid length.
[  162.867927][ T7293] batman_adv: batadv0: Adding interface: wlan0
[  162.897582][ T7293] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  162.954536][ T7293] batman_adv: batadv0: Interface activated: wlan0
[  164.171213][ T7325] netlink: 'syz.2.433': attribute type 9 has an invalid length.
[  164.230604][ T7325] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.433'.
[  165.320118][ T7354] netlink: 10 bytes leftover after parsing attributes in process `syz.0.441'.
[  165.717888][ T7357] -1: renamed from syzkaller0
[  166.101028][ T7359] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.442'.
[  166.673141][ T7374] netlink: 10 bytes leftover after parsing attributes in process `syz.1.446'.
[  167.024763][ T7378] netlink: 'syz.1.447': attribute type 29 has an invalid length.
[  167.076873][ T7378] netlink: 'syz.1.447': attribute type 29 has an invalid length.
[  167.101588][ T7378] netlink: 'syz.1.447': attribute type 29 has an invalid length.
[  167.147058][ T7378] netlink: 'syz.1.447': attribute type 29 has an invalid length.
[  167.193452][ T7378] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.447'.
[  167.952108][ T7401] netlink: 60 bytes leftover after parsing attributes in process `syz.3.453'.
[  167.999957][ T7401] netlink: 60 bytes leftover after parsing attributes in process `syz.3.453'.
[  168.052318][ T7400] netlink: 60 bytes leftover after parsing attributes in process `syz.3.453'.
[  168.124958][ T7400] netlink: 60 bytes leftover after parsing attributes in process `syz.3.453'.
[  168.210186][ T7405] netlink: 'syz.1.455': attribute type 3 has an invalid length.
[  168.284601][ T7407] C: renamed from team_slave_0 (while UP)
[  168.350563][ T7407] netlink: 'syz.0.456': attribute type 3 has an invalid length.
[  168.436574][ T7407] netlink: 'syz.0.456': attribute type 1 has an invalid length.
[  168.444548][ T7407] netlink: 116 bytes leftover after parsing attributes in process `syz.0.456'.
[  168.496664][ T7407] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  169.330528][ T7416] syzkaller0: entered promiscuous mode
[  169.344698][ T7416] syzkaller0: entered allmulticast mode
[  172.208450][ T7470] netlink: zone id is out of range
[  172.220978][ T7470] netlink: set zone limit has 8 unknown bytes
[  173.413998][ T7478] netlink: 'syz.1.474': attribute type 10 has an invalid length.
[  173.436086][ T7478] team0: Port device geneve1 added
[  173.608834][ T7480] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.475'.
[  173.631991][ T7480] netlink: 6324 bytes leftover after parsing attributes in process `syz.3.475'.
[  173.652280][ T7480] netlink: 2 bytes leftover after parsing attributes in process `syz.3.475'.
[  173.664013][ T7481] netlink: 'syz.3.475': attribute type 21 has an invalid length.
[  173.731747][ T7488] netlink: 60 bytes leftover after parsing attributes in process `syz.0.478'.
[  173.732963][ T7481] netlink: 132 bytes leftover after parsing attributes in process `syz.3.475'.
[  173.755399][ T7481] netlink: 28 bytes leftover after parsing attributes in process `syz.3.475'.
[  173.764848][ T7488] netlink: 60 bytes leftover after parsing attributes in process `syz.0.478'.
[  173.787781][ T7488] netlink: 60 bytes leftover after parsing attributes in process `syz.0.478'.
[  173.806021][ T7488] netlink: 60 bytes leftover after parsing attributes in process `syz.0.478'.
[  173.928454][ T7480] delete_channel: no stack
[  174.203820][ T7494] netlink: 164 bytes leftover after parsing attributes in process `syz.0.479'.
[  174.742134][ T7503] netlink: 'syz.3.482': attribute type 21 has an invalid length.
[  176.423595][ T7551] netlink: 'syz.1.498': attribute type 9 has an invalid length.
[  177.456094][ T7572] tap0: tun_chr_ioctl cmd 1074025673
[  177.465877][ T7572] tap0: tun_chr_ioctl cmd 1074025673
[  177.520497][ T7576] tap0: tun_chr_ioctl cmd 1074025681
[  177.531501][ T7578] tap0: tun_chr_ioctl cmd 1074025698
[  177.543889][ T7572] tap0: tun_chr_ioctl cmd 1074025673
[  177.555518][ T7572] tap0: tun_chr_ioctl cmd 1074025673
[  177.578337][ T7576] tap0: tun_chr_ioctl cmd 1074025681
[  177.598758][ T6165] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  179.420243][ T7598] sctp: [Deprecated]: syz.1.510 (pid 7598) Use of struct sctp_assoc_value in delayed_ack socket option.
[  179.420243][ T7598] Use struct sctp_sack_info instead
[  179.763862][ T7603] netlink: 'syz.0.512': attribute type 10 has an invalid length.
[  179.962942][ T7602] netlink: 'syz.3.511': attribute type 27 has an invalid length.
[  180.236794][ T7609] __nla_validate_parse: 8 callbacks suppressed
[  180.236816][ T7609] netlink: 60 bytes leftover after parsing attributes in process `syz.1.513'.
[  180.355611][ T7609] netlink: 60 bytes leftover after parsing attributes in process `syz.1.513'.
[  180.404210][ T7609] netlink: 60 bytes leftover after parsing attributes in process `syz.1.513'.
[  180.445515][ T7609] netlink: 60 bytes leftover after parsing attributes in process `syz.1.513'.
[  182.060952][ T7629] netlink: 'syz.2.519': attribute type 33 has an invalid length.
[  182.086698][ T7629] netlink: 152 bytes leftover after parsing attributes in process `syz.2.519'.
[  182.117411][ T7629] `: renamed from team0 (while UP)
[  182.413742][ T7634] sctp: [Deprecated]: syz.3.518 (pid 7634) Use of int in max_burst socket option deprecated.
[  182.413742][ T7634] Use struct sctp_assoc_value instead
[  182.607920][ T7644] netlink: 'syz.0.524': attribute type 21 has an invalid length.
[  184.267748][ T7667] netlink: 'syz.3.530': attribute type 1 has an invalid length.
[  184.292631][ T7667] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.530'.
[  184.491020][ T7672] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.533'.
[  184.557496][ T7672] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8
[  187.110493][ T7714] netlink: 164 bytes leftover after parsing attributes in process `syz.2.545'.
[  187.135888][ T7714] netlink: 164 bytes leftover after parsing attributes in process `syz.2.545'.
[  187.148497][ T7714] netlink: 'syz.2.545': attribute type 10 has an invalid length.
[  187.169082][ T7714] netlink: 55 bytes leftover after parsing attributes in process `syz.2.545'.
[  188.646936][ T7737] netlink: 64 bytes leftover after parsing attributes in process `syz.0.554'.
[  188.815508][ T7741] ref_ctr_offset mismatch. inode: 0x2f1 offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x0
[  189.126392][ T7745] netlink: 8210 bytes leftover after parsing attributes in process `syz.2.557'.
[  191.485024][ T7762] netlink: 14546 bytes leftover after parsing attributes in process `syz.3.561'.
[  191.990307][ T7770] netlink: 'syz.3.561': attribute type 10 has an invalid length.
[  192.329608][ T7770] netlink: 168 bytes leftover after parsing attributes in process `syz.3.561'.
[  192.686892][ T7777] netlink: 132 bytes leftover after parsing attributes in process `syz.0.566'.
[  193.434466][ T7788] netlink: 64967 bytes leftover after parsing attributes in process `syz.0.569'.
[  194.987034][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  194.993445][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  195.751386][ T7804] netlink: 'syz.0.573': attribute type 2 has an invalid length.
[  195.858513][ T7804] netlink: 'syz.0.573': attribute type 1 has an invalid length.
[  195.867348][ T7804] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.573'.
[  196.490235][ T7815] netlink: 'syz.1.575': attribute type 10 has an invalid length.
[  196.846596][ T7819] netlink: 60 bytes leftover after parsing attributes in process `syz.3.578'.
[  196.947559][ T7819] netlink: 60 bytes leftover after parsing attributes in process `syz.3.578'.
[  196.982818][ T7822] netlink: 60 bytes leftover after parsing attributes in process `syz.3.578'.
[  197.058951][ T5779] Bluetooth: hci3: command 0x0406 tx timeout
[  197.065253][ T5082] Bluetooth: hci0: command 0x0406 tx timeout
[  197.072398][ T5779] Bluetooth: hci2: command 0x0406 tx timeout
[  197.078618][ T5082] Bluetooth: hci1: command 0x0406 tx timeout
[  197.478280][ T7830] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.580'.
[  199.439079][ T7847] netlink: 'syz.0.584': attribute type 10 has an invalid length.
[  199.937602][ T7854] netlink: 208064 bytes leftover after parsing attributes in process `syz.3.586'.
[  200.767029][ T7863] netlink: 'syz.0.590': attribute type 46 has an invalid length.
[  202.620630][ T7885] netlink: 'syz.1.595': attribute type 1 has an invalid length.
[  202.672927][ T7885] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.595'.
[  202.716582][ T7885] netlink: 9 bytes leftover after parsing attributes in process `syz.1.595'.
[  202.797909][ T7884] netlink: 'syz.1.595': attribute type 1 has an invalid length.
[  202.805647][ T7884] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.595'.
[  202.907837][ T7884] netlink: 9 bytes leftover after parsing attributes in process `syz.1.595'.
[  207.315658][ T7899] netlink: 'syz.3.598': attribute type 1 has an invalid length.
[  207.363827][ T7901] netlink: 16211 bytes leftover after parsing attributes in process `syz.1.605'.
[  207.434247][ T7903] netlink: 'syz.0.599': attribute type 29 has an invalid length.
[  207.449321][ T7899] netlink: 'syz.3.598': attribute type 4 has an invalid length.
[  207.466934][ T7899] netlink: 112 bytes leftover after parsing attributes in process `syz.3.598'.
[  207.524311][ T7903] netlink: 'syz.0.599': attribute type 29 has an invalid length.
[  209.266805][ T6163] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  210.686664][ T7948] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  210.693457][ T7948] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  210.845266][ T7942] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.609'.
[  211.527221][ T7966] ��
: port 1(syz_tun) entered blocking state
[  211.536965][ T7966] ��
: port 1(syz_tun) entered disabled state
[  211.547803][ T7966] syz_tun: entered allmulticast mode
[  211.569723][ T7966] syz_tun: entered promiscuous mode
[  219.664288][ T7997] netlink: 'syz.3.624': attribute type 21 has an invalid length.
[  219.672382][ T7997] IPv6: NLM_F_CREATE should be specified when creating new route
[  219.683097][ T8007] netlink: 'syz.1.628': attribute type 21 has an invalid length.
[  219.691422][ T8007] netlink: 168 bytes leftover after parsing attributes in process `syz.1.628'.
[  219.710055][ T8004] netlink: 'syz.0.627': attribute type 10 has an invalid length.
[  219.882453][ T8013] netlink: 'syz.3.629': attribute type 21 has an invalid length.
[  220.069315][ T8020] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.632'.
[  220.129972][ T8022] netlink: 132 bytes leftover after parsing attributes in process `syz.3.633'.
[  220.976282][ T8049] netlink: 60 bytes leftover after parsing attributes in process `syz.2.642'.
[  227.333696][ T8065] netlink: 'syz.1.645': attribute type 39 has an invalid length.
[  227.421506][ T8083] netlink: 152 bytes leftover after parsing attributes in process `syz.0.653'.
[  227.637766][ T8086] netlink: 'syz.0.654': attribute type 1 has an invalid length.
[  227.678688][ T8086] netlink: 'syz.0.654': attribute type 10 has an invalid length.
[  227.698571][ T8086] netlink: 40 bytes leftover after parsing attributes in process `syz.0.654'.
[  227.712270][ T8086] batman_adv: batadv0: Adding interface: virt_wifi0
[  227.746810][ T8086] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  227.806787][ T8086] batman_adv: batadv0: Not using interface virt_wifi0 (retrying later): interface not active
[  228.659847][ T8114] netlink: 'syz.2.662': attribute type 2 has an invalid length.
[  228.731077][ T8114] netlink: 132 bytes leftover after parsing attributes in process `syz.2.662'.
[  228.749677][ T8114] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.662'.
[  230.186777][ T8144] netlink: 60 bytes leftover after parsing attributes in process `syz.3.670'.
[  231.073933][ T8163] netlink: 4068 bytes leftover after parsing attributes in process `syz.1.675'.
[  232.432185][ T8174] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  232.463671][ T8175] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  233.663074][ T8179] netlink: 'syz.1.681': attribute type 10 has an invalid length.
[  233.767872][ T8179] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.681'.
[  233.851083][ T8179] netlink: 188 bytes leftover after parsing attributes in process `syz.1.681'.
[  234.166489][ T8186] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.683'.
[  236.225527][ T8196] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.686'.
[  237.199908][ T8199] netlink: 'syz.1.688': attribute type 1 has an invalid length.
[  237.255340][ T8199] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.688'.
[  237.297238][ T8199] netlink: 1 bytes leftover after parsing attributes in process `syz.1.688'.
[  238.655854][ T8258] netlink: 'syz.2.704': attribute type 41 has an invalid length.
[  238.924809][ T8262] netlink: 'syz.2.706': attribute type 39 has an invalid length.
[  239.932773][ T8278] netlink: 60 bytes leftover after parsing attributes in process `syz.0.709'.
[  240.395111][ T8283] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.710'.
[  240.443996][ T8286] netlink: 'syz.2.712': attribute type 1 has an invalid length.
[  240.462119][ T8286] netlink: 154788 bytes leftover after parsing attributes in process `syz.2.712'.
[  240.481222][ T8283] netlink: 6324 bytes leftover after parsing attributes in process `syz.3.710'.
[  240.791050][ T6782] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  242.811337][ T8322] syzkaller0: entered promiscuous mode
[  242.830411][ T8322] syzkaller0: entered allmulticast mode
[  242.843245][ T8335] netlink: set zone limit has 8 unknown bytes
[  242.866593][ T8333] netlink: 'syz.2.723': attribute type 49 has an invalid length.
[  243.166920][ T8338] sctp: [Deprecated]: syz.2.723 (pid 8338) Use of struct sctp_assoc_value in delayed_ack socket option.
[  243.166920][ T8338] Use struct sctp_sack_info instead
[  244.715257][ T8362] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.728'.
[  246.495579][ T8372] delete_channel: no stack
[  246.695123][ T8379] netlink: 15487 bytes leftover after parsing attributes in process `syz.1.735'.
[  246.732022][ T8383] netlink: 'syz.0.733': attribute type 10 has an invalid length.
[  246.963134][ T8392] netlink: 148 bytes leftover after parsing attributes in process `syz.1.738'.
[  247.214178][ T8394] netlink: 'syz.0.739': attribute type 10 has an invalid length.
[  247.240797][ T8394] netlink: 40 bytes leftover after parsing attributes in process `syz.0.739'.
[  247.290395][ T8394] batman_adv: batadv0: Adding interface: hsr_slave_1
[  247.315840][ T8394] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  247.347066][ T8394] batman_adv: batadv0: Interface activated: hsr_slave_1
[  247.364600][ T8401] netlink: 140 bytes leftover after parsing attributes in process `syz.3.742'.
[  247.374279][ T8404] netlink: 'syz.2.743': attribute type 21 has an invalid length.
[  247.421552][ T8393] delete_channel: no stack
[  247.657536][ T8413] netlink: 16222 bytes leftover after parsing attributes in process `syz.1.747'.
[  248.809226][ T8437] netlink: 'syz.1.752': attribute type 13 has an invalid length.
[  248.841728][ T8437] netlink: 24643 bytes leftover after parsing attributes in process `syz.1.752'.
[  249.491639][ T8455] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  249.498210][ T8455] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  249.770620][ T8433] netlink: 176 bytes leftover after parsing attributes in process `syz.2.751'.
[  250.781350][ T8468] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.760'.
[  250.858626][ T8467] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.760'.
[  251.279281][ T8485] netlink: 13695 bytes leftover after parsing attributes in process `syz.0.764'.
[  252.354734][ T8505] netlink: 164 bytes leftover after parsing attributes in process `syz.2.770'.
[  253.131185][ T8515] netlink: 'syz.0.773': attribute type 28 has an invalid length.
[  253.150293][ T8515] netlink: 'syz.0.773': attribute type 29 has an invalid length.
[  253.175052][ T8515] netlink: 132 bytes leftover after parsing attributes in process `syz.0.773'.
[  253.567032][ T8524] netlink: 60 bytes leftover after parsing attributes in process `syz.0.776'.
[  253.676212][ T8522] cpuset.mems: port 1(team0) entered blocking state
[  253.867391][ T8522] cpuset.mems: port 1(team0) entered disabled state
[  253.887464][ T8522] team0: entered allmulticast mode
[  253.895152][ T8522] team_slave_0: entered allmulticast mode
[  253.904207][ T8522] team_slave_1: entered allmulticast mode
[  253.925844][ T8522] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  254.211200][ T8522] team0: entered promiscuous mode
[  254.216345][ T8522] team_slave_0: entered promiscuous mode
[  254.230474][ T8522] team_slave_1: entered promiscuous mode
[  254.236554][ T8522] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[  254.569975][ T8539] netlink: 192 bytes leftover after parsing attributes in process `syz.0.781'.
[  254.835166][ T8540] netlink: 192 bytes leftover after parsing attributes in process `syz.0.781'.
[  255.210549][ T8545] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.784'.
[  255.783492][ T8555] netlink: 'syz.0.786': attribute type 39 has an invalid length.
[  256.047091][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  256.063849][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  256.124523][ T8560] netlink: 'syz.1.789': attribute type 13 has an invalid length.
[  256.155288][ T8560] netlink: 24643 bytes leftover after parsing attributes in process `syz.1.789'.
[  257.403393][ T8567] delete_channel: no stack
[  258.206873][ T8593] netlink: 'syz.1.799': attribute type 10 has an invalid length.
[  259.818579][ T8607] delete_channel: no stack
[  259.823326][ T8612] batman_adv: batadv0: Interface deactivated: wlan0
[  260.067243][ T8613] netlink: 180 bytes leftover after parsing attributes in process `syz.0.804'.
[  260.120795][ T8614] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode
[  260.146720][ T8614] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode
[  260.161369][ T8614] batman_adv: batadv0: Interface activated: wlan0
[  261.485284][ T8645] netlink: 44 bytes leftover after parsing attributes in process `syz.2.812'.
[  262.037415][ T8657] syz.2.817[8657] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  262.037587][ T8657] syz.2.817[8657] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  262.137654][ T8658] syz.2.817[8658] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  262.915311][ T8663] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.818'.
[  266.667717][ T8699] sctp: [Deprecated]: syz.2.825 (pid 8699) Use of int in maxseg socket option.
[  266.667717][ T8699] Use struct sctp_assoc_value instead
[  269.771160][ T8740] netlink: 'syz.2.836': attribute type 21 has an invalid length.
[  271.034429][ T8750] netlink: 11743 bytes leftover after parsing attributes in process `syz.1.838'.
[  271.608668][ T8761] netlink: 'syz.3.839': attribute type 21 has an invalid length.
[  271.653792][ T8761] netlink: 128 bytes leftover after parsing attributes in process `syz.3.839'.
[  271.673836][ T8761] netlink: 'syz.3.839': attribute type 4 has an invalid length.
[  271.709630][ T8761] netlink: 'syz.3.839': attribute type 5 has an invalid length.
[  271.744767][ T8761] netlink: 3 bytes leftover after parsing attributes in process `syz.3.839'.
[  271.806970][ T6161] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  274.290528][ T8822] netlink: 'syz.3.854': attribute type 10 has an invalid length.
[  274.314353][ T8822] bridge0: port 3(macsec0) entered blocking state
[  274.347907][ T8822] bridge0: port 3(macsec0) entered disabled state
[  274.397359][ T8822] macsec0: entered allmulticast mode
[  274.402736][ T8822] veth1_macvtap: entered allmulticast mode
[  274.533068][ T8822] macsec0: entered promiscuous mode
[  274.551742][ T8822] bridge0: port 3(macsec0) entered blocking state
[  274.558473][ T8822] bridge0: port 3(macsec0) entered forwarding state
[  274.995087][ T8841] netlink: 'syz.1.861': attribute type 10 has an invalid length.
[  275.278923][ T8844] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.860'.
[  275.816282][ T8849] netlink: 'syz.3.863': attribute type 21 has an invalid length.
[  275.909643][ T8849] netlink: 'syz.3.863': attribute type 1 has an invalid length.
[  275.971036][ T8849] netlink: 16090 bytes leftover after parsing attributes in process `syz.3.863'.
[  276.823086][ T8865] netlink: 'syz.1.866': attribute type 29 has an invalid length.
[  277.319454][ T8879] netlink: 'syz.2.870': attribute type 33 has an invalid length.
[  277.355793][ T8879] netlink: 160 bytes leftover after parsing attributes in process `syz.2.870'.
[  278.054508][ T8910] netlink: 'syz.2.877': attribute type 9 has an invalid length.
[  278.126510][ T8910] netlink: 79 bytes leftover after parsing attributes in process `syz.2.877'.
[  279.052112][ T8932] netlink: 60 bytes leftover after parsing attributes in process `syz.2.884'.
[  279.082949][ T8932] netlink: 60 bytes leftover after parsing attributes in process `syz.2.884'.
[  279.130564][ T8935] netlink: 60 bytes leftover after parsing attributes in process `syz.2.884'.
[  279.192977][ T8932] netlink: 60 bytes leftover after parsing attributes in process `syz.2.884'.
[  282.597567][ T8995] netlink: 'syz.0.901': attribute type 10 has an invalid length.
[  282.605417][ T8995] netlink: 40 bytes leftover after parsing attributes in process `syz.0.901'.
[  282.658279][ T8997] netlink: 'syz.2.902': attribute type 3 has an invalid length.
[  282.666078][ T8997] netlink: 142400 bytes leftover after parsing attributes in process `syz.2.902'.
[  282.680627][ T8995] bridge0: port 1(ipvlan1) entered blocking state
[  282.696886][ T8995] bridge0: port 1(ipvlan1) entered disabled state
[  282.723854][ T8995] ipvlan1: entered allmulticast mode
[  282.749984][ T8995] veth0_vlan: entered allmulticast mode
[  282.782603][ T8995] ipvlan1: left allmulticast mode
[  282.869677][ T8995] veth0_vlan: left allmulticast mode
[  282.935374][ T8995] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  284.114913][ T9024] sit0: entered allmulticast mode
[  284.932373][ T9052] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.916'.
[  285.390568][ T9063] netlink: 60 bytes leftover after parsing attributes in process `syz.0.917'.
[  285.581515][ T9067] netlink: 'syz.1.920': attribute type 10 has an invalid length.
[  285.645189][ T9067] netlink: 55 bytes leftover after parsing attributes in process `syz.1.920'.
[  288.496800][ T9100] sit0: entered promiscuous mode
[  288.501853][ T9100] sit0: entered allmulticast mode
[  288.700422][ T9107] netlink: 'syz.2.930': attribute type 21 has an invalid length.
[  288.714382][ T9107] netlink: 'syz.2.930': attribute type 1 has an invalid length.
[  288.778210][ T9112] netlink: 'syz.2.930': attribute type 12 has an invalid length.
[  288.786039][ T9112] netlink: 132 bytes leftover after parsing attributes in process `syz.2.930'.
[  289.126893][ T9120] netlink: 'syz.1.933': attribute type 1 has an invalid length.
[  289.134827][ T9120] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.933'.
[  289.259959][ T9123] delete_channel: no stack
[  289.293404][ T9129] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.936'.
[  289.326704][ T9129] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.936'.
[  289.366956][ T9130] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.936'.
[  290.058568][ T9136] netlink: 'syz.3.937': attribute type 41 has an invalid length.
[  290.096557][ T9136] netlink: 40 bytes leftover after parsing attributes in process `syz.3.937'.
[  290.387686][ T9143] netlink: 'syz.1.939': attribute type 10 has an invalid length.
[  290.425433][ T9143] netlink: 2 bytes leftover after parsing attributes in process `syz.1.939'.
[  290.537490][ T9143] bond0: entered promiscuous mode
[  290.586480][ T9143] bond_slave_0: entered promiscuous mode
[  290.629238][ T9143] bond_slave_1: entered promiscuous mode
[  290.645465][ T9143] bridge0: port 4(bond0) entered blocking state
[  290.652943][ T9143] bridge0: port 4(bond0) entered disabled state
[  290.665375][ T9143] bond0: entered allmulticast mode
[  290.671825][ T9143] bond_slave_0: entered allmulticast mode
[  290.678253][ T9143] bond_slave_1: entered allmulticast mode
[  290.695148][ T9143] bridge0: port 4(bond0) entered blocking state
[  290.701871][ T9143] bridge0: port 4(bond0) entered forwarding state
[  292.136497][ T9168] netlink: 'syz.1.944': attribute type 21 has an invalid length.
[  292.144372][ T9168] netlink: 'syz.1.944': attribute type 1 has an invalid length.
[  292.722487][ T9177] netlink: 60 bytes leftover after parsing attributes in process `syz.1.947'.
[  293.270679][ T9179] netlink: 'syz.0.948': attribute type 29 has an invalid length.
[  293.290981][ T9179] netlink: 'syz.0.948': attribute type 29 has an invalid length.
[  293.575600][ T9183] netlink: 156 bytes leftover after parsing attributes in process `syz.3.951'.
[  293.670307][ T9183] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.951'.
[  293.859034][ T9190] validate_nla: 2 callbacks suppressed
[  293.859077][ T9190] netlink: 'syz.2.953': attribute type 33 has an invalid length.
[  293.888709][ T9190] netlink: 152 bytes leftover after parsing attributes in process `syz.2.953'.
[  294.701675][ T9203] netlink: 'syz.0.955': attribute type 13 has an invalid length.
[  294.719314][ T9203] netlink: 'syz.0.955': attribute type 58 has an invalid length.
[  294.741536][ T9203] netlink: 152 bytes leftover after parsing attributes in process `syz.0.955'.
[  295.024200][ T9211] netlink: 'syz.0.957': attribute type 21 has an invalid length.
[  295.033223][ T9211] netlink: 'syz.0.957': attribute type 6 has an invalid length.
[  295.045913][ T9211] netlink: 132 bytes leftover after parsing attributes in process `syz.0.957'.
[  295.074476][ T9212] netlink: 'syz.0.957': attribute type 21 has an invalid length.
[  295.088578][ T9212] netlink: 'syz.0.957': attribute type 6 has an invalid length.
[  295.104911][ T9212] netlink: 132 bytes leftover after parsing attributes in process `syz.0.957'.
[  295.878288][ T9226] netlink: 'syz.0.960': attribute type 12 has an invalid length.
[  295.958473][ T9226] netlink: 132 bytes leftover after parsing attributes in process `syz.0.960'.
[  298.216134][ T9268] netlink: 152 bytes leftover after parsing attributes in process `syz.1.971'.
[  300.918649][ T9318] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.982'.
[  300.980179][ T9318] netlink: 'syz.1.982': attribute type 10 has an invalid length.
[  301.007757][ T9318] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  301.023115][ T9318] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  301.033105][ T9318] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  302.058671][ T9345] netlink: 'syz.1.988': attribute type 10 has an invalid length.
[  302.082973][ T9345] bridge0: port 3(dummy0) entered disabled state
[  302.186896][ T9345] dummy0: left allmulticast mode
[  302.220118][ T9345] dummy0: left promiscuous mode
[  302.226114][ T9345] bridge0: port 3(dummy0) entered disabled state
[  302.263748][ T9345] team0: Port device dummy0 added
[  302.272907][ T9347] netlink: 'syz.1.988': attribute type 10 has an invalid length.
[  302.516331][ T9347] team0: Port device dummy0 removed
[  302.747071][ T9360] netlink: 'syz.3.989': attribute type 21 has an invalid length.
[  302.942059][ T9360] netlink: 128 bytes leftover after parsing attributes in process `syz.3.989'.
[  303.563714][ T9369] netlink: 'syz.3.991': attribute type 10 has an invalid length.
[  304.169027][ T9391] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.997'.
[  304.627321][ T9408] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1002'.
[  304.666496][ T9408] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1002'.
[  304.839027][ T9416] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1003'.
[  304.955302][ T9416] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  305.056025][ T9422] syzkaller0: entered promiscuous mode
[  305.091088][ T9422] syzkaller0: entered allmulticast mode
[  305.229722][ T9427] netlink: 'syz.1.1009': attribute type 8 has an invalid length.
[  305.249315][ T9427] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1009'.
[  305.379979][ T9429] netlink: 159532 bytes leftover after parsing attributes in process `syz.0.1010'.
[  305.393325][ T9429] netlink: zone id is out of range
[  305.406778][ T9429] netlink: zone id is out of range
[  305.416938][ T9429] netlink: zone id is out of range
[  305.427097][ T9429] netlink: zone id is out of range
[  305.450557][ T9429] netlink: zone id is out of range
[  305.466737][ T9429] netlink: zone id is out of range
[  305.472559][ T9429] netlink: zone id is out of range
[  305.489828][ T9429] netlink: zone id is out of range
[  305.506713][ T9429] netlink: zone id is out of range
[  307.825467][ T9452] netlink: 'syz.2.1014': attribute type 21 has an invalid length.
[  307.833968][ T9452] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1014'.
[  307.845603][ T5774] Bluetooth: hci2: ACL packet for unknown connection handle 0
[  308.316244][ T9471] macsec0: entered promiscuous mode
[  308.333316][ T9471] macsec0: entered allmulticast mode
[  308.349816][ T9471] veth1_macvtap: entered allmulticast mode
[  308.456266][ T9477] sit0: entered allmulticast mode
[  308.495984][ T9477] sit0: entered promiscuous mode
[  309.980095][ T9518] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1032'.
[  310.065022][ T9516] netlink: 'syz.1.1032': attribute type 10 has an invalid length.
[  310.424170][ T9528] C: renamed from team_slave_0 (while UP)
[  310.481844][ T9528] netlink: 'syz.1.1035': attribute type 8 has an invalid length.
[  310.546476][ T9528] net_ratelimit: 376 callbacks suppressed
[  310.546495][ T9528] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  311.941507][ T9550] netlink: 'syz.1.1039': attribute type 10 has an invalid length.
[  312.011817][ T9550] dummy0: entered promiscuous mode
[  312.020734][ T9550] dummy0: entered allmulticast mode
[  312.027692][ T9550] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  312.043801][ T9562] sit0: entered promiscuous mode
[  312.195724][ T9565] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1043'.
[  312.234203][ T9565] bridge0: port 4(bond0) entered disabled state
[  312.298153][ T9565] bond0 (unregistering): left allmulticast mode
[  312.314894][ T9565] bond_slave_0: left allmulticast mode
[  312.360032][ T9565] bond_slave_1: left allmulticast mode
[  312.365607][ T9565] netdevsim netdevsim1 netdevsim0: left allmulticast mode
[  312.437523][ T9569] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.1043'.
[  312.486613][ T9565] dummy0: left allmulticast mode
[  312.504119][ T9565] bridge0: port 4(bond0) entered disabled state
[  312.528196][ T9565] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  312.547307][ T9565] bond_slave_0: left promiscuous mode
[  312.571791][ T9565] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  312.592153][ T9565] bond_slave_1: left promiscuous mode
[  312.615905][ T9565] bond0 (unregistering): (slave netdevsim0): Releasing backup interface
[  312.642143][ T9565] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  312.683149][ T9565] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  312.697076][ T9565] dummy0: left promiscuous mode
[  312.710376][ T9565] bond0 (unregistering): Released all slaves
[  313.684658][ T9595] netlink: 'syz.1.1053': attribute type 4 has an invalid length.
[  313.694762][ T9585] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1048'.
[  313.967134][ T9595] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.1053'.
[  314.255190][ T9585] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1048'.
[  314.374850][ T9593] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1048'.
[  314.738190][ T9600] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1048'.
[  316.249602][ T9643] netlink: 'syz.0.1061': attribute type 9 has an invalid length.
[  316.293175][ T9643] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1061'.
[  316.663606][ T9654] netlink: 'syz.0.1067': attribute type 2 has an invalid length.
[  316.740547][ T9660] netlink: 'syz.0.1067': attribute type 1 has an invalid length.
[  316.807604][ T9660] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.1067'.
[  317.081114][ T9669] netlink: 'syz.0.1071': attribute type 9 has an invalid length.
[  317.120500][ T9669] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.1071'.
[  317.633794][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  317.643434][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  317.788910][ T9680] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.1073'.
[  317.950494][ T9680] netlink: 4612 bytes leftover after parsing attributes in process `syz.0.1073'.
[  319.312607][ T9720] __nla_validate_parse: 1 callbacks suppressed
[  319.312627][ T9720] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.1084'.
[  319.636986][ T9730] netlink: 'syz.3.1084': attribute type 4 has an invalid length.
[  319.646662][ T9730] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1084'.
[  319.805566][ T9730] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  319.841852][ T9731] netlink: 'syz.1.1086': attribute type 10 has an invalid length.
[  319.965052][ T9731] veth1_vlan: entered allmulticast mode
[  320.046272][ T9731] team0: Device veth1_vlan failed to register rx_handler
[  320.896527][ T9767] netlink: 'syz.3.1094': attribute type 5 has an invalid length.
[  321.249409][ T9770] netlink: 'syz.3.1094': attribute type 21 has an invalid length.
[  322.014734][ T9803] netlink: 'syz.2.1105': attribute type 1 has an invalid length.
[  322.046627][ T9803] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.1105'.
[  323.044723][ T9809] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1107'.
[  323.116541][ T9813] netlink: 'syz.2.1108': attribute type 5 has an invalid length.
[  323.158417][ T9813] netlink: 'syz.2.1108': attribute type 5 has an invalid length.
[  324.136211][ T9828] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1112'.
[  324.256733][ T9833] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1113'.
[  324.285882][ T9830] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1113'.
[  329.298378][ T9902] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1134'.
[  332.441301][ T9947] veth0_vlan: entered allmulticast mode
[  333.746688][ T9955] netlink: 'syz.1.1149': attribute type 3 has an invalid length.
[  333.826806][ T9955] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1149'.
[  334.204887][ T9949] veth0_vlan: left promiscuous mode
[  334.380682][ T9949] veth0_vlan: entered promiscuous mode
[  334.850592][ T9965] netlink: 'syz.3.1152': attribute type 2 has an invalid length.
[  334.866624][ T9965] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1152'.
[  335.115052][ T9973] netlink: 'syz.1.1153': attribute type 21 has an invalid length.
[  335.143663][ T9973] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1153'.
[  335.228472][ T9973] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1153'.
[  338.410546][ T9982] __sock_release: fasync list not empty!
[  338.622534][ T9990] netlink: 'syz.2.1156': attribute type 10 has an invalid length.
[  338.647191][ T9990] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1156'.
[  338.851276][ T9993] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1159'.
[  339.365073][T10000] netlink: 'syz.0.1162': attribute type 21 has an invalid length.
[  339.400806][T10000] netlink: 'syz.0.1162': attribute type 20 has an invalid length.
[  339.592621][T10011] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1164'.
[  339.763895][T10016] netlink: 'syz.2.1164': attribute type 21 has an invalid length.
[  339.787378][T10016] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1164'.
[  340.079119][T10024] netlink: 'syz.3.1167': attribute type 21 has an invalid length.
[  341.405169][T10043] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1174'.
[  342.704388][T10066] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1180'.
[  342.776621][T10069] netlink: 'syz.3.1180': attribute type 21 has an invalid length.
[  342.800976][T10069] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1180'.
[  343.326907][T10078] netlink: 'syz.0.1184': attribute type 33 has an invalid length.
[  343.335562][T10078] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1184'.
[  343.719143][T10095] netlink: 'syz.1.1188': attribute type 21 has an invalid length.
[  343.728986][T10095] netlink: 'syz.1.1188': attribute type 10 has an invalid length.
[  343.737176][T10095] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.1188'.
[  344.046822][T10105] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.1192'.
[  344.158405][T10105] netlink: 15998 bytes leftover after parsing attributes in process `syz.3.1192'.
[  344.191065][T10110] netlink: 56863 bytes leftover after parsing attributes in process `syz.1.1193'.
[  345.371399][T10123] netlink: 'syz.0.1197': attribute type 10 has an invalid length.
[  347.152095][T10123] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  347.176165][T10137] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1198'.
[  347.207668][T10139] netlink: 'syz.1.1198': attribute type 21 has an invalid length.
[  347.215564][T10139] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1198'.
[  347.590599][T10154] netlink: 'syz.3.1204': attribute type 10 has an invalid length.
[  347.616892][T10154] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1204'.
[  347.662797][T10154] cpuset.mems: port 1(team0) entered disabled state
[  347.774524][T10154] bridge0: port 4(team0) entered blocking state
[  347.808703][T10154] bridge0: port 4(team0) entered disabled state
[  347.878006][T10154] bridge0: port 4(team0) entered blocking state
[  347.884654][T10154] bridge0: port 4(team0) entered forwarding state
[  349.040893][T10164] mac80211_hwsim hwsim3 .3�c��: renamed from wlan1
[  349.258773][T10183] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.1210'.
[  350.379017][T10217] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.1220'.
[  350.823747][T10219] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1218'.
[  350.866639][T10219] veth0_to_bond: entered promiscuous mode
[  350.875255][T10229] netlink: 'syz.3.1222': attribute type 29 has an invalid length.
[  350.884958][T10229] netlink: 'syz.3.1222': attribute type 29 has an invalid length.
[  350.893773][T10230] netlink: 'syz.3.1222': attribute type 29 has an invalid length.
[  351.006130][T10232] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1223'.
[  351.775430][T10248] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.1229'.
[  351.835272][T10253] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.1229'.
[  353.294381][T10273] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1236'.
[  353.341274][T10274] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1236'.
[  354.187521][T10292] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.1240'.
[  356.501154][T10317] : entered promiscuous mode
[  356.526899][T10317] : entered allmulticast mode
[  357.060225][T10335] netlink: 'syz.2.1250': attribute type 10 has an invalid length.
[  357.261321][T10338] syz.3.1249[10338] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  358.205916][T10356] netlink: 'syz.3.1256': attribute type 16 has an invalid length.
[  358.244008][T10356] netlink: 'syz.3.1256': attribute type 3 has an invalid length.
[  358.271881][T10356] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1256'.
[  358.659357][T10366] netlink: 'syz.0.1259': attribute type 5 has an invalid length.
[  358.783209][T10368] netlink: 'syz.2.1260': attribute type 21 has an invalid length.
[  358.999151][T10375] netlink: 'syz.0.1261': attribute type 3 has an invalid length.
[  359.036435][T10375] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1261'.
[  359.931795][T10379] netlink: 'syz.2.1262': attribute type 1 has an invalid length.
[  360.480970][T10390] netlink: 'syz.2.1266': attribute type 21 has an invalid length.
[  360.547627][T10390] netlink: 'syz.2.1266': attribute type 1 has an invalid length.
[  361.161389][T10400] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1268'.
[  361.227022][T10400] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  361.235349][T10400] openvswitch: netlink: Message has 1 unknown bytes.
[  362.356415][T10425] netlink: 'syz.3.1274': attribute type 10 has an invalid length.
[  362.679809][T10425] .`: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  362.859603][T10450] netlink: 'syz.2.1282': attribute type 4 has an invalid length.
[  362.864106][T10452] netlink: 'syz.1.1290': attribute type 33 has an invalid length.
[  362.876654][T10450] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1282'.
[  362.887726][T10452] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1290'.
[  362.906306][T10452] `: renamed from team0 (while UP)
[  364.754705][T10486] netlink: 'syz.2.1291': attribute type 3 has an invalid length.
[  364.795811][T10486] netlink: 16066 bytes leftover after parsing attributes in process `syz.2.1291'.
[  364.830592][T10483] netlink: 'syz.2.1291': attribute type 3 has an invalid length.
[  364.860648][T10483] netlink: 16066 bytes leftover after parsing attributes in process `syz.2.1291'.
[  365.378093][T10490] netlink: 208064 bytes leftover after parsing attributes in process `syz.2.1292'.
[  365.611831][T10495] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1294'.
[  367.301783][T10509] netlink: 'syz.0.1300': attribute type 16 has an invalid length.
[  367.323218][T10509] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1300'.
[  367.394984][T10513] netlink: 'syz.2.1301': attribute type 2 has an invalid length.
[  367.426730][T10513] netlink: 'syz.2.1301': attribute type 9 has an invalid length.
[  367.434954][T10513] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1301'.
[  368.433436][T10535] netlink: 'syz.0.1306': attribute type 3 has an invalid length.
[  368.456715][T10535] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1306'.
[  368.732362][T10541] netlink: 191376 bytes leftover after parsing attributes in process `syz.1.1308'.
[  368.756886][T10541] netlink: 'syz.1.1308': attribute type 1 has an invalid length.
[  368.894303][T10546] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1309'.
[  369.332047][T10557] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1313'.
[  370.941876][T10583] delete_channel: no stack
[  370.994578][T10589] bond0: entered promiscuous mode
[  371.017214][T10589] bond_slave_0: entered promiscuous mode
[  371.034756][T10589] bond_slave_1: entered promiscuous mode
[  371.846233][T10609] __nla_validate_parse: 1 callbacks suppressed
[  371.846254][T10609] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.1329'.
[  372.892759][T10651] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1342'.
[  372.983722][T10660] netlink: 'syz.2.1344': attribute type 15 has an invalid length.
[  372.994404][T10660] netlink: 'syz.2.1344': attribute type 5 has an invalid length.
[  373.005730][T10660] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1344'.
[  373.326644][T10669] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  374.082651][T10683] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1351'.
[  374.907127][T10703] netlink: 'syz.1.1356': attribute type 12 has an invalid length.
[  374.931513][T10703] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1356'.
[  378.902601][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  378.909328][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  379.330318][T10768] syzkaller0: entered promiscuous mode
[  379.346594][T10768] syzkaller0: entered allmulticast mode
[  379.976588][T10789] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1379'.
[  381.427009][T10810] delete_channel: no stack
[  381.575110][T10821] netlink: 'syz.2.1389': attribute type 22 has an invalid length.
[  381.585461][T10824] netlink: 'syz.2.1389': attribute type 2 has an invalid length.
[  381.597167][T10824] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1389'.
[  382.825499][T10856] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.1400'.
[  382.830624][T10854] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.1400'.
[  382.852591][T10856] netlink: 'syz.3.1400': attribute type 10 has an invalid length.
[  382.891142][T10856] bridge0: port 4(team0) entered disabled state
[  382.897795][T10856] bridge0: port 3(macsec0) entered disabled state
[  382.904622][T10856] bridge0: port 2(bridge_slave_1) entered disabled state
[  382.912111][T10856] bridge0: port 1(bridge_slave_0) entered disabled state
[  383.002252][T10856] bridge0: port 4(team0) entered blocking state
[  383.008995][T10856] bridge0: port 4(team0) entered forwarding state
[  383.015820][T10856] bridge0: port 3(macsec0) entered blocking state
[  383.022495][T10856] bridge0: port 3(macsec0) entered forwarding state
[  383.029449][T10856] bridge0: port 2(bridge_slave_1) entered blocking state
[  383.036741][T10856] bridge0: port 2(bridge_slave_1) entered forwarding state
[  383.044259][T10856] bridge0: port 1(bridge_slave_0) entered blocking state
[  383.051552][T10856] bridge0: port 1(bridge_slave_0) entered forwarding state
[  383.158497][T10856] .`: (slave bridge0): Enslaving as an active interface with an up link
[  383.167128][T10858] netlink: 'syz.3.1400': attribute type 10 has an invalid length.
[  383.208551][T10858] bridge0: port 4(team0) entered disabled state
[  383.215100][T10858] bridge0: port 3(macsec0) entered disabled state
[  383.221858][T10858] bridge0: port 2(bridge_slave_1) entered disabled state
[  383.229140][T10858] bridge0: port 1(bridge_slave_0) entered disabled state
[  383.439443][T10867] netlink: 'syz.1.1404': attribute type 7 has an invalid length.
[  383.476602][T10867] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1404'.
[  383.588578][T10879] netlink: 'syz.3.1408': attribute type 9 has an invalid length.
[  383.644304][T10879] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1408'.
[  383.917170][T10878] delete_channel: no stack
[  384.852680][T10905] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1415'.
[  384.938921][T10909] veth1_macvtap: left promiscuous mode
[  385.097116][T10909] veth1_macvtap: entered promiscuous mode
[  385.102997][T10909] macsec0: entered promiscuous mode
[  385.121895][T10909] macsec0: entered allmulticast mode
[  385.146618][T10909] veth1_macvtap: entered allmulticast mode
[  385.379967][T10917] netlink: 'syz.0.1418': attribute type 10 has an invalid length.
[  385.579241][T10917] hsr_slave_0 (unregistering): left promiscuous mode
[  388.497718][T10964] netlink: 21 bytes leftover after parsing attributes in process `syz.1.1428'.
[  388.535445][T10964] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  388.661039][T10967] netlink: 'syz.0.1429': attribute type 1 has an invalid length.
[  388.679251][T10967] netlink: 'syz.0.1429': attribute type 3 has an invalid length.
[  388.709817][T10967] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1429'.
[  389.604345][T10981] !1�: renamed from bond_slave_0 (while UP)
[  390.558186][T10990] netlink: 56537 bytes leftover after parsing attributes in process `syz.0.1438'.
[  391.201720][T11000] netlink: 'syz.0.1439': attribute type 9 has an invalid length.
[  391.220175][T11000] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1439'.
[  391.584037][T11003] Q�6�`Ҙ: renamed from lo (while UP)
[  391.819175][T11007] netlink: 'syz.3.1442': attribute type 2 has an invalid length.
[  391.876473][T11006] netlink: 'syz.3.1442': attribute type 2 has an invalid length.
[  392.570072][T11031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1445'.
[  393.006626][T11032] netlink: 'syz.1.1449': attribute type 28 has an invalid length.
[  393.046949][T11032] netlink: 'syz.1.1449': attribute type 29 has an invalid length.
[  393.097896][T11032] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1449'.
[  393.543862][T11037] veth0_vlan: left promiscuous mode
[  393.557562][T11037] veth0_vlan: entered promiscuous mode
[  394.254182][T11058] netlink: 'syz.0.1456': attribute type 22 has an invalid length.
[  394.271593][T11060] netlink: 'syz.0.1456': attribute type 2 has an invalid length.
[  394.285426][T11060] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1456'.
[  394.847728][T11063] netlink: 'syz.0.1459': attribute type 10 has an invalid length.
[  394.876610][T11063] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1459'.
[  394.904298][T11063] 8021q: adding VLAN 0 to HW filter on device bond0
[  394.952778][T11063] bridge0: port 1(bond0) entered blocking state
[  394.986861][T11063] bridge0: port 1(bond0) entered disabled state
[  395.017025][T11063] bond0: entered allmulticast mode
[  395.036626][T11063] !1�: entered allmulticast mode
[  395.046774][T11063] bond_slave_1: entered allmulticast mode
[  395.069663][T11063] bridge0: port 1(bond0) entered blocking state
[  395.076226][T11063] bridge0: port 1(bond0) entered forwarding state
[  395.238174][T11082] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1462'.
[  395.285262][T11081] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1462'.
[  395.464161][T11081] netlink: 'syz.1.1462': attribute type 29 has an invalid length.
[  395.546980][T11081] netlink: 'syz.1.1462': attribute type 29 has an invalid length.
[  395.614893][T11082] netlink: 'syz.1.1462': attribute type 29 has an invalid length.
[  395.816470][T11087] netlink: 'syz.1.1462': attribute type 29 has an invalid length.
[  396.402097][T11112] netlink: 'syz.0.1469': attribute type 27 has an invalid length.
[  396.426515][T11112] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1469'.
[  397.034302][T11130] netlink: 'syz.0.1477': attribute type 29 has an invalid length.
[  397.057595][T11130] netlink: 'syz.0.1477': attribute type 29 has an invalid length.
[  398.687672][T11163] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1487'.
[  398.722967][T11163] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  398.761401][T11163] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  399.073951][T11173] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1489'.
[  399.095425][T11173] hsr_slave_1: left promiscuous mode
[  399.833602][T11195] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.1497'.
[  400.769421][T11218] validate_nla: 2 callbacks suppressed
[  400.769459][T11218] netlink: 'syz.1.1503': attribute type 16 has an invalid length.
[  400.879865][T11218] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1503'.
[  400.983287][T11223] syz.3.1506[11223] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  400.983432][T11223] syz.3.1506[11223] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  401.001056][T11217] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  401.166888][T11229] netlink: 'syz.3.1506': attribute type 21 has an invalid length.
[  401.212731][T11232] netlink: 'syz.2.1508': attribute type 10 has an invalid length.
[  401.345742][T11228] netlink: 'syz.1.1507': attribute type 3 has an invalid length.
[  401.363466][T11228] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1507'.
[  402.875037][T11270] 
��0: renamed from batadv_slave_1 (while UP)
[  402.961836][T11273] netlink: 'syz.0.1518': attribute type 1 has an invalid length.
[  402.973837][T11273] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.1518'.
[  402.999186][T11273] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1518'.
[  403.136776][ T6772] wlan1: Trigger new scan to find an IBSS to join
[  403.406968][T11292] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.1524'.
[  403.654632][T11299] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1526'.
[  403.775403][T11299] bridge0: port 1(bond0) entered disabled state
[  404.007343][T11299] bond0 (unregistering): left allmulticast mode
[  404.028966][T11299] !1�: left allmulticast mode
[  404.035470][T11299] bond_slave_1: left allmulticast mode
[  404.049680][T11299] bridge0: port 1(bond0) entered disabled state
[  404.249762][T11299] bond0 (unregistering): (slave 
c!1�): Releasing backup interface
[  404.285576][T11299] !1�: left promiscuous mode
[  404.407815][T11299] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  404.456232][T11299] bond_slave_1: left promiscuous mode
[  404.514750][T11299] bond0 (unregistering): Released all slaves
[  404.648831][T11313] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.1530'.
[  405.671739][T11335] netlink: 'syz.1.1537': attribute type 2 has an invalid length.
[  405.680603][T11332] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1536'.
[  405.690258][T11335] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1537'.
[  406.182609][ T6163] wlan1: Trigger new scan to find an IBSS to join
[  406.631480][T11349] netlink: 'syz.2.1541': attribute type 4 has an invalid length.
[  407.209847][T11369] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1548'.
[  407.291265][T11371] netlink: 'syz.0.1549': attribute type 29 has an invalid length.
[  407.338967][T11371] netlink: 'syz.0.1549': attribute type 29 has an invalid length.
[  407.427539][T11371] netlink: 'syz.0.1549': attribute type 29 has an invalid length.
[  407.444344][T11371] netlink: 'syz.0.1549': attribute type 4 has an invalid length.
[  407.452263][T11371] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1549'.
[  407.535465][ T5774] Bluetooth: hci3: ISO packet for unknown connection handle 2622
[  408.048345][T11397] netlink: 'syz.1.1559': attribute type 9 has an invalid length.
[  408.056294][T11397] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1559'.
[  408.271609][T11397] netlink: 'syz.1.1559': attribute type 9 has an invalid length.
[  408.284969][T11397] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1559'.
[  408.918489][ T5774] Bluetooth: hci2: unexpected subevent 0x04 length: 150 > 11
[  409.267754][ T6163] wlan1: Trigger new scan to find an IBSS to join
[  410.232801][ T6163] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00
[  410.664010][T11456] netlink: 'syz.2.1575': attribute type 10 has an invalid length.
[  411.373078][T11468] C: renamed from team_slave_0
[  411.401047][T11468] netlink: 'syz.2.1579': attribute type 3 has an invalid length.
[  411.424321][T11468] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1579'.
[  411.446642][T11468] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  411.493163][T11468] netlink: 'syz.2.1579': attribute type 3 has an invalid length.
[  411.517503][T11468] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1579'.
[  411.556634][T11468] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  411.604160][T11468] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1579'.
[  411.625805][T11468] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  411.652413][T11468] validate_nla: 1 callbacks suppressed
[  411.652431][T11468] netlink: 'syz.2.1579': attribute type 3 has an invalid length.
[  411.672256][T11468] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1579'.
[  411.853552][T11468] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  411.876893][T11468] netlink: 'syz.2.1579': attribute type 3 has an invalid length.
[  411.885294][T11468] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1579'.
[  411.895036][T11468] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  412.062749][T11468] netlink: 'syz.2.1579': attribute type 3 has an invalid length.
[  412.146626][T11468] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1579'.
[  412.284451][T11468] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  412.942656][T11486] netlink: 'syz.2.1584': attribute type 9 has an invalid length.
[  412.960763][T11486] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1584'.
[  413.120430][T11493] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1586'.
[  413.131034][T11491] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1585'.
[  413.158955][T11493] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1586'.
[  413.303496][T11488] netlink: 'syz.2.1584': attribute type 9 has an invalid length.
[  416.411797][T11545] wg2: entered allmulticast mode
[  416.693108][T11553] wg2: entered promiscuous mode
[  417.927440][T11585] __nla_validate_parse: 1 callbacks suppressed
[  417.927460][T11585] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1615'.
[  417.983949][T11585] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1615'.
[  418.024278][T11586] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1615'.
[  418.506060][T11592] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1617'.
[  418.814191][T11608] netlink: 'syz.2.1623': attribute type 1 has an invalid length.
[  418.926136][T11609] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1620'.
[  418.953769][T11609] debugfs: Directory '!!�' with parent 'ieee80211' already present!
[  421.388921][T11658] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1638'.
[  421.547893][T11664] syzkaller0: entered promiscuous mode
[  421.553728][T11664] syzkaller0: entered allmulticast mode
[  421.608897][T11664] netlink: 'syz.0.1639': attribute type 7 has an invalid length.
[  421.628689][T11664] netlink: 'syz.0.1639': attribute type 6 has an invalid length.
[  421.760815][T11670] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1641'.
[  422.747187][T11689] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.1645'.
[  424.798593][T11687] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1644'.
[  424.808831][T11695] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1648'.
[  425.097877][T11701] netlink: 'syz.1.1650': attribute type 10 has an invalid length.
[  425.115253][T11701] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1650'.
[  426.729736][T11737] syzkaller0: entered promiscuous mode
[  426.748453][T11737] syzkaller0: entered allmulticast mode
[  426.818498][T11736] netlink: 'syz.3.1661': attribute type 10 has an invalid length.
[  426.834441][T11736] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1661'.
[  426.847723][T11736] batman_adv: batadv0: Adding interface: hsr_slave_1
[  426.855773][T11736] batman_adv: batadv0: Interface activated: hsr_slave_1
[  427.028753][T11735] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1660'.
[  427.104626][T11746] netlink: 'syz.0.1662': attribute type 10 has an invalid length.
[  427.106986][T11732] delete_channel: no stack
[  428.445729][T11774] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1672'.
[  430.154693][T11803] netlink: 'syz.2.1680': attribute type 21 has an invalid length.
[  430.184755][T11803] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1680'.
[  430.589672][T11808] netlink: 'syz.3.1682': attribute type 39 has an invalid length.
[  430.734467][T11808] netlink: 'syz.3.1682': attribute type 5 has an invalid length.
[  431.640289][T11822] FAULT_INJECTION: forcing a failure.
[  431.640289][T11822] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  431.754437][T11822] CPU: 1 PID: 11822 Comm: syz.2.1687 Not tainted syzkaller #0
[  431.761989][T11822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  431.772087][T11822] Call Trace:
[  431.775407][T11822]  <TASK>
[  431.778378][T11822]  dump_stack_lvl+0x18c/0x250
[  431.783291][T11822]  ? show_regs_print_info+0x20/0x20
[  431.788571][T11822]  ? load_image+0x400/0x400
[  431.793149][T11822]  ? __might_fault+0xaa/0x120
[  431.797883][T11822]  ? __lock_acquire+0x7d40/0x7d40
[  431.802970][T11822]  should_fail_ex+0x39d/0x4d0
[  431.807715][T11822]  _copy_from_user+0x2f/0xe0
[  431.812360][T11822]  __sys_bpf+0x23e/0x890
[  431.816660][T11822]  ? bpf_link_show_fdinfo+0x390/0x390
[  431.822124][T11822]  ? lock_chain_count+0x20/0x20
[  431.827040][T11822]  __x64_sys_bpf+0x7c/0x90
[  431.831505][T11822]  do_syscall_64+0x55/0xa0
[  431.836060][T11822]  ? clear_bhb_loop+0x40/0x90
[  431.840783][T11822]  ? clear_bhb_loop+0x40/0x90
[  431.845508][T11822]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  431.851460][T11822] RIP: 0033:0x7f8960f9aeb9
[  431.855920][T11822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  431.875654][T11822] RSP: 002b:00007f8961f12028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  431.884124][T11822] RAX: ffffffffffffffda RBX: 00007f8961215fa0 RCX: 00007f8960f9aeb9
[  431.892224][T11822] RDX: 0000000000000094 RSI: 00002000000020c0 RDI: 0000000000000005
[  431.900231][T11822] RBP: 00007f8961f12090 R08: 0000000000000000 R09: 0000000000000000
[  431.908237][T11822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  431.916246][T11822] R13: 00007f8961216038 R14: 00007f8961215fa0 R15: 00007fffd6717eb8
[  431.924300][T11822]  </TASK>
[  433.812954][T11833] netlink: 'syz.3.1690': attribute type 5 has an invalid length.
[  433.922575][T11845] netlink: 'syz.1.1693': attribute type 19 has an invalid length.
[  433.934180][T11845] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1693'.
[  434.110956][T11853] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1697'.
[  434.206182][T11858] FAULT_INJECTION: forcing a failure.
[  434.206182][T11858] name failslab, interval 1, probability 0, space 0, times 0
[  434.233423][T11858] CPU: 0 PID: 11858 Comm: syz.1.1699 Not tainted syzkaller #0
[  434.240977][T11858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  434.251093][T11858] Call Trace:
[  434.254440][T11858]  <TASK>
[  434.257419][T11858]  dump_stack_lvl+0x18c/0x250
[  434.262180][T11858]  ? show_regs_print_info+0x20/0x20
[  434.267465][T11858]  ? load_image+0x400/0x400
[  434.272042][T11858]  ? __might_sleep+0xe0/0xe0
[  434.276701][T11858]  ? __lock_acquire+0x7d40/0x7d40
[  434.281793][T11858]  should_fail_ex+0x39d/0x4d0
[  434.286539][T11858]  should_failslab+0x9/0x20
[  434.291162][T11858]  slab_pre_alloc_hook+0x59/0x310
[  434.296329][T11858]  ? __get_vm_area_node+0x125/0x370
[  434.301597][T11858]  __kmem_cache_alloc_node+0x53/0x250
[  434.307046][T11858]  ? __get_vm_area_node+0x125/0x370
[  434.312306][T11858]  kmalloc_node_trace+0x26/0xe0
[  434.317220][T11858]  __get_vm_area_node+0x125/0x370
[  434.322308][T11858]  __vmalloc_node_range+0x36e/0x1330
[  434.327653][T11858]  ? bpf_prog_alloc_no_stats+0x47/0x440
[  434.333306][T11858]  ? __lock_acquire+0x7d40/0x7d40
[  434.338398][T11858]  ? free_vm_area+0x50/0x50
[  434.342961][T11858]  ? __fget_files+0x28/0x4b0
[  434.347603][T11858]  ? __fget_files+0x28/0x4b0
[  434.352263][T11858]  ? bpf_prog_alloc_no_stats+0x47/0x440
[  434.357866][T11858]  __vmalloc+0x7a/0x90
[  434.361989][T11858]  ? bpf_prog_alloc_no_stats+0x47/0x440
[  434.367584][T11858]  bpf_prog_alloc_no_stats+0x47/0x440
[  434.373094][T11858]  ? bpf_prog_alloc+0x2b/0x1a0
[  434.377930][T11858]  bpf_prog_alloc+0x3d/0x1a0
[  434.382589][T11858]  bpf_prog_load+0x6eb/0x1670
[  434.387351][T11858]  ? map_freeze+0x420/0x420
[  434.391918][T11858]  ? __might_fault+0xaa/0x120
[  434.396662][T11858]  ? __lock_acquire+0x7d40/0x7d40
[  434.401743][T11858]  ? file_end_write+0x159/0x250
[  434.406652][T11858]  ? __might_fault+0xaa/0x120
[  434.411383][T11858]  ? __might_fault+0xc6/0x120
[  434.416111][T11858]  ? __might_fault+0xaa/0x120
[  434.420842][T11858]  ? bpf_lsm_bpf+0x9/0x10
[  434.425310][T11858]  ? security_bpf+0x7e/0xa0
[  434.429874][T11858]  __sys_bpf+0x5ba/0x890
[  434.434176][T11858]  ? bpf_link_show_fdinfo+0x390/0x390
[  434.439636][T11858]  ? lock_chain_count+0x20/0x20
[  434.444543][T11858]  __x64_sys_bpf+0x7c/0x90
[  434.448988][T11858]  do_syscall_64+0x55/0xa0
[  434.453436][T11858]  ? clear_bhb_loop+0x40/0x90
[  434.458224][T11858]  ? clear_bhb_loop+0x40/0x90
[  434.462940][T11858]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  434.468856][T11858] RIP: 0033:0x7f86c5d9aeb9
[  434.473299][T11858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  434.493043][T11858] RSP: 002b:00007f86c6cf1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  434.501523][T11858] RAX: ffffffffffffffda RBX: 00007f86c6015fa0 RCX: 00007f86c5d9aeb9
[  434.509521][T11858] RDX: 0000000000000094 RSI: 00002000000020c0 RDI: 0000000000000005
[  434.517512][T11858] RBP: 00007f86c6cf1090 R08: 0000000000000000 R09: 0000000000000000
[  434.525500][T11858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  434.533488][T11858] R13: 00007f86c6016038 R14: 00007f86c6015fa0 R15: 00007ffd94eb0368
[  434.541520][T11858]  </TASK>
[  434.561559][T11858] syz.1.1699: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz1,mems_allowed=0-1
[  434.590053][T11858] CPU: 1 PID: 11858 Comm: syz.1.1699 Not tainted syzkaller #0
[  434.597586][T11858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  434.607751][T11858] Call Trace:
[  434.611047][T11858]  <TASK>
[  434.614000][T11858]  dump_stack_lvl+0x18c/0x250
[  434.618735][T11858]  ? show_regs_print_info+0x20/0x20
[  434.623962][T11858]  ? load_image+0x400/0x400
[  434.628495][T11858]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  434.634937][T11858]  ? cpuset_print_current_mems_allowed+0x2e7/0x360
[  434.641466][T11858]  warn_alloc+0x246/0x340
[  434.645818][T11858]  ? __get_vm_area_node+0x125/0x370
[  434.651051][T11858]  ? zone_watermark_ok_safe+0x230/0x230
[  434.656624][T11858]  ? rcu_is_watching+0x15/0xb0
[  434.661420][T11858]  ? __get_vm_area_node+0x356/0x370
[  434.666832][T11858]  __vmalloc_node_range+0x393/0x1330
[  434.672191][T11858]  ? __lock_acquire+0x7d40/0x7d40
[  434.677247][T11858]  ? free_vm_area+0x50/0x50
[  434.681866][T11858]  ? __fget_files+0x28/0x4b0
[  434.686478][T11858]  ? __fget_files+0x28/0x4b0
[  434.691095][T11858]  ? bpf_prog_alloc_no_stats+0x47/0x440
[  434.696673][T11858]  __vmalloc+0x7a/0x90
[  434.700767][T11858]  ? bpf_prog_alloc_no_stats+0x47/0x440
[  434.706342][T11858]  bpf_prog_alloc_no_stats+0x47/0x440
[  434.711741][T11858]  ? bpf_prog_alloc+0x2b/0x1a0
[  434.716537][T11858]  bpf_prog_alloc+0x3d/0x1a0
[  434.721164][T11858]  bpf_prog_load+0x6eb/0x1670
[  434.725885][T11858]  ? map_freeze+0x420/0x420
[  434.730420][T11858]  ? __might_fault+0xaa/0x120
[  434.735138][T11858]  ? __lock_acquire+0x7d40/0x7d40
[  434.740190][T11858]  ? file_end_write+0x159/0x250
[  434.745072][T11858]  ? __might_fault+0xaa/0x120
[  434.749771][T11858]  ? __might_fault+0xc6/0x120
[  434.754466][T11858]  ? __might_fault+0xaa/0x120
[  434.759163][T11858]  ? bpf_lsm_bpf+0x9/0x10
[  434.763521][T11858]  ? security_bpf+0x7e/0xa0
[  434.768055][T11858]  __sys_bpf+0x5ba/0x890
[  434.772325][T11858]  ? bpf_link_show_fdinfo+0x390/0x390
[  434.778179][T11858]  ? lock_chain_count+0x20/0x20
[  434.783064][T11858]  __x64_sys_bpf+0x7c/0x90
[  434.787501][T11858]  do_syscall_64+0x55/0xa0
[  434.791940][T11858]  ? clear_bhb_loop+0x40/0x90
[  434.796639][T11858]  ? clear_bhb_loop+0x40/0x90
[  434.801338][T11858]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  434.807256][T11858] RIP: 0033:0x7f86c5d9aeb9
[  434.811694][T11858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  434.831322][T11858] RSP: 002b:00007f86c6cf1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  434.839767][T11858] RAX: ffffffffffffffda RBX: 00007f86c6015fa0 RCX: 00007f86c5d9aeb9
[  434.847756][T11858] RDX: 0000000000000094 RSI: 00002000000020c0 RDI: 0000000000000005
[  434.855743][T11858] RBP: 00007f86c6cf1090 R08: 0000000000000000 R09: 0000000000000000
[  434.863730][T11858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  434.871716][T11858] R13: 00007f86c6016038 R14: 00007f86c6015fa0 R15: 00007ffd94eb0368
[  434.879730][T11858]  </TASK>
[  434.926583][T11858] Mem-Info:
[  434.930122][T11858] active_anon:6754 inactive_anon:0 isolated_anon:0
[  434.930122][T11858]  active_file:17219 inactive_file:40063 isolated_file:0
[  434.930122][T11858]  unevictable:768 dirty:158 writeback:0
[  434.930122][T11858]  slab_reclaimable:11052 slab_unreclaimable:95020
[  434.930122][T11858]  mapped:24409 shmem:1361 pagetables:511
[  434.930122][T11858]  sec_pagetables:0 bounce:0
[  434.930122][T11858]  kernel_misc_reclaimable:0
[  434.930122][T11858]  free:1340995 free_pcp:10291 free_cma:0
[  435.001508][T11858] Node 0 active_anon:27016kB inactive_anon:0kB active_file:68876kB inactive_file:160052kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:97736kB dirty:632kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11384kB pagetables:2144kB sec_pagetables:0kB all_unreclaimable? no
[  435.067764][T11858] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  435.098651][T11858] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  435.166450][T11858] lowmem_reserve[]: 0 2521 2522 2522 2522
[  435.172310][T11858] Node 0 DMA32 free:1460580kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:27120kB inactive_anon:0kB active_file:68876kB inactive_file:159232kB unevictable:1536kB writepending:624kB present:3129332kB managed:2586972kB mlocked:0kB bounce:0kB free_pcp:16412kB local_pcp:11776kB free_cma:0kB
[  435.213890][T11858] lowmem_reserve[]: 0 0 0 0 0
[  435.224824][T11858] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB
[  435.260090][T11858] lowmem_reserve[]: 0 0 0 0 0
[  435.264904][T11858] Node 1 Normal free:3888036kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:24240kB local_pcp:11744kB free_cma:0kB
[  435.313590][T11858] lowmem_reserve[]: 0 0 0 0 0
[  435.368677][T11858] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  435.497271][T11858] Node 0 DMA32: 683*4kB (UM) 703*8kB (M) 1030*16kB (UME) 809*32kB (UME) 763*64kB (UME) 163*128kB (UME) 75*256kB (UME) 28*512kB (M) 16*1024kB (ME) 8*2048kB (ME) 311*4096kB (UM) = 1460580kB
[  435.541941][T11879] netlink: 'syz.2.1702': attribute type 8 has an invalid length.
[  435.560692][T11858] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  435.714063][T11879] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1702'.
[  435.730923][T11858] Node 1 Normal: 161*4kB (UME) 52*8kB (UE) 34*16kB (UE) 23*32kB (UE) 8*64kB (UME) 5*128kB (UE) 2*256kB (UE) 2*512kB (UM) 2*1024kB (UE) 1*2048kB (E) 947*4096kB (M) = 3888036kB
[  435.912750][T11858] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  435.934163][T11872] netlink: 'syz.0.1701': attribute type 21 has an invalid length.
[  435.959493][T11858] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  436.031623][T11858] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  436.076145][T11858] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  436.106499][T11858] 58643 total pagecache pages
[  436.112122][T11858] 0 pages in swap cache
[  436.125391][T11858] Free swap  = 124996kB
[  436.140900][T11858] Total swap = 124996kB
[  436.160985][T11858] 2097051 pages RAM
[  436.164866][T11858] 0 pages HighMem/MovableOnly
[  436.207589][T11858] 416922 pages reserved
[  436.211810][T11858] 0 pages cma reserved
[  438.904134][T11926] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1717'.
[  439.112463][T11927] netlink: 'syz.3.1713': attribute type 21 has an invalid length.
[  439.192480][T11941] netlink: 'syz.1.1719': attribute type 1 has an invalid length.
[  439.204232][T11941] netlink: 'syz.1.1719': attribute type 3 has an invalid length.
[  439.212673][T11941] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1719'.
[  440.046162][T11961] netlink: 'syz.1.1725': attribute type 29 has an invalid length.
[  440.073091][T11961] netlink: 'syz.1.1725': attribute type 29 has an invalid length.
[  440.387385][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  440.393812][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  441.694607][T11978] netlink: 'syz.1.1730': attribute type 21 has an invalid length.
[  441.716449][T11978] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1730'.
[  441.741671][T11978] netlink: 'syz.1.1730': attribute type 5 has an invalid length.
[  441.760295][T11978] netlink: 'syz.1.1730': attribute type 6 has an invalid length.
[  441.768735][T11978] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1730'.
[  441.822193][T11976] netlink: 'syz.1.1730': attribute type 10 has an invalid length.
[  442.195875][T11983] netlink: 14463 bytes leftover after parsing attributes in process `syz.3.1733'.
[  442.272162][ T6777] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  442.276266][T11981] netlink: 'syz.0.1731': attribute type 1 has an invalid length.
[  442.425703][T11981] netlink: 'syz.0.1731': attribute type 3 has an invalid length.
[  442.582763][T11994] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1736'.
[  442.586632][T11981] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1731'.
[  443.147445][T12006] netlink: 'syz.0.1738': attribute type 21 has an invalid length.
[  443.583293][T12012] ��: renamed from team_slave_1 (while UP)
[  444.218393][T12027] netlink: 'syz.0.1745': attribute type 4 has an invalid length.
[  444.232894][T12027] netlink: 173820 bytes leftover after parsing attributes in process `syz.0.1745'.
[  444.309761][T12031] netlink: 'syz.3.1746': attribute type 21 has an invalid length.
[  444.321969][T12031] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1746'.
[  444.342125][T12031] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1746'.
[  444.575057][T12040] netlink: 'syz.2.1747': attribute type 1 has an invalid length.
[  444.592423][T12040] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1747'.
[  444.690418][T12038] syzkaller0: entered promiscuous mode
[  444.695979][T12038] syzkaller0: entered allmulticast mode
[  449.418633][T12073] validate_nla: 1 callbacks suppressed
[  449.418650][T12073] netlink: 'syz.1.1756': attribute type 21 has an invalid length.
[  450.064473][T12116] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  451.935530][T12148] syzkaller0: entered promiscuous mode
[  451.942319][T12148] syzkaller0: entered allmulticast mode
[  454.360586][T12157] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1779'.
[  454.586079][T12185] sctp: [Deprecated]: syz.1.1790 (pid 12185) Use of int in maxseg socket option.
[  454.586079][T12185] Use struct sctp_assoc_value instead
[  455.442101][T12204] netlink: 'syz.1.1794': attribute type 21 has an invalid length.
[  455.457840][T12204] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1794'.
[  455.963533][T12216] netlink: 'syz.2.1798': attribute type 33 has an invalid length.
[  456.007842][T12216] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1798'.
[  456.773354][T12232] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1802'.
[  456.835344][T12235] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app
[  456.854557][T12233] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[  456.885037][T12233] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  457.678604][T12249] netlink: 'syz.3.1806': attribute type 10 has an invalid length.
[  458.347009][T12256] netlink: 'syz.2.1807': attribute type 2 has an invalid length.
[  458.398862][T12256] netlink: 'syz.2.1807': attribute type 1 has an invalid length.
[  458.456510][T12256] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1807'.
[  460.195941][T12249] team0: Device veth1_macvtap failed to register rx_handler
[  460.700171][T12265] netlink: 'syz.1.1809': attribute type 1 has an invalid length.
[  460.727996][T12265] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.1809'.
[  461.085809][T12277] syzkaller0: entered promiscuous mode
[  461.091546][T12277] syzkaller0: entered allmulticast mode
[  466.105345][T12340] netlink: 'syz.1.1828': attribute type 7 has an invalid length.
[  466.134271][T12340] netlink: 'syz.1.1828': attribute type 6 has an invalid length.
[  467.288591][T12367] netlink: 'syz.3.1836': attribute type 21 has an invalid length.
[  467.311664][T12367] netlink: 16166 bytes leftover after parsing attributes in process `syz.3.1836'.
[  467.349378][T12367] netlink: 'syz.3.1836': attribute type 1 has an invalid length.
[  467.372482][T12367] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.1836'.
[  469.806606][T12418] dvmrp1: tun_chr_ioctl cmd 1074025677
[  469.812288][T12418] dvmrp1: linktype set to 825
[  469.989460][T12432] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1855'.
[  470.489537][T12439] netlink: 'syz.0.1857': attribute type 10 has an invalid length.
[  470.527183][T12439] netlink: 'syz.0.1857': attribute type 19 has an invalid length.
[  470.553030][T12439] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1857'.
[  471.189481][T12448] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.1858'.
[  472.903910][T12497] delete_channel: no stack
[  473.570323][T12514] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1876'.
[  473.804665][ T5774] Bluetooth: hci3: ISO packet for unknown connection handle 2622
[  474.019302][T12529] netlink: 64535 bytes leftover after parsing attributes in process `syz.0.1879'.
[  474.257542][   T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  475.926869][T12571] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1889'.
[  477.039443][T12577] netlink: 'syz.1.1890': attribute type 2 has an invalid length.
[  477.115440][T12577] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1890'.
[  477.358511][T12567] bridge0: port 2(bridge_slave_1) entered disabled state
[  477.379582][T12567] bridge0: entered allmulticast mode
[  478.156716][T12586] netlink: 'syz.1.1892': attribute type 15 has an invalid length.
[  482.247256][T12614] sctp: [Deprecated]: syz.3.1901 (pid 12614) Use of int in maxseg socket option.
[  482.247256][T12614] Use struct sctp_assoc_value instead
[  482.698070][T12614] netlink: 'syz.3.1901': attribute type 3 has an invalid length.
[  482.705900][T12614] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1901'.
[  484.449485][T12650] netlink: 'syz.0.1912': attribute type 3 has an invalid length.
[  484.475726][T12650] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1912'.
[  485.002357][T12670] -: renamed from syzkaller0
[  486.958046][T12699] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1924'.
[  487.840764][T12699] debugfs: Directory '�!�' with parent 'ieee80211' already present!
[  488.052714][T12707] netlink: 'syz.3.1927': attribute type 13 has an invalid length.
[  488.068439][T12707] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1927'.
[  488.158130][T12707] erspan0: refused to change device tx_queue_len
[  488.196502][T12707] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  489.661113][T12728] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1932'.
[  489.703823][T12728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: 
��0
[  489.753357][T12728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  489.806537][T12728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  489.825527][T12728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  489.853162][T12728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  489.881546][T12728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  489.892797][T12728] batadv_slave_1: entered promiscuous mode
[  489.938361][T12744] netlink: 'syz.1.1934': attribute type 10 has an invalid length.
[  490.248413][T12755] netlink: 'syz.2.1937': attribute type 9 has an invalid length.
[  490.297464][T12755] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.1937'.
[  490.541872][T12766] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1939'.
[  490.552998][T12766] netlink: del zone limit has 4 unknown bytes
[  491.546084][T12798] netlink: 'syz.1.1947': attribute type 3 has an invalid length.
[  491.594444][T12798] netlink: 'syz.1.1947': attribute type 16 has an invalid length.
[  491.637327][T12800] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.1948'.
[  491.666462][T12798] netlink: 'syz.1.1947': attribute type 18 has an invalid length.
[  491.717202][T12798] netlink: 'syz.1.1947': attribute type 20 has an invalid length.
[  491.725106][T12798] netlink: 'syz.1.1947': attribute type 25 has an invalid length.
[  491.784885][T12802] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1949'.
[  492.245849][T12812] syzkaller0: entered promiscuous mode
[  492.257147][T12812] syzkaller0: entered allmulticast mode
[  493.684697][T12830] netlink: 'syz.1.1958': attribute type 4 has an invalid length.
[  493.694802][T12830] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1958'.
[  494.031205][T12840] syz.3.1959[12840] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  494.031368][T12840] syz.3.1959[12840] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  494.299361][T12839] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1962'.
[  494.376266][T12850] netlink: 'syz.1.1963': attribute type 1 has an invalid length.
[  494.385531][T12850] netlink: 'syz.1.1963': attribute type 4 has an invalid length.
[  494.417480][T12850] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1963'.
[  494.446213][T12849] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1963'.
[  494.487986][T12849] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  494.936450][T12853] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1964'.
[  495.388822][T12858] netlink: 'syz.0.1966': attribute type 10 has an invalid length.
[  495.479555][T12863] netlink: 134744 bytes leftover after parsing attributes in process `syz.2.1967'.
[  496.012549][T12870] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.1968'.
[  496.215037][T12877] netlink: 'syz.0.1970': attribute type 1 has an invalid length.
[  496.279168][T12877] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.1970'.
[  496.398706][T12880] netlink: 'syz.0.1970': attribute type 2 has an invalid length.
[  496.464256][T12880] netlink: 51 bytes leftover after parsing attributes in process `syz.0.1970'.
[  496.834379][T12884] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.1972'.
[  496.925223][T12890] FAULT_INJECTION: forcing a failure.
[  496.925223][T12890] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  496.959934][T12890] CPU: 1 PID: 12890 Comm: syz.3.1974 Not tainted syzkaller #0
[  496.967484][T12890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  496.977671][T12890] Call Trace:
[  496.980972][T12890]  <TASK>
[  496.984003][T12890]  dump_stack_lvl+0x18c/0x250
[  496.988713][T12890]  ? show_regs_print_info+0x20/0x20
[  496.993928][T12890]  ? load_image+0x400/0x400
[  496.998468][T12890]  ? __might_fault+0xaa/0x120
[  497.003183][T12890]  ? __lock_acquire+0x7d40/0x7d40
[  497.008244][T12890]  should_fail_ex+0x39d/0x4d0
[  497.013033][T12890]  _copy_from_user+0x2f/0xe0
[  497.017646][T12890]  __sys_bpf+0x23e/0x890
[  497.021906][T12890]  ? bpf_link_show_fdinfo+0x390/0x390
[  497.027304][T12890]  ? lock_chain_count+0x20/0x20
[  497.032178][T12890]  __x64_sys_bpf+0x7c/0x90
[  497.036613][T12890]  do_syscall_64+0x55/0xa0
[  497.041048][T12890]  ? clear_bhb_loop+0x40/0x90
[  497.045740][T12890]  ? clear_bhb_loop+0x40/0x90
[  497.050431][T12890]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  497.056515][T12890] RIP: 0033:0x7f998df9aeb9
[  497.060948][T12890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  497.080565][T12890] RSP: 002b:00007f998ee40028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  497.088995][T12890] RAX: ffffffffffffffda RBX: 00007f998e215fa0 RCX: 00007f998df9aeb9
[  497.096977][T12890] RDX: 0000000000000050 RSI: 0000200000000140 RDI: 000000000000000a
[  497.104956][T12890] RBP: 00007f998ee40090 R08: 0000000000000000 R09: 0000000000000000
[  497.112938][T12890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  497.120921][T12890] R13: 00007f998e216038 R14: 00007f998e215fa0 R15: 00007fff1d0df7d8
[  497.129004][T12890]  </TASK>
[  497.419294][T12884] netlink: 'syz.2.1972': attribute type 10 has an invalid length.
[  497.501918][T12884] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  498.366025][T12884] batman_adv: batadv0: Removing interface: batadv_slave_0
[  499.154289][T12914] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1979'.
[  499.258836][T12923] netdevsim netdevsim0 ������: renamed from netdevsim0 (while UP)
[  499.565621][T12913] netlink: 'syz.3.1980': attribute type 10 has an invalid length.
[  499.962910][T12932] FAULT_INJECTION: forcing a failure.
[  499.962910][T12932] name failslab, interval 1, probability 0, space 0, times 0
[  499.986085][T12932] CPU: 1 PID: 12932 Comm: syz.1.1985 Not tainted syzkaller #0
[  499.993623][T12932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  500.003728][T12932] Call Trace:
[  500.007068][T12932]  <TASK>
[  500.010048][T12932]  dump_stack_lvl+0x18c/0x250
[  500.014784][T12932]  ? show_regs_print_info+0x20/0x20
[  500.020136][T12932]  ? load_image+0x400/0x400
[  500.024695][T12932]  ? __might_sleep+0xe0/0xe0
[  500.029339][T12932]  ? __lock_acquire+0x7d40/0x7d40
[  500.034542][T12932]  should_fail_ex+0x39d/0x4d0
[  500.039279][T12932]  should_failslab+0x9/0x20
[  500.043836][T12932]  slab_pre_alloc_hook+0x59/0x310
[  500.048915][T12932]  ? bpf_prog_test_run_skb+0x238/0x12b0
[  500.054512][T12932]  ? bpf_prog_test_run_skb+0x238/0x12b0
[  500.060100][T12932]  __kmem_cache_alloc_node+0x53/0x250
[  500.065532][T12932]  ? bpf_prog_test_run_skb+0x238/0x12b0
[  500.071116][T12932]  __kmalloc+0xa4/0x230
[  500.075333][T12932]  bpf_prog_test_run_skb+0x238/0x12b0
[  500.080751][T12932]  ? __fget_files+0x28/0x4b0
[  500.085386][T12932]  ? __fget_files+0x28/0x4b0
[  500.090026][T12932]  ? __fget_files+0x43d/0x4b0
[  500.094760][T12932]  ? cpu_online+0x60/0x60
[  500.099142][T12932]  bpf_prog_test_run+0x321/0x390
[  500.104128][T12932]  __sys_bpf+0x49d/0x890
[  500.108421][T12932]  ? bpf_link_show_fdinfo+0x390/0x390
[  500.113864][T12932]  ? lock_chain_count+0x20/0x20
[  500.118773][T12932]  __x64_sys_bpf+0x7c/0x90
[  500.123244][T12932]  do_syscall_64+0x55/0xa0
[  500.127703][T12932]  ? clear_bhb_loop+0x40/0x90
[  500.132423][T12932]  ? clear_bhb_loop+0x40/0x90
[  500.137154][T12932]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  500.143087][T12932] RIP: 0033:0x7f86c5d9aeb9
[  500.147553][T12932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  500.167298][T12932] RSP: 002b:00007f86c6cf1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  500.175769][T12932] RAX: ffffffffffffffda RBX: 00007f86c6015fa0 RCX: 00007f86c5d9aeb9
[  500.183808][T12932] RDX: 0000000000000050 RSI: 0000200000000140 RDI: 000000000000000a
[  500.192012][T12932] RBP: 00007f86c6cf1090 R08: 0000000000000000 R09: 0000000000000000
[  500.200037][T12932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  500.208138][T12932] R13: 00007f86c6016038 R14: 00007f86c6015fa0 R15: 00007ffd94eb0368
[  500.216269][T12932]  </TASK>
[  500.301475][T12935] netlink: 'syz.0.1986': attribute type 3 has an invalid length.
[  500.336736][T12935] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1986'.
[  501.818305][T12962] delete_channel: no stack
[  501.868749][T12962] netlink: 'syz.0.1992': attribute type 2 has an invalid length.
[  501.940736][T12962] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1992'.
[  502.037136][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  502.046170][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  502.602350][T12968] FAULT_INJECTION: forcing a failure.
[  502.602350][T12968] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  502.636485][T12968] CPU: 1 PID: 12968 Comm: syz.3.1995 Not tainted syzkaller #0
[  502.644032][T12968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  502.654127][T12968] Call Trace:
[  502.657443][T12968]  <TASK>
[  502.660399][T12968]  dump_stack_lvl+0x18c/0x250
[  502.665170][T12968]  ? show_regs_print_info+0x20/0x20
[  502.670417][T12968]  ? load_image+0x400/0x400
[  502.674974][T12968]  ? __might_fault+0xaa/0x120
[  502.679776][T12968]  ? __lock_acquire+0x7d40/0x7d40
[  502.684893][T12968]  should_fail_ex+0x39d/0x4d0
[  502.689611][T12968]  _copy_from_user+0x2f/0xe0
[  502.694227][T12968]  bpf_prog_test_run_skb+0x266/0x12b0
[  502.699615][T12968]  ? __fget_files+0x28/0x4b0
[  502.704224][T12968]  ? __fget_files+0x28/0x4b0
[  502.708830][T12968]  ? __fget_files+0x43d/0x4b0
[  502.713528][T12968]  ? cpu_online+0x60/0x60
[  502.717869][T12968]  bpf_prog_test_run+0x321/0x390
[  502.723006][T12968]  __sys_bpf+0x49d/0x890
[  502.727267][T12968]  ? bpf_link_show_fdinfo+0x390/0x390
[  502.732666][T12968]  ? lock_chain_count+0x20/0x20
[  502.737538][T12968]  __x64_sys_bpf+0x7c/0x90
[  502.741970][T12968]  do_syscall_64+0x55/0xa0
[  502.746412][T12968]  ? clear_bhb_loop+0x40/0x90
[  502.751112][T12968]  ? clear_bhb_loop+0x40/0x90
[  502.755812][T12968]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  502.761737][T12968] RIP: 0033:0x7f998df9aeb9
[  502.766176][T12968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  502.785866][T12968] RSP: 002b:00007f998ee40028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  502.794299][T12968] RAX: ffffffffffffffda RBX: 00007f998e215fa0 RCX: 00007f998df9aeb9
[  502.802288][T12968] RDX: 0000000000000050 RSI: 0000200000000140 RDI: 000000000000000a
[  502.810270][T12968] RBP: 00007f998ee40090 R08: 0000000000000000 R09: 0000000000000000
[  502.818255][T12968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  502.826235][T12968] R13: 00007f998e216038 R14: 00007f998e215fa0 R15: 00007fff1d0df7d8
[  502.834234][T12968]  </TASK>
[  505.395797][T13004] FAULT_INJECTION: forcing a failure.
[  505.395797][T13004] name failslab, interval 1, probability 0, space 0, times 0
[  505.426453][T13004] CPU: 0 PID: 13004 Comm: syz.2.2005 Not tainted syzkaller #0
[  505.434006][T13004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  505.444107][T13004] Call Trace:
[  505.447430][T13004]  <TASK>
[  505.450400][T13004]  dump_stack_lvl+0x18c/0x250
[  505.455131][T13004]  ? show_regs_print_info+0x20/0x20
[  505.460376][T13004]  ? load_image+0x400/0x400
[  505.464983][T13004]  ? __might_sleep+0xe0/0xe0
[  505.469623][T13004]  ? __lock_acquire+0x7d40/0x7d40
[  505.474676][T13004]  should_fail_ex+0x39d/0x4d0
[  505.479387][T13004]  should_failslab+0x9/0x20
[  505.483910][T13004]  slab_pre_alloc_hook+0x59/0x310
[  505.488955][T13004]  ? sk_prot_alloc+0xe7/0x210
[  505.493657][T13004]  ? sk_prot_alloc+0xe7/0x210
[  505.498349][T13004]  __kmem_cache_alloc_node+0x53/0x250
[  505.503746][T13004]  ? sk_prot_alloc+0xe7/0x210
[  505.508438][T13004]  __kmalloc+0xa4/0x230
[  505.512617][T13004]  sk_prot_alloc+0xe7/0x210
[  505.517221][T13004]  ? sk_alloc+0x24/0x360
[  505.521486][T13004]  sk_alloc+0x3a/0x360
[  505.525565][T13004]  ? bpf_ctx_init+0x163/0x1a0
[  505.530252][T13004]  ? bpf_prog_test_run_skb+0x273/0x12b0
[  505.535819][T13004]  bpf_prog_test_run_skb+0x3a5/0x12b0
[  505.541202][T13004]  ? __fget_files+0x28/0x4b0
[  505.545810][T13004]  ? __fget_files+0x28/0x4b0
[  505.550416][T13004]  ? __fget_files+0x43d/0x4b0
[  505.555122][T13004]  ? cpu_online+0x60/0x60
[  505.559467][T13004]  bpf_prog_test_run+0x321/0x390
[  505.564423][T13004]  __sys_bpf+0x49d/0x890
[  505.568677][T13004]  ? bpf_link_show_fdinfo+0x390/0x390
[  505.574071][T13004]  ? lock_chain_count+0x20/0x20
[  505.578952][T13004]  __x64_sys_bpf+0x7c/0x90
[  505.583408][T13004]  do_syscall_64+0x55/0xa0
[  505.587841][T13004]  ? clear_bhb_loop+0x40/0x90
[  505.592530][T13004]  ? clear_bhb_loop+0x40/0x90
[  505.597231][T13004]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  505.603138][T13004] RIP: 0033:0x7f8960f9aeb9
[  505.607577][T13004] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  505.627281][T13004] RSP: 002b:00007f8961f12028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  505.635798][T13004] RAX: ffffffffffffffda RBX: 00007f8961215fa0 RCX: 00007f8960f9aeb9
[  505.643784][T13004] RDX: 0000000000000050 RSI: 0000200000000140 RDI: 000000000000000a
[  505.651855][T13004] RBP: 00007f8961f12090 R08: 0000000000000000 R09: 0000000000000000
[  505.659922][T13004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  505.667903][T13004] R13: 00007f8961216038 R14: 00007f8961215fa0 R15: 00007fffd6717eb8
[  505.675898][T13004]  </TASK>
[  506.052142][T13014] netlink: 'syz.1.2008': attribute type 9 has an invalid length.
[  506.109561][T13014] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.2008'.
[  506.267826][ T1080] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  508.599038][T13037] FAULT_INJECTION: forcing a failure.
[  508.599038][T13037] name failslab, interval 1, probability 0, space 0, times 0
[  508.634281][T13037] CPU: 0 PID: 13037 Comm: syz.0.2017 Not tainted syzkaller #0
[  508.641794][T13037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  508.651984][T13037] Call Trace:
[  508.655282][T13037]  <TASK>
[  508.658234][T13037]  dump_stack_lvl+0x18c/0x250
[  508.662968][T13037]  ? show_regs_print_info+0x20/0x20
[  508.668191][T13037]  ? load_image+0x400/0x400
[  508.672703][T13037]  ? __might_sleep+0xe0/0xe0
[  508.677303][T13037]  ? __lock_acquire+0x7d40/0x7d40
[  508.682352][T13037]  should_fail_ex+0x39d/0x4d0
[  508.687076][T13037]  should_failslab+0x9/0x20
[  508.691623][T13037]  slab_pre_alloc_hook+0x59/0x310
[  508.696682][T13037]  ? apparmor_sk_alloc_security+0x77/0x100
[  508.702514][T13037]  __kmem_cache_alloc_node+0x53/0x250
[  508.708001][T13037]  ? apparmor_sk_alloc_security+0x77/0x100
[  508.713850][T13037]  kmalloc_trace+0x2a/0xe0
[  508.718330][T13037]  apparmor_sk_alloc_security+0x77/0x100
[  508.723993][T13037]  security_sk_alloc+0x6e/0xa0
[  508.728793][T13037]  sk_prot_alloc+0x101/0x210
[  508.733401][T13037]  ? sk_alloc+0x24/0x360
[  508.737662][T13037]  sk_alloc+0x3a/0x360
[  508.741746][T13037]  ? bpf_ctx_init+0x163/0x1a0
[  508.746449][T13037]  ? bpf_prog_test_run_skb+0x273/0x12b0
[  508.752011][T13037]  bpf_prog_test_run_skb+0x3a5/0x12b0
[  508.757403][T13037]  ? __fget_files+0x28/0x4b0
[  508.762018][T13037]  ? __fget_files+0x28/0x4b0
[  508.766622][T13037]  ? __fget_files+0x43d/0x4b0
[  508.771328][T13037]  ? cpu_online+0x60/0x60
[  508.775697][T13037]  bpf_prog_test_run+0x321/0x390
[  508.780764][T13037]  __sys_bpf+0x49d/0x890
[  508.785041][T13037]  ? bpf_link_show_fdinfo+0x390/0x390
[  508.790448][T13037]  ? lock_chain_count+0x20/0x20
[  508.795322][T13037]  __x64_sys_bpf+0x7c/0x90
[  508.799759][T13037]  do_syscall_64+0x55/0xa0
[  508.804191][T13037]  ? clear_bhb_loop+0x40/0x90
[  508.808879][T13037]  ? clear_bhb_loop+0x40/0x90
[  508.813569][T13037]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  508.819482][T13037] RIP: 0033:0x7f66beb9aeb9
[  508.823910][T13037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  508.843530][T13037] RSP: 002b:00007f66bcdf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  508.852058][T13037] RAX: ffffffffffffffda RBX: 00007f66bee15fa0 RCX: 00007f66beb9aeb9
[  508.860055][T13037] RDX: 0000000000000050 RSI: 0000200000000140 RDI: 000000000000000a
[  508.868040][T13037] RBP: 00007f66bcdf6090 R08: 0000000000000000 R09: 0000000000000000
[  508.876039][T13037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  508.884023][T13037] R13: 00007f66bee16038 R14: 00007f66bee15fa0 R15: 00007fff05535878
[  508.892029][T13037]  </TASK>
[  509.108631][T13033] delete_channel: no stack
[  509.162726][T13046] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.2020'.
[  509.332366][T13053] netlink: 'syz.2.2021': attribute type 28 has an invalid length.
[  509.365834][T13053] netlink: 'syz.2.2021': attribute type 3 has an invalid length.
[  509.383711][T13053] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2021'.
[  509.438841][T13055] netlink: 'syz.1.2023': attribute type 29 has an invalid length.
[  509.447812][T13052] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.2023'.
[  509.484254][T13055] netlink: 'syz.1.2023': attribute type 29 has an invalid length.
[  509.525913][T13058] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2024'.
[  509.604212][T13052] netlink: 'syz.1.2023': attribute type 29 has an invalid length.
[  510.034788][ T5774] Bluetooth: hci0: ACL packet for unknown connection handle 0
[  510.486741][T13077] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2028'.
[  510.542359][T13077] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2028'.
[  510.674593][T13078] netlink: 'syz.2.2031': attribute type 39 has an invalid length.
[  511.144824][T13078] syz_tun (unregistering): left allmulticast mode
[  511.152790][T13078] syz_tun (unregistering): left promiscuous mode
[  511.159481][T13078] ��
: port 1(syz_tun) entered disabled state
[  511.201410][T13081] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2028'.
[  511.233768][T13087] pim6reg: tun_chr_ioctl cmd 2147767519
[  511.487503][T13091] netlink: 'syz.3.2034': attribute type 21 has an invalid length.
[  511.622643][T13091] netlink: 'syz.3.2034': attribute type 11 has an invalid length.
[  511.632759][T13097] netlink: 'syz.3.2034': attribute type 27 has an invalid length.
[  511.706800][T13097] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.2034'.
[  512.035389][T13103] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2039'.
[  512.286613][T13109] netlink: 'syz.3.2040': attribute type 9 has an invalid length.
[  512.318972][T13109] netlink: 399 bytes leftover after parsing attributes in process `syz.3.2040'.
[  512.347469][T13110] delete_channel: no stack
[  512.357146][T13110] delete_channel: no stack
[  512.536805][T13117] FAULT_INJECTION: forcing a failure.
[  512.536805][T13117] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  512.566565][T13117] CPU: 1 PID: 13117 Comm: syz.2.2042 Not tainted syzkaller #0
[  512.574115][T13117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  512.584223][T13117] Call Trace:
[  512.587547][T13117]  <TASK>
[  512.590509][T13117]  dump_stack_lvl+0x18c/0x250
[  512.595215][T13117]  ? show_regs_print_info+0x20/0x20
[  512.600430][T13117]  ? load_image+0x400/0x400
[  512.604951][T13117]  ? __might_fault+0xaa/0x120
[  512.609644][T13117]  ? __lock_acquire+0x7d40/0x7d40
[  512.614686][T13117]  should_fail_ex+0x39d/0x4d0
[  512.619395][T13117]  _copy_to_user+0x2f/0xa0
[  512.623825][T13117]  bpf_test_finish+0x19f/0x650
[  512.628611][T13117]  ? convert___skb_to_skb+0x590/0x590
[  512.633994][T13117]  ? convert_skb_to___skb+0x420/0x420
[  512.639383][T13117]  ? bpf_prog_test_run_skb+0x7ad/0x12b0
[  512.644948][T13117]  bpf_prog_test_run_skb+0xcc3/0x12b0
[  512.650347][T13117]  ? cpu_online+0x60/0x60
[  512.654690][T13117]  bpf_prog_test_run+0x321/0x390
[  512.659652][T13117]  __sys_bpf+0x49d/0x890
[  512.663912][T13117]  ? bpf_link_show_fdinfo+0x390/0x390
[  512.669315][T13117]  ? lock_chain_count+0x20/0x20
[  512.674193][T13117]  __x64_sys_bpf+0x7c/0x90
[  512.678728][T13117]  do_syscall_64+0x55/0xa0
[  512.683259][T13117]  ? clear_bhb_loop+0x40/0x90
[  512.687951][T13117]  ? clear_bhb_loop+0x40/0x90
[  512.692652][T13117]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  512.698562][T13117] RIP: 0033:0x7f8960f9aeb9
[  512.702993][T13117] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  512.722619][T13117] RSP: 002b:00007f8961f12028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  512.731053][T13117] RAX: ffffffffffffffda RBX: 00007f8961215fa0 RCX: 00007f8960f9aeb9
[  512.739042][T13117] RDX: 0000000000000050 RSI: 0000200000000140 RDI: 000000000000000a
[  512.747025][T13117] RBP: 00007f8961f12090 R08: 0000000000000000 R09: 0000000000000000
[  512.755100][T13117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  512.763080][T13117] R13: 00007f8961216038 R14: 00007f8961215fa0 R15: 00007fffd6717eb8
[  512.771081][T13117]  </TASK>
[  514.174477][T13161] FAULT_INJECTION: forcing a failure.
[  514.174477][T13161] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  514.189207][T13161] CPU: 0 PID: 13161 Comm: syz.0.2053 Not tainted syzkaller #0
[  514.196825][T13161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  514.206920][T13161] Call Trace:
[  514.210248][T13161]  <TASK>
[  514.213211][T13161]  dump_stack_lvl+0x18c/0x250
[  514.217942][T13161]  ? show_regs_print_info+0x20/0x20
[  514.223186][T13161]  ? load_image+0x400/0x400
[  514.227739][T13161]  ? __might_fault+0xaa/0x120
[  514.232641][T13161]  ? __lock_acquire+0x7d40/0x7d40
[  514.237712][T13161]  should_fail_ex+0x39d/0x4d0
[  514.242452][T13161]  _copy_to_user+0x2f/0xa0
[  514.246910][T13161]  bpf_test_finish+0x25a/0x650
[  514.251724][T13161]  ? convert___skb_to_skb+0x590/0x590
[  514.257179][T13161]  ? convert_skb_to___skb+0x420/0x420
[  514.261894][T13151] syzkaller0: entered promiscuous mode
[  514.262601][T13161]  ? bpf_prog_test_run_skb+0x7ad/0x12b0
[  514.273648][T13161]  bpf_prog_test_run_skb+0xcc3/0x12b0
[  514.279095][T13161]  ? cpu_online+0x60/0x60
[  514.283462][T13161]  bpf_prog_test_run+0x321/0x390
[  514.288447][T13161]  __sys_bpf+0x49d/0x890
[  514.292735][T13161]  ? bpf_link_show_fdinfo+0x390/0x390
[  514.298173][T13161]  ? lock_chain_count+0x20/0x20
[  514.303074][T13161]  __x64_sys_bpf+0x7c/0x90
[  514.307526][T13161]  do_syscall_64+0x55/0xa0
[  514.311983][T13161]  ? clear_bhb_loop+0x40/0x90
[  514.316690][T13161]  ? clear_bhb_loop+0x40/0x90
[  514.321405][T13161]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  514.327332][T13161] RIP: 0033:0x7f66beb9aeb9
[  514.331792][T13161] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  514.337206][T13151] syzkaller0: entered allmulticast mode
[  514.351424][T13161] RSP: 002b:00007f66bcdf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  514.351453][T13161] RAX: ffffffffffffffda RBX: 00007f66bee15fa0 RCX: 00007f66beb9aeb9
[  514.351469][T13161] RDX: 0000000000000050 RSI: 0000200000000140 RDI: 000000000000000a
[  514.351483][T13161] RBP: 00007f66bcdf6090 R08: 0000000000000000 R09: 0000000000000000
[  514.351496][T13161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  514.351509][T13161] R13: 00007f66bee16038 R14: 00007f66bee15fa0 R15: 00007fff05535878
[  514.351543][T13161]  </TASK>
[  514.543237][T13163] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2054'.
[  519.335723][T13178] netlink: 'syz.0.2057': attribute type 2 has an invalid length.
[  519.343788][T13178] netlink: 'syz.0.2057': attribute type 4 has an invalid length.
[  519.355438][T13178] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2057'.
[  519.810688][T13192] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2059'.
[  519.841694][T13192] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2059'.
[  519.900695][T13186] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2059'.
[  520.242223][T13198] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2064'.
[  520.251484][T13202] FAULT_INJECTION: forcing a failure.
[  520.251484][T13202] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  520.266107][T13202] CPU: 0 PID: 13202 Comm: syz.3.2063 Not tainted syzkaller #0
[  520.273641][T13202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  520.283774][T13202] Call Trace:
[  520.287075][T13202]  <TASK>
[  520.290019][T13202]  dump_stack_lvl+0x18c/0x250
[  520.294726][T13202]  ? show_regs_print_info+0x20/0x20
[  520.299946][T13202]  ? load_image+0x400/0x400
[  520.304569][T13202]  ? __might_fault+0xaa/0x120
[  520.309288][T13202]  ? __lock_acquire+0x7d40/0x7d40
[  520.314332][T13202]  should_fail_ex+0x39d/0x4d0
[  520.319032][T13202]  _copy_to_user+0x2f/0xa0
[  520.323473][T13202]  bpf_test_finish+0x4e7/0x650
[  520.328261][T13202]  ? convert___skb_to_skb+0x590/0x590
[  520.333648][T13202]  ? convert_skb_to___skb+0x420/0x420
[  520.339058][T13202]  ? bpf_prog_test_run_skb+0x7ad/0x12b0
[  520.344632][T13202]  bpf_prog_test_run_skb+0xcc3/0x12b0
[  520.350036][T13202]  ? cpu_online+0x60/0x60
[  520.354383][T13202]  bpf_prog_test_run+0x321/0x390
[  520.359340][T13202]  __sys_bpf+0x49d/0x890
[  520.363613][T13202]  ? bpf_link_show_fdinfo+0x390/0x390
[  520.369019][T13202]  ? lock_chain_count+0x20/0x20
[  520.373893][T13202]  __x64_sys_bpf+0x7c/0x90
[  520.378333][T13202]  do_syscall_64+0x55/0xa0
[  520.382768][T13202]  ? clear_bhb_loop+0x40/0x90
[  520.387461][T13202]  ? clear_bhb_loop+0x40/0x90
[  520.392154][T13202]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  520.398070][T13202] RIP: 0033:0x7f998df9aeb9
[  520.402502][T13202] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  520.422480][T13202] RSP: 002b:00007f998ee40028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  520.430911][T13202] RAX: ffffffffffffffda RBX: 00007f998e215fa0 RCX: 00007f998df9aeb9
[  520.438903][T13202] RDX: 0000000000000050 RSI: 0000200000000140 RDI: 000000000000000a
[  520.446904][T13202] RBP: 00007f998ee40090 R08: 0000000000000000 R09: 0000000000000000
[  520.454890][T13202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  520.462906][T13202] R13: 00007f998e216038 R14: 00007f998e215fa0 R15: 00007fff1d0df7d8
[  520.470932][T13202]  </TASK>
[  520.630451][T13205] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.2066'.
[  521.058101][T13221] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2069'.
[  521.274634][T13211] netlink: 'syz.2.2068': attribute type 21 has an invalid length.
[  521.934770][T13238] FAULT_INJECTION: forcing a failure.
[  521.934770][T13238] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  521.976680][T13238] CPU: 0 PID: 13238 Comm: syz.3.2074 Not tainted syzkaller #0
[  521.984225][T13238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  521.994326][T13238] Call Trace:
[  521.997641][T13238]  <TASK>
[  522.000608][T13238]  dump_stack_lvl+0x18c/0x250
[  522.005334][T13238]  ? show_regs_print_info+0x20/0x20
[  522.010575][T13238]  ? load_image+0x400/0x400
[  522.015117][T13238]  ? __lock_acquire+0x7d40/0x7d40
[  522.020179][T13238]  ? snprintf+0xe9/0x140
[  522.024485][T13238]  should_fail_ex+0x39d/0x4d0
[  522.029232][T13238]  _copy_to_user+0x2f/0xa0
[  522.033728][T13238]  simple_read_from_buffer+0xe7/0x150
[  522.039170][T13238]  proc_fail_nth_read+0x1e8/0x260
[  522.044252][T13238]  ? proc_fault_inject_write+0x360/0x360
[  522.049930][T13238]  ? fsnotify_perm+0x271/0x5e0
[  522.054736][T13238]  ? proc_fault_inject_write+0x360/0x360
[  522.060419][T13238]  vfs_read+0x28b/0x970
[  522.064642][T13238]  ? kernel_read+0x1e0/0x1e0
[  522.069291][T13238]  ? __fget_files+0x28/0x4b0
[  522.073920][T13238]  ? __fget_files+0x28/0x4b0
[  522.078551][T13238]  ? __fget_files+0x43d/0x4b0
[  522.083290][T13238]  ? __fdget_pos+0x2a3/0x330
[  522.087921][T13238]  ? ksys_read+0x75/0x260
[  522.092302][T13238]  ksys_read+0x150/0x260
[  522.096595][T13238]  ? vfs_write+0x990/0x990
[  522.101153][T13238]  ? lockdep_hardirqs_on+0x98/0x150
[  522.106392][T13238]  do_syscall_64+0x55/0xa0
[  522.110845][T13238]  ? clear_bhb_loop+0x40/0x90
[  522.115560][T13238]  ? clear_bhb_loop+0x40/0x90
[  522.120273][T13238]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  522.126204][T13238] RIP: 0033:0x7f998df5b78e
[  522.130659][T13238] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  522.150319][T13238] RSP: 002b:00007f998ee3ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  522.158790][T13238] RAX: ffffffffffffffda RBX: 00007f998ee406c0 RCX: 00007f998df5b78e
[  522.166804][T13238] RDX: 000000000000000f RSI: 00007f998ee400a0 RDI: 0000000000000004
[  522.174812][T13238] RBP: 00007f998ee40090 R08: 0000000000000000 R09: 0000000000000000
[  522.182861][T13238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  522.190866][T13238] R13: 00007f998e216038 R14: 00007f998e215fa0 R15: 00007fff1d0df7d8
[  522.198895][T13238]  </TASK>
[  522.487925][T13246] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2072'.
[  522.746860][T13241] syzkaller0: entered promiscuous mode
[  522.752433][T13241] syzkaller0: entered allmulticast mode
[  522.873686][T13253] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2075'.
[  525.440306][T13253] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2075'.
[  526.735436][T13285] netlink: 'syz.3.2084': attribute type 3 has an invalid length.
[  526.766525][T13285] netlink: 'syz.3.2084': attribute type 4 has an invalid length.
[  526.796688][T13285] netlink: 9067 bytes leftover after parsing attributes in process `syz.3.2084'.
[  528.519002][T13316] netlink: 'syz.2.2101': attribute type 29 has an invalid length.
[  528.538548][T13316] netlink: 'syz.2.2101': attribute type 29 has an invalid length.
[  528.561623][T13316] netlink: 'syz.2.2101': attribute type 29 has an invalid length.
[  528.608711][T13316] netlink: 'syz.2.2101': attribute type 29 has an invalid length.
[  528.614365][T13317] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2093'.
[  528.617579][T13316] netlink: 'syz.2.2101': attribute type 29 has an invalid length.
[  529.035720][T13319] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  529.101473][T13319] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  529.645466][T13341] netlink: 'syz.3.2100': attribute type 3 has an invalid length.
[  529.663522][T13341] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2100'.
[  530.489072][T13346] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2103'.
[  530.993037][T13369] A link change request failed with some changes committed already. Interface Q�6�`Ҙ may have been left with an inconsistent configuration, please check.
[  531.801095][T13369] syzkaller0: entered promiscuous mode
[  531.806883][T13369] syzkaller0: entered allmulticast mode
[  531.813727][T13381] netlink: 'syz.3.2112': attribute type 1 has an invalid length.
[  535.007646][T13395] ------------[ cut here ]------------
[  535.013191][T13395] WARNING: CPU: 0 PID: 13395 at kernel/events/core.c:6806 perf_pending_task+0x35c/0x470
[  535.023225][T13395] Modules linked in:
[  535.027337][T13395] CPU: 0 PID: 13395 Comm: syz.3.2116 Not tainted syzkaller #0
[  535.034838][T13395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  535.045044][T13395] RIP: 0010:perf_pending_task+0x35c/0x470
[  535.050939][T13395] Code: ff 84 db 75 14 e8 74 e1 d5 ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 60 e1 d5 ff e8 2b 6a 4f ff eb e5 e8 54 e1 d5 ff <0f> 0b e9 f3 fe ff ff e8 48 e1 d5 ff 48 c7 c7 f0 f2 1c 8d 4c 89 f6
[  535.071655][T13395] RSP: 0018:ffffc900041779c0 EFLAGS: 00010293
[  535.077854][T13395] RAX: ffffffff81b1335c RBX: ffff88802ed78a80 RCX: ffff88802a111e00
[  535.085891][T13395] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  535.094042][T13395] RBP: 0000000000000001 R08: ffffffff8e8adfaf R09: 1ffffffff1d15bf5
[  535.102183][T13395] R10: dffffc0000000000 R11: fffffbfff1d15bf6 R12: ffff88802a111e00
[  535.110455][T13395] R13: ffff88805e72d530 R14: ffff88802ed78840 R15: 1ffff11005daf108
[  535.118544][T13395] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  535.127755][T13395] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  535.134385][T13395] CR2: 00007f8961ef1d58 CR3: 000000005ffbe000 CR4: 00000000003506f0
[  535.142559][T13395] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000200000000300
[  535.150658][T13395] DR3: 0000200000000300 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  535.158754][T13395] Call Trace:
[  535.162068][T13395]  <TASK>
[  535.165046][T13395]  task_work_run+0x1d4/0x260
[  535.169879][T13395]  ? task_work_cancel+0x220/0x220
[  535.174978][T13395]  do_exit+0x95a/0x2460
[  535.179309][T13395]  ? put_task_struct+0xc0/0xc0
[  535.184130][T13395]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  535.190285][T13395]  ? get_signal+0x1068/0x13f0
[  535.195018][T13395]  ? lock_chain_count+0x20/0x20
[  535.200026][T13395]  ? _raw_spin_lock_irq+0xbb/0xf0
[  535.205099][T13395]  do_group_exit+0x21b/0x2d0
[  535.210012][T13395]  ? lockdep_hardirqs_on+0x98/0x150
[  535.215260][T13395]  get_signal+0x12fc/0x13f0
[  535.220166][T13395]  arch_do_signal_or_restart+0xc2/0x800
[  535.225765][T13395]  ? __ia32_sys_get_robust_list+0x110/0x110
[  535.231866][T13395]  ? blkcg_maybe_throttle_current+0x19f/0xa90
[  535.238113][T13395]  ? get_sigframe_size+0x20/0x20
[  535.243136][T13395]  ? exit_to_user_mode_loop+0x3b/0x110
[  535.248744][T13395]  exit_to_user_mode_loop+0x70/0x110
[  535.254072][T13395]  exit_to_user_mode_prepare+0xee/0x180
[  535.259802][T13395]  syscall_exit_to_user_mode+0x1a/0x50
[  535.265317][T13395]  do_syscall_64+0x61/0xa0
[  535.269956][T13395]  ? clear_bhb_loop+0x40/0x90
[  535.274678][T13395]  ? clear_bhb_loop+0x40/0x90
[  535.279467][T13395]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  535.285601][T13395] RIP: 0033:0x7f998df9aeb9
[  535.290171][T13395] Code: Unable to access opcode bytes at 0x7f998df9ae8f.
[  535.297310][T13395] RSP: 002b:00007f998ee400e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  535.305772][T13395] RAX: fffffffffffffe00 RBX: 00007f998e215fa8 RCX: 00007f998df9aeb9
[  535.313896][T13395] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f998e215fa8
[  535.321990][T13395] RBP: 00007f998e215fa0 R08: 0000000000000000 R09: 0000000000000000
[  535.330068][T13395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  535.338179][T13395] R13: 00007f998e216038 R14: 00007fff1d0df6f0 R15: 00007fff1d0df7d8
[  535.346214][T13395]  </TASK>
[  535.349418][T13395] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  535.356740][T13395] CPU: 0 PID: 13395 Comm: syz.3.2116 Not tainted syzkaller #0
[  535.364315][T13395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  535.374409][T13395] Call Trace:
[  535.377752][T13395]  <TASK>
[  535.380723][T13395]  dump_stack_lvl+0x18c/0x250
[  535.385456][T13395]  ? show_regs_print_info+0x20/0x20
[  535.390898][T13395]  ? load_image+0x400/0x400
[  535.395461][T13395]  panic+0x2dc/0x730
[  535.399398][T13395]  ? bpf_jit_dump+0xd0/0xd0
[  535.403959][T13395]  __warn+0x2e0/0x470
[  535.407972][T13395]  ? perf_pending_task+0x35c/0x470
[  535.413131][T13395]  ? perf_pending_task+0x35c/0x470
[  535.418286][T13395]  report_bug+0x2be/0x4f0
[  535.422656][T13395]  ? perf_pending_task+0x35c/0x470
[  535.427816][T13395]  ? perf_pending_task+0x35c/0x470
[  535.432983][T13395]  ? perf_pending_task+0x35e/0x470
[  535.438134][T13395]  handle_bug+0xcf/0x120
[  535.442397][T13395]  exc_invalid_op+0x1a/0x50
[  535.446922][T13395]  asm_exc_invalid_op+0x1a/0x20
[  535.451875][T13395] RIP: 0010:perf_pending_task+0x35c/0x470
[  535.457733][T13395] Code: ff 84 db 75 14 e8 74 e1 d5 ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 60 e1 d5 ff e8 2b 6a 4f ff eb e5 e8 54 e1 d5 ff <0f> 0b e9 f3 fe ff ff e8 48 e1 d5 ff 48 c7 c7 f0 f2 1c 8d 4c 89 f6
[  535.477446][T13395] RSP: 0018:ffffc900041779c0 EFLAGS: 00010293
[  535.483528][T13395] RAX: ffffffff81b1335c RBX: ffff88802ed78a80 RCX: ffff88802a111e00
[  535.491509][T13395] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  535.499495][T13395] RBP: 0000000000000001 R08: ffffffff8e8adfaf R09: 1ffffffff1d15bf5
[  535.507490][T13395] R10: dffffc0000000000 R11: fffffbfff1d15bf6 R12: ffff88802a111e00
[  535.515471][T13395] R13: ffff88805e72d530 R14: ffff88802ed78840 R15: 1ffff11005daf108
[  535.523461][T13395]  ? perf_pending_task+0x35c/0x470
[  535.528606][T13395]  task_work_run+0x1d4/0x260
[  535.533219][T13395]  ? task_work_cancel+0x220/0x220
[  535.538362][T13395]  do_exit+0x95a/0x2460
[  535.542646][T13395]  ? put_task_struct+0xc0/0xc0
[  535.547558][T13395]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  535.553553][T13395]  ? get_signal+0x1068/0x13f0
[  535.558349][T13395]  ? lock_chain_count+0x20/0x20
[  535.563212][T13395]  ? _raw_spin_lock_irq+0xbb/0xf0
[  535.568254][T13395]  do_group_exit+0x21b/0x2d0
[  535.572864][T13395]  ? lockdep_hardirqs_on+0x98/0x150
[  535.578082][T13395]  get_signal+0x12fc/0x13f0
[  535.582623][T13395]  arch_do_signal_or_restart+0xc2/0x800
[  535.588189][T13395]  ? __ia32_sys_get_robust_list+0x110/0x110
[  535.594089][T13395]  ? blkcg_maybe_throttle_current+0x19f/0xa90
[  535.600172][T13395]  ? get_sigframe_size+0x20/0x20
[  535.605148][T13395]  ? exit_to_user_mode_loop+0x3b/0x110
[  535.610708][T13395]  exit_to_user_mode_loop+0x70/0x110
[  535.616035][T13395]  exit_to_user_mode_prepare+0xee/0x180
[  535.621613][T13395]  syscall_exit_to_user_mode+0x1a/0x50
[  535.627100][T13395]  do_syscall_64+0x61/0xa0
[  535.631533][T13395]  ? clear_bhb_loop+0x40/0x90
[  535.636224][T13395]  ? clear_bhb_loop+0x40/0x90
[  535.640929][T13395]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  535.646838][T13395] RIP: 0033:0x7f998df9aeb9
[  535.651274][T13395] Code: Unable to access opcode bytes at 0x7f998df9ae8f.
[  535.658299][T13395] RSP: 002b:00007f998ee400e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  535.666989][T13395] RAX: fffffffffffffe00 RBX: 00007f998e215fa8 RCX: 00007f998df9aeb9
[  535.674975][T13395] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f998e215fa8
[  535.682959][T13395] RBP: 00007f998e215fa0 R08: 0000000000000000 R09: 0000000000000000
[  535.690981][T13395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  535.698966][T13395] R13: 00007f998e216038 R14: 00007fff1d0df6f0 R15: 00007fff1d0df7d8
[  535.707139][T13395]  </TASK>
[  535.710540][T13395] Kernel Offset: disabled
[  535.714887][T13395] Rebooting in 86400 seconds..